223bdt Privacy Policy: How We Collect, Use, and Protect Your Personal Data

1. Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 223bdt, the operator of the online casino and sports betting platform accessible at 223bdt.com. 223bdt operates as a digital gambling entertainment service targeting adult players across Bangladesh, including residents of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

All enquiries relating to this Privacy Policy, including requests to exercise your data rights, should be directed in writing to the 223bdt data protection contact address: [email protected]. Please include "Privacy Policy Enquiry" in the subject line of your correspondence. The 223bdt compliance team aims to respond to all privacy-related communications within 5 business days of receipt.

2. Personal Data We Collect

When you register an account, make a deposit, place a wager, or otherwise interact with the 223bdt platform, we collect certain categories of personal data. The data we collect falls into three broad categories: information you provide directly, information generated automatically by your use of the platform, and information we receive from third-party payment or identity verification providers.

223bdt does not collect or process sensitive personal data categories such as biometric data, health data, religious beliefs, or political opinions. The financial data we retain is limited to the minimum necessary to facilitate payment processing and comply with anti-money laundering obligations. Full card numbers are never stored on 223bdt servers — card payment processing is handled entirely by certified third-party payment processors operating under their own PCI-DSS compliance frameworks.

3. How We Use Your Personal Data

223bdt processes your personal data only for specific, clearly defined purposes. We do not engage in speculative data processing, and we do not use your data for purposes that are incompatible with the purposes for which it was originally collected. The table below sets out the lawful basis for each processing purpose:

Where 223bdt relies on legitimate interests as the lawful basis for processing, we have assessed that the processing is necessary for those interests, that those interests are not overridden by your privacy rights, and that the processing is conducted in a manner that is proportionate and respectful of your reasonable expectations as a 223bdt player.

4. Cookies and Tracking Technologies

223bdt uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to deliver core platform functionality, maintain your login session across pages, detect fraud, and understand how players navigate the site. A cookie is a small text file placed on your device by your browser when you access a website. It allows the site to recognise your device on subsequent visits and to store certain preferences or session identifiers.

You can manage or delete cookies at any time through your web browser's settings menu. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide options to view, block, or delete cookies stored on your device. Please note that disabling essential cookies will impair your ability to log in and use the core features of the 223bdt platform. 223bdt does not currently respond to "Do Not Track" browser signals as there is no universally accepted standard for such signals in the markets we operate.

5. Data Sharing and Third Parties

223bdt does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your personal information is shared externally only in the following specific and limited circumstances, each of which is governed by a contractual data processing agreement that obligates the recipient to treat your data with the same standard of protection that 223bdt applies internally:

• Payment processing partners — bKash, Nagad, Rocket, Upay, and the card processing networks for Visa and Mastercard receive the minimum financial data necessary to authorise and settle payment transactions. These partners operate under their own regulatory obligations as licensed mobile financial service providers.
• Identity verification providers — Third-party KYC service providers may process copies of your identity documents as part of the account verification process. These providers are contractually bound to process KYC data exclusively for the purpose of identity verification and may not retain documents beyond the period necessary to complete the verification.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios may receive session-level technical data (such as player session tokens and bet amounts) to facilitate real-time game delivery. Identifiable personal data such as your name, email, or MFS account number is not shared with game providers.
• Fraud prevention and AML compliance services — 223bdt may share technical and transactional data with specialist fraud detection and anti-money laundering analytics platforms to identify suspicious patterns, prevent multi-accounting, and comply with financial crime reporting obligations.
• Legal and regulatory authorities — 223bdt will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required to do so by law, valid legal process, or a lawful order from a competent authority. Such disclosures are made only to the extent required by the applicable legal obligation.
• Technology infrastructure providers — Cloud hosting, content delivery, and platform infrastructure providers may process personal data in the course of providing technical services to 223bdt. All such providers are bound by data processing agreements that restrict their use of data to the technical services they are engaged to provide.

No personal data is transferred to recipients outside the scope of the categories described above. If 223bdt's business structure changes — for example, in the event of a merger, acquisition, or restructuring — personal data held on registered players may form part of the assets transferred to a successor entity, subject to the successor entity adopting a privacy policy that provides equivalent or greater protections than this one. Players will be notified of any such material change via a notice on the 223bdt platform or email to their registered address.

6. Data Retention Periods

223bdt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, compliance, and financial record-keeping obligations. The following retention schedule applies to the main categories of personal data we hold:

At the end of the applicable retention period, personal data is either securely deleted from 223bdt's systems or anonymised in a manner that permanently and irreversibly removes any possibility of re-identifying the individual to whom the data relates. Anonymised aggregated data (for example, platform-wide wagering statistics) may be retained indefinitely for business analytics purposes, as it no longer constitutes personal data.

7. Data Security Measures

223bdt implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security programme includes both technical controls and organisational safeguards, and is reviewed and updated on an ongoing basis to address emerging threats and changes in the data landscape.

While 223bdt takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own account by using a strong, unique password, keeping your login credentials confidential, and notifying us immediately at [email protected] if you suspect any unauthorised access to your account. In the event of a personal data breach that is likely to result in a risk to your rights, 223bdt will notify affected players without undue delay and will take all reasonable steps to mitigate any resulting harm.

8. Your Privacy Rights

As a 223bdt player whose personal data we process, you hold a number of important rights in relation to your information. These rights can be exercised free of charge by submitting a written request to [email protected] with the subject line "Data Rights Request" and sufficient information to verify your identity. 223bdt will acknowledge your request within 2 business days and aim to fulfil it within 30 days.

• Right of Access: You have the right to request a copy of all personal data that 223bdt holds about you, together with information about how it is used, who it has been shared with, and how long it will be retained. This is commonly called a Subject Access Request (SAR).
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that rectifying KYC data requires submission of updated documentation.
• Right to Erasure: You may request that 223bdt deletes your personal data. This right is subject to important limitations — we are legally obliged to retain certain categories of data for AML and financial record-keeping purposes even after account closure. Where erasure is possible, it will be carried out promptly.
• Right to Restriction of Processing: You may ask 223bdt to restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests and we are assessing whether those interests override your rights.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format (such as CSV or JSON) suitable for transfer to another service provider.
• Right to Object: You have the right to object to 223bdt processing your personal data on the basis of legitimate interests, including profiling for fraud detection. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we process your data on the basis of consent (such as sending you promotional emails about 223bdt bonuses and new cricket betting markets), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9. Minors and Privacy Protection

Age verification is a mandatory step in the 223bdt account lifecycle. Every registered player is required to confirm that they are 18 or older at the point of registration, and documentary proof of age is required as part of the KYC process before any withdrawal is approved. 223bdt uses automated detection methods to identify accounts that may be associated with underage individuals, including analysis of device identifiers, registration patterns, and deposit behaviour.

If 223bdt becomes aware that personal data has been collected from an individual who is under 18 years of age, the account will be suspended immediately, any real-money deposits will be returned net of legitimate wagers placed prior to detection, and all personal data associated with the account will be securely deleted from our systems as promptly as possible within the constraints of our legal obligations. The matter may also be escalated to relevant authorities depending on the circumstances.

If you are the parent or guardian of a child and you believe that your child has registered an account on 223bdt, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take all reports of potential underage gambling extremely seriously and will investigate and act on all credible reports without delay.

10. Policy Updates and Contact

223bdt reserves the right to update, amend, or replace this Privacy Policy at any time in response to changes in our data processing practices, new legal or regulatory requirements, changes in technology, or improvements to our platform. All updates take effect immediately upon publication of the revised policy on the 223bdt website. The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision.

Where a change to this Privacy Policy is material — meaning it significantly affects the nature, scope, or legal basis of our processing of your personal data — 223bdt will make reasonable efforts to notify registered players through a notice on the platform or by email to your registered address. It is your responsibility to review this Privacy Policy periodically and to ensure you remain comfortable with how 223bdt processes your personal information. Continued use of the platform following any amendment to this policy constitutes your acceptance of the revised version.

For all privacy-related enquiries, data rights requests, or concerns about how 223bdt handles your personal data, please contact the 223bdt compliance team at [email protected]. Our team is available 24/7 and will direct your privacy enquiry to the appropriate internal team. All formal privacy correspondence is handled with strict confidentiality and in accordance with the procedures set out in this policy.