bl222 Privacy Policy

Introduction

bl222 ("we", "us", "our", or "the Platform") is committed to protecting the privacy of every person who accesses, registers with, or uses the bl222 platform at bl222.io. This Privacy Policy describes in clear terms how bl222 collects, uses, stores, shares, and protects personal data in connection with the provision of our online betting and casino services to members in Bangladesh.

This Privacy Policy applies to all personal data collected through the bl222 website, mobile-optimised site, and any related communications — including account registration forms, deposit and withdrawal processes, customer support interactions, and marketing communications. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

By registering a bl222 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

Data We Collect

bl222 collects personal data through several channels in the ordinary course of providing our services. The categories of data we collect are described below.

Data You Provide Directly:

• Identity data: Full name, date of birth, gender, and national identification number (NID) or passport number, as required for account verification.
• Contact data: Mobile phone number, email address, and residential address (city, district, and division within Bangladesh).
• Account credentials: Username and encrypted password (we never store passwords in plain text).
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and transaction history on the bl222 platform.
• Verification documents: Photographs or scans of government-issued identity documents submitted for Know Your Customer (KYC) verification.
• Communications data: The content of messages you send to our customer support team via email, live chat, or any other channel.

Data Collected Automatically:

• Technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
• Usage data: Pages visited, games played, bet history, session durations, click patterns, and navigation paths within the bl222 platform.
• Cookie data: Data collected via cookies and similar tracking technologies as described in Section 6 of this policy.
• Geolocation data: Approximate geographic location derived from your IP address, used to ensure compliance with platform access restrictions.

How We Use Your Data

bl222 uses the personal data we collect strictly for the purposes listed below. We do not use your data in any manner inconsistent with the purpose for which it was originally collected without first obtaining your explicit consent.

• Account management: Creating, maintaining, and administering your bl222 member account, including processing deposits, withdrawals, and bet settlements.
• Identity verification: Confirming that you meet the eligibility requirements to use the platform — specifically that you are at least 21 years of age and are providing accurate identity information.
• Fraud prevention and anti-money-laundering (AML) compliance: Monitoring account activity for suspicious patterns, investigating potential breaches of our Terms & Conditions, and fulfilling our obligations under applicable financial crime prevention standards.
• Customer support: Responding to your enquiries, resolving disputes, and communicating material service updates that affect your account.
• Platform improvement: Analysing usage patterns and behavioural data (in aggregated or anonymised form where possible) to identify areas where the bl222 platform can be improved in terms of performance, security, and user experience.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviours and fulfilling our obligations under our Responsible Gaming Policy, including enforcing self-exclusion and deposit limit requests.
• Marketing communications: Sending you information about bl222 promotions, new games, and platform features — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal compliance: Retaining and disclosing personal data as required by applicable law, court order, or regulatory authority.

Legal Basis for Processing

bl222 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is required to perform the contract between you and bl222 — including account registration, payment processing, and bet settlement. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, anti-money-laundering requirements, and financial record-keeping requirements.
• Legitimate interests: Processing carried out for bl222's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your privacy rights. bl222 conducts a balancing test before relying on this basis and documents its conclusions.
• Consent: Processing that depends on your freely given, specific, and informed consent — primarily direct marketing communications. You may withdraw consent at any time by updating your preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Sharing Your Data

bl222 does not sell your personal data to third parties. We may, however, share your data with the following categories of recipients in the ordinary course of providing our services:

• Payment processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) receive transactional data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations.
• Identity verification services: Where required by our KYC processes, we may share identity documents and related data with third-party verification providers who confirm authenticity on our behalf under strict data processing agreements.
• Game technology providers: Game providers — including Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and Evolution Gaming — receive a player session token and relevant game-state data necessary to deliver the game experience. These providers do not receive your full identity or financial data.
• IT and hosting infrastructure partners: bl222 uses third-party cloud infrastructure and hosting providers to operate the platform. These providers act as data processors under binding agreements that restrict them from using your data for any purpose other than providing infrastructure services to bl222.
• Legal and regulatory authorities: bl222 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or to protect the legal rights of bl222 or its members.
• Professional advisors: Lawyers, accountants, and auditors may access personal data on a strictly need-to-know basis in the course of providing professional services to bl222, subject to professional confidentiality obligations.

All third-party service providers with whom bl222 shares personal data are contractually required to implement appropriate technical and organisational security measures and to process data only as instructed by bl222 and in accordance with applicable data protection principles.

Cookies & Tracking Technologies

bl222 uses cookies and similar technologies (including local storage and session identifiers) to operate and improve the platform. Cookies are small text files placed on your device when you visit bl222.io. They allow us to recognise your device on subsequent visits and to deliver a more personalised and efficient experience.

bl222 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core functionality such as account login, session management, and security. You cannot opt out of strictly necessary cookies without ceasing use of the platform.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the bl222 platform — for example, which pages are most frequently visited and where users encounter errors. This data helps us improve platform performance and user experience.
• Functional cookies: These cookies remember your preferences — such as preferred language, display settings, and last-visited game category — to personalise your experience on return visits.
• Marketing and targeting cookies: Where you have consented, these cookies track your activity to enable relevant promotional communications about bl222 games and offers. You may withdraw consent to marketing cookies at any time through your browser settings or account preferences.

Most web browsers allow you to manage cookie preferences through the browser settings menu. Restricting or deleting cookies may affect the functionality of certain bl222 platform features. For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

Data Retention

bl222 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and regulation. The following retention principles apply:

• Active account data: Personal data associated with an active bl222 account is retained for the duration of the member relationship and for a period of at least 5 years after the account is closed, in accordance with standard financial record-keeping and AML compliance requirements.
• Transaction records: Records of deposits, withdrawals, and bet settlements are retained for a minimum of 7 years from the date of the transaction, as required by applicable financial regulations.
• Identity verification documents: KYC documents are retained for the duration of the member relationship plus a minimum of 5 years after account closure.
• Customer support records: Support correspondence is retained for 3 years from the date of the interaction, or longer if the matter remains under active dispute or investigation.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your membership and for 2 years after any withdrawal of consent, to demonstrate compliance.
• Cookie and analytics data: Aggregated analytics data is retained for 24 months from collection and is then deleted or further anonymised.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. bl222 conducts periodic data audits to ensure that retention schedules are being observed in practice.

Data Security

bl222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and bl222.io is encrypted using TLS 1.2 or higher (256-bit SSL). This ensures that data cannot be intercepted or read by third parties during transmission.
• Encryption at rest: Sensitive personal data stored in bl222's databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within bl222's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access to sensitive data is logged and audited.
• Password security: Member passwords are stored using one-way cryptographic hashing with salting. bl222 staff cannot view your password in plain text. If you forget your password, a secure reset process is initiated rather than a password being revealed.
• Intrusion detection and monitoring: bl222's infrastructure is monitored continuously for unusual activity patterns. Automated alerts are configured to flag potential security incidents for immediate review by our security team.
• Regular security assessments: bl222 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.

While bl222 takes all reasonable steps to protect your personal data, no method of data transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bl222 will notify affected members as soon as reasonably practicable and will take all available steps to contain and mitigate the breach.

Your Rights

As a bl222 member, you hold meaningful rights over your personal data. bl222 is committed to facilitating the exercise of these rights promptly and without unnecessary obstacles. Your rights include:

• Right of access: You may request a copy of the personal data bl222 holds about you, along with information about how it is being used. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data held by bl222 is inaccurate or incomplete, you have the right to request correction. Minor details (such as a misspelled city name) can often be updated directly in your account settings.
• Right to erasure: You may request that bl222 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to bl222's legal obligations to retain certain data for regulatory compliance purposes.
• Right to restriction of processing: You may request that bl222 restrict the processing of your personal data in certain circumstances — for example, while a dispute over data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that bl222 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for fraud detection, where you have grounds relating to your particular situation. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. bl222 may require you to verify your identity before processing a rights request to protect against fraudulent or unauthorised requests. We will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 days, or inform you if additional time is required.

Children's Privacy

The bl222 platform is strictly intended for adults aged 21 years and above. bl222 does not knowingly collect, process, or store personal data belonging to any person under the age of 21.

If bl222 discovers or is notified that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage individual will be returned to the originating payment method after appropriate verification.

If you are a parent or guardian and believe that your child has created a bl222 account or submitted personal information to bl222, please contact our support team immediately at [email protected]. We will investigate and resolve the matter as a priority.

bl222 employs age verification mechanisms during the registration process and may conduct additional identity checks at any stage of the member relationship to enforce our 21+ policy. Providing false information about your age during registration is a breach of our Terms & Conditions and will result in account closure and forfeiture of any balance.

Third-Party Services

The bl222 platform integrates with a number of third-party service providers to deliver a complete gaming and betting experience. While bl222 carefully selects its technology and service partners and requires them to maintain appropriate data protection standards, bl222 is not responsible for the privacy practices of third-party services that operate under their own independent privacy policies.

Third-party services that may process data in connection with your use of bl222 include:

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard each maintain their own privacy policies governing how they handle transaction data. bl222 does not control these providers' data practices.
• Game content providers: Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Evolution Gaming, and other certified game studios provide the game content available on bl222. These providers receive limited session data necessary to deliver gameplay. Their handling of this data is governed by their own data protection commitments.
• Analytics and performance monitoring: bl222 uses industry-standard analytics tools to understand platform performance and user behaviour in aggregate. These tools may set cookies on your device as described in Section 6.

bl222 recommends that you review the privacy policies of any third-party service providers you interact with in connection with your use of the platform, particularly your mobile wallet provider, to understand how your financial transaction data is handled at their end.

Changes to This Privacy Policy

bl222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services we offer. The date on which this policy was last revised is displayed at the top of this page.

When material changes are made to this Privacy Policy, bl222 will notify active members via account notification or registered email address at least 7 days before the revised policy takes effect. For minor or non-material changes — such as clarifications of existing language that do not alter the substance of how data is processed — bl222 may update the policy without advance notification.

Your continued use of the bl222 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, please discontinue use of the platform and contact our support team to close your account and request deletion of your personal data, subject to our legal retention obligations.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bl222 holds about you, please contact us using the details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

• Privacy and Data Enquiries Email: [email protected] (plain text — not a clickable link)
• Subject Line Recommended: "Privacy Request — [Your Account Username]" for faster routing
• Support Hours: 24 hours a day, 7 days a week, including public holidays in Bangladesh
• Response Time Target: Acknowledgement within 5 business days; full response within 30 days

For rights requests specifically (access, erasure, portability, objection), please include your full name, registered mobile number or email address, and a clear description of the right you wish to exercise. bl222 may ask you to verify your identity before processing the request to protect your account security.

For concerns about responsible gaming or self-exclusion requests, please visit our dedicated Responsible Gaming page or mention "Responsible Gaming" in your support message so that your enquiry is routed to the appropriate team.