Privacy Policy — How ba222 Collects, Uses, and Protects Your Personal Data

This Privacy Policy applies to all personal data collected and processed by ba222 ("ba222", "we", "us", "our") in connection with the operation of the online betting and casino platform accessible at ba222.io. It covers data collected through the website, through the ba222 mobile-optimised interface, through customer support interactions, and through any other channel by which you communicate with ba222.

ba222 acts as the data controller in respect of all personal data described in this Policy. As data controller, ba222 determines the purposes for which your personal data is collected and the means by which it is processed. Where ba222 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by written data processing agreements consistent with applicable data protection standards.

This Policy applies to all registered players, to visitors to ba222.io who have not yet registered, and to any individual who contacts ba222 by any means. By registering a ba222 account, completing ba222 Login, or continuing to browse ba222.io, you acknowledge that you have read and understood this Privacy Policy.

ba222 collects personal data in three principal ways: data you provide directly, data generated automatically by your use of the platform, and data received from third parties such as payment processors and identity verification services.

Data you provide directly to ba222 includes:

• Registration data: full legal name, date of birth, residential address (including city — for example Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and mobile phone number.
• Identity verification documents: national identity card, passport, or other government-issued photo identification provided during KYC review.
• Payment data: details of your preferred payment method, including your registered bKash number, Nagad number, Rocket number, Upay number, bank account details, or card details as applicable. ba222 does not store full card numbers; card payment data is processed directly by our PCI-DSS-compliant payment partners.
• Communications data: records of your correspondence with ba222 customer support, including live chat transcripts, emails, and any attachments you submit.
• Responsible gaming preferences: self-imposed deposit limits, session time limits, cooling-off periods, and self-exclusion requests stored against your account.

Data generated automatically by your use of ba222 includes:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: pages visited, games played (including Slots, Cricket betting, Relax Fishing, Lucky Gods Fishing, and ba222 Casino live dealer tables), session duration, bet history, wagering patterns, and deposit and withdrawal transaction records.
• Log data: server-side access logs recording timestamps, request types, and response codes associated with your account activity.
• Cookie and tracking data: information collected via cookies, pixels, and similar technologies as described in Section 6 of this Policy.

Data received from third parties includes:

• Identity verification results from third-party KYC providers used to confirm the accuracy of the information you provided at registration.
• Payment status and transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment processors.
• Fraud and risk signals from anti-fraud technology partners used to protect the integrity of the ba222 platform.

ba222 uses personal data collected from players for the following purposes. Each purpose is linked to a legal basis, as set out in Section 4.

ba222 processes personal data only where it has a valid legal basis for doing so. The legal bases on which ba222 relies are as follows:

• Contract performance: Processing that is necessary to fulfil our contractual obligations to you as a registered ba222 player — including managing your account, processing your bets and transactions, and providing access to games.
• Legal obligation: Processing required to comply with applicable laws and regulations, including know-your-customer (KYC) requirements, anti-money laundering (AML) obligations, and responsible gaming regulations.
• Legitimate interest: Processing that serves a genuine business interest of ba222 that is not overridden by your privacy rights — such as fraud detection, platform security, and the analysis of aggregated usage data to improve our services. ba222 has conducted legitimate interest assessments for each processing activity relying on this basis.
• Consent: Processing for marketing and promotional communications, which ba222 conducts only where you have given explicit, informed consent. You may withdraw marketing consent at any time without affecting the lawfulness of any prior processing.

ba222 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals. Each payment partner operates under its own privacy policy and receives only the data necessary to process the specific transaction.
• Identity verification providers: Third-party KYC and AML service providers who verify the identity documents and personal data you submit during account registration or a compliance review.
• Technology and platform providers: Cloud hosting providers, database infrastructure providers, cybersecurity vendors, and game content providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe. These providers act as data processors under written agreements.
• Analytics providers: Anonymised or pseudonymised usage data may be shared with analytics service providers to help ba222 understand platform performance and improve the user experience.
• Regulatory and law enforcement authorities: ba222 will disclose personal data to competent authorities when required to do so by law, or when ba222 reasonably believes disclosure is necessary to prevent fraud, money laundering, or harm to a third party.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ba222's business, personal data held by ba222 may be transferred to the acquiring entity, subject to the same obligations as set out in this Privacy Policy.

ba222 uses cookies and similar tracking technologies on ba222.io to ensure the platform functions correctly, to protect against fraud, and to improve the player experience. The categories of cookies used by ba222 are as follows:

• Strictly necessary cookies: These cookies are essential for ba222.io to function. They maintain your session state after ba222 Login, remember your language and currency preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred game category, notification settings, and responsible gaming tool configurations — so that you do not need to re-enter them each time you visit ba222.
• Analytical cookies: ba222 uses anonymised analytical cookies to measure aggregate traffic patterns, page performance, and feature usage across the platform. This data is used in aggregate form and is not linked to individual player identities.
• Anti-fraud and security cookies: These cookies help ba222 detect and prevent automated access, credential stuffing, suspicious login attempts, and other security threats targeting player accounts.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to access ba222 services, including the ability to complete ba222 Login. ba222 does not use third-party advertising or retargeting cookies.

ba222 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, or reporting requirements. The following general retention periods apply:

• Account and registration data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with AML and KYC record-keeping obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Customer support communications: Retained for three (3) years from the date of the last communication, to support dispute resolution and service quality review.
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year following withdrawal of consent, as evidence of the consent given.
• Anonymised analytical data: May be retained indefinitely, as it cannot be linked to any individual player.

When personal data is no longer required and no legal retention obligation applies, ba222 securely deletes or irreversibly anonymises it in accordance with our internal data disposal procedures.

ba222 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and ba222's servers.
• Encryption of sensitive data at rest, including identity documents and payment information stored in ba222's databases.
• Role-based access controls ensuring that ba222 staff can only access player data to the extent required for their specific job function.
• Multi-factor authentication for all ba222 internal systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• Comprehensive audit logging of all access to systems containing personal data, with anomaly detection alerts for unusual access patterns.
• Staff training on data protection, information security, and responsible handling of player data, conducted at onboarding and refreshed annually.

Notwithstanding these measures, no online platform can guarantee absolute security. In the event that ba222 identifies a data security incident that poses a risk to your rights and interests, we will notify affected players without undue delay, and will take all steps within our control to contain and remediate the incident.

As a ba222 player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". ba222 will acknowledge your request within 48 hours and respond in full within 30 days.

• Right of access: You may request a copy of the personal data ba222 holds about you, along with information about how it is being processed.
• Right to rectification: You may request that ba222 correct any inaccurate or incomplete personal data held about you. You may also update routine account information directly through your ba222 account settings after completing ba222 Login.
• Right to erasure: You may request that ba222 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to ba222's legal obligations to retain certain data as described in Section 7.
• Right to restriction: You may request that ba222 temporarily restrict the processing of your data while a query about its accuracy or the legitimacy of its processing is being investigated.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling. ba222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on consent — in particular, marketing communications — you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

ba222 will not charge a fee for handling data subject requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. ba222 will not discriminate against you for exercising any of the rights listed above.

ba222 sends marketing and promotional communications — including information about new games, bonus offers, seasonal promotions (such as Eid and Pohela Boishakh offers), and BPL cricket betting specials — only to players who have given explicit consent to receive such communications at the time of registration or subsequently through their account settings.

Marketing communications from ba222 are delivered by email and SMS to the contact details provided at registration. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any ba222 marketing email.
• Updating your communication preferences in your ba222 account settings after completing ba222 Login.
• Submitting a written opt-out request to [email protected].

Opting out of marketing communications does not affect your receipt of service-related communications such as transaction confirmations, account security alerts, responsible gaming notifications, and updates to these policies. Service communications are sent on the basis of contract performance or legal obligation and are not subject to marketing opt-out.

ba222 is strictly an adult platform. Registration and use of ba222 is prohibited for any individual under the age of 21. ba222 does not knowingly collect, store, or process personal data belonging to any person under 21 years of age.

If ba222 becomes aware that personal data has been collected from an individual who is under 21, ba222 will immediately suspend the associated account, delete the data in question, and void any bets or transactions placed using that account. Any balance held in an underage account will be handled in accordance with ba222's Terms and Conditions.

If you are a parent or guardian and you believe that a person under 21 in your care has registered a ba222 account, please contact ba222 support immediately via live chat or by emailing [email protected] so that the matter can be investigated and resolved promptly.

ba222 reviews this Privacy Policy at least once per calendar year, and additionally whenever a material change to our data processing practices occurs — for example, when we introduce a new type of data collection, engage a new category of third-party processor, or respond to changes in applicable law or regulatory guidance.

When material changes are made to this Policy, ba222 will notify registered players by email to the address associated with their account, and will display a prominent notice on ba222.io for a period of at least 14 days before the amended Policy takes effect. The effective date shown at the top of this document will be updated to reflect the date on which the revised Policy comes into force.

Your continued use of ba222 following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you should cease using ba222 and request account closure by contacting support.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about the way in which ba222 handles your personal data, please contact us using the details below. All privacy-related enquiries will be handled by ba222's data protection team.

Data Protection Contact (plain text — not a link):
[email protected] — Subject line: "Privacy / Data Protection"

Live Chat:
Available 24/7 from within your logged-in ba222 account. For privacy queries, ask the support agent to escalate to the data protection team.

Response Timeframes:
General privacy enquiries: within 5 business days. Formal data subject requests: acknowledgement within 48 hours, full response within 30 days. Data breach notifications (where applicable): without undue delay.

If you are not satisfied with ba222's response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. ba222 will cooperate fully with any such authority in the investigation of any complaint received.