bst222 Privacy Policy

bst222 processes your personal data for the following lawful purposes:

• Account management: Creating, maintaining, and securing your bst222 player account, including verifying your identity and age (21+ requirement) at registration and on an ongoing basis.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Financial data is shared with the relevant payment provider solely to execute your transaction.
• Service delivery: Enabling you to play casino games (slots, live casino, Color Game, Piggy Gold), place cricket and sports bets, participate in promotions, and access all other bst222 features.
• Fraud prevention and security: Monitoring account activity for signs of fraud, money laundering, multi-accounting, or other prohibited conduct. We may use automated systems to flag suspicious activity for manual review.
• Legal and regulatory compliance: Meeting obligations under applicable law, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and data retention mandates.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of our support services.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviours and intervening appropriately, in line with our Responsible Gaming commitment.
• Marketing communications: Sending you information about bst222 promotions, seasonal offers (Eid, BPL season, Pohela Boishakh, Ramadan), and platform updates — but only where you have given explicit consent. You may withdraw consent at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with bst222 and to improve game selection, navigation, and the overall player experience.

bst222 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bst222 — including account creation, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, such as KYC, AML, and data retention obligations.
• Legitimate interests: Processing carried out for bst222's legitimate business interests — including fraud prevention, security monitoring, and platform analytics — where those interests are not overridden by your rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bst222 does not sell your personal data. We share it only in the following limited circumstances, and only to the extent strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the financial data required to process your deposit or withdrawal. Each provider operates under its own privacy policy and data protection obligations.
• Identity verification services: Third-party KYC providers may receive your identity documents and personal details to verify your age and identity on behalf of bst222.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to operate their games within the bst222 platform. These providers do not receive your identity or financial data.
• Fraud prevention and security partners: Specialist third parties may receive technical and usage data to assist in identifying and preventing fraudulent activity.
• Legal authorities: bst222 will disclose personal data to law enforcement, courts, or regulatory bodies where required by law, court order, or to protect the rights, property, or safety of bst222, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of bst222 assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

bst222 uses cookies and similar technologies (local storage, session tokens, pixel tags) to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Essential cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. They cannot be disabled without affecting core functionality.
• Functional cookies: Store your preferences such as language settings (English), display preferences, and last-visited game category to personalise your bst222 experience.
• Analytics cookies: Collect anonymised data about how players navigate and use the bst222 platform, helping us improve the service. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

You may control non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain bst222 features.

bst222 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status, plus a minimum of five years following account closure, to meet AML and KYC compliance obligations.
• Transaction records: Financial transaction data is retained for a minimum of five years from the date of the transaction.
• Support communications: Customer support records are retained for three years from the date of last contact.
• Marketing consent records: Records of your consent or opt-out status are retained for the duration of your account relationship plus two years thereafter.
• Anonymised analytics data: Aggregated, anonymised usage data with no personally identifiable information may be retained indefinitely for business intelligence purposes.

When your data is no longer required, bst222 will securely delete or anonymise it in accordance with our internal data destruction procedures.

bst222 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• End-to-end SSL/TLS encryption for all data in transit between your device and the bst222 platform.
• Hashed and salted password storage — your bst222 account password is never stored in plain text.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the bst222 platform infrastructure.
• Automated anomaly detection systems that flag unusual account activity for immediate review.

Despite these measures, no online platform can guarantee absolute security. If you suspect your bst222 account has been compromised, please contact us immediately at [email protected] so we can take prompt protective action.

As a bst222 player, you hold the following rights over your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account details.