bf222 Privacy Policy — How We Collect, Use, and Protect Your Data

1 Who We Are

bf222 ("we", "us", "our") operates the online betting and casino platform accessible at https://bf222.io (the "Platform"). bf222 is the data controller responsible for the personal data of registered players and visitors who interact with the Platform. As data controller, bf222 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all users of the bf222 Platform, including registered account holders, prospective players who browse the Platform without registering, and any individual who contacts our support team. By accessing the Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy.

2 Data We Collect

2.1 Registration and Account Data

When you register a bf222 account, we collect the following personal data:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Email address (used for account communications and notifications)
• Mobile phone number (used for OTP verification and account security)
• Residential address (collected as part of identity verification)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, bf222 may request and collect copies of:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or similar)
• Payment method ownership confirmation (screenshot of bKash, Nagad, or bank account registered in your name)
• Selfie or video verification where required for enhanced due diligence

2.3 Financial and Transaction Data

bf222 collects data about your financial interactions with the Platform, including:

• Deposit and withdrawal amounts, dates, and payment methods used
• Transaction reference numbers from bKash, Nagad, Rocket, Upay, and bank transfers
• Account balance history and bonus balance records
• Pending and settled withdrawal requests

2.4 Betting and Gaming Activity Data

We record detailed data about your activity on the bf222 Platform, including all bets placed (sport, event, market, stake, odds, outcome), casino and slot game sessions (game title, provider, session duration, bet amounts, winnings), and responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods activated).

2.5 Technical and Device Data

When you access the bf222 Platform, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, session timestamps, pages visited and features used, and referring URL. This data is used for Platform security, fraud prevention, and service improvement purposes.

3 How We Collect Data

bf222 collects your personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with the Platform.
• Automatically — through cookies, session tracking, and server logs when you browse or use the Platform. See Section 7 for full details on our cookie practices.
• From third-party service providers — identity verification agencies, payment processors (such as bKash and Nagad), and fraud prevention partners may share data with us as part of the services they provide to bf222.
• From publicly available sources — where necessary for fraud prevention or AML (anti-money laundering) screening purposes, we may consult publicly available records.

4 How We Use Your Data

bf222 uses the personal data we collect for the following specific purposes:

5 Legal Basis for Processing

bf222 processes your personal data on one or more of the following legal bases:

• Contractual necessity — processing that is required to provide the bf222 Platform services to you under our Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and fraud reporting duties.
• Legitimate interests — processing carried out for bf222's legitimate business interests, such as fraud prevention, Platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent — processing carried out on the basis of your explicit consent, such as the sending of promotional and marketing communications. You may withdraw consent at any time without affecting other processing activities.

6 Data Sharing and Disclosure

bf222 does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. We share your personal data only in the following defined circumstances and only to the extent necessary:

6.1 Payment Service Providers

To process your deposits and withdrawals, bf222 shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and banking partners. These providers act as independent data controllers in respect of payment data processed through their own platforms and are subject to their own privacy policies.

6.2 Identity Verification Partners

bf222 uses third-party KYC and identity verification service providers to assist with age verification and document authentication. These providers process your identity documents and verification data solely on our instructions and under strict data processing agreements that prohibit them from using your data for any other purpose.

6.3 Game Software Providers

Casino and slot games on the bf222 Platform are provided by third-party software studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process certain session data (such as bet amounts and game results) in order to deliver their games and ensure fair play. They do not receive your personal identification data.

6.4 Legal and Regulatory Disclosure

bf222 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or legitimate legal process. In such cases, bf222 will disclose only the minimum data required to satisfy the legal obligation.

7 Cookies and Tracking

The bf222 Platform uses cookies and similar tracking technologies to deliver and improve the Platform experience. Cookies are small text files placed on your device when you visit the Platform. They help us recognise your device on return visits, maintain your session while you are logged in, and understand how the Platform is being used.

7.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function. These include session cookies that keep you logged in during your visit. They cannot be disabled without affecting Platform functionality.
• Functional cookies — remember your preferences such as language settings and display choices to personalise your experience on return visits.
• Analytics cookies — collect anonymised data about how visitors use the Platform, which pages are most visited, and where errors occur. This data helps us improve the service.
• Security cookies — used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bf222 Platform, including your ability to log in and place bets.

8 Data Retention

bf222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account registration and KYC data is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in line with standard AML record-keeping requirements.
• Transaction and financial data is retained for a minimum of five (5) years following the relevant transaction date.
• Betting and gaming activity logs are retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Support correspondence is retained for two (2) years following the resolution of the relevant query or complaint.
• Technical and device data collected via server logs is retained for up to twelve (12) months for security and fraud prevention purposes.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

9 Your Privacy Rights

As a registered player on the bf222 Platform, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data bf222 holds about you at any time.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure — in certain circumstances, you may request that bf222 delete your personal data. Please note that this right is subject to our legal retention obligations; we cannot delete data we are required by law to retain.
• Right to restriction of processing — you may request that bf222 restrict the processing of your data in certain defined circumstances, for example while a complaint or accuracy dispute is being resolved.
• Right to object — you have the right to object to processing of your data carried out on the basis of legitimate interests, including for direct marketing purposes.
• Right to data portability — where processing is based on your consent or contractual necessity, you may request your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time.

10 Data Security

bf222 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption on all data transmitted between your device and the bf222 Platform.
• Encrypted storage of all sensitive personal data, including identity documents and financial records, in our secure data systems.
• Strict role-based access controls ensuring that only authorised bf222 personnel with a legitimate operational need can access personal data.
• Two-factor authentication (2FA) options for player accounts, providing an additional layer of protection against unauthorised login.
• Regular internal security reviews and vulnerability assessments of the bf222 Platform and supporting infrastructure.
• Data breach response procedures that include timely notification to affected players in the event of a significant security incident involving their personal data.

While bf222 implements robust security practices, no online platform can guarantee absolute security. We encourage you to use a strong and unique password for your bf222 account, enable OTP/2FA where available, and contact [email protected] immediately if you suspect any unauthorised access to your account.

11 Children and Minors

The bf222 Platform is strictly intended for individuals aged 21 years and above. bf222 does not knowingly collect personal data from anyone under the age of 21. If bf222 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, that data will be deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor in your care has registered an account with bf222 or provided personal data to the Platform, please contact us without delay at [email protected] so that we can take appropriate action.

12 Changes to This Policy

bf222 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When we make material changes to this Policy, we will notify registered players by email to the address associated with their account and by displaying a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this document indicates when the current version of the Policy came into force. We encourage you to review this page periodically to stay informed about how bf222 protects your personal data. Your continued use of the bf222 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bf222 handles your personal data, please contact our privacy and support team. All communications are handled in English and are responded to by our team operating in Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week.

Privacy and support contact: [email protected]

When contacting us about a privacy matter, please include your registered bf222 username, a clear description of your query or request, and any relevant supporting information. This will help us locate your account and respond to your request as efficiently as possible.