Data Protection Notice

bst222 Privacy Policy — Your Data, Protected

At bst222, protecting the personal data of every player in Bangladesh is a core commitment — not an afterthought. This Privacy Policy explains exactly what information we collect when you use the bst222 Platform, why we collect it, how it is stored and secured, and the rights you hold over your own data. We encourage all players to read this document in full before registering an account.

Effective Date: 1 January 2026 Last Updated: 1 January 2026 Jurisdiction: Bangladesh SSL Encrypted Platform

Scope of This Policy

This Privacy Policy applies to all personal data collected by bst222 through the website https://bst222.app, including all account registration interactions, deposit and withdrawal transactions, gameplay sessions, customer support communications, and marketing communications. It applies to all registered players and visitors located in Bangladesh and other regions where bst222 operates. By using the bst222 Platform, you acknowledge that you have read and understood this Privacy Policy.

SSL-Encrypted Data Transmission

Every piece of data transmitted between your device and the bst222 Platform is protected by 256-bit SSL encryption. This applies to account login sessions, deposit and withdrawal requests, and all personal data submitted during registration and verification.

No Third-Party Data Sales

bst222 does not sell, rent, or trade your personal data to any third-party marketing organisations. Your information is used solely to operate and improve the bst222 Platform and to comply with applicable legal and financial regulations.

Minimal Data Collection Principle

bst222 collects only the personal data strictly necessary to deliver a safe, compliant, and enjoyable gaming experience. We do not collect data that serves no operational or legal purpose, and we regularly review our data holdings to remove records that are no longer required.

Full Player Rights

Registered bst222 players hold meaningful rights over their personal data — including the right to access, correct, restrict, and request deletion of their data. These rights are outlined clearly in the Your Privacy Rights section of this policy and are exercisable by contacting our support team.

Secure Data Storage

All personal data held by bst222 is stored on access-controlled, encrypted servers. Physical and logical access to production data systems is restricted to authorised personnel only, and all access events are logged and audited on a regular basis.

Breach Notification Commitment

In the unlikely event of a data security breach that affects your personal information, bst222 will notify affected players promptly and transparently. We will describe what data was involved, what steps have been taken, and what actions you should consider to protect yourself.

1. Data We Collect

bst222 collects personal data through several touchpoints across the Platform lifecycle — from initial site visit through to account registration, active gameplay, financial transactions, and customer support interactions. The following categories of data may be collected depending on how you use the bst222 Platform:

Data Category	Specific Data Points	Collection Trigger
Identity Data	Full legal name, date of birth, nationality, government-issued ID number, passport or National ID scan	Account registration and identity verification
Contact Data	Email address, mobile phone number, residential address (including city — Dhaka, Chittagong, Sylhet, etc.)	Account registration and profile updates
Financial Data	bKash account number, Nagad account number, Rocket number, Upay number, bank account details, transaction history, deposit and withdrawal records	Deposit, withdrawal, and payment verification
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6)	Automatic collection on Platform access
Usage Data	Pages visited, games played, bet amounts and outcomes, session duration, feature interactions, search queries within the Platform	Automatic collection during active session
Communication Data	Live chat transcripts, email correspondence, support ticket content, feedback submissions	Customer support interactions
Marketing Preferences	Email marketing opt-in or opt-out status, preferred bonus types, promotional communication history	Registration settings and preference updates

Sensitive Data

bst222 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally received (for example, within a scanned identity document), it is treated with the highest level of protection and is not processed for any purpose beyond identity verification.

2. How We Use Your Data

bst222 processes your personal data only where a lawful basis exists for doing so. The primary legal bases we rely on are: performance of a contract (operating your account), compliance with legal obligations (anti-money laundering and age verification requirements), legitimate interests (fraud prevention and Platform security), and your consent (marketing communications). The following sets out the specific purposes for which your data is used:

Account Creation and Management: Your identity and contact data are used to create and maintain your bst222 account, authenticate you at login, and keep your account profile accurate and current.
Payment Processing: Your financial data is used to process deposits via bKash, Nagad, Rocket, Upay, SureCash, and bank transfer, and to process withdrawal requests back to your verified payment method. All payment data is handled in compliance with applicable financial regulations.
Age and Identity Verification: bst222 is required to verify that all registered players are aged 18 or above. Your identity documents are processed solely for this purpose and for anti-money laundering compliance checks.
Fraud Prevention and Security: Technical and usage data are analysed continuously to detect suspicious activity, prevent unauthorised account access, identify bonus abuse, and protect the integrity of the bst222 Platform for all Bangladesh players.
Customer Support: Communication data from live chat and email interactions is used to resolve your queries, investigate complaints, and improve the overall quality of bst222 support services.
Responsible Gaming: Usage data — including session frequency, deposit patterns, and wagering behaviour — is monitored to identify signs of problem gambling. Where such signs are detected, bst222 may proactively reach out to offer responsible gaming tools and support resources.
Marketing Communications: Where you have opted in, your contact data and preferences are used to send you information about bst222 promotions, daily bonuses, BPL and IPL seasonal offers, and Eid and Pohela Boishakh special campaigns. You may opt out at any time.
Platform Improvement: Aggregated and anonymised usage data is used to analyse how players interact with the bst222 Platform, inform product development decisions, and improve game selection and navigation.
Legal and Regulatory Compliance: Where required by applicable law or by a competent authority, bst222 may process your data to fulfil reporting obligations, respond to lawful requests, or defend legal claims.

4. Cookies & Tracking Technologies

bst222 uses cookies and similar tracking technologies to operate essential Platform functions, remember your preferences, analyse site performance, and — where you have consented — personalise your experience. The following table describes the categories of cookies used on the bst222 Platform:

Cookie Type	Purpose	Duration	Can Be Disabled?
Strictly Necessary	Enable core Platform functions: session management, authentication, security checks, and fraud prevention. The Platform cannot function without these cookies.	Session / up to 24 hours	No — essential for Platform operation
Functional	Remember your language preference, display settings, game lobby layout, and responsible gaming tool configurations between sessions.	Up to 90 days	Yes — disabling may reduce Platform personalisation
Analytics	Collect aggregated, anonymised data on page visits, feature engagement, session duration, and navigation paths to help bst222 improve Platform usability.	Up to 12 months	Yes — opt out via cookie settings
Marketing	Track promotional campaign effectiveness and — where consent is given — deliver relevant bst222 offers based on your Platform behaviour and preferences.	Up to 30 days	Yes — opt out via cookie settings or marketing preferences

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling strictly necessary cookies will impair your ability to access the bst222 Platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

Local Storage and Session Storage

In addition to cookies, bst222 may use browser local storage and session storage to retain small amounts of data necessary for Platform performance — for example, to preserve your game state between page loads or to store your preferred lobby view. This data is stored only on your own device and is not transmitted to bst222 servers except where explicitly required for a Platform function.

5. Data Security

bst222 applies a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme covers technical controls, operational procedures, and staff training. Key security measures include:

256-Bit SSL Encryption: All data in transit between your device and bst222 servers is encrypted using industry-standard TLS 1.3 protocol. This applies to all Platform pages, account actions, and financial transactions.
Data Encryption at Rest: Personal and financial data stored in bst222 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
Access Control: Access to production systems containing personal data is restricted to a limited number of authorised personnel on a need-to-know basis. All access is authenticated via multi-factor authentication and logged for audit purposes.
Penetration Testing: bst222 engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the Platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
Incident Response Plan: bst222 maintains a documented data breach incident response plan. In the event of a confirmed breach affecting personal data, the response team is activated immediately to contain the incident, assess the impact, and notify affected players without undue delay.
Staff Training: All bst222 staff members who handle personal data receive regular training on data protection obligations, secure data handling procedures, and how to identify and report potential security incidents.

Your Responsibility

While bst222 implements robust security measures on our side, the security of your account also depends on you keeping your login credentials confidential. Use a strong, unique password for your bst222 account. Do not share your username or password with anyone. If you suspect your account credentials have been compromised, contact bst222 support immediately via live chat or at [email protected].

6. Data Retention

bst222 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by bst222:

Data Category	Retention Period	Basis for Retention
Account and Identity Data	Duration of active account, plus 5 years after account closure	Legal obligation — anti-money laundering and financial regulation compliance
Financial Transaction Records	7 years from transaction date	Legal obligation — financial record-keeping requirements
Identity Verification Documents	Duration of active account, plus 5 years after account closure	Legal obligation — KYC and age verification compliance
Customer Support Communications	3 years from the date of the last interaction	Legitimate interest — dispute resolution and service quality improvement
Usage and Session Data	13 months from collection date	Legitimate interest — Platform analytics and responsible gaming monitoring
Marketing Preferences	Until opt-out, or 2 years from last engagement, whichever is earlier	Consent — retained only while consent is active
Cookie and Tracking Data	As defined per cookie type (see Cookies section)	Consent / Legitimate interest depending on cookie category

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered personal data and falls outside the scope of this Privacy Policy.

7. Your Privacy Rights

As a bst222 player, you hold a number of rights in relation to your personal data. bst222 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact our support team via live chat or email [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

Right of Access

Request a copy of all personal data bst222 holds about you, along with information on how it is being used.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held in your bst222 account profile.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to any overriding legal retention obligations.

Right to Restriction

Request that bst222 restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.

Right to Data Portability

Request a machine-readable copy of the personal data you have provided to bst222, so that it can be transferred to another service provider.

Right to Object

Object to the processing of your personal data where bst222 relies on legitimate interests as its legal basis — including for direct marketing and analytics purposes.

Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint

If you believe bst222 has mishandled your personal data, you have the right to raise a formal complaint with the appropriate data protection authority in your jurisdiction.

Identity Verification for Rights Requests

To protect your data from unauthorised access, bst222 will verify your identity before processing any privacy rights request. We may ask you to confirm your registered email address, account username, or provide a copy of a government-issued ID. This verification step is a security measure designed to prevent your data from being disclosed to a third party falsely claiming to be you.

8. Contact & Data Protection Officer

bst222 takes data protection seriously and has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. If you have any questions, concerns, or complaints about how bst222 handles your personal data, please reach out using the contact details below.

We are committed to addressing all privacy-related enquiries with care and promptness. General support queries are typically answered within 2–6 hours. Formal privacy rights requests and complaints will receive a substantive response within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it before the initial 30-day period expires.

Privacy Email

[email protected]
Subject: Privacy Rights Request

Live Chat

Available 24/7
Login required to access live chat

Response Time

Within 30 days
For formal privacy rights requests

Policy Review Cycle

Reviewed annually
Next review: January 2027

Policy Updates

bst222 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players by email and display a prominent notice on the Platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this policy will always reflect the most recent revision. We encourage you to review this policy periodically to stay informed about how bst222 protects your data.

By continuing to use the bst222 Platform after any revision to this Privacy Policy becomes effective, you confirm that you have read and accepted the updated terms. If you do not agree with any changes to this policy, you should stop using the Platform and may request account closure by contacting [email protected]. bst222 will process your closure request and handle any remaining data in accordance with the retention periods set out in this policy.

This Privacy Policy was drafted and is maintained in the English language. Any translations provided for informational convenience are non-binding. In the event of any conflict or inconsistency between the English version and a translated version of this policy, the English version shall prevail. The effective date of the current version of this Privacy Policy is 1 January 2026.

18+

Your Privacy Matters at bst222

Now that you understand how bst222 handles your personal data, explore our full range of cricket betting markets, slot games, and daily bonuses — all within a secure, SSL-encrypted environment. For adults aged 18 and above only. Please gamble responsibly.

Access Your Account Responsible Gaming Read the FAQ

Questions about this policy? Email us at [email protected] — we typically respond within 2–6 hours.