Privacy Policy — bft222

1. Introduction

This Privacy Policy ("Policy") describes how bft222 ("bft222", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the bft222 platform at https://bft222.club and all associated services, features, and products (collectively, the "Service").

bft222 is committed to handling your personal data responsibly and transparently. This Policy is intended to give you a clear understanding of your privacy rights and how we fulfil our obligations as a data controller. By registering an account or using any part of the Service, you acknowledge that you have read and understood this Policy.

2. Data We Collect

bft222 collects personal data in the following categories, depending on how you interact with the Service:

2.1 Registration & Identity Data

When you create a bft222 account, we collect the information you provide during the registration process, including:

• Full legal name
• Date of birth (for age verification purposes)
• Residential address, including city, district, and postal code
• Email address
• Mobile phone number
• Username and password (stored in encrypted form)

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to prevent fraud and money laundering, we may collect:

• Government-issued photographic identification (e.g., National ID Card, passport, or driving licence)
• Proof of address documentation (e.g., utility bill or bank statement dated within the last three months)
• Source of funds documentation where required
• Photographs or selfies for identity confirmation purposes, processed via our third-party KYC verification partner

2.3 Financial & Transaction Data

When you make deposits or request withdrawals, we collect:

• Payment method details (e.g., bKash account number, Nagad account number, Rocket account number, Upay account details, bank account details, or card details where applicable)
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history

bft222 does not store full card numbers or mobile banking PINs. Payment credential data is processed directly by our PCI-DSS compliant payment processing partners.

2.4 Gaming Activity Data

We record data related to your use of the gaming Service, including:

• Game sessions, bets placed, stakes, results, and winnings
• Bonus usage, free spin activity, and promotional redemptions
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical & Device Data

When you access the Service, we automatically collect certain technical data, including:

• IP address and approximate geographic location (derived from IP)
• Device type, operating system, and browser type and version
• Session timestamps, page views, and navigation patterns within the platform
• Cookies and similar tracking technologies (see Section 6)

2.6 Communications Data

When you contact bft222 through live chat, email, or WhatsApp, we retain a record of the communication, including its content, timestamp, and the support representative who handled it. This data is used for quality assurance, dispute resolution, and training purposes.

The table below summarises the categories of personal data we collect and the primary purpose for each:

Data Category	Primary Purpose	Retention Period
Registration & Identity	Account creation, authentication, and personalisation	Duration of account + 5 years post-closure
KYC Documentation	Age and identity verification, fraud prevention	5 years from date of submission
Financial & Transaction	Payment processing, withdrawal verification, AML compliance	7 years from date of transaction
Gaming Activity	Service delivery, dispute resolution, responsible gaming monitoring	Duration of account + 3 years post-closure
Technical & Device	Platform security, fraud detection, performance optimisation	13 months (rolling)
Communications	Customer support, quality assurance, dispute resolution	3 years from date of communication

3. How We Use Your Data

bft222 uses the personal data it collects for the following purposes:

• Account Management: To create and maintain your bft222 account, authenticate your identity at login, and manage your account preferences and settings.
• Service Delivery: To provide access to casino games, sports betting, lottery products, and all other features of the bft222 platform.
• Payment Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banking channels, and to verify the legitimacy of transactions.
• Identity Verification: To verify your age and identity in compliance with our KYC obligations, and to prevent the use of the platform by minors or individuals providing false information.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats to the platform.
• Responsible Gaming: To monitor gaming behaviour, apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion), and identify patterns that may indicate problem gambling.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our live chat, email, and WhatsApp support channels.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw this consent at any time.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and to defend bft222's legal rights where necessary.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the performance, usability, and content of the bft222 platform.

4. Legal Basis for Processing

bft222 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and bft222 — specifically, to create your account, process your transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is necessary for bft222 to comply with applicable legal requirements, including KYC and anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for bft222's legitimate interests in fraud prevention, platform security, customer support quality, and the responsible operation of the gaming service, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bft222 processes your data for marketing communications or optional analytics purposes, it does so on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

bft222 does not sell or rent your personal data to any third party. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

5.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the bft222 platform. These include KYC and identity verification providers, payment processing partners (including the operators of bKash, Nagad, Rocket, and Upay integrations), cloud hosting and data storage providers, customer support software providers, and fraud detection and cybersecurity vendors. All such providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to bft222.

5.2 Game Providers

Certain technical data (such as your account identifier and session tokens) may be shared with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — in order to deliver their game content within the bft222 platform. These providers operate under their own privacy and data security frameworks. No more personal data than is strictly necessary for game delivery is shared with game providers.

5.3 Legal & Regulatory Authorities

bft222 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where it is required to do so by law, court order, or regulatory mandate, or where it reasonably believes that disclosure is necessary to prevent fraud, protect the safety of individuals, or protect bft222's legal rights.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bft222's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy implications via a platform announcement or direct communication before the transfer takes effect.

6. Cookies & Tracking Technologies

bft222 uses cookies and similar tracking technologies to enhance your experience on the platform, ensure the security of your session, and gather analytics data to improve the Service. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the basic functionality of the platform, including session management, authentication, and security. These cookies cannot be disabled without impairing the Service.
• Performance & Analytics Cookies: Used to collect anonymised data about how players navigate and use the platform, enabling us to identify areas for improvement. These cookies do not identify you personally.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations, so that you do not need to re-enter them on each visit.
• Marketing Cookies: Used, where you have consented, to deliver relevant promotional content within the platform. These cookies track your interaction with promotional materials to measure their effectiveness.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the bft222 platform and may prevent you from accessing certain features.

7. Data Retention

bft222 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods are set out in the table in Section 2. In general:

• Account and identity data is retained for the duration of your account and for a period of five years following account closure, to enable the resolution of any post-closure disputes and to comply with our regulatory obligations.
• Financial transaction data is retained for a minimum of seven years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Technical and device data collected via cookies and logs is retained on a rolling 13-month basis.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

8. Data Security

bft222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the bft222 servers.
• Encryption of sensitive data at rest, including account credentials and KYC documentation.
• Strict access controls ensuring that only authorised personnel have access to personal data, on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent cybersecurity specialists.
• Secure data centres with physical access controls, redundant infrastructure, and disaster recovery protocols.
• Employee data protection training and confidentiality obligations for all staff who handle personal data.

9. Your Privacy Rights

As a user of the bft222 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Privacy Request". We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data that bft222 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and bft222 has no overriding legitimate grounds. This right is subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that bft222 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bft222 relies on legitimate interests as its legal basis, and where your particular circumstances justify an objection. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

10. Children's Privacy

The bft222 platform is strictly for adults aged 18 and above. bft222 does not knowingly collect personal data from any individual under the age of 18. If bft222 discovers or has reason to believe that personal data has been collected from a person under 18, that account will be immediately closed, all associated funds will be forfeited, and the personal data in question will be deleted as promptly as possible in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account or submitted personal data to bft222, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.

11. Third-Party Links

The bft222 platform may contain links to third-party websites or services — for example, the websites of game providers or payment partners. This Policy applies solely to data processed by bft222. We are not responsible for the privacy practices, content, or data security measures of any third-party website or service. We encourage you to review the privacy policy of any third-party site you visit before submitting personal data to it.

12. Changes to This Policy

bft222 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification. We encourage you to review this Policy periodically to stay informed about how we protect your data. Your continued use of the Service after any amendment is posted constitutes your acknowledgement of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bft222 handles your personal data, please get in touch with our support team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Privacy Request" as appropriate.
• Live Chat: Available 24 hours a day, 7 days a week (00:00 – 23:59 BST) via the bft222 platform.
• WhatsApp: +880 1700 000 222

We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days. For complex requests involving data access or erasure, we may require up to an additional 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.