bg722 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

1 About This Privacy Policy

This Privacy Policy (the "Policy") is issued by bg722 (referred to as "bg722", "we", "us", or "our") and applies to all personal data collected through the bg722 website at https://bg722.io, any associated mobile applications, and all related services offered to players in Bangladesh.

This Policy forms part of the overall legal framework governing your relationship with bg722, alongside the Terms & Conditions and the Responsible Gaming Policy. By registering a bg722 account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

bg722 is committed to processing personal data responsibly, transparently, and in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) as a benchmark standard, even where local Bangladeshi legislation provides a different framework.

2 Personal Data We Collect

bg722 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data we collect and the context in which they are obtained:

bg722 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in mandatory identity documents submitted during KYC. Where such data is incidentally included in a submitted document, it is not extracted, processed separately, or used for any purpose other than confirming the document's authenticity.

3 How We Use Your Personal Data

bg722 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your bg722 player account, including processing deposits and withdrawals to and from your registered payment methods.
• Identity Verification (KYC): To verify your identity and age as required by our responsible gaming commitments and applicable anti-money laundering (AML) obligations. All players must be 21 years of age or older.
• Transaction Processing: To process deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to settle withdrawal requests to your verified payment account in Bangladeshi Taka (৳).
• Customer Support: To respond to your enquiries, complaints, and requests submitted via Live Chat, in-app messaging, or email.
• Responsible Gaming: To monitor player activity for indicators of problem gambling behaviour, and to administer deposit limits, loss limits, self-exclusion requests, and session controls in accordance with our Responsible Gaming Policy.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated usage data to improve the performance, stability, and feature set of the bg722 platform. Aggregated analytics data does not identify individual players.
• Legal and Regulatory Compliance: To fulfil bg722's obligations under applicable law, including responding to lawful requests from regulatory and law enforcement authorities.

4 Legal Basis for Processing

bg722 processes personal data on the following legal bases:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract established when you register a bg722 account and accept the Terms & Conditions.
• Legal Obligation: Processing for KYC verification, AML checks, and retention of transaction records is required to comply with applicable financial, gaming, and anti-money laundering regulations.
• Legitimate Interests: Processing technical data and usage data for fraud prevention, platform security, and service improvement is carried out on the basis of bg722's legitimate interest in operating a safe and functional platform, balanced against your rights and interests as a data subject.
• Consent: Processing your data for direct marketing communications is based on your freely given, specific, informed, and unambiguous consent provided during account registration or subsequently updated in your account settings.

5 Data Sharing and Disclosure

bg722 does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment Processors: Financial data is shared with the payment service providers through which you deposit and withdraw funds — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — solely for the purpose of processing your transactions.
• Game Providers: Certain usage data (such as player ID and bet history) may be shared with third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent required to deliver and audit game outcomes. These providers are contractually prohibited from using the data for any other purpose.
• Identity Verification Services: Identity documents submitted during KYC may be processed by a third-party identity verification provider. Such providers are bound by strict data processing agreements and may not retain your documents beyond the period required for verification.
• Legal and Regulatory Authorities: bg722 may disclose personal data to law enforcement agencies, regulatory bodies, or financial intelligence units in Bangladesh where required to do so by applicable law, court order, or lawful regulatory demand. bg722 will notify affected players of such disclosures where legally permissible.
• Professional Advisers: Personal data may be shared with bg722's legal counsel, auditors, and financial advisers on a strictly need-to-know basis and subject to professional confidentiality obligations.

No data is transferred to third parties outside the above categories. All third-party processors engaged by bg722 are subject to data processing agreements that impose obligations equivalent to those set out in this Policy.

6 Cookies and Tracking Technologies

bg722 uses cookies and similar tracking technologies to operate the platform efficiently and to understand how players interact with it. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable session management, authentication, and security features. They cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the platform, which games are most visited, and where technical errors occur. The data is used exclusively to improve platform performance.
• Functional Cookies: These cookies remember your preferences, such as language settings and display options, to personalise your experience on return visits.
• Marketing Cookies: Where you have opted in to marketing communications, these cookies may be used to deliver relevant promotional content. Marketing cookies are only activated following your explicit consent.

You may manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing the core features of the bg722 platform, though certain personalisation features may be affected.

7 Data Retention

bg722 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to satisfy financial record-keeping and AML obligations.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction in accordance with applicable financial regulations.
• KYC Documents: Identity and verification documents are retained for a minimum of five (5) years following submission, or for the period required by applicable legal obligations where that period is longer.
• Communications Data: Support chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Anonymised analytics data is retained indefinitely in aggregated form. Non-anonymised technical logs are retained for a maximum of twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Players who have requested account closure and whose data has passed the minimum retention period may submit an erasure request as described in Section 8.

8 Your Data Protection Rights

As a data subject, you hold the following rights in respect of your personal data processed by bg722. To exercise any of these rights, please contact us using the details in Section 12:

• Right of Access: You have the right to request a copy of all personal data bg722 holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Account profile data can be updated directly from your account settings for most fields.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations as described in Section 7.
• Right to Restrict Processing: You have the right to request that bg722 restrict the processing of your personal data in certain circumstances, such as while a complaint is being investigated.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. bg722 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests and rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting processing that has already taken place.

9 Security Measures

bg722 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the bg722 platform is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive personal data stored on bg722 servers — including identity documents and financial records — is encrypted using AES-256 encryption at rest.
• Access Controls: Access to personal data within bg722 is restricted on a role-based, need-to-know basis. All internal access is logged, monitored, and subject to periodic audit.
• Two-Factor Authentication: bg722 supports and strongly encourages the use of two-factor authentication (2FA) to protect player accounts against unauthorised access.
• Penetration Testing: The bg722 platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bg722 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay in accordance with applicable legal requirements.

While bg722 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password and enabling two-factor authentication.

10 Children's Privacy and the 21+ Rule

The bg722 platform is strictly restricted to individuals who are 21 years of age or older. bg722 does not knowingly collect, process, or retain personal data from any person under the age of 21.

During account registration, all players are required to confirm their date of birth and submit identity documentation during KYC verification that confirms they meet the minimum age requirement. Any account found to belong to a person under 21 will be immediately suspended, all associated funds will be frozen, and any personal data collected will be deleted upon confirmation of the player's age.

If you have reason to believe that a person under 21 has registered a bg722 account, please notify us immediately at [email protected] so that appropriate action can be taken without delay.

11 Updates to This Privacy Policy

bg722 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or the structure of the platform. The most current version of this Policy will always be published at https://bg722.io/privacy-policy, with the effective date clearly stated at the top of the document.

Where changes are material — for example, changes to the categories of data we collect, the purposes for which we process it, or the third parties with whom we share it — bg722 will provide prominent notice on the platform and, where practicable, communicate the change via the email address associated with your account at least 7 days before the amendment takes effect.

Your continued use of the bg722 platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the platform and contact support to request account closure and data erasure in accordance with Section 8.

12 Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a data protection concern, please contact bg722 through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in the subject line for data-related requests. Allow up to 72 hours for acknowledgement.
• Live Chat: Available 24/7 directly within the bg722 platform. Live Chat is the fastest route for urgent account-related privacy queries.
• In-App Messaging: Available via the bg722 mobile application for players using Android devices.

All privacy-related requests and complaints will be logged, acknowledged within 72 hours, and resolved within 30 calendar days in accordance with the response timeframe stated in Section 8. bg722 is committed to resolving data protection concerns fairly and transparently.