Privacy Policy — bo222 Online Casino

1. Information We Collect

When you register, use, or interact with the bo222 platform at https://bo222.app, we collect certain personal data about you. This section sets out in full what categories of data we collect, the source of that data, and the lawful basis on which we process it. We collect only the data that is genuinely necessary for the purposes described in this Privacy Policy.

1.1 Registration and Account Data

When you create a bo222 account, we ask you to provide:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, which we use to verify that you are at least 18 years of age.
• Residential address in Bangladesh (street, city/district, postal code).
• A valid mobile phone number (required for bKash, Nagad, or Rocket payment linking).
• Email address, used for account communication and support correspondence.
• A username and password chosen by you. Passwords are stored in hashed form and are never readable by bo222 staff.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request copies of identity documents including your National Identity Card (NID), passport, or bank statement. These documents are used solely for identity and age verification and for compliance with Anti-Money Laundering (AML) requirements. KYC documents are stored securely and are not shared with third parties except as required by law or as specified in the data-sharing section below.

1.3 Financial Transaction Data

We record details of all deposit and withdrawal transactions on your account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction amounts in BDT, transaction timestamps, and transaction reference numbers. We do not store full payment credentials such as mobile banking PINs or internet banking passwords. Payment authentication is handled directly by the relevant payment provider.

1.4 Usage and Gameplay Data

We automatically collect data about how you use the platform, including:

• Games played, bet amounts placed, session duration, and gaming history.
• Sports betting selections, odds accepted, and wager outcomes.
• Bonus offers accepted, wagering progress, and promotional participation.
• Pages visited within the bo222 platform, click-through patterns, and feature usage.

This data helps us maintain platform integrity, personalise your experience, detect problem gambling indicators, and fulfil our responsible gaming obligations.

1.5 Technical and Device Data

When you access bo222, our servers automatically record certain technical information, including your IP address, device type (mobile, tablet, desktop), operating system, browser type and version, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation. We may also use device fingerprinting technology to enforce our one-account-per-player policy and detect duplicate registrations.

1.6 Communications Data

If you contact our support team via email, live chat, or any other channel, we retain records of that correspondence, including the content of messages and the date and time of contact. This helps us resolve disputes, improve our support quality, and maintain a record of commitments made to players.

2. How We Use Your Data

bo222 uses the personal data it collects for the following purposes. We will not use your data for any purpose that is incompatible with those set out below without first notifying you and, where required, obtaining your consent.

• Account management: Creating, maintaining, and managing your bo222 account, including processing deposits and withdrawals, applying bonus offers, and communicating account-related information to you.
• Identity and age verification: Confirming that you are who you say you are and that you are at least 18 years of age before granting access to real-money gaming features.
• Platform security and fraud prevention: Detecting and investigating suspicious activity, enforcing our one-account policy, identifying unauthorised access attempts, and protecting the integrity of our gaming environment.
• Legal and regulatory compliance: Meeting our Anti-Money Laundering (AML) obligations, maintaining transaction records as required by applicable international financial crime standards, and responding to lawful requests from competent authorities.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling, applying player-requested deposit limits and self-exclusion agreements, and reaching out to players who show signs of at-risk behaviour.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify performance issues, and prioritise new features or game additions.
• Marketing communications: Sending you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, or seasonal offers — but only if you have opted in to receive such communications. You may opt out at any time by contacting [email protected] or following the unsubscribe link in any promotional message.

3. Data Sharing and Third Parties

bo222 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. We may however share your data with the following categories of third parties where strictly necessary for the operation of the platform or where required by law:

3.1 Payment Processors

To process your deposits and withdrawals, we share relevant transaction details with our payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data they need to authenticate and complete the transaction and are bound by their own data protection obligations. bo222 does not transmit full payment credentials to these providers; authentication occurs on the provider's own secure infrastructure.

3.2 Game Content Providers

The casino games and sports betting markets available on bo222 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, certain session data (such as player session token and bet amounts) is transmitted to the relevant provider's platform to render the game and record its outcome. This data is processed under the provider's own data protection terms. Personal identifying information such as your full name or NID number is not shared with game providers.

3.3 Identity Verification Services

To fulfil our KYC obligations, we may use third-party identity verification services to cross-reference the documents you submit against independent databases. These services process your data solely for the purpose of identity verification and are contractually prohibited from using it for any other purpose.

3.4 Legal and Regulatory Authorities

bo222 will disclose personal data to competent authorities, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory directive. We will not share data with authorities on a voluntary basis beyond what is legally required, and we will notify you of any such disclosure to the extent permitted by law.

3.5 Business Transfers

In the event that bo222 or a significant portion of its assets is acquired by, merged with, or transferred to another entity, your personal data may form part of the transferred assets. In such circumstances, we will notify affected players in advance and ensure that the acquiring entity is bound by data protection commitments no less protective than those set out in this Privacy Policy.

4. Cookies and Tracking Technologies

The bo222 platform uses cookies and similar tracking technologies (including local storage and session tokens) to deliver a functional, secure, and personalised experience. This section explains what types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login session status, or previously viewed content — making subsequent visits faster and more convenient. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies We Use

4.3 Managing Your Cookie Preferences

You can manage, restrict, or delete cookies through your browser settings at any time. Most modern browsers (Chrome, Firefox, Edge, Safari, and the mobile browsers commonly used on Android devices popular in Bangladesh) allow you to block all cookies, block third-party cookies only, or clear existing cookies on demand. Please note that disabling strictly necessary cookies may prevent you from logging into your bo222 account or using certain platform features correctly.

bo222 does not use third-party advertising cookies, tracking pixels placed by social media platforms, or retargeting technologies of any kind. The cookies described above are first-party only and serve exclusively operational and analytical purposes within the bo222 platform.

5. Data Retention and Storage

bo222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active account data (name, contact details, preferences): Retained for the duration of your account plus 5 years following permanent account closure, in accordance with standard AML record-keeping requirements.
• KYC and identity verification documents: Retained for 5 years from the date of submission or 5 years from account closure, whichever is later, to comply with anti-money laundering obligations.
• Financial transaction records: Retained for 5 years from the date of each transaction to comply with applicable financial record-keeping standards.
• Gameplay and betting history: Retained for the duration of your account plus 3 years, used for dispute resolution, responsible gaming monitoring, and platform auditing.
• Support correspondence: Retained for 3 years from the date of the most recent interaction in any support thread, unless a longer retention period is required to resolve an open dispute.
• Technical and device logs: Retained for up to 12 months from the date of generation, then deleted or anonymised.

Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for platform analytics and historical reporting purposes.

Data Storage Location

bo222 stores player data on servers located in secure data centres. Data may be processed by third-party service providers (such as KYC verification partners or cloud infrastructure providers) whose servers may be located outside Bangladesh. Where data is transferred outside Bangladesh, we ensure that appropriate data protection safeguards are in place through contractual mechanisms that require the recipient to provide a level of protection equivalent to that described in this Privacy Policy.

6. Your Privacy Rights

As a player on the bo222 platform, you have meaningful rights over your personal data. These rights are described below. To exercise any of them, contact our data team at [email protected] with the subject line "Privacy Request — [Right Type]". We will acknowledge your request within 3 business days and provide a full response within 30 days of receipt.

• Right of Access: You may request a copy of all personal data that bo222 holds about you. We will provide this in a structured, readable format. There is no charge for a reasonable access request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For certain data (such as your registered name), correction may require submission of a supporting document.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is not absolute — we may be required to retain certain data to comply with our AML and record-keeping obligations even after your account is closed.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while a correction request is pending, or where you contest the lawfulness of our processing but do not wish the data deleted.
• Right to Object: You may object to our processing of your personal data where that processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where we process your data on the basis of your consent or a contract, you may request that we provide your personal data to you or to a third party in a commonly used, machine-readable format.
• Right to Withdraw Consent: Where we process your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

7. Data Security

The security of your personal data is a priority for bo222. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption on all data transmissions between your device and our platform.
• Encryption at rest for sensitive data fields stored in our databases, including identity document references and financial records.
• Hashed password storage using a modern, salted hashing algorithm. No bo222 employee can read your password.
• Multi-factor authentication required for administrative access to systems holding personal data.
• Role-based access controls ensuring that employees access only the data necessary for their specific job functions.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Incident response procedures — in the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate remedial action.

While we take all reasonable steps to secure your data, no online platform can guarantee absolute security. You also have a role to play: use a strong, unique password for your bo222 account, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

8. Contact and Data Officer

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how bo222 handles your personal data, please contact our data team using the details below. All privacy-related correspondence is handled in English and will be responded to by a member of our dedicated support team.

• Email: [email protected] (subject line: "Privacy Request" or "Data Enquiry")
• Live Chat: Available 24/7 via the bo222 platform — select "Privacy / Data" as the enquiry category.
• Phone / WhatsApp: +880 1700 000 222 — available during BST (UTC+6) business hours.

bo222 is committed to resolving all privacy complaints directly with affected players as a first step. If you are not satisfied with our response to your privacy complaint, you retain the right to escalate your concern to the relevant data protection authority or to pursue the matter through appropriate legal channels.

This Privacy Policy was last reviewed and updated in January 2026. We reserve the right to update this Policy at any time. Material changes will be communicated to registered players via email at least 7 days before they take effect. Continued use of the bo222 platform after the effective date of any update constitutes acceptance of the revised Policy.