Your Privacy Matters
at 822bd
We are committed to being transparent about how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices in plain language so every 822bd player in Bangladesh can make informed decisions.
Privacy at a Glance
The cards below summarise the six most important aspects of how 822bd handles your personal data. They are provided for convenience only and do not replace the full legal text in the numbered clauses below. In the event of any inconsistency, the full clause text prevails.
822bd collects only the personal data that is strictly necessary to operate your account, process payments via bKash, Nagad, Rocket, and Upay, and comply with identity verification requirements. We do not collect data we do not need.
All data transmitted between your device and 822bd's servers is protected by industry-standard 256-bit SSL encryption. Your login credentials, financial transactions, and personal details are secured at every step of the journey.
822bd does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Any sharing of data is limited to operational partners — such as KYC providers and payment processors — and is governed by strict contractual obligations.
We use essential session cookies and, where you consent, analytics cookies to improve site performance. We clearly explain what each category of cookie does and how long it persists. You retain full control over non-essential cookies via your browser settings.
You have the right to access, correct, and request deletion of your personal data held by 822bd. Data subject requests are handled within 30 days. Simply contact our support team at [email protected] with your account details and the nature of your request.
822bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Account data is typically retained for five years after account closure in line with anti-money laundering obligations.
Complete Privacy Policy
1 Data We Collect
822bd collects personal data from you in three principal ways: data you provide directly during account registration and ongoing account use; data collected automatically as you interact with the platform; and data received from trusted third parties involved in identity verification and payment processing.
Data You Provide Directly:
- Identity data: full legal name, date of birth, national identity card (NID) number or passport number, and a scanned copy or photograph of your government-issued photo ID submitted during KYC verification.
- Contact data: email address, mobile telephone number, and residential address including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
- Financial data: your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the mobile number or card details associated with that payment method, and transaction history. Full payment card numbers are never stored on 822bd servers — they are processed exclusively by our PCI-DSS compliant payment partners.
- Account credentials: your chosen username and a hashed (never plain-text) version of your password.
- Communications data: the content of messages you send to our customer support team via live chat, email, or any other support channel.
- Responsible gaming data: any deposit limits, session time limits, self-exclusion requests, or cooling-off elections you make via the account dashboard following 822bd Login.
Data Collected Automatically:
- Technical data: IP address, device type, browser type and version, operating system, screen resolution, and the unique device identifier associated with your session.
- Usage data: pages visited, games played, bets placed, session duration, click-path data, and feature interactions recorded during your use of the 822bd platform.
- Geolocation data: approximate location derived from your IP address. We do not request GPS-level precise location data.
- Cookie and tracking data: as described in Clause 4 of this Policy.
Data Received From Third Parties:
- Identity verification providers: confirmation of identity document authenticity and the outcome of facial-match checks where applicable.
- Payment processors: transaction status updates, chargeback notifications, and fraud-screening signals.
- Fraud and AML screening services: sanctions list check outcomes and politically exposed person (PEP) screening results.
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related self-disclosure is made voluntarily by a player in the context of a responsible gaming self-exclusion request.
2 How We Use Your Data
822bd processes your personal data only for clearly defined purposes. The table below sets out the primary purposes for which we use each category of data and the legal basis for that processing.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation & management | Identity, contact, credentials | Contract performance |
| Processing deposits & withdrawals | Financial, identity, contact | Contract performance |
| KYC & age verification | Identity, financial | Legal obligation |
| Fraud prevention & AML compliance | Identity, financial, technical, usage | Legal obligation / legitimate interest |
| Customer support | Identity, contact, communications | Contract performance / legitimate interest |
| Responsible gaming tools | Responsible gaming, usage, financial | Legal obligation / legitimate interest |
| Platform security | Technical, usage, geolocation | Legitimate interest |
| Marketing communications | Contact, usage | Consent (opt-in required) |
| Analytics & platform improvement | Usage, technical, cookie data | Consent / legitimate interest |
Marketing Communications: If you have opted in to receive promotional communications from 822bd, we may contact you by email or SMS with information about bonuses, promotions, new games, and seasonal offers relevant to your location and preferences. You may withdraw your consent at any time by clicking "unsubscribe" in any marketing email, adjusting your notification preferences via the account dashboard following 822bd Login, or contacting us at [email protected]. Withdrawing consent for marketing does not affect the lawfulness of processing based on consent before withdrawal.
Automated Decision-Making: 822bd uses automated processes to flag accounts for responsible gaming intervention and to detect fraud patterns. Where an automated process results in a restriction or suspension of your account, you have the right to request human review of that decision by contacting our support team.
3 Data Sharing & Disclosure
822bd does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose.
Service Providers and Operational Partners: We engage trusted third-party service providers to help us deliver the 822bd platform. These include:
- Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways (Visa/Mastercard networks) — for the purpose of processing deposits and withdrawals in BDT.
- KYC and identity verification providers: to verify your identity and age as required by our terms and applicable regulations.
- Cloud hosting and infrastructure providers: who store and process platform data on our behalf under strict data processing agreements.
- Customer support tooling providers: who host the live chat and ticketing systems used by our support team.
- Analytics providers: who process anonymised or pseudonymised usage data to help us understand how the platform is used and where it can be improved.
- Game studios: such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive session tokens and game-state data necessary to deliver their games. These studios operate under their own data protection obligations and do not receive your full identity profile.
All third-party service providers are contractually required to process your data only on our instructions, to implement appropriate technical and organisational security measures, and to delete or return your data upon termination of their engagement with 822bd.
Legal and Regulatory Disclosure: 822bd may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so. We will not disclose more than is required by the applicable legal demand.
Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving 822bd, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data in the hands of any successor entity.
4 Cookies & Tracking
The 822bd website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and — where you have consented — to collect analytics data that helps us improve the user experience for players across Bangladesh.
What Is a Cookie? A cookie is a small text file placed on your device by a website you visit. It allows the website to recognise your device on subsequent visits and recall certain information about your session or preferences. Cookies do not contain executable code and cannot access other data stored on your device.
Categories of Cookies We Use:
| Category | Purpose | Duration | Consent Required? |
|---|---|---|---|
| Strictly Necessary | Session management, login state, CSRF protection, load balancing | Session / up to 24 hours | No — essential for site operation |
| Functional | Remembering language, game preferences, responsible gaming settings | Up to 12 months | No — necessary for service delivery |
| Analytics | Measuring page views, session duration, navigation paths (pseudonymised) | Up to 24 months | Yes — opt-in required |
| Marketing / Retargeting | Personalised promotional content and frequency capping | Up to 90 days | Yes — opt-in required |
Managing Cookies: You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, to accept only certain types, or to delete cookies already stored on your device. Please note that disabling strictly necessary cookies may prevent the 822bd platform from functioning correctly — in particular, you may be unable to maintain a logged-in session.
Third-Party Tracking: Some analytics and marketing cookies are set by third-party providers on our behalf. These providers are contractually restricted from using the data they collect for their own purposes and must comply with this Policy. We do not permit third-party advertising networks to set tracking cookies on the 822bd platform without your explicit consent.
5 Data Retention
822bd retains your personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable law. The specific retention periods we apply are set out below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML / regulatory compliance |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| KYC documents | 5 years after account closure | Legal obligation |
| Customer support communications | 3 years from last interaction | Dispute resolution |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
| Analytics data (pseudonymised) | Up to 24 months | Platform improvement |
| Session / technical logs | 90 days | Security monitoring |
| Self-exclusion records | Indefinitely (or as required by applicable rules) | Responsible gaming compliance |
When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised data that cannot be re-linked to an identifiable individual may be retained indefinitely for aggregate statistical purposes.
6 Your Data Rights
As a data subject, you have a number of rights with respect to the personal data that 822bd holds about you. We are committed to honouring these rights promptly and without undue burden to you.
- Right of Access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of a valid request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. You can update most contact details directly via the account dashboard following 822bd Login.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. We will comply with this request unless retention is required by law (for example, AML record-keeping obligations) or is necessary to resolve an outstanding dispute.
- Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we restrict processing while we investigate your concern.
- Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your data in a machine-readable format suitable for transfer to another service provider.
- Right to Object: You may object to processing based on legitimate interests at any time. Where processing is for direct marketing purposes, your objection will be upheld without the need for justification.
- Rights Related to Automated Decision-Making: Where a decision affecting you has been made by an automated process, you have the right to request human review of that decision.
How to Exercise Your Rights: Submit your request in writing to [email protected] with the subject line "Data Subject Request". Please include your full name, registered email address, and a description of the right you wish to exercise. We may ask you to verify your identity before processing the request. We aim to respond to all requests within 30 calendar days. If a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.
7 Data Security
822bd takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:
- Transport Layer Security (TLS/SSL): All data in transit between your device and our servers is encrypted using 256-bit TLS encryption. You can verify this by looking for the padlock icon in your browser's address bar when using the 822bd platform.
- Password hashing: Account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms to store password data in a form that cannot be reversed.
- Access controls: Access to personal data within 822bd's systems is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
- Infrastructure security: Our servers are hosted in data centres that maintain physical security controls, intrusion detection systems, and regular vulnerability scanning.
- Payment security: Full payment card data is handled exclusively by our PCI-DSS certified payment partners. 822bd itself does not store, process, or transmit full card numbers on its own infrastructure.
- Breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
While we maintain robust security practices, no method of electronic transmission or storage is 100% secure. We encourage you to protect your own account by using a strong, unique password for your 822bd Login, enabling any available two-factor authentication, and never sharing your credentials with any other person.
8 Policy Changes
822bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify you by sending an email to your registered address and by displaying a prominent notice on the platform at next login.
The effective date at the top of this Policy indicates when the current version came into force. We encourage you to review this page periodically so you are always informed about how we handle your personal data. The most current version of this Policy will always be available at 822bd.bet/privacy-policy.
Your continued use of the 822bd platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the platform and may request account closure as described in the Terms & Conditions.
Children's Privacy: The 822bd platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user is under 18, their account will be closed immediately and any personal data collected will be deleted in accordance with our obligations.
Contact: For all privacy-related queries, data subject requests, or concerns about how 822bd handles your personal data, please contact our support team in writing at [email protected]. All correspondence should be in English and should include your registered email address and account username so we can locate your account promptly.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions in full.
Questions About Your Privacy?
Our support team is available to help with any questions about your personal data, data subject requests, or how 822bd handles your information. You can also explore our FAQ or review our Responsible Gaming guidelines.