Privacy Policy

1. Data We Collect

ba223 collects personal data from players at various stages of the account lifecycle — from initial registration through to ongoing account use, financial transactions, and customer support interactions. We collect only the data that is necessary to deliver our services, comply with our legal obligations, and protect the integrity of the platform.

1.1 Registration Data

When you create a ba223 account, we collect the following information:

• Full legal name
• Date of birth (to verify the 18+ age requirement)
• Residential address (including city and country — typically Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladeshi cities)
• Email address
• Mobile phone number
• Chosen username and encrypted password

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer ("KYC") obligations and to verify player eligibility, ba223 may request the following documents at any point during the account lifecycle:

• Government-issued photo identity document (National Identity Card, passport, or driving licence)
• Proof of address (utility bill, bank statement, or official correspondence dated within three months)
• Proof of payment method (screenshot or official confirmation of the bKash, Nagad, Rocket, Upay, or bank account used for deposits)
• Source-of-funds documentation for high-volume accounts

1.3 Financial Transaction Data

ba223 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method identifiers (masked account numbers only — ba223 does not store full mobile wallet PINs or bank card CVV codes), transaction timestamps, and currency denominations in Bangladeshi Taka (BDT).

1.4 Gameplay and Activity Data

ba223 automatically records data related to your use of the platform, including:

• Games played, bets placed, and wager amounts
• Sports markets accessed (cricket BPL, IPL, T20 World Cup, etc.)
• Login timestamps and session durations
• Bonus claims, wagering progress, and promotional interactions
• Responsible gaming tool settings (deposit limits, self-exclusion status)

1.5 Technical and Device Data

When you access ba223, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and pages visited within the platform. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data

If you contact ba223 via email ([email protected]) or live chat, we retain records of those communications — including the content of messages, timestamps, and any attachments — for the purpose of resolving disputes, training our support team, and maintaining a documented history of player interactions.

2. How We Use Your Data

ba223 processes personal data only for the purposes described below. We do not sell personal data to third parties for marketing or commercial purposes. The legal bases for our data processing activities are: contractual necessity, legal obligation, legitimate interests, and — where required — your explicit consent.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, KYC documents	Contractual necessity
Age and identity verification	Date of birth, identity documents	Legal obligation (18+ enforcement)
Processing deposits and withdrawals	Financial transaction data, payment method identifiers	Contractual necessity
Fraud prevention and AML compliance	Transaction data, device data, IP address	Legal obligation, legitimate interests
Customer support and dispute resolution	Communications data, account activity data	Contractual necessity, legitimate interests
Responsible gaming monitoring	Gameplay data, deposit history, session data	Legal obligation, legitimate interests
Platform security and integrity	Technical data, login timestamps, device fingerprint	Legitimate interests
Personalised promotions and bonuses	Gameplay data, account preferences	Consent (opt-in)
Platform analytics and improvement	Aggregated, anonymised usage data	Legitimate interests

ba223 does not use your personal data for automated decision-making that produces legal effects without human review. Where automated processes are used (for example, to flag unusual account activity), a member of the ba223 compliance team reviews any consequential action before it is applied to your account.

3. Cookies & Tracking

ba223 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain session security, and analyse platform performance. A cookie is a small text file placed on your device when you visit ba223. Cookies do not contain executable code and cannot access other files on your device.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as preferred language, display settings, and responsible gaming tool configurations. Disabling these cookies will result in preferences not being saved between sessions.
• Analytics Cookies: Collect anonymised data about how players navigate the ba223 platform — pages visited, time spent on each section, and common navigation paths. This data is used solely to improve the platform and is never linked to individually identifiable player records.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login patterns. These cookies store encrypted device identifiers and session integrity tokens.

3.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging into your ba223 account and using core platform features. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation. ba223 does not use third-party advertising cookies or cross-site tracking cookies that follow you beyond the ba223 platform.

4. Data Sharing & Third Parties

ba223 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Processing Partners

To process deposits and withdrawals, ba223 shares relevant transaction data with certified payment processing partners. These partners include mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as card processing gateways for Visa and Mastercard transactions, and partnered banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. All payment partners are contractually required to handle your data in accordance with applicable data protection standards and to use it solely for payment processing purposes.

4.2 Game Studio Providers

Casino games on the ba223 platform are supplied by third-party studio providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Play'n GO, and Spribe. These studios may receive limited technical session data (such as a pseudonymous player session token) to operate their games within the ba223 environment. They do not receive your full name, contact details, or financial information.

4.3 Identity Verification Services

ba223 may use third-party KYC verification services to assist with document verification during the account registration and review process. These providers process submitted identity documents under strict data processing agreements and are prohibited from retaining or using your documents for any purpose other than KYC verification for ba223.

4.4 Legal and Regulatory Disclosure

ba223 may disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities when required to do so by applicable law, court order, or regulatory directive. In such circumstances, ba223 will disclose only the minimum data required to comply with the legal obligation and will notify you of the disclosure where legally permitted to do so.

4.5 Business Transfers

In the event that ba223 undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity before your data is subject to a materially different privacy policy.

5. Data Retention

ba223 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal and regulatory obligation
KYC / identity documents	Duration of account + 5 years post-closure	AML compliance and audit trail
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Gameplay and betting history	5 years from account closure	Dispute resolution, responsible gaming review
Customer support communications	3 years from date of communication	Dispute resolution, service improvement
Technical / device logs	12 months on a rolling basis	Security monitoring and fraud prevention
Marketing preferences	Until withdrawn or account closure	Consent-based processing

Following the expiry of the applicable retention period, ba223 will securely delete or irreversibly anonymise your personal data. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

6. Data Security

ba223 employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to the following:

• SSL/TLS Encryption: All data transmitted between your device and the ba223 platform is encrypted using SSL/TLS protocols. The ba223 website operates exclusively over HTTPS.
• Password Security: Passwords are stored using one-way cryptographic hashing. ba223 staff cannot view your password in plain text under any circumstances.
• Access Controls: Access to player data within ba223 is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked when no longer required.
• Data Minimisation: ba223 collects only the personal data that is necessary for the stated processing purposes. We do not collect data speculatively or for undefined future use.
• Regular Security Reviews: ba223 conducts periodic reviews of its technical infrastructure, access controls, and data handling procedures to identify and address potential vulnerabilities.
• Incident Response: In the event of a data security incident that may affect your personal data, ba223 will notify affected players promptly and take immediate remedial action to contain and address the incident.

7. Your Privacy Rights

As a ba223 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your account username and a description of your request. ba223 will respond to all data rights requests within 30 calendar days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that ba223 holds about you. Upon a verified access request, ba223 will provide a structured summary of your personal data in a commonly used electronic format within 30 days.

7.2 Right to Rectification

If any personal data held by ba223 about you is inaccurate or incomplete, you have the right to request that it be corrected. Please notify ba223 of any change to your personal details (name change, address change, contact number update) as promptly as possible to ensure the accuracy of your account records.

7.3 Right to Erasure

You may request that ba223 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that ba223's legal and regulatory retention obligations (see Section 5) may prevent the immediate deletion of certain categories of data. In such cases, ba223 will explain which data cannot be deleted and the legal basis for its continued retention.

7.4 Right to Restriction

In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that ba223 restrict the processing of your personal data to storage only. During a restriction period, ba223 will not use the restricted data for any purpose other than storage unless you provide consent or the restriction is lifted.

7.5 Right to Data Portability

Where ba223 processes your personal data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

7.6 Right to Withdraw Consent

Where ba223 processes your personal data on the basis of your consent (for example, for personalised promotional communications), you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7.7 Right to Object

You have the right to object to the processing of your personal data where ba223 relies on legitimate interests as the legal basis for processing. ba223 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

8. Policy Updates & Contact

ba223 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, ba223 will publish the revised Privacy Policy on this page with an updated effective date and, where appropriate, notify registered players via email or an in-platform notice.

Players are encouraged to review this Privacy Policy periodically. Continued use of the ba223 platform after a revised Privacy Policy has been published constitutes acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ba223, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within five (5) business days.