Privacy Policy

bt221 collects personal data through several channels: information you provide directly when registering or using the platform, information generated automatically through your use of bt221, and in limited circumstances information received from third-party payment processors. The categories of personal data we collect include:

bt221 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health data — except where a player voluntarily discloses a gambling-related health concern in the context of a responsible gaming interaction, in which case that data is handled with the highest level of confidentiality.

bt221 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, the relevant account will be suspended immediately and the data deleted without undue delay.

bt221 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are described below, together with the corresponding legal basis for each processing activity:

• Account registration and management: We process your identity and contact data to create and maintain your bt221 player account, verify your eligibility, and communicate essential account-related notifications. Legal basis: performance of a contract.
• Payment processing and fraud prevention: We process your financial data and transaction records to facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and to detect and prevent fraudulent transactions. Legal basis: performance of a contract; legitimate interests.
• Age verification and KYC compliance: We process identity and verification document data to confirm that all players are aged 18 or above and to meet our anti-money-laundering obligations. Legal basis: legal obligation; legitimate interests.
• Platform personalisation: We use account activity and technical data to recommend relevant sports markets, games, and promotional offers that may be of interest to you as a player in Bangladesh. Legal basis: legitimate interests.
• Security and platform integrity: We use technical data, account activity data, and IP data to identify and respond to security threats, detect prohibited conduct (including multi-accounting and bot activity), and protect the integrity of the bt221 platform. Legal basis: legitimate interests.
• Customer support: We use communications data and account data to investigate and respond to support queries, complaints, and dispute resolution requests submitted by players. Legal basis: performance of a contract; legitimate interests.
• Responsible gaming: We use account activity data (including betting frequency, session duration, and deposit patterns) to identify players who may be showing signs of problem gambling and to deliver appropriate responsible gaming interventions. Legal basis: legal obligation; legitimate interests.
• Marketing communications: Where you have opted in to marketing, we may use your contact data to send you information about bt221 promotions, bonuses, and seasonal offers (including BPL cricket promotions, Eid specials, and Pohela Boishakh offers). You may opt out at any time. Legal basis: consent.
• Platform analytics and improvement: We use aggregated and anonymised technical and activity data to analyse platform usage patterns, diagnose technical issues, and improve the user experience across all bt221 products. Legal basis: legitimate interests.

bt221 does not use automated decision-making processes that produce legally significant effects on individual players, with the exception of automated fraud and multi-account detection systems where suspension decisions are subsequently reviewed by a human member of the bt221 compliance team.

bt221 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: Transaction data (including your registered MFS account identifier and transaction amount in BDT) is shared with bKash, Nagad, Rocket, and Upay solely to process deposit and withdrawal transactions. These providers process payment data under their own privacy policies and security standards.
• Game technology providers: Certain technical session data (including your account session token and game round identifiers) is shared with game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming solely to enable game delivery and RNG certification. These providers do not receive your full identity data.
• KYC and identity verification services: Where third-party identity verification services are used to assist with document authentication, identity data is shared with those providers under strict data processing agreements that prohibit secondary use of the data.
• Fraud detection and security platforms: Aggregated and pseudonymised technical data may be processed by security and fraud detection service providers engaged by bt221 to protect platform integrity. These providers operate as data processors under bt221's instructions.
• Legal and regulatory disclosure: bt221 may disclose personal data where required to do so by a valid court order, law enforcement request, or regulatory obligation. In such cases, bt221 will disclose the minimum data necessary to satisfy the legal requirement and will notify affected players where legally permitted to do so.
• Business transfer: In the event that bt221 undergoes a merger, acquisition, or transfer of business assets, personal data held by bt221 may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer and of any change to the applicable privacy policy.

bt221 uses cookies and similar tracking technologies to deliver core platform functionality, remember your preferences, and analyse how the platform is used. A cookie is a small text file placed on your device by our web server when you visit bt221.net. Cookies cannot execute programs or deliver viruses to your device.

The categories of cookies used on bt221 are as follows:

bt221 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites. All analytics data collected via bt221 cookies is processed in aggregated or pseudonymised form and is not used to build individual advertising profiles.

You can manage cookie preferences through your browser settings. Instructions for the most common browsers are available from the browser developer's support documentation. Please note that disabling strictly necessary or security cookies will prevent you from logging in to or using the bt221 platform.

bt221's cookies do not store your bKash PIN, Nagad PIN, password, or any other sensitive credential. Session authentication tokens stored in cookies are encrypted and expire automatically at the end of your session or within a fixed timeout period.

bt221 implements a layered security architecture to protect all personal data held on the platform. Our technical and organisational security measures include:

• Transport-layer encryption: All data in transit between your browser or app and bt221's servers is protected by TLS 1.2 / TLS 1.3 (256-bit SSL). Our domain certificate is maintained and renewed on a continuous basis.
• Encryption at rest: Sensitive personal data — including identity verification documents, financial transaction records, and account credentials — is stored in encrypted form within bt221's database infrastructure.
• Access controls: Access to player personal data within bt221's internal systems is restricted on a need-to-know basis. All staff with access to personal data undergo mandatory data protection training and are bound by confidentiality obligations.
• Intrusion detection: bt221's infrastructure is monitored continuously for suspicious access patterns, DDoS activity, and attempted unauthorised data access. Security incidents are escalated for immediate response.
• Regular security audits: bt221 conducts periodic security reviews of its data processing infrastructure to identify and remediate vulnerabilities. Game RNG systems used by third-party providers are independently certified for fairness.

Data retention periods: bt221 retains your personal data for as long as your account remains active. Following account closure, personal data is retained for a minimum period of 5 years to satisfy anti-money-laundering record-keeping obligations and to handle any subsequent disputes or regulatory inquiries. After the applicable retention period, data is securely deleted or irreversibly anonymised.

Transaction records denominated in BDT (৳) are retained for a minimum of 7 years to support financial audit and compliance obligations. Anonymised and aggregated analytics data may be retained indefinitely as it contains no personal identifiers.

In the event of a personal data breach that poses a risk to your rights and freedoms, bt221 will notify affected players without undue delay via the email address registered on your account, and will take all reasonable steps to contain and remediate the breach.

All financial transactions on bt221 are denominated in Bangladeshi Taka (BDT, ৳) and processed via mobile financial services (MFS) including bKash, Nagad, Rocket, and Upay. The handling of payment data on bt221 is governed by the following principles:

• bt221 does not store your MFS PIN: Your bKash, Nagad, Rocket, or Upay PIN is entered directly into your MFS provider's interface and is never transmitted to or stored by bt221's systems. bt221 receives only a transaction confirmation reference and the associated amount in BDT.
• Partial account number storage: bt221 stores only the last 4 digits of your registered MFS account number for the purpose of matching withdrawals to your verified payment account. The full MFS account number is not retained on bt221 servers.
• Transaction audit trail: A complete record of all deposits and withdrawals processed on your bt221 account — including amounts in BDT, timestamps in Bangladesh Standard Time (UTC+6), and transaction reference numbers — is maintained for the duration of the applicable retention period.
• AML monitoring: bt221's compliance systems monitor financial transaction patterns for indicators of money laundering, structuring, or other financial crime. Where suspicious activity is identified, bt221 may freeze the relevant account and submit a report to appropriate authorities as required by applicable law.
• Withdrawal identity matching: bt221 requires that withdrawals be processed to the same MFS account used for deposits to prevent third-party money movements. The matching of withdrawal requests to verified identity data is a core data processing activity under this policy.

bt221 will never contact you by phone, email, or messaging application to request your bKash PIN, Nagad PIN, or any other MFS credential. Any communication claiming to be from bt221 and requesting payment credentials should be treated as fraudulent. Report any such contact immediately to [email protected].

As a bt221 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account username. bt221 will respond within 30 days of receiving your request.

• Right to access: You have the right to request a copy of all personal data bt221 holds about you, including your registration information, account activity records, transaction history in BDT, and communications data.
• Right to rectification: If any personal data bt221 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account details (such as email address and contact number) directly within your bt221 account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Please note that bt221 may be required to retain certain data for the minimum retention period described in Section 5 to fulfil legal obligations.
• Right to restriction of processing: You have the right to request that bt221 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing pending verification of whether bt221's legitimate interests override your objection.
• Right to data portability: You have the right to request an export of the personal data you have provided to bt221 in a structured, commonly used, machine-readable format (such as CSV or JSON), so that you can transfer it to another service if you choose.
• Right to withdraw consent: Where bt221 processes your personal data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before your withdrawal. Opt-out instructions are included in every marketing communication sent by bt221.
• Right to object to processing: You have the right to object to bt221 processing your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring. bt221 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

bt221 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable laws, or changes to the services we offer. Any material changes to this policy will be communicated to registered players via an on-platform notification or by email to the address registered on the account, at least 7 days before the changes take effect.

The current version of this Privacy Policy is always available at bt221.net/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made. We encourage you to review this policy periodically, particularly before making significant transactions on the platform.

Your continued use of bt221 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this policy, you should cease using the platform and contact [email protected] to initiate account closure.

Data controller contact: For all privacy-related queries, data rights requests, or concerns about how bt221 handles your personal data, please contact the bt221 data team at:

• Email: [email protected] — Subject line: "Privacy Query" or "Data Rights Request"
• Response time: within 30 days for data rights requests; within 5 business days for general privacy queries
• Language: English (our support team handles all privacy queries in English)