ba332 Privacy Policy — Your Data, Protected

01 Introduction

This Privacy Policy ("Policy") describes how ba332 ("we", "us", "the Platform") collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the ba332 website and services. This Policy applies to all personal data processed by ba332 in connection with the provision of its online casino, sports betting, and associated services to players based in Bangladesh.

By registering an account with ba332, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which are available on the ba332 website.

02 Personal Data We Collect

ba332 collects several categories of personal data from players. The exact data collected depends on how you interact with the platform and the services you use. The following table summarises the categories of personal data we process:

ba332 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where strictly necessary for responsible gaming purposes (for example, where a player discloses a gambling-related health concern to our support team).

03 How We Use Your Personal Data

ba332 processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account creation and management — to set up, maintain, and administer your ba332 player account, including processing deposits, withdrawals, and gaming activity.
• Identity and age verification — to confirm that you meet the eligibility criteria (21+ years of age) and to perform KYC verification in compliance with applicable anti-money laundering requirements.
• Service provision and improvement — to provide the games, sportsbook, live casino, crash games, and payment services that constitute the ba332 platform, and to continuously improve those services based on usage patterns and player feedback.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, collusion, and other prohibited activities that may harm players or the integrity of the platform.
• Responsible gaming — to monitor gaming behaviour for indicators of potential problem gambling, to administer self-exclusion requests and deposit limits, and to contact players where we have genuine concerns about their welfare.
• Marketing and promotions — where you have provided consent, to send you information about ba332 bonuses, promotions, and new game releases via your registered mobile number or email address. You may withdraw this consent at any time by contacting support.

04 Legal Basis for Processing

ba332 processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity — processing required to perform the contract between you and ba332 (i.e., the Terms and Conditions you accepted at registration), including account setup, payment processing, and game provision.
• Legal obligation — processing necessary to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering checks, and cooperation with lawful requests from regulatory or law enforcement authorities.
• Legitimate interests — processing carried out in the legitimate interests of ba332 or its players, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your rights and freedoms.
• Consent — where you have specifically agreed to a particular use of your data, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Cookies and Tracking Technologies

ba332 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session state, and analyse site usage patterns. The following categories of cookies are used on the ba332 website:

You can manage your cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent you from using the ba332 platform. For most mobile browsers (Chrome for Android, Safari for iOS), cookie management is accessible under Settings → Privacy. ba332 does not currently use third-party advertising or tracking cookies.

06 Data Sharing and Disclosure

ba332 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only with parties who are contractually bound to process it in accordance with applicable data protection standards:

• Payment service providers — bKash, Nagad, Rocket, and Upay receive the minimum personal data necessary to process your deposit and withdrawal transactions (typically your registered mobile number and transaction amount). These providers operate under their own privacy policies and applicable Bangladeshi financial regulations.
• Game content providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other certified studios may receive technical session identifiers (not personally identifiable information) to facilitate game delivery and RNG audit trails.
• Regulatory and law enforcement authorities — ba332 will disclose personal data to competent regulatory, tax, or law enforcement authorities where required to do so by law, court order, or other binding legal instrument.
• Technology and hosting providers — third-party infrastructure providers (cloud hosting, database services, CDN) who process data on ba332's behalf under strict data processing agreements and are not permitted to use the data for their own purposes.

07 Data Security

ba332 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the ba332 servers, encryption of sensitive data fields at rest in our database, role-based access controls that restrict internal access to personal data on a need-to-know basis, regular security assessments of the platform infrastructure, and secure disposal procedures for data that is no longer required.

Despite these measures, no security system is impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ba332 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You can help protect your account by using a strong, unique password and by never sharing your OTP codes or login credentials with any third party.

08 Data Retention

ba332 retains your personal data for as long as your player account remains active and for a period thereafter as required by applicable law or legitimate business need. Specifically: account and identity data is retained for a minimum of five years following account closure to satisfy anti-money laundering record-keeping requirements; transaction records are retained for a minimum of five years; gaming history records are retained for three years from the date of the relevant session; marketing consent records are retained until you withdraw consent and for one year thereafter.

When personal data is no longer required for the purposes for which it was collected and the applicable retention period has expired, ba332 will securely delete or anonymise that data. Where anonymisation is not technically feasible, the data will be pseudonymised and access restricted to the minimum necessary personnel.

09 Your Data Rights

As a player whose personal data is processed by ba332, you have the following rights in respect of your personal data. To exercise any of these rights, contact ba332 at [email protected] with your registered mobile number and a description of your request. ba332 will respond within 30 days of receipt of a valid request:

• Right of access — you may request a copy of the personal data ba332 holds about you, together with information about how it is processed.
• Right to rectification — you may request that ba332 correct any inaccurate personal data held about you, or complete any incomplete data.
• Right to erasure — in certain circumstances, you may request the deletion of your personal data. This right is subject to ba332's legal obligations to retain data (for example, anti-money laundering record-keeping requirements may override an erasure request).
• Right to restrict processing — you may request that ba332 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

10 Third-Party Services and Links

The ba332 platform integrates with third-party services including payment processors (bKash, Nagad, Rocket, Upay) and certified game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming). These third parties operate under their own privacy policies and data protection frameworks. ba332 is not responsible for the privacy practices of these providers, though we take reasonable steps to ensure that any third party with whom we share personal data is subject to appropriate data protection obligations.

ba332 does not currently maintain any social media pages, external blog, or affiliate programme through which third-party tracking might be introduced to the platform. Should this change in future, this Policy will be updated accordingly and players will be notified.

11 Children and Minors

ba332 is strictly an adults-only platform. We do not knowingly collect, store, or process the personal data of any individual under the age of 21. If ba332 discovers or has reasonable grounds to believe that personal data has been collected from an individual under 21 years of age, that data will be immediately deleted and the associated account will be closed. Parents or guardians who believe that a minor has registered with ba332 should contact us immediately at [email protected] so that we can take appropriate action without delay.

12 Changes to This Privacy Policy

ba332 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — we will endeavour to notify registered players via the platform notification system or by message to the registered mobile number, with a minimum of seven days' notice before the changes take effect.

The "Last Updated" date at the top of this page will reflect the date on which the most recent version of this Policy came into effect. Your continued use of the ba332 platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you must stop using the platform and may request account closure by contacting [email protected].