Privacy Policy for 222dd

1. Introduction

222dd ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at https://222dd.io. This Privacy Policy sets out in clear, formal terms the categories of personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, the security measures we apply to protect it, and the rights available to you as a data subject.

This policy applies to all individuals who access or use the 222dd platform, including registered players, visitors who browse without registering, and individuals who contact our support team. It should be read in conjunction with our Terms & Conditions, which govern the broader contractual relationship between you and 222dd.

2. Data We Collect

222dd collects personal data that falls into the following categories. We collect only what is reasonably necessary to deliver our services, fulfil our legal obligations, and maintain a safe and fair gaming environment.

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth for age verification purposes (players must be 21 years of age or older).
• Email address used for account communication, notifications, and password recovery.
• Mobile phone number used for SMS verification, two-factor authentication, and account alerts.
• Residential address which may be requested as part of enhanced identity verification for larger withdrawal amounts.

2.2 Financial & Payment Data

• Mobile Financial Service (MFS) account identifiers associated with bKash, Nagad, Rocket, Upay, or SureCash used for deposits and withdrawals.
• Partial card details (last four digits, card type, expiry date) for Visa or Mastercard transactions. Full card numbers are not stored by 222dd — they are processed directly by our payment service providers under their own security standards.
• Transaction history including deposit amounts, withdrawal requests, bonus credits, and wagering activity.

2.3 Technical & Usage Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, and browser version.
• Session timestamps, pages visited, and features used within the 222dd platform.
• Game history, betting patterns, and session duration data used for responsible gaming monitoring.
• Cookies and similar tracking technologies as described in Section 7.

2.4 Verification Documents

• Copies of government-issued identification (National ID card, passport) submitted during KYC verification.
• Proof of address documents such as a recent utility bill or bank statement where required.
• Selfie or live photo verification where requested to confirm document ownership.

3. How We Collect Data

222dd collects personal data through the following channels:

• Direct submission: Information you provide when creating an account, updating your profile, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data gathered automatically as you interact with the platform, including through cookies, server logs, and session tracking tools.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, and payment confirmation data received from MFS and card-payment processors in connection with your transactions.

4. Legal Basis for Processing

222dd processes your personal data on one or more of the following legal grounds, depending on the specific purpose of each processing activity:

5. How We Use Your Data

222dd uses the personal data it collects for the following purposes:

• To create, verify, and administer your 222dd account, including age and identity verification prior to activation.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, and other supported payment methods.
• To provide access to casino games, sports betting markets, live dealer tables, and all other platform features.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as outlined in our Terms & Conditions.
• To fulfil responsible gaming obligations, including monitoring for patterns of problem gambling behaviour and applying account restrictions where warranted.
• To communicate essential account information such as deposit confirmations, withdrawal updates, security alerts, and policy changes.
• To send promotional communications, bonus offers, and product updates where you have given explicit consent to receive such messages.
• To personalise the content and features displayed to you based on your preferences, game history, and usage patterns.
• To improve the performance, reliability, and security of the 222dd platform through aggregated analytics and internal testing.

6. Data Sharing & Disclosure

222dd does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

6.1 Payment Service Providers

To process deposits and withdrawals, 222dd shares necessary transaction data with MFS providers (bKash, Nagad, Rocket, Upay, SureCash) and card payment networks (Visa, Mastercard). These providers receive only the data required to complete or verify a specific transaction and are bound by their own privacy and security standards.

6.2 Identity Verification Providers

To fulfil KYC obligations, 222dd may share identity documents and biometric data with contracted verification service providers. These providers act as data processors under a binding data processing agreement and are not permitted to use your data for any purpose beyond the verification service they provide to 222dd.

6.3 Legal & Regulatory Disclosure

222dd may disclose personal data where required by applicable law, court order, or lawful request from a competent authority. We will endeavour to notify affected players of any such disclosure request where we are legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 222dd's business, your personal data may be transferred to the acquiring entity. We will provide advance notice of any such transfer and ensure that the recipient is bound by privacy obligations no less protective than those set out in this policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 222dd platform. They allow the platform to remember your session state, preferences, and activity between page loads and across return visits.

7.2 Categories of Cookies We Use

222dd does not use third-party advertising or retargeting cookies. You may disable non-essential cookies at any time through your browser settings. Disabling essential cookies may prevent you from logging in or using core platform features.

8. Data Retention

222dd retains personal data for as long as your account remains active and for a period of five (5) years following account closure, in order to fulfil legal, regulatory, and audit obligations. Transaction records and KYC documents may be retained for a longer period where required by applicable anti-money-laundering regulations.

Technical and usage data that does not form part of a formal audit trail is retained for a maximum of 24 months from the date of collection, after which it is permanently deleted or irreversibly anonymised.

Where you have provided consent for marketing communications, your marketing preferences and contact details are retained until you withdraw that consent, at which point your details are removed from all active marketing lists within 10 business days.

9. Data Security

222dd applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 222dd servers.
• One-way cryptographic hashing for all stored passwords — plain-text passwords are never retained.
• Role-based access controls limiting access to personal data to only those employees and contractors who require it to perform their duties.
• Regular security audits and vulnerability assessments conducted by qualified security personnel.
• Anomaly detection systems that flag unusual account activity, login attempts from unrecognised devices, and suspicious transaction patterns.
• Secure data storage with automated backup procedures and disaster recovery protocols.

No method of electronic transmission or storage is completely secure. While 222dd takes all reasonable precautions, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 222dd will notify affected players without undue delay.

10. Your Rights

As a data subject, you hold the following rights in relation to the personal data that 222dd holds about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your 222dd account.

• Right of access: You may request a copy of the personal data 222dd holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that 222dd limits the processing of your personal data in certain circumstances, such as while a dispute regarding accuracy is resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to 222dd, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your interests, rights, or freedoms override those of 222dd.

222dd will respond to all valid data subject requests within 30 calendar days of receipt. Where a request is complex or multiple, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

11. Children's Privacy

The 222dd platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has created an account or provided personal data to 222dd without your knowledge, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to close the account and securely delete all associated personal data.

222dd employs age verification procedures during registration and reserves the right to request documentary proof of age at any time. Accounts where age cannot be satisfactorily verified will be suspended pending resolution.

12. Third-Party Links

The 222dd platform does not contain links to third-party websites for advertising or affiliate purposes. Any game content delivered within the platform by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) operates within an embedded environment governed by the studio's own data handling practices for game-level telemetry. 222dd is not responsible for the privacy practices of these game providers in relation to anonymised gameplay data they may collect independently.

13. Marketing Communications

222dd may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, sports betting markets, and special events where you have given explicit consent to receive such communications. Your consent is collected at the time of account registration via a clearly labelled opt-in checkbox.

You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by following the unsubscribe instructions included in any marketing email or SMS. Following receipt of a valid opt-out request, your details will be removed from active marketing lists within 10 business days. Opting out of marketing will not affect the delivery of essential transactional communications such as deposit confirmations and security alerts.

14. International Data Transfers

222dd primarily serves players in Bangladesh and stores personal data on servers located within secure data centre facilities. In limited circumstances, personal data may be transferred to or processed by service providers located outside Bangladesh — for example, our KYC verification partner or cloud infrastructure provider. Where such transfers occur, 222dd ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this policy.

By using the 222dd platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh, subject to the safeguards described above.

15. Policy Updates

222dd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to our services. The effective date displayed at the top of this page indicates when the current version came into force.

Where material changes are made to this policy, registered players will be notified via the email address associated with their account at least 7 days before the updated policy takes effect. Continued use of the 222dd platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 222dd holds about you, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 calendar days.

Please include your registered account username and a clear description of your request or concern in all correspondence. For requests relating to data access, rectification, or erasure, we may ask you to complete a brief identity verification step before processing your request in order to protect your data from unauthorised access.