222bdt Privacy Policy

1 Data Controller

1.1 Identity. For the purposes of this Privacy Policy, the data controller responsible for the personal data of all 222bdt members is 222bdt, operating the online platform at https://222bdt.biz. As data controller, 222bdt determines the purposes and means by which your personal data is processed.

1.2 Contact. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact the 222bdt Data Support Team via the 24/7 live chat available within the platform, or by email at [email protected] (plain text — not a clickable link). Enquiries relating to data rights will be acknowledged within 5 business days and resolved within 30 calendar days where technically and legally feasible.

2 Data We Collect

2.1 Registration Data. When you create a 222bdt account, we collect the personal information you provide during the registration process. This includes:

• Full legal name — as it appears on your national identity card (NID) or passport.
• Date of birth — to verify that you meet the 18+ age requirement.
• Residential address — including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Mobile phone number — registered to your bKash, Nagad, Rocket, or Upay account, used for payment processing and account notifications.
• Username and encrypted password — used to authenticate your 222bdt login.
• Email address (where provided) — used for account communications and promotional updates where you have opted in.

2.2 Identity Verification Data. At the time of first significant withdrawal or upon 222bdt's request, we may collect copies of identity documents such as your National Identity Card (NID), passport, or a recent utility bill or bank statement as proof of address. These documents are used solely for Know Your Customer (KYC) verification and anti-money-laundering (AML) compliance.

2.3 Financial Data. 222bdt records all deposit and withdrawal transactions associated with your account, including the amount in Bangladeshi Taka (৳), the payment method used (e.g., bKash, Nagad, Rocket), the date and time of the transaction (Bangladesh Standard Time, UTC+6), and the transaction reference number issued by the payment provider. Full mobile wallet account numbers are not stored by 222bdt beyond the last four digits used for display purposes.

2.4 Gaming Activity Data. We record all betting and gaming activity conducted through your 222bdt account, including bet amounts, game titles, outcomes, session start and end times, and running balance history. This data is used to calculate payouts, resolve disputes, and monitor for responsible gaming concerns.

2.5 Technical Data. When you access 222bdt, our servers and third-party analytics tools automatically collect certain technical information, including your IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, referring URL, and pages visited within the 222bdt platform. This data is used for platform optimisation, security monitoring, and fraud detection.

2.6 Communications Data. If you contact 222bdt support via live chat, email, or WhatsApp, we retain records of those communications including the content of messages, timestamps, and any attachments shared. These records allow us to track issue resolution and maintain service quality.

3 How We Collect Data

222bdt collects personal data through the following channels:

• Directly from you — information you provide when registering, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys.
• Automatically — technical data collected via server logs, cookies, and analytics tools as you navigate the 222bdt platform. See Section 8 (Cookies & Tracking) for further details.
• From payment providers — transaction confirmation data received from bKash, Nagad, Rocket, Upay, and bank partners when a deposit or withdrawal is processed.
• From fraud prevention and identity verification services — data returned by third-party verification tools used to validate identity documents and assess account risk during onboarding or upon withdrawal request.
• From game providers — session and outcome data returned by game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe when you play their titles on the 222bdt platform.

4 How We Use Your Data

222bdt processes your personal data for the following purposes:

222bdt will not use your personal data for any purpose materially different from those listed above without first providing you with notice and, where required, obtaining your consent.

5 Legal Basis for Processing

222bdt processes your personal data on the following legal grounds:

• Performance of a contract: Processing necessary to register your account, authenticate your 222bdt login, process transactions, and fulfil your bets and withdrawals is conducted on the basis that it is required to perform the agreement between you and 222bdt.
• Legal obligation: Processing for identity verification (KYC), anti-money-laundering (AML) checks, and financial record-keeping is conducted to comply with applicable legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is conducted where 222bdt's legitimate interests in operating a safe and fair platform are not overridden by your privacy rights.
• Consent: Where 222bdt sends you marketing communications, offers, or seasonal promotions (such as BPL cricket season bonuses, Eid promotions, or Pohela Boishakh campaigns), we do so on the basis of your consent at the time of opting in. You may withdraw consent at any time by contacting support or adjusting your notification preferences in the account dashboard.

6 Sharing Your Data

6.1 Categories of Recipients. 222bdt may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the information necessary to process your deposit or withdrawal transactions.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and Play'n GO receive session identifiers and account reference data necessary to deliver game content and return outcome data to your account.
• Identity verification and fraud prevention services: Third-party KYC and AML service providers may receive your name, date of birth, address, and document images for the purpose of verifying your identity and assessing account risk.
• IT infrastructure and hosting providers: Server hosting and cloud infrastructure partners may process technical and account data as part of platform operation, subject to data processing agreements that require them to maintain appropriate security standards.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, 222bdt may disclose personal data to government authorities, law enforcement agencies, or financial intelligence units.

6.2 No Onward Sale. 222bdt does not sell, rent, licence, or transfer your personal data to any third party for their own marketing, advertising, or commercial purposes.

6.3 Business Transfers. In the event of a merger, acquisition, or transfer of all or substantially all of the assets of 222bdt, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via the platform or by email to your registered address, and the acquiring entity will be bound by the terms of this Policy.

7 Payment Data & Mobile Wallets

7.1 bKash, Nagad, Rocket & Upay. When you make a deposit or request a withdrawal using a Bangladeshi mobile financial service (MFS), the payment transaction is executed directly between you and the respective MFS provider (bKash, Nagad, Rocket, Upay). 222bdt receives a transaction confirmation containing the reference number, amount in BDT, and the last four digits of the mobile wallet number used. 222bdt does not receive or store your full mobile wallet PIN, OTP, or complete account credentials.

7.2 Internet Banking. For transactions processed via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other internet banking channels, 222bdt receives a settlement notification from the partner bank. Full bank account numbers are not stored beyond a truncated reference sufficient for dispute resolution.

7.3 Third-Party Payment Security. The security of your payment credentials on the MFS or banking side is governed by the respective provider's terms and privacy policy. 222bdt strongly recommends that members use unique PINs for their registered payment accounts and enable all available authentication features offered by their MFS provider.

8 Cookies & Tracking

8.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. The 222bdt platform uses cookies and similar technologies (such as local storage and session tokens) to maintain your login session, remember your preferences, and collect anonymised analytics data about how the platform is used.

8.2 Types of Cookies Used.

• Essential / Session cookies: Required for the platform to function correctly. These cookies maintain your authenticated session after you complete the 222bdt login process. Without them, you would be logged out after each page navigation. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and notification opt-in status. Disabling these may affect your experience.
• Analytics cookies: Collect anonymised data about which pages are visited, how long users spend on each section, and which features are most used. This data helps 222bdt improve the platform experience for all Bangladeshi members.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and unusual session behaviour.

8.3 Managing Cookies. You may manage or disable non-essential cookies through your browser or device settings. Please note that disabling cookies may impair your ability to log in, place bets, or access certain features of the 222bdt platform. Detailed browser-level cookie management instructions are available through your browser's help documentation.

9 Data Retention

9.1 Active Accounts. For as long as your 222bdt account remains active, we retain all personal data associated with your account in order to operate your account, process transactions, and provide customer support.

9.2 Post-Closure Retention. Following account closure — whether initiated by you or by 222bdt — we retain personal data for a minimum period of 5 years. This retention period reflects our obligations under anti-money-laundering regulations and financial record-keeping requirements applicable to online betting and gaming platforms operating in or serving the Bangladesh market.

9.3 Identity Verification Documents. Copies of identity documents (NID, passport, proof of address) submitted during KYC verification are retained for the same minimum 5-year post-closure period. After this period, documents are securely destroyed in accordance with our data disposal procedures.

9.4 Communications Records. Support chat logs, email correspondence, and WhatsApp message records are retained for a period of 3 years from the date of the interaction, after which they are deleted or anonymised.

9.5 Earlier Deletion. Where you submit a valid erasure request (see Section 10) and no overriding legal retention obligation applies, 222bdt will delete or anonymise the relevant data ahead of the standard retention schedule.

10 Your Rights

As a 222bdt member, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the support team via live chat or email at [email protected]. We will verify your identity before acting on any request.

• Right of Access: You may request a copy of the personal data 222bdt holds about you. We will provide this within 30 calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Name and date of birth changes require documentary evidence.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal retention obligation exists. Note that financial and AML records cannot be deleted before the minimum 5-year retention period has elapsed.
• Right to Restriction of Processing: In certain circumstances you may request that we restrict the processing of your data — for example, while a correction request is being verified.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to 222bdt directly (such as registration data and account preferences).
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications. Objections to marketing will be acted on immediately; objections to other processing will be assessed against the applicable legal basis.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

11 Data Security

11.1 Technical Measures. 222bdt implements the following technical security measures to protect your personal data:

• Transport Layer Security (TLS 1.2 / 1.3) encryption on all platform connections.
• Password hashing using industry-standard one-way algorithms — plain-text passwords are never stored.
• Firewalls, intrusion detection systems, and rate-limiting on login endpoints to resist brute-force and credential-stuffing attacks.
• Access controls that restrict staff access to personal data on a strict need-to-know basis, with all access logged and periodically reviewed.
• Regular security assessments of platform infrastructure and third-party integrations.

11.2 Organisational Measures. All 222bdt staff and contracted service providers who handle personal data are subject to confidentiality obligations. Data processing agreements are in place with all third-party processors to ensure they maintain security standards consistent with this Policy.

11.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, 222bdt will notify affected members without undue delay via the email address or mobile number registered to the affected account. We will provide details of the nature of the breach, the data involved, and the steps being taken to address it.

11.4 Your Role in Security. You are responsible for maintaining the confidentiality of your 222bdt login credentials. Use a strong, unique password for your 222bdt account, do not share your credentials with any third party, and contact support immediately if you suspect unauthorised access to your account.

12 Children's Privacy

12.1 Age Restriction. The 222bdt platform is strictly intended for individuals aged 18 years and older. We do not knowingly collect personal data from any person under the age of 18. 18+

12.2 Discovery of Underage Accounts. If 222bdt discovers or receives credible notification that personal data has been collected from a person under the age of 18, the relevant account will be immediately suspended, any balance will be held pending investigation, and all associated personal data will be deleted as soon as legally permissible. Parents or guardians who believe their child has registered for a 222bdt account are encouraged to contact support immediately at [email protected].

12.3 Parental Controls. 222bdt encourages parents and guardians to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms. For guidance on responsible gaming tools available to adult members, please visit our Responsible Gaming page.

13 Changes to This Policy

13.1 Right to Amend. 222bdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The most current version of the Policy will always be available at https://222bdt.biz/privacy-policy.

13.2 Notification of Material Changes. Where an amendment materially affects how we process your personal data — particularly with regard to the purposes of processing, the categories of data collected, or your rights — we will notify active members via a notice within the platform dashboard or by email to the registered address, at least 14 days before the change takes effect.

13.3 Continued Use. Your continued use of the 222bdt platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the changes, you must stop using the platform and may request account closure in accordance with the Terms & Conditions.

13.4 Governing Language. This Policy is written in English, which is the governing language for all interpretive purposes. Any translation produced for informational convenience shall not be binding; in the event of a discrepancy, the English text prevails.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 222bdt, please reach out through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the in-platform support widget (accessible after completing the 222bdt login).
• Email: [email protected] — plain text, not a clickable link. Target response time: within 24 hours Bangladesh Standard Time (BST, UTC+6).
• WhatsApp: Available to verified members via the account dashboard support section following login.
• Operating Hours: 24 hours a day, 7 days a week, 365 days a year in Bangladesh Standard Time (UTC+6).