222db Privacy Policy — How We Collect, Use, and Protect Your Personal Data

01 Introduction

222db operates https://222db.bio as an internationally licensed online casino and sports betting platform designed specifically for players in Bangladesh. We are committed to handling your personal information responsibly, transparently, and in a manner consistent with applicable data protection principles.

This Privacy Policy sets out in plain and precise language what personal data 222db collects from you, the purposes for which that data is used, the legal basis on which we rely for each processing activity, how long we retain data, and the rights available to you as an individual. It also explains how we protect your data technically and organisationally, and how to contact us if you have any questions or wish to exercise your rights.

This Policy should be read alongside the 222db Terms & Conditions and the Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with 222db. In the event of any conflict between this Privacy Policy and any other 222db document, this Policy shall prevail with respect to data protection matters.

We may update this Privacy Policy from time to time. The effective date at the top of this document will always reflect the date of the most recent revision. Where changes are material, we will provide notice via the platform or by email to your registered address before the changes take effect.

02 Data We Collect

222db collects personal data in three primary ways: data you provide directly when registering or using the platform, data generated automatically through your interaction with the platform, and data received from third parties such as payment processors and identity verification services.

Data You Provide Directly

When you register a 222db account, make a deposit or withdrawal, contact support, or use any platform service, you may provide the following categories of personal data:

Data Generated Automatically

When you access and use the 222db platform, certain data is collected automatically through technical systems. This includes:

• Device information: device type, operating system, browser type and version, screen resolution
• Network information: IP address, internet service provider, approximate geographic location derived from IP
• Session data: login timestamps, session duration, pages visited, features used, game rounds played
• Transaction logs: deposit amounts, withdrawal requests, wager amounts, game outcomes (for fairness auditing)
• Cookie and tracking data: session cookies, preference cookies, and first-party analytics identifiers (see Section 6)

Data Received from Third Parties

222db may receive personal data about you from the following third-party sources where necessary to operate the platform and meet legal obligations:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard
• Identity verification providers: Results of automated identity and document verification checks performed on NID or passport data you submit
• Fraud and AML screening services: Risk scores and watchlist screening results used to comply with anti-money laundering obligations
• Game providers: Game session outcome logs provided by Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi for fairness auditing and dispute resolution purposes

03 How We Use Your Data

222db uses the personal data we collect for the following documented purposes. We do not use your data for any purpose not described in this Policy without first obtaining your consent or updating this Policy to reflect the new purpose.

Account Management and Service Delivery

We use your identity, contact, and financial data to create and maintain your 222db account, process deposits and withdrawals, authenticate your identity on each login, deliver game and betting services, and communicate important account notifications such as withdrawal confirmations, security alerts, and policy updates.

Identity Verification and Legal Compliance

We use identity and verification document data to confirm that you meet the 21+ age requirement, to comply with Know Your Customer (KYC) obligations, and to fulfil our Anti-Money Laundering (AML) programme requirements. This processing is mandatory — without it, we cannot lawfully allow you to deposit funds or access real-money gaming services.

Payment Processing

We share the minimum necessary financial data with our payment partners (bKash, Nagad, Rocket, Upay, and our banking partners) to process your deposits and withdrawals. Payment data is not stored on 222db servers beyond what is required for transaction records and dispute resolution. Full card numbers are never stored by 222db.

Responsible Gaming Monitoring

We analyse session data, wagering patterns, and account activity to identify indicators of problem gambling behaviour. This analysis enables the platform to surface responsible gaming prompts and, where necessary, proactively contact players who may benefit from support. This processing is carried out in your legitimate interest and the public interest of safer gambling.

Platform Security and Fraud Prevention

We use device data, IP addresses, session logs, and behavioural analytics to detect and prevent fraud, account takeovers, bonus abuse, collusion, and money laundering. Automated systems flag anomalous activity for human review by the 222db security team.

Analytics and Platform Improvement

We use anonymised and aggregated session and usage data to analyse platform performance, identify technical issues, and improve the user experience. This analytics processing does not identify you personally and is carried out on aggregated datasets only.

Marketing and Promotions

With your explicit consent, we may use your contact data to send you personalised promotional offers, bonus notifications, and news about new games or features at 222db. You may withdraw consent for marketing communications at any time by updating your preferences in the account settings panel or by contacting [email protected]. Withdrawal of marketing consent does not affect the processing of your data for account management or legal compliance purposes.

04 Legal Basis for Processing

222db processes personal data on the basis of one or more of the following legal grounds, depending on the nature and purpose of each processing activity:

• Contractual necessity: Processing required to provide the services you have requested when creating a 222db account and accepting the Terms & Conditions — for example, processing deposits, settling bets, and managing your account.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, age verification obligations, and record-keeping mandates imposed by our licensing framework.
• Legitimate interests: Processing carried out to pursue 222db's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics.
• Consent: Processing carried out only where you have given freely-given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to your account.

05 Data Sharing & Third Parties

222db does not sell your personal data. We share data only where strictly necessary, with the categories of recipients described below, and only to the extent required for each stated purpose.

Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction and identity data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these partners is contractually obligated to handle your data in accordance with applicable financial data protection standards.

Identity and KYC Verification Providers

222db uses third-party identity verification and document authentication services to process the NID, passport, and address documents you submit during account verification. These providers process verification data on our behalf and are prohibited from using the data for any purpose other than completing the verification task.

Game Content Providers

Game session data — including bet amounts, game outcomes, and round identifiers — is shared with the relevant game provider (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, or Ezugi) for the purposes of game integrity auditing, dispute resolution, and RTP reporting. Game providers do not receive your name, contact details, or financial data.

Legal and Regulatory Authorities

222db is legally required to disclose personal data to relevant authorities where mandated by law, court order, or our licensing obligations. This includes reporting suspicious transactions to financial intelligence units as required by AML regulations. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that 222db undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material changes to the terms governing your data via a notice on the platform or by email before the transfer takes effect.

06 Cookies & Tracking

222db uses cookies and similar technologies exclusively to operate the platform correctly, maintain your session, remember your preferences, and generate first-party analytics data. We do not use third-party advertising cookies or cross-site tracking technologies.

Categories of Cookies Used

You may manage your cookie preferences at any time via the account settings panel. Disabling functional or analytics cookies will not prevent you from accessing core platform features, though some preferences may not be saved between sessions.

222db does not deploy any pixel tags, browser fingerprinting scripts, or supercookies. Session cookies are automatically deleted when you close your browser. Persistent functional cookies have a maximum lifetime of 12 months.

07 Data Retention

222db retains personal data only for as long as it is necessary for its stated purpose or as required by applicable law. The following retention periods apply to the principal categories of data we hold:

Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised. Where data must be retained beyond normal periods due to an ongoing legal dispute or regulatory investigation, it will be held in restricted access storage until the matter is resolved.

08 Your Rights

As an individual whose personal data is processed by 222db, you hold the following rights. These rights may be subject to certain limitations where legal obligations or legitimate interests override individual privacy claims, but 222db will always process your request in good faith and explain clearly where a limitation applies.

• Right of Access: You may request a copy of all personal data 222db holds about you, along with information on how it is used, who it is shared with, and how long it is retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that certain data must be retained for legal compliance and cannot be deleted on request.
• Right to Restriction: You may request that 222db restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. 222db will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect processing that occurred prior to withdrawal.

How to Submit a Data Rights Request

To exercise any of the above rights, please contact the 222db data support team at [email protected] with the subject line "Data Rights Request" and a description of your specific request. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by an additional 30 days, and you will be notified of the extension and the reason for it.

To protect your privacy, we will verify your identity before processing any data rights request. You will be asked to confirm your account username and, where the request involves sensitive data, to provide a copy of a valid identity document.

09 Data Security

222db employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following technical and organisational measures are in place:

• Encryption in transit: All data exchanged between your browser or app and the 222db platform is encrypted using TLS 1.3. Connections using older, insecure protocols are rejected.
• Encryption at rest: All personal data stored in 222db databases is encrypted using AES-256. Encryption keys are managed through a dedicated key management system with restricted access.
• Access control: Access to personal data is restricted to 222db personnel who require it to perform their specific job functions. All access is logged, and privileged access is subject to multi-factor authentication and quarterly review.
• Network security: The 222db platform is hosted behind enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation infrastructure. Regular penetration testing is conducted by independent security specialists.
• Vulnerability management: The 222db development team follows a secure software development lifecycle (SDLC) and monitors for known vulnerabilities in all platform dependencies.
• Incident response: 222db maintains a documented data breach response procedure. In the event of a breach that affects your personal data, you will be notified within the timeframe required by applicable law, along with a description of the incident, the data affected, and the steps taken to mitigate risk.

While 222db takes every reasonable precaution to secure your data, no platform can guarantee absolute security against all possible threats. You are responsible for keeping your own account credentials secure and for notifying 222db promptly if you suspect unauthorised access to your account.

10 Children & Minors

The 222db platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. Age verification is applied at the point of registration, and additional identity documents may be requested at any stage to confirm age compliance.

If 222db becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be closed immediately, all associated data will be deleted in accordance with our data lifecycle procedures, and any deposits received will be handled in accordance with applicable responsible gaming regulations.

If you are a parent or guardian and believe that a minor in your care has registered a 222db account, please contact us immediately at [email protected]. We will investigate and act promptly.

11 International Data Transfers

222db's primary platform infrastructure is hosted in data centres serving the Asia-Pacific region. However, certain service providers we use — including identity verification partners and game content providers — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, 222db ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that described in this Policy.

Safeguards applied to international data transfers include: contractual data processing agreements incorporating standard data protection clauses; data minimisation requirements limiting the scope of data transferred to what is strictly necessary for the service; and supplier security assessments conducted prior to engaging new third-party processors.

By creating a 222db account and using our services, you acknowledge that your data may be transferred to and processed in jurisdictions other than Bangladesh, subject to the safeguards described above.

12 Policy Updates

222db may update this Privacy Policy periodically to reflect changes in our data processing activities, applicable law, or our platform services. The effective date shown at the top of this document will always reflect the date of the most recent revision.

Where updates are material — meaning they significantly change how we collect, use, or share your personal data, or affect your rights — we will notify you in advance via a notice displayed prominently on the 222db platform and, where you have provided a verified email address, by email to your registered account. The notification will describe the nature of the changes and the date on which they will take effect, giving you the opportunity to review the updated Policy before it applies to you.

Your continued use of the 222db platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updates, you must cease using the platform and contact [email protected] to request account closure.

13 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, need to report a suspected data breach, or want to raise a concern about how 222db handles your personal information, please contact us through any of the following channels:

• Live Chat: Available 24/7 from within your 222db account dashboard. Mention "Privacy" or "Data Request" at the start of your message to be directed to the appropriate team.
• Email: [email protected] — please include "Privacy Policy" or "Data Rights Request" in the subject line. Responses are typically provided within 48 hours during Bangladesh Standard Time (UTC+6) business hours.

Please note that email addresses on the 222db website are displayed as plain text and are not clickable links. Copy the address manually into your email client to send a message.

When contacting us about a data rights request, please provide your account username and a brief description of your request. We will verify your identity before actioning any request that involves accessing, modifying, or deleting personal data.