22bd2 Privacy Policy

1 Data We Collect

22bd2 collects personal data through multiple touchpoints — at registration, during account verification, through your ongoing use of the platform, and via automated technical means. We collect only the data that is necessary and proportionate to the purpose for which it is processed.

Data You Provide Directly

When you create a 22bd2 account, complete identity verification, contact our support team, or participate in a promotion, you provide us with information that may include:

• Identity data: Full legal name, date of birth, gender, and nationality as it appears on your government-issued identification document.
• Contact data: Email address, Bangladeshi mobile phone number, and residential address (district, city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Identity verification documents: National Identity Card (NID), passport, or driver's licence submitted during the KYC process.
• Financial data: Mobile money account numbers (bKash, Nagad, Rocket, Upay) and bank account details used for deposits and withdrawals. We do not store full payment card numbers.
• Communications data: The content of any messages, emails, or live-chat conversations you initiate with 22bd2 support staff.
• Responsible gaming data: Self-exclusion requests, deposit limits, cool-off periods, and any other voluntary restrictions you apply to your account.

Data Collected Automatically

When you access and interact with the 22bd2 platform, our systems automatically collect certain technical and behavioural data, including:

• Device and access data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games launched, session duration, betting history, wagering patterns, deposit and withdrawal history, and bonus claim records.
• Geolocation data: General geographic location derived from IP address (country and region level). We do not collect precise GPS coordinates.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in the Cookies section below.

2 How We Use Your Data

22bd2 processes your personal data on one or more of the following legal bases: (a) performance of the contract between you and 22bd2; (b) compliance with a legal obligation; (c) our legitimate interests in operating a safe, fair, and commercially viable platform; and (d) your explicit consent, where we have requested it. The table below maps each primary use case to its legal basis.

Marketing Communications

22bd2 may send you promotional communications about new games, bonus offers, cricket betting markets (BPL, IPL, T20 World Cup), seasonal promotions (Eid, Pohela Boishakh), and platform updates. We will only send marketing messages if you have opted in at registration or subsequently updated your communication preferences. You can withdraw consent at any time by updating your account notification settings or by emailing [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform.

Automated Decision-Making

22bd2 uses automated systems to detect patterns associated with fraud, bonus abuse, money laundering, and problem gambling. Where an automated check flags an account for review, a human member of the compliance team will assess the case before any significant action — such as account suspension or withdrawal hold — is taken. You have the right to request human review of any decision that materially affects your account.

3 Data Sharing & Third Parties

22bd2 does not sell your personal data to any third party, and we do not share your data for third-party marketing purposes without your explicit consent. We share data only in the circumstances described below, and only with parties that are bound by appropriate data protection obligations.

Game Providers

To deliver casino games and sports betting markets, 22bd2 works with game studios and data providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive limited session data (such as a pseudonymous player token, bet amount, and game outcome) to facilitate gameplay and resolve disputes. They do not receive your full name, NID, or payment details.

Payment Processors

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, 22bd2 must share the transaction details and account identifiers required by each payment network. This data is transmitted over encrypted channels and is governed by each provider's own data handling terms.

Identity Verification Partners

22bd2 uses third-party KYC and identity verification services to validate the documents you submit. These partners process your identity data under strict contractual obligations and are prohibited from using it for any purpose other than completing the verification requested by 22bd2.

Legal and Regulatory Disclosure

22bd2 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where we are legally required or compelled to do so. We will notify affected players of any disclosure request where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of 22bd2's business, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be processed by the new entity.

4 Cookies & Tracking Technologies

The 22bd2 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, to detect fraud, and to understand how players interact with the site so we can improve the experience over time.

Types of Cookies We Use

Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, and set preferences for future cookies. Please note that disabling essential or anti-fraud cookies may prevent you from logging in to the 22bd2 platform or accessing certain features. Instructions for managing cookies in common browsers — Chrome, Firefox, Safari, and Edge — are available in each browser's official help documentation.

Third-Party Analytics

Where 22bd2 uses third-party analytics tools, those tools are configured to anonymise IP addresses and are prohibited from using 22bd2 player data for their own advertising or cross-site tracking purposes. We conduct periodic reviews of all third-party scripts active on the 22bd2 domain.

5 Data Retention

22bd2 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The retention periods below reflect the minimum requirements imposed by anti-money laundering regulations and responsible gaming obligations applicable in our operating jurisdiction.

Once a retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that cannot be linked back to any individual may be retained indefinitely for statistical analysis and platform planning purposes.

6 Data Security Measures

22bd2 implements a layered, defence-in-depth approach to data security. The platform is built on infrastructure that applies technical and organisational safeguards commensurate with the sensitivity of the data we process. Key security measures include:

• Transport Layer Security (TLS): All communications between your browser or mobile device and 22bd2 servers are encrypted using TLS 1.2 or higher. Our domain enforces HTTPS at all times; plain-text HTTP connections are rejected.
• Encryption at rest: Sensitive data fields — including identity document files, payment account references, and account credentials — are encrypted using AES-256 at rest within our database infrastructure.
• Access controls: Access to production systems and player data is restricted to authorised 22bd2 personnel on a strict need-to-know basis. Multi-factor authentication is mandatory for all staff accessing data systems.
• Password hashing: Player account passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm before being written to storage.
• Fraud detection systems: Real-time monitoring systems analyse login patterns, device fingerprints, and transaction behaviour to identify and block suspicious activity before it causes harm.
• Penetration testing: 22bd2 conducts periodic security assessments, including vulnerability scanning and penetration testing by qualified security professionals, to identify and remediate weaknesses.
• Incident response: 22bd2 maintains a documented data breach response plan. In the event of a breach that poses a risk to player rights, affected players will be notified without undue delay and in accordance with applicable notification obligations.

While 22bd2 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, enabling OTP two-factor authentication, and never sharing your credentials with anyone.

7 Your Privacy Rights

As a 22bd2 player, you have a set of rights in relation to the personal data we hold about you. These rights are subject to certain conditions and limitations — for example, we may need to retain data beyond a deletion request where a legal retention obligation applies. To exercise any right listed below, contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered username and email address for identification purposes.

• Right of access: You may request a copy of the personal data 22bd2 holds about you (a Subject Access Request). We will provide a structured summary of your data within 30 days of a verified request.
• Right to rectification: If any data we hold about you is inaccurate or incomplete, you have the right to request correction. Basic profile information can be updated directly in your account settings; identity document corrections require you to resubmit verified documents to support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will erase data that is no longer necessary for its original purpose, subject to overriding legal retention obligations — particularly AML/CTF requirements that mandate five-year post-closure retention.
• Right to restriction of processing: In certain circumstances (e.g., while a data accuracy dispute is being resolved), you may request that we restrict processing of your data to storage only.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to object: You have the right to object to processing of your data where it is based on our legitimate interests, including profiling for fraud detection or responsible gaming monitoring. We will assess and respond to each objection on its merits.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to human review: You have the right to request that a human member of our compliance team reviews any significant automated decision affecting your account.

22bd2 will respond to all verified privacy rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, with notification to you of the extension and its reason. We do not charge a fee for processing privacy rights requests made in good faith.

8 Contact & Policy Updates

How to Contact Us About Privacy

For any privacy-related enquiry, data rights request, or concern about how 22bd2 handles your personal information, please contact our data team at:

Email: [email protected]
Subject line: Privacy Enquiry
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6) for general enquiries; within 30 days for formal data rights requests.

When contacting us about a privacy matter, please include your registered email address and 22bd2 username so that we can identify your account and respond accurately. Do not include sensitive documents in your initial contact email — our team will advise you of the secure submission method if documents are required.

Updates to This Privacy Policy

22bd2 reviews this Privacy Policy at least annually and whenever significant changes occur to our data processing activities, applicable law, or the services we offer. When we make material changes, we will notify registered players by email to the address on file and by displaying a prominent notice on the 22bd2 website at least 14 days before the changes take effect.

The version of this Privacy Policy published on the 22bd2 website at any given time is the current, binding version. We recommend bookmarking this page and reviewing it periodically. The "Last Reviewed" date at the top of this document will always reflect the most recent revision.

If you disagree with any material update to this Privacy Policy, you may close your account before the changes take effect by contacting [email protected]. Continued use of the 22bd2 platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.