Privacy Policy — 222ba

1 Data We Collect

When you register for and use a 222ba account, we collect personal data across several categories. The specific data collected depends on the features you use, the verification steps you complete, and how you interact with the platform. Below is a comprehensive overview of the categories of personal data we may collect.

Data Category	Examples	How Collected
Identity Data	Full name, date of birth, gender, National ID number	Registration form, KYC document upload
Contact Data	Email address, mobile number, residential address	Registration form, account settings
Financial Data	bKash/Nagad/Rocket number, bank account details, transaction history	Deposit/withdrawal forms, payment processor
Verification Documents	NID scan, passport copy , proof of address, selfie with ID	KYC document upload portal
Technical Data	IP address, browser type, device ID, operating system, screen resolution	Automatic collection via cookies and server logs
Behavioural Data	Pages visited, games played, session duration, bet history, login timestamps	Platform analytics and activity logging
Communication Data	Live chat transcripts, support email content, feedback submissions	Customer support interactions
Marketing Preferences	Email/SMS opt-in status, preferred promotional categories	Account settings, subscription centre

1.1 Data You Provide Directly

The majority of your personal data is provided by you directly when you create a 222ba account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or update your account preferences. This data is necessary to provide you with full access to 222ba's services and to comply with our legal obligations.

1.2 Data Collected Automatically

When you visit the 222ba platform, certain technical and behavioural data is collected automatically by our servers and analytics tools. This includes your IP address, device identifiers, browser fingerprint, and in-session activity data such as which pages you viewed and how long you spent on each. This automated collection helps us secure your account against unauthorised access and improve the overall platform experience.

2 How We Use Your Data

222ba processes your personal data only for specific, legitimate purposes. We do not use your data in any way that you would not reasonably expect, and we do not process it beyond what is necessary for the purposes described below.

2.1 Account Management and Service Delivery

We use your identity and contact data to create and manage your 222ba account, verify your identity through the KYC process, process your deposits and withdrawals, provide access to games and betting markets, and deliver customer support. This processing is necessary to fulfil our contractual obligations to you as a registered player.

2.2 Compliance and Legal Obligations

222ba is required to collect and retain certain personal data to comply with applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, fraud prevention obligations, and any lawful requests from regulatory or law enforcement authorities. Compliance processing is mandatory and cannot be opted out of — it is a precondition of holding a 222ba account.

2.3 Responsible Gaming and Player Protection

Your gameplay and financial transaction data is analysed to identify patterns that may indicate problem gambling behaviour. This processing supports our responsible gaming tools, including deposit limits, session duration alerts, cool-off periods, and self-exclusion. This is a core part of our duty of care to all players on the 222ba platform.

2.4 Fraud Prevention and Security

Technical data — including IP address, device fingerprint, and login patterns — is used to detect and prevent fraudulent account activity, duplicate account creation, unauthorised access attempts, and other security threats. Security-related processing is in 222ba's and its players' legitimate interests.

2.5 Marketing and Personalised Offers

With your consent, 222ba may use your contact details and behavioural data to send you personalised promotional offers, bonus notifications, and platform updates by email or SMS. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting support at [email protected]. Withdrawing marketing consent does not affect your ability to use the platform.

2.6 Platform Analytics and Improvement

Aggregated and anonymised behavioural data is used to analyse how players interact with the 222ba platform, identify technical issues, optimise game selection and layout, and improve overall user experience. This analytics processing uses data that has been stripped of personally identifying information wherever possible.

3 Data Sharing and Third Parties

222ba does not sell, rent, or broker your personal data to any third party. We share your data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, 222ba shares the minimum necessary financial data with our licensed payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each payment partner operates under its own privacy policy and is bound by contractual data protection obligations when processing data on 222ba's behalf.

3.2 Game Providers

Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game-play data to deliver their games correctly within the 222ba environment. These providers do not receive your full identity or financial data unless it is specifically required for the delivery of their service and disclosed to you at the time.

3.3 KYC and Identity Verification Services

222ba uses third-party KYC technology partners to validate the identity documents you submit during verification. These partners process your document data under strict contractual obligations and are not permitted to retain, use, or share that data for any purpose beyond the verification process itself.

3.4 Legal and Regulatory Disclosure

222ba may be required to disclose personal data to law enforcement authorities, financial intelligence units, or other competent regulatory bodies in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will notify you of such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that 222ba undergoes a merger, acquisition, restructuring, or sale of assets, player data held by 222ba may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address on your account prior to any such transfer, and the acquiring party will be required to honour the commitments set out in this Privacy Policy.

4 Cookies and Tracking Technologies

222ba uses cookies and similar tracking technologies to ensure the platform functions correctly, to secure your session, and to understand how players interact with the site. This section explains the types of cookies we use and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the site to recognise your device on subsequent visits, remember your preferences, and maintain your logged-in session. Cookies themselves do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies Used by 222ba

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which pages receive the most traffic, and where technical errors occur. This data is used exclusively to improve platform performance.
• Functional Cookies: Remember your account preferences such as language settings, last-visited game category, and display preferences to provide a more personalised experience on return visits.
• Fraud Prevention Cookies: Used by our security systems to identify unusual device behaviour, detect bot activity, and protect your account from unauthorised access attempts.

4.3 Managing Cookie Preferences

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies via their privacy or security settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling functional cookies will mean that your account preferences are not remembered between sessions.

4.4 Local Storage and Session Storage

In addition to cookies, 222ba uses browser local storage and session storage to maintain certain temporary application states — such as your current game session progress and in-progress deposit flow. This data is stored locally on your device only and is not transmitted to 222ba servers except where explicitly necessary for the feature in question.

5 Data Security and Retention

222ba implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures are reviewed and updated regularly to address emerging threats.

5.1 Technical Security Measures

• All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL).
• All sensitive data at rest — including identity documents and financial records — is encrypted using AES-256 encryption.
• Access to personal data is restricted on a need-to-know basis using role-based access controls. Staff with no operational need cannot access player data.
• All administrative access to production data systems requires multi-factor authentication.
• Our servers are protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing by independent security specialists.

5.2 Data Breach Response

In the unlikely event of a data breach that poses a risk to your personal data, 222ba will notify affected players by email to the address on their account as promptly as possible. The notification will describe the nature of the breach, the categories of data affected, and the steps we have taken or are taking to contain and remediate the incident.

5.3 Data Retention Periods

222ba retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for 5 years following permanent account closure.
• KYC verification documents: Retained for a minimum of 5 years following the end of the business relationship, as required by AML regulations.
• Financial transaction records: Retained for 7 years following the transaction date in accordance with financial record-keeping obligations.
• Support and communication records: Retained for 2 years following the close of the relevant support interaction.
• Marketing preference records: Retained for 3 years from the date of last interaction, or until you withdraw consent, whichever is earlier.

6 Your Privacy Rights

222ba respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact our data privacy team at [email protected] with the subject line "Privacy Rights Request". We aim to respond to all valid requests within 30 calendar days.

6.1 Right to Access

You have the right to request a copy of the personal data that 222ba holds about you. Upon a verified access request, we will provide you with a structured summary of your data, the purposes for which it is processed, and the categories of recipients to whom it has been disclosed.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Many data fields — such as your email address, phone number, and communication preferences — can be updated directly within your 222ba account settings. For identity data corrections that require re-verification (such as correcting a date of birth), please contact support directly.

6.3 Right to Erasure

In certain circumstances, you have the right to request that 222ba delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where the data has been processed unlawfully. Please note that this right is subject to overriding legal retention obligations — for example, KYC and transaction records must be retained for the periods specified in Section 5.3 regardless of an erasure request.

6.4 Right to Restrict Processing

You may request that 222ba restrict the active processing of your personal data in specific circumstances — for example, while the accuracy of your data is being contested or while an objection to processing is being considered. During a restriction period, your data will be stored but not actively used.

6.5 Right to Data Portability

Where 222ba processes your data by automated means on the basis of your consent or a contract, you have the right to receive a copy of that data in a structured, commonly used, and machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you choose.

6.6 Right to Withdraw Marketing Consent

Where processing is based on your consent — specifically, for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or by updating your preferences in the 222ba account settings panel.

7 Minors and Age Verification

222ba is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes an age declaration step, and all accounts are subject to mandatory KYC age verification before full platform access is granted.

7.1 Parental Controls and Reporting

If you are a parent or guardian and believe that a minor under your care has registered a 222ba account or submitted personal data to our platform without your knowledge or consent, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account, delete any associated personal data, and return any deposits made, subject to verification.

7.2 Our Approach to Age Verification

222ba employs a multi-step age verification process. At registration, players must declare that they are 18 or older. Prior to any withdrawal being approved, full KYC verification — including submission of a government-issued photo ID confirming date of birth — is required. Where our systems detect an inconsistency suggesting that a player may be under 18, the account is suspended immediately pending investigation. We take our duty to protect minors from gambling harm extremely seriously.

8 Policy Updates and Contact

222ba reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The effective date at the top of this document will be updated whenever a material change is made.

8.1 Notification of Changes

Where a change to this Privacy Policy is material — for example, introducing a new category of data processing or a new type of data sharing — 222ba will notify registered players via email to the address on file at least 14 calendar days before the change takes effect. For minor or administrative updates (such as clarifying existing language or correcting typographical errors), an email notification may not be sent, but the updated policy will always be available on this page.

8.2 Continued Use as Acceptance

Your continued use of the 222ba platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept a material change to this policy, you may close your account by contacting support and requesting voluntary account closure with a refund of any remaining eligible balance.

8.3 How to Contact Us

For any privacy-related enquiry, access request, complaint, or question about this Privacy Policy, please contact the 222ba data privacy team using the following details:

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 via the 222ba platform — our support team will escalate data privacy queries to the appropriate team within one business day.
• Response Time: We aim to respond to all formal privacy enquiries within 5 business days during Bangladesh Standard Time (BST, UTC+6) working hours.