d2222 Privacy Policy

1. Introduction

d2222 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of every individual who interacts with our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by d2222. Please read this policy carefully to understand our practices regarding your personal data.

This policy applies to all users of the d2222 website at d2222.io, including players who have registered an account, players who are browsing the platform without an account, and individuals who contact our support team. It covers all personal data collected and processed in connection with the d2222 platform regardless of the device or method used to access it.

This Privacy Policy should be read in conjunction with the d2222 Terms & Conditions and Responsible Gaming Policy. By registering an account or by continuing to use the d2222 platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein.

d2222 operates with a particular focus on serving players in Bangladesh and the wider South Asia region. All data handling practices described in this policy are designed to meet the applicable standards for the jurisdictions in which we operate.

2. Data Controller

For the purposes of applicable data protection law, d2222 acts as the data controller in respect of all personal data collected and processed through the d2222 platform. As data controller, d2222 is responsible for determining the purposes for which, and the means by which, your personal data is processed.

The data controller contact for d2222 is the Data Protection Team, reachable at [email protected]. All data subject requests, privacy complaints, and enquiries regarding this policy should be directed to this contact address. We will acknowledge all such communications within 48 hours of receipt.

Where d2222 engages third-party service providers who process personal data on our behalf — such as payment processors, KYC verification providers, and game studio partners — those providers act as data processors under instruction from d2222. d2222 maintains data processing agreements with all such providers that impose obligations consistent with this policy and applicable data protection law.

3. Personal Data We Collect

d2222 collects several categories of personal data, each of which is necessary for a specific operational or legal purpose. The categories of data we collect are as follows:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than the liveness photo used during KYC, which is processed solely for identity verification and not retained after the verification decision is made), or health data — except where you voluntarily provide health-related information in the context of a responsible gaming self-exclusion request, in which case such information is handled with additional care and is accessible only to our responsible gaming team.

4. How We Collect Your Data

d2222 collects personal data through several distinct channels:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit, submitting a withdrawal request, contacting our support team, or completing any form on the d2222 platform.
• Automated Technical Collection: Data collected automatically when you access the d2222 website, including your IP address, browser characteristics, device type, and activity logs generated by your interaction with the platform. This data is collected via server logs, first-party cookies, and session tracking technologies described in Section 8.
• Payment Provider Data: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, those payment providers transmit transaction confirmation data to d2222 including transaction reference numbers and the mobile account number associated with the transaction. d2222 does not receive or store your full mobile banking PIN or password.
• KYC Verification Partners: Where d2222 uses a third-party identity verification service to process your KYC documents, that provider may return a verification decision and confidence score to d2222. The underlying document images are processed by the KYC provider under their own data protection obligations and are not permanently retained by d2222 beyond the verification process.
• Game Studio Data: Game studios integrated on the d2222 platform (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi) may return aggregated session data and bet results to d2222 systems for the purpose of account crediting, responsible gaming monitoring, and dispute resolution.

5. Legal Basis for Processing

d2222 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — specifically, to operate your account, process deposits and withdrawals, settle wagers, and deliver the gaming and betting services you have registered to use.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) rules, age verification requirements, financial record-keeping obligations, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate Interests: Processing that serves d2222's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, internal analytics, and improvement of our services — provided those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the legal basis for processing — specifically, for sending optional marketing communications — you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. How We Use Your Personal Data

d2222 uses your personal data for the following specific purposes:

1. Account Management: Creating, maintaining, securing, and when requested closing your d2222 player account; authenticating your identity at login; processing password resets and account recovery requests.
2. Payment Processing: Verifying and processing deposits and withdrawal requests; reconciling transactions with payment providers; investigating and resolving payment disputes.
3. Identity and Age Verification (KYC): Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years before any withdrawal is processed. KYC is a mandatory process and cannot be waived.
4. Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions. Protecting the security and integrity of the d2222 platform and its player community.
5. Responsible Gaming: Monitoring wagering patterns and account behaviour for signs of problem gambling; administering deposit limits, loss limits, cooling-off periods, and self-exclusions; contacting players proactively where responsible gaming concerns are identified.
6. Customer Support: Responding to your enquiries, complaints, and support requests; maintaining records of support interactions for quality assurance and dispute resolution purposes.
7. Legal and Regulatory Compliance: Meeting our obligations under applicable law; responding to lawful requests from courts, regulators, and law enforcement agencies; maintaining financial and transaction records for the legally required retention periods.
8. Platform Improvement: Analysing aggregated, anonymised usage data to improve the d2222 platform, identify technical issues, optimise game performance, and develop new features that serve our player community in Bangladesh more effectively.
9. Marketing Communications (Consent-Based Only): Sending promotional emails, bonus notifications, and seasonal offers (aligned with events such as the BPL season, Eid, and Pohela Boishakh) to players who have opted in to marketing communications. Players who have not opted in, or who have subsequently opted out, will not receive marketing communications.

7. Data Sharing and Disclosure

d2222 does not sell your personal data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to execute your deposit and withdrawal instructions. Each of these providers operates under its own data protection obligations and applicable Bangladeshi financial regulations.
• KYC Verification Providers: Third-party identity verification partners receive your KYC documents and personal identification data for the purpose of verifying your identity and age. These providers act under data processing agreements with d2222 and are prohibited from using your data for any purpose other than the verification service.
• Game Studio Partners: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and other integrated studios receive a pseudonymised player session identifier to deliver their games. They do not receive your full name, contact details, or financial data.
• Fraud Prevention and Security Services: Specialist third-party fraud detection and cybersecurity providers may receive technical data (IP address, device fingerprint, session patterns) to assist with identifying and preventing fraudulent activity on the platform.
• Legal and Regulatory Authorities: d2222 will disclose personal data to courts, regulators, law enforcement agencies, and other competent public authorities where required to do so by applicable law, court order, or lawful regulatory request. Where permitted to do so, d2222 will notify the affected player of any such disclosure.
• Business Succession: In the event of a merger, acquisition, or sale of all or part of d2222's business operations, player data may be transferred to the acquiring entity subject to the same privacy protections described in this policy. Players will be notified of any such transfer in advance.

8. Cookies and Tracking Technologies

d2222 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by our web server when you visit the d2222 website. Cookies allow us to recognise your device on subsequent visits, maintain your session state, and understand how you use the platform.

d2222 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the d2222 platform to function. They maintain your login session, preserve your account security state, and enable core platform features such as the game lobby, account dashboard, and deposit flow. These cookies cannot be disabled without breaking platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate and use the d2222 platform — which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used exclusively to improve the platform and is not linked to your individual identity.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, notification preferences, and responsible gaming settings — so that you do not need to re-enter them on every visit.
• Security Cookies: Short-lived cookies used to support our fraud detection and anti-bot security systems. These cookies help us distinguish legitimate player sessions from automated access attempts.

d2222 does not use third-party advertising cookies or behavioural targeting cookies. We do not place tracking pixels, retargeting tags, or any other technology that profiles your activity across external websites.

You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your d2222 account and using core platform features. For detailed browser-specific instructions on managing cookies, refer to your browser's help documentation.

9. Data Security

d2222 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and d2222 servers is encrypted using 256-bit SSL/TLS. Our SSL certificate is renewed regularly and our HTTPS configuration is tested against industry benchmarks.
• Password Hashing: Account passwords are never stored in plain text. d2222 uses a modern, computationally expensive cryptographic hashing algorithm (bcrypt with a high work factor) to store password credentials, ensuring that even in the event of a server breach, plaintext passwords cannot be recovered.
• Two-Factor Authentication (2FA): d2222 offers SMS OTP-based two-factor authentication to all account holders. We strongly recommend enabling 2FA on your account, particularly if you access d2222 from shared devices or public networks in Dhaka, Chittagong, Sylhet, or elsewhere in Bangladesh.
• Access Controls: Access to player personal data within d2222's internal systems is restricted to personnel who have a documented, role-based need to access it. All internal access to sensitive player data is logged and auditable.
• Infrastructure Security: d2222 servers are hosted in secure data centres with physical access controls, 24/7 monitoring, redundant power and cooling, and regular third-party security audits. Our systems are protected by enterprise-grade firewalls, intrusion detection and prevention systems, and regular vulnerability scanning.
• Incident Response: d2222 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected players, d2222 will notify affected players via the email address registered on their account within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

While d2222 takes every reasonable precaution to protect your data, no system connected to the internet can be guaranteed 100% secure. You also have a role to play in keeping your account secure — please choose a strong, unique password, do not share your login credentials with anyone, and contact the d2222 support team immediately if you suspect any unauthorised access to your account.

10. Data Retention

d2222 retains personal data for the minimum period necessary for the purpose for which it was collected, subject to legal and regulatory retention obligations. Our data retention schedule is as follows:

After the applicable retention period has elapsed, d2222 will securely delete or irreversibly anonymise your personal data from all active systems and backups. Where data is anonymised rather than deleted, it cannot be re-linked to your identity and is no longer considered personal data under applicable data protection law.

11. Your Data Rights

As a d2222 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the d2222 data team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You have the right to request a copy of all personal data that d2222 holds about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data categories (such as your name or date of birth), correction may require you to submit updated KYC documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will honour this request where there is no overriding legal obligation to retain the data. Note that AML and financial record-keeping regulations require us to retain transaction and identity records for 7 years after account closure; this portion of your data cannot be deleted on request during the mandatory retention period.
• Right to Restriction of Processing: You may request that d2222 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object to the processing of your personal data where d2222 relies on legitimate interests as the legal basis. You may also object to the use of your data for direct marketing at any time, which d2222 will always honour immediately.
• Rights Related to Automated Decision-Making: Where d2222 makes decisions about your account through automated processing (for example, automated responsible gaming alerts), you have the right to request human review of that decision.

12. Children's Privacy

The d2222 platform is strictly intended for adults aged 21 years and above. d2222 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Registration on the d2222 platform constitutes a declaration by the registering individual that they are aged 21 or over.

d2222 employs mandatory Know Your Customer (KYC) verification procedures that require all players to submit a valid government-issued identity document confirming their date of birth before any withdrawal may be processed. This process serves as our primary mechanism for verifying that players meet the minimum age requirement.

If d2222 becomes aware or has reasonable grounds to suspect that a player account has been registered by or on behalf of a person under the age of 21, we will immediately suspend the account, initiate an investigation, freeze any balance held in the account, and take steps to notify the appropriate parties. Any personal data collected in connection with an underage account will be retained only for the minimum period required to complete the investigation and comply with applicable legal obligations, after which it will be permanently deleted.

Parents and guardians who believe that a minor in their care may have registered an account on the d2222 platform are urged to contact the d2222 support team immediately at [email protected]. We will prioritise such reports and respond within 24 hours.

13. Third-Party Services and Links

The d2222 platform integrates third-party game content and payment services that are subject to their own privacy policies. d2222 is not responsible for the privacy practices of these third-party providers. However, d2222 carefully vets all third-party integrations and requires all service providers who handle player data on our behalf to maintain privacy and security standards consistent with this policy through contractual data processing agreements.

Third-party providers currently integrated with the d2222 platform include, but are not limited to, game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, as well as mobile payment providers bKash, Nagad, Rocket, and Upay. Each of these providers operates under its own applicable regulatory framework and data protection obligations.

The d2222 website does not contain outbound links to third-party websites for advertising or affiliate purposes. Any references to third-party brand names within d2222 content are for informational identification purposes only and do not constitute an endorsement of those parties' privacy practices.

14. International Data Transfers

d2222 operates as a platform serving players in Bangladesh. In the course of providing our services, some personal data may be processed by servers or third-party service providers located outside of Bangladesh. Where such international transfers occur, d2222 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that described in this policy.

Safeguards employed by d2222 for international data transfers include:

• Contractual Protections: Standard contractual clauses and data processing agreements with all international service providers that impose data protection obligations substantially equivalent to those described in this policy.
• Due Diligence: Before engaging any international service provider that will process player data, d2222 conducts a data protection due diligence assessment to confirm that the provider maintains adequate technical and organisational security measures.
• Data Minimisation: Only the minimum data necessary for the specific service being provided is transferred internationally. Full player profiles are not shared with international partners unnecessarily.

By registering an account and using the d2222 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh for the purposes described in this policy, subject to the safeguards described above.

15. Amendments to This Privacy Policy

d2222 reserves the right to update and amend this Privacy Policy from time to time to reflect changes in our data handling practices, changes in applicable law, the introduction of new platform features, or changes in the third-party services we integrate. The effective date shown at the top of this page will always reflect when the current version came into force.

Where we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify all registered players by email to the address registered on their account at least 14 days before the changes take effect. The notification will clearly summarise what has changed and why. Continued use of the d2222 platform after the effective date of an amended policy constitutes acceptance of the revised terms.

Minor amendments — such as corrections of typographical errors, clarifications of existing provisions, or updates to contact information — may be made without prior notification, though the effective date on this page will always reflect the most recent update. We encourage all players to review this page periodically to stay informed of our current privacy practices.

All previous versions of this Privacy Policy are archived and available upon request. If you wish to review a prior version, please contact our support team at [email protected] with the subject line "Privacy Policy Archive Request".

16. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which d2222 handles your personal data, please contact us using the details below. We take all privacy enquiries seriously and are committed to resolving them promptly and transparently.

• Data Protection Team Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the correct team.
• Live Chat: Available 24/7 through your d2222 account dashboard. Our support team can handle general privacy questions via live chat and will escalate formal data rights requests to the data protection team on your behalf.
• Response Times: General privacy enquiries — within 48 hours. Formal data rights requests — acknowledgement within 48 hours, full response within 30 calendar days.