Privacy Policy – How 222bd3 Protects Your Data

222bd3 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at 222bd3.net. As the operator of this platform, 222bd3 is the data controller responsible for the personal information of all registered users and platform visitors ("you", "your", "the User").

This Privacy Policy sets out in a transparent and comprehensive manner how 222bd3 collects, processes, stores, shares, and protects personal data in connection with your use of the 222bd3 platform. It applies to all personal data collected through the 222bd3 website, account registration, payment processing, customer support interactions, and any other feature or service offered by 222bd3.

By registering an account or continuing to use the 222bd3 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the 222bd3 platform.

This Privacy Policy is effective from 1 January 2026. Any material revisions to this policy will be communicated to registered users via email or on-platform notification, and the effective date will be updated accordingly.

222bd3 collects only the personal data that is necessary for the lawful operation of the platform, fulfilment of regulatory obligations, and delivery of a secure and personalised gaming experience. The categories of personal data we collect are as follows:

222bd3 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you voluntarily provide when registering an account, completing KYC verification, contacting customer support, or submitting a complaint or request.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the 222bd3 platform, including data gathered via cookies, web beacons, and server logs.
• Payment Providers: Transaction confirmation data and reference identifiers shared by mobile financial service providers (bKash, Nagad, Rocket, Upay) when you initiate a deposit or withdrawal.
• Third-Party Verification Services: Identity verification data returned by KYC service providers engaged by 222bd3 to confirm the authenticity of documents submitted by users.
• Game Providers: Game session data, bet amounts, and outcome records generated by game software providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi when you play their games on the 222bd3 platform.
• Device and Browser Data: Technical data passively collected when your device connects to the 222bd3 platform, including IP address, device fingerprint, and browser configuration.

222bd3 processes your personal data only for the purposes set out below. We do not process personal data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or as otherwise required by law.

• Account Management: To create, maintain, and manage your 222bd3 account, including verifying your identity, processing your login, and maintaining your account balance and history.
• KYC and Age Verification: To verify that you are aged 18 or above and to confirm your identity as required for responsible gaming compliance and the prevention of underage gambling.
• Payment Processing: To process deposits and withdrawals through your registered payment method (bKash, Nagad, Rocket, or Upay) and to maintain accurate transaction records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, multi-accounting, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to enforce self-exclusion, deposit limits, and cooling-off periods requested by users.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal and Regulatory Compliance: To fulfil applicable legal obligations, including anti-money laundering (AML) requirements and data retention obligations.
• Platform Improvement: To analyse usage patterns and technical performance data for the purpose of improving the 222bd3 platform, fixing bugs, and developing new features.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive marketing communications. You may withdraw this consent at any time by contacting [email protected].

222bd3 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and 222bd3 — specifically, to operate your account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering legislation, age verification requirements, and data retention obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of 222bd3, including fraud detection, platform security, responsible gaming enforcement, and business analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities that are not covered by the bases above — in particular, direct marketing communications — 222bd3 relies on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

222bd3 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with third parties only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay receive transaction-relevant data (such as account reference and amount) solely for the purpose of processing your requested payment transactions.
• KYC and Identity Verification Providers: Third-party verification services engaged by 222bd3 to process and validate identity documents submitted by users during the KYC process. These providers operate under strict data processing agreements.
• Game Software Providers: Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, Ezugi, and other game providers receive session and bet data required to operate their games within the 222bd3 environment.
• IT and Infrastructure Providers: Cloud hosting, database, and security service providers that support the technical operation of the 222bd3 platform. All such providers are bound by confidentiality obligations and data processing agreements.
• Legal and Regulatory Authorities: Where 222bd3 is required by law, court order, or regulatory authority to disclose personal data, we will do so in compliance with the applicable legal obligation. Where permitted, 222bd3 will attempt to notify affected users of such disclosure.
• Fraud and Financial Crime Prevention: In cases of suspected fraud, money laundering, or other financial crime, 222bd3 may share relevant data with law enforcement agencies, financial intelligence units, or other platforms as part of coordinated anti-fraud measures.

Given that 222bd3 serves the Bangladesh market and processes all financial transactions via mobile financial services (MFS), this section specifically addresses the handling of payment-related personal data.

When you initiate a deposit or withdrawal through bKash, Nagad, Rocket, or Upay, the following data interactions occur:

• You provide your mobile wallet number and authorise the transaction directly with the respective MFS provider through their own application or USSD interface.
• The MFS provider confirms the transaction to 222bd3 via a secure API, sharing only a transaction reference ID, the confirmed amount in BDT, and the sender or recipient wallet number.
• 222bd3 stores the transaction reference ID, wallet number (for withdrawal routing), amount, timestamp, and transaction status in your account record.
• Your mobile wallet PIN is entered and processed exclusively within the MFS provider's own platform. 222bd3 does not receive, process, or store your PIN at any point.

All transaction records are retained by 222bd3 for a minimum period of five (5) years in accordance with applicable financial record-keeping obligations. These records may be reviewed by 222bd3 compliance staff and disclosed to regulatory authorities where required by law.

222bd3 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

By continuing to use the 222bd3 platform after being presented with this Privacy Policy, you consent to the use of cookies as described above. You may manage or delete cookies through your browser settings; however, disabling essential cookies will impair the functionality of the platform and may prevent you from logging in or accessing your account.

222bd3 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with 222bd3, including any period of self-exclusion or account restriction.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later.
• Customer Support Communications: Retained for a minimum of three (3) years from the date of the communication for quality assurance and dispute resolution purposes.
• Usage and Technical Logs: Retained for up to twelve (12) months for fraud detection and platform security purposes, unless a longer retention period is required in connection with a specific investigation.
• Marketing Consent Records: Retained for the duration of consent and for up to three (3) years following consent withdrawal, as evidence of the consent management process.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 222bd3's data disposal procedures. Anonymised data (from which individual users cannot be identified) may be retained indefinitely for statistical and analytical purposes.

222bd3 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 222bd3 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon displayed in your browser confirms this encryption is active.
• Password Hashing: Account passwords are stored as cryptographic hashes using a modern hashing algorithm. 222bd3 staff cannot view your plain-text password at any time.
• Access Controls: Personal data is accessible only to authorised 222bd3 personnel who require it to perform their specific job functions. Access is granted on a strict need-to-know basis and is subject to audit logging.
• Penetration Testing: The 222bd3 platform undergoes periodic security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Intrusion Detection: Automated systems monitor the 222bd3 infrastructure for unusual access patterns, brute-force login attempts, and other indicators of compromise in real time.
• Data Backup and Recovery: Personal data is backed up on a regular schedule with encrypted backup storage. Disaster recovery procedures are tested periodically to ensure data integrity and availability.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a high risk to your rights and freedoms, 222bd3 will notify affected users as promptly as practicable and will take all reasonable steps to contain and remediate the incident.

As a user of the 222bd3 platform, you hold the following data protection rights with respect to your personal data. To exercise any of these rights, please contact 222bd3 at [email protected]. We will respond to all verified requests within a reasonable timeframe.

The 222bd3 platform is strictly intended for individuals who are 18 years of age or older. 222bd3 does not knowingly collect, process, or store personal data from any individual under the age of 18. All account registrations are subject to age verification as part of the KYC process.

If 222bd3 discovers or is notified that it has inadvertently collected personal data from a person under the age of 18, the following steps will be taken immediately:

• The relevant account will be permanently closed.
• Any funds held in the account will be returned to the originating payment method after verification of the legitimate account holder's identity.
• All personal data associated with the underage account will be securely deleted, except where retention is required for legal or regulatory purposes related to the underage registration incident.

Parents and guardians who believe that a minor in their care has registered an account on 222bd3 without their knowledge should contact 222bd3 immediately at [email protected] to request account investigation and closure. 222bd3 treats all such reports as high-priority matters and will respond within 24 hours.

222bd3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made, 222bd3 will:

• Update the "Effective Date" displayed at the top of this Privacy Policy page.
• Where practicable, notify registered users of the material changes via email or an on-platform notification at least 7 days before the changes take effect.
• Maintain a record of previous versions of this Privacy Policy available upon request by contacting [email protected].

Your continued use of the 222bd3 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Privacy Policy, you should cease using the platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 222bd3, please contact us using the details below. All data-related enquiries must be submitted in English.

• Email: [email protected]
• Platform: 222bd3.net
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 24 hours for standard data enquiries; within 5 business days for formal data subject access requests

When submitting a data subject rights request, please include your registered email address, account username, and a brief description of your request. 222bd3 may request identity verification before processing any request that involves disclosure or deletion of personal data, in order to protect the security of your account information.