222ba Privacy Policy — How We Protect and Handle Your Personal Data

1. Who We Are

222ba is an online betting and casino platform primarily serving players located in Bangladesh. We offer a comprehensive range of services including sports betting across cricket, handball, and other disciplines, live casino games, slots, and associated financial services such as deposits and withdrawals in Bangladeshi Taka (৳) via local payment methods including bKash, Nagad, Rocket, and Upay.

For the purposes of data protection, 222ba acts as the data controller in respect of the personal data it collects and processes about registered players. If you have any questions about this Policy or wish to exercise your data rights, please refer to Section 15 for contact details.

2. Data We Collect

The categories of personal data we collect about you depend on how you interact with the 222ba platform. The following table outlines the main categories, specific data points within each, and the primary purpose for which that data is collected:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data (beyond responsible gaming indicators), or biometric data beyond what is contained in an identity document you submit for KYC verification.

3. How We Collect Data

3.1 Directly from You

The majority of personal data we hold is provided directly by you during the account registration process, identity verification (KYC), deposit and withdrawal requests, communications with our support team, and participation in surveys or promotional activities. You are in control of what you provide; however, certain data is mandatory to access core platform features.

3.2 Automatically Through Platform Use

When you access or interact with the 222ba platform, we automatically collect certain technical and usage data via server logs, cookies, web beacons, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and records of your in-platform activity. This data is collected to maintain platform security, detect fraudulent behaviour, and improve the quality of our services.

3.3 From Third Parties

In some circumstances we may receive data about you from third parties, including: identity verification service providers (for KYC purposes); payment processors and mobile financial service operators such as bKash, Nagad, and Rocket (for transaction validation); fraud prevention and anti-money laundering screening services; and advertising or analytics partners where applicable and lawful. We only accept data from third parties where we have a legitimate basis for doing so and where doing so is consistent with your rights.

4. How We Use Your Data

222ba uses your personal data for the following purposes:

• Account creation and management: Setting up and maintaining your registered player account, including password recovery and account verification.
• Identity verification (KYC): Confirming your identity and age (21+) before enabling full platform access, in compliance with our obligations.
• Transaction processing: Processing deposits, withdrawals, and any associated currency conversions, all conducted in Bangladeshi Taka (৳).
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance via email, WhatsApp, or live chat.
• Platform security and fraud prevention: Detecting and investigating suspicious or unauthorised account activity, protecting against cheating, collusion, and money laundering.
• Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering (AML) regulations and responsible gaming requirements.
• Responsible gaming monitoring: Identifying patterns in your usage that may indicate problematic gambling behaviour, and where appropriate reaching out proactively or applying account protections.
• Service improvement and personalisation: Analysing usage patterns to improve the platform experience, optimise game offerings, and provide content relevant to your preferences.
• Marketing communications: Where you have opted in, sending you personalised promotional offers, bonus alerts, and news about 222ba features and events. You may opt out at any time.
• Regulatory reporting: Generating reports and records required by applicable regulatory, financial, or law enforcement bodies.

5. Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The primary legal bases on which 222ba relies are:

• Contractual necessity: Processing is necessary to perform the contract between you and 222ba — i.e., to provide you with a functioning player account, process your bets, and handle your financial transactions.
• Legal obligation: Processing is required to comply with applicable laws, including KYC/AML requirements, responsible gaming obligations, and financial reporting rules.
• Legitimate interests: Processing is necessary for 222ba's legitimate business interests, including fraud detection, platform security, business analytics, and improving our services — provided that those interests are not overridden by your privacy rights.
• Consent: For marketing communications and certain non-essential cookies, we process your data only where you have given your explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 Service Providers

222ba works with a carefully selected set of third-party service providers who process personal data on our behalf in order to deliver and support the platform. These include identity verification providers, payment processors (including mobile financial service operators such as bKash, Nagad, Rocket, and Upay), cloud infrastructure providers, customer support tools, fraud detection services, and game software providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. All third-party processors are bound by data processing agreements that restrict their use of your data to the specified purpose only.

6.2 Legal and Regulatory Disclosure

We may disclose your personal data to governmental authorities, law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 222ba, our players, or the public. We will notify you of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event that 222ba undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent notice on the platform before your data becomes subject to a different privacy policy.

6.4 No Sale of Data

222ba does not sell, rent, or lease your personal data to unaffiliated third parties for their own marketing or commercial purposes. Any data sharing is limited to the categories described in this section and is conducted in accordance with applicable data protection principles.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 222ba platform. They allow us to recognise your browser, remember your preferences, maintain your session, and gather usage analytics. Similar technologies such as web beacons, pixel tags, and local storage objects may also be used for analogous purposes.

7.2 Types of Cookies We Use

• Strictly necessary cookies: Required for core platform functionality such as maintaining your login session, processing transactions securely, and enabling basic navigation. These cannot be disabled without impairing essential services.
• Performance and analytics cookies: Used to understand how players interact with the platform — which pages are visited most frequently, where users encounter errors, and how sessions flow from arrival to departure. Data collected is aggregated and anonymised.
• Functionality cookies: Allow the platform to remember your preferences such as language settings, preferred payment method, and display options to deliver a more personalised experience.
• Marketing and targeting cookies: Used only where you have provided consent, to deliver relevant promotional content and track the effectiveness of our marketing campaigns.

7.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the 222ba platform. For non-essential cookies, you may also manage your preferences through the cookie settings interface on the platform where available.

8. Data Retention

222ba retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• Communication records (support tickets, chat logs): Retained for three (3) years from the date of last interaction.
• Marketing preference data: Retained until you opt out or request deletion, after which opt-out records are retained for compliance purposes.
• Technical and usage logs: Typically retained for ninety (90) days, unless extended for active fraud or security investigations.

When data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. We do not archive personal data beyond applicable retention periods.

9. Your Privacy Rights

As a 222ba player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all valid requests within thirty (30) days.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to exceptions where retention is required by law or legitimate business interest (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10. Children's Privacy

The 222ba platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that a registered account belongs to a person under the minimum age, we will immediately close the account, delete all associated personal data where legally permissible, and forfeit any funds held in that account in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has created a 222ba account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. International Data Transfers

222ba is primarily operated to serve players located in Bangladesh. However, the third-party service providers we work with — including cloud infrastructure, identity verification, and game software providers — may process data in jurisdictions outside of Bangladesh. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your personal data to a standard consistent with the principles set out in this Policy.

Appropriate safeguards for international transfers may include standard contractual clauses incorporated into data processing agreements with our service providers, and due diligence assessments of the data protection standards in the destination country. We do not transfer personal data to countries or organisations that cannot provide an adequate level of data protection.

12. Security Measures

Protecting your personal data from unauthorised access, loss, or disclosure is a top priority for 222ba. We implement a layered set of technical and organisational security measures, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Role-based access controls ensuring that only authorised staff can access personal data, and only to the extent required for their specific role.
• Multi-factor authentication for internal staff access to systems containing personal data.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Intrusion detection and monitoring systems that provide real-time alerts on anomalous access patterns.
• Incident response procedures to ensure rapid containment and notification in the event of a data breach.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. You also have a role to play: please use a strong, unique password for your 222ba account and never share your login credentials with anyone.

13. Third-Party Links

The 222ba platform may contain references to third-party service providers such as game studios (e.g., Pragmatic Play, Evolution Gaming, Spribe) and payment partners (e.g., bKash, Nagad, Rocket). When you interact with these providers' services — for example, by launching a game hosted on a third-party server or initiating a payment through a mobile financial service — you are also subject to those providers' own privacy policies and terms of service.

222ba is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of 222ba.

14. Policy Updates

222ba reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or a prominent notice on the platform.

Your continued use of the 222ba platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any changes, you should stop using the platform and may request account closure by contacting our support team.

15. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact us using the following details:

• Email: [email protected] (subject: "Data Privacy Request")
• WhatsApp: +880 1800 222222
• Support Hours: 24/7 (Bangladesh Standard Time, UTC+6)

We aim to acknowledge all privacy requests within 48 hours and to provide a full resolution or substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.