222bs Privacy Policy —
How We Handle Your Personal Data

1 Introduction

222bs operates as an online entertainment platform offering casino games, live dealer tables, sports betting, fishing games, and slots to players in the Bangladesh market. In the course of operating these services, 222bs collects and processes certain personal data relating to registered players and platform visitors.

This Privacy Policy describes our data practices in clear, accessible terms. It covers what data we collect, the reasons we collect it, how long we keep it, who we share it with, and the rights you have regarding your own data. We are committed to handling personal data transparently, responsibly, and in a manner that respects the trust our players place in us.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. Together, these documents form the framework governing your relationship with the 222bs platform.

2 Data We Collect

222bs collects personal data in the following categories depending on the nature of your interaction with the platform:

2.1 Registration Data

When you create a 222bs account, we collect your full name, date of birth, residential address, email address, mobile phone number, and preferred username. This data is necessary to create and identify your account.

2.2 Identity Verification (KYC) Data

To comply with our know-your-customer obligations and confirm your eligibility to use the platform (including confirming you are 21 years of age or older), we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of address or proof of payment method ownership.

2.3 Financial Data

We collect transaction records associated with deposits, withdrawals, bonuses, and wagers placed on the platform. For mobile financial services (bKash, Nagad, Rocket, Upay), we record the mobile number and transaction reference associated with each payment. For bank transfers and card payments, we record account or card details in a tokenised or partially masked form — we do not store full card numbers in plaintext.

2.4 Usage and Technical Data

When you access the 222bs platform, we automatically collect certain technical data including your IP address, browser type and version, device type, operating system, session timestamps, pages visited, games played, and referring URL. This data helps us operate, secure, and improve the platform.

2.5 Communications Data

When you contact our support team via email or live chat, we retain records of those communications — including the content of messages, timestamps, and the support agent's responses — for quality assurance, dispute resolution, and training purposes.

2.6 Responsible Gaming Data

If you use any of our responsible gaming tools — such as deposit limits, time-out, or self-exclusion — we record the settings you apply and the dates on which they were activated or modified. This data is retained for the protection of the player and to ensure that responsible gaming decisions are honoured correctly.

3 How We Collect Data

Personal data is collected through the following channels:

• Directly from you: During account registration, KYC submission, deposit and withdrawal requests, and support interactions.
• Automatically: Through server logs, session cookies, and analytics tools that record technical data about your device and browsing behaviour when you visit the platform.
• From payment processors: Transaction confirmation data returned by payment partners such as bKash, Nagad, Rocket, Upay, and banking institutions to verify that a payment has been completed.
• From identity verification providers: Where 222bs uses a third-party KYC service to assist in document verification, that provider may return verification results and risk indicators to us.
• From fraud prevention services: Technical and behavioural signals used to detect suspicious activity, multiple account registrations, or other prohibited conduct as described in our Terms & Conditions.

4 Why We Use Your Data

The personal data collected by 222bs is used for the following purposes:

222bs does not use personal data for automated individual decision-making that produces significant legal effects without human review. Where automated tools are used for fraud detection or responsible gaming monitoring, a human review step is incorporated before any account action is taken.

5 Legal Basis for Processing

222bs processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you — including account management, payment processing, and delivery of games and betting services.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering obligations, age verification requirements, and fraud reporting duties.
• Legitimate interests: Processing that is necessary for 222bs's legitimate business interests — including platform security, fraud prevention, product improvement, and responsible gaming monitoring — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Where we rely on consent as a legal basis (for example, for certain marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect processing carried out prior to the withdrawal.

6 Data Sharing

6.1 Service Providers

222bs shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi banking partners), KYC and identity verification providers, game software studios (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe), fraud detection services, and cloud hosting infrastructure providers. All service providers are required to handle personal data securely and use it only for the specific purpose for which it was shared.

6.2 Legal Disclosures

222bs may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, court order, or to protect the legal rights of 222bs or its players. We will only disclose the minimum amount of data necessary to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 222bs's business assets, personal data held by 222bs may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy implications via the email address associated with their account, to the extent practicable.

6.4 What We Do Not Do

222bs does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. We do not share personal data with advertisers, data brokers, or marketing platforms. Data is shared with third parties only to the extent described in this Section 6.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit the 222bs platform. They allow the platform to remember information about your visit — such as your session state, language preferences, and login status — making subsequent visits more efficient and personalised.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. Without these, the platform cannot operate correctly. These cookies cannot be disabled.
• Functional Cookies: Store your preferences such as display settings and responsible gaming tool configurations so they are remembered across sessions.
• Analytics Cookies: Collect anonymised data about how players use the platform — pages visited, time spent, and features used — to help us identify performance issues and improve the user experience.
• Security Cookies: Help us detect and prevent fraud, identify suspicious login patterns, and protect account integrity.

7.3 Managing Cookies

You can manage or delete cookies through your browser's settings at any time. Please be aware that disabling strictly necessary cookies will prevent the platform from functioning correctly and will log you out of any active session. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

8 Data Security

222bs implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all pages and data transmissions between your device and our servers.
• Encryption of sensitive data at rest in our databases, including KYC documents and financial records.
• Role-based access controls ensuring that personal data is accessible only to authorised 222bs personnel who require it for their specific job function.
• Regular security assessments and penetration testing of platform infrastructure.
• Secure data centres with physical access controls and redundancy measures.
• Staff training on data protection responsibilities and incident response procedures.

9 Data Retention

222bs retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of the account relationship and for a period following account closure as required by applicable anti-money laundering and record-keeping laws.
• KYC and identity documents: Retained for a minimum period as required by applicable regulations following the closure or suspension of an account.
• Transaction records: Retained for a minimum of five years following the transaction date in accordance with financial record-keeping obligations.
• Support communications: Retained for up to three years following the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and analytics data: Anonymised within 12 months of collection where the data is used solely for analytics purposes and is no longer required in identifiable form.
• Self-exclusion records: Retained indefinitely to ensure that self-exclusion decisions are honoured if a player subsequently attempts to re-register.

Once a retention period has expired, personal data is securely deleted, destroyed, or irreversibly anonymised. You may request information about the retention period applicable to your data by contacting our support team.

10 Your Data Rights

As a data subject, you hold the following rights with respect to your personal data processed by 222bs. To exercise any of these rights, please contact us at [email protected] with your account username and a description of your request. We will aim to respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data 222bs holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For account registration details, many fields can be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to overriding legal obligations that require us to retain certain data (for example, financial records).
• Right to Restriction: You have the right to request that processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. 222bs will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11 Third-Party Links

The 222bs platform may contain references to third-party game providers and payment services that operate under their own privacy policies. While 222bs takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party platforms or services. This Privacy Policy applies solely to data processed by 222bs in connection with your use of the 222bs platform at 222bs.io.

When you use a third-party payment service such as bKash, Nagad, or Rocket to deposit or withdraw funds, any personal data you provide directly to that service is governed by that service provider's own privacy policy. We recommend reviewing the privacy practices of any third-party service you use in connection with your 222bs account.

12 Children's Privacy

The 222bs platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated data will be reviewed, and the matter will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered a 222bs account or submitted personal data to our platform, please contact us immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete the data and close the account.

13 Policy Updates

222bs reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made, we will notify registered players via the email address associated with their account prior to the changes taking effect. The "Last updated" date at the top of this document will be revised accordingly.

Your continued use of the 222bs platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with an updated policy, you should cease using the platform and may contact us to request account closure. We will process any withdrawable balance in accordance with standard withdrawal procedures.

We encourage you to review this Privacy Policy periodically to stay informed about how 222bs handles your personal data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 222bs, please contact our support team using the details below. All privacy-related correspondence should be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" in the subject line for faster routing.
• Response Time: We aim to acknowledge receipt of all privacy requests within 5 business days and to provide a substantive response within 30 calendar days (BST, UTC+6).
• Identity Verification: To protect your data, we may ask you to confirm your identity before processing a data access, rectification, or erasure request.

For questions relating to responsible gaming tools, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For questions about the general terms of service, please refer to our Terms & Conditions.