222bf Privacy Policy

222bf uses the personal data it collects for specific, lawful purposes only. We do not use your personal data for purposes that are incompatible with those stated at the time of collection. The principal purposes for which your data is processed are as follows:

• Account registration and management, including identity verification (KYC), account security, and the processing of deposits and withdrawals through bKash, Nagad, Rocket, and Upay.
• Delivery of the gaming services offered on the Platform, including cricket betting markets, live casino, slots, crash games, and all other game categories available to registered players.
• Fraud prevention and anti-money laundering (AML) compliance, including transaction monitoring, risk assessment, and cooperation with law enforcement or regulatory authorities where legally required.
• Customer support, including responding to account queries, processing complaints, and communicating with players regarding their account status, promotions, and responsible gaming matters.
• Platform improvement and analytics, using aggregated and anonymised data to understand how players use the Platform and to improve features, navigation, game selection, and the overall user experience.
• Responsible gaming monitoring, using behavioural and account data to identify players who may be showing signs of problem gambling and to apply appropriate responsible gaming interventions in line with our duty of care obligations.

222bf does not use your personal data for automated decision-making that produces legal or similarly significant effects without a human review process. If our systems flag an account for investigation, a member of the 222bf team reviews the case before any action is taken that materially affects the player's account access or balance.

222bf does not sell, rent, or otherwise commercially exploit your personal data. We may share your personal data with third parties only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors and mobile wallet service providers (bKash, Nagad, Rocket, Upay): limited transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): limited technical session data required to authenticate your session and deliver game content. Game providers do not receive your financial data or full identity documents.
• Law enforcement, regulatory authorities, and courts: where disclosure is required by applicable law, court order, or lawful regulatory demand. 222bf will notify you of such a disclosure request where it is legally permissible to do so.
• KYC and identity verification partners: where a third-party identity verification service is used to validate the documents you submit as part of the KYC process. These partners process data under strict contractual data protection obligations with 222bf.

In all cases where third-party sharing is necessary, 222bf ensures that appropriate data sharing agreements and contractual safeguards are in place to protect your personal data. No third party receiving data from 222bf is permitted to use that data for purposes beyond those specified in their agreement with 222bf.

222bf retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply: account data is retained for the duration of the account relationship plus a minimum of five years following account closure, to comply with AML record-keeping obligations; transaction records are retained for a minimum of five years from the date of the transaction; KYC documentation is retained for a minimum of five years from the date of verification or the date of account closure, whichever is later.

Where personal data is no longer required for any lawful purpose, 222bf will securely delete or anonymise that data. Anonymised data (data from which all identifying information has been removed and from which you cannot be re-identified) may be retained indefinitely for statistical and analytical purposes. If you request deletion of your account and personal data, 222bf will process the request in compliance with applicable law and will confirm the deletion or explain any legal basis for continued retention within a reasonable timeframe.

Subject to applicable data protection law, you have the following rights in relation to the personal data that 222bf holds about you. To exercise any of these rights, please contact the support team at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: you have the right to request a copy of the personal data that 222bf holds about you, along with information about how that data is processed and on what legal basis.
• Right to rectification: if any personal data held by 222bf about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: in certain circumstances, you have the right to request that 222bf delete the personal data it holds about you. This right is subject to 222bf's legal obligations to retain data (for example, AML record-keeping requirements) which may override a deletion request in whole or in part.
• Right to restrict processing: you may request that 222bf restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing based on legitimate interests and a determination is pending.
• Right to object: you have the right to object to processing of your personal data where that processing is based on 222bf's legitimate interests. If you object, 222bf will assess whether its legitimate interests override your rights in the specific circumstances of your objection.

222bf will respond to all valid rights requests within a reasonable timeframe and, in any event, within the timeframe prescribed by applicable data protection law. 222bf will not charge a fee for handling rights requests, except where requests are manifestly unfounded or excessive — in which case a reasonable administrative fee may be applied or the request may be refused, with written explanation provided.

The 222bf Platform may contain references to third-party game providers and payment service partners. While 222bf takes reasonable steps to ensure that data shared with these partners is protected under appropriate contractual arrangements, 222bf is not responsible for the privacy practices or data handling policies of third-party organisations. Each third-party service provider operates under its own privacy policy, which governs their use of any data they collect or receive in the course of providing services to or through 222bf. Players are encouraged to review the privacy policies of any third-party service provider whose services they use in connection with the 222bf Platform.

If you have any questions, concerns, or requests regarding this Privacy Policy, the personal data 222bf holds about you, or how that data is processed, please contact our support team. We are available 24 hours a day, 7 days a week and aim to respond to all privacy-related queries within a reasonable timeframe.

Email (plain text — not a link): [email protected]