222k Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 222k ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of individuals ("you", "Member", "User") who access or use the 222k platform at 222k.io. This Policy applies to all members registered on 222k, including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh.

By registering an account on 222k or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read, understood, and agree to the data practices described herein. If you do not agree with any aspect of this Policy, you must cease using the 222k platform and contact support to request account closure.

This Policy should be read alongside the 222k Terms & Conditions and Responsible Gaming Policy. In the event of a conflict between this Policy and any other 222k document, this Policy governs with respect to the processing of personal data.

2. Data We Collect

222k collects personal data through several channels: directly from you during account registration and verification, automatically through your use of the platform, and from third-party sources such as payment processors and identity verification services. The categories of data we collect are described below.

2.1 Registration Data

When you create a 222k account, we collect the following information: full legal name, date of birth, residential address, mobile phone number, and email address. This information is required to open and maintain your account, verify your identity, and comply with our anti-money laundering obligations.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof-of-address documents such as utility bills or bank statements. These documents are used solely for the purpose of verifying your identity and age before processing withdrawals or where required by our compliance obligations.

2.3 Financial Data

We collect information about the payment methods you use to deposit and withdraw funds, including your bKash, Nagad, Rocket, or Upay mobile wallet number, and where applicable, partial card details (card type, last four digits, expiry date) for Visa and Mastercard transactions. We do not store full card numbers on our servers. Full payment card details are processed exclusively through PCI-DSS compliant third-party payment processors.

2.4 Transaction and Betting Data

We maintain records of all deposits, withdrawals, bets placed, games played, bonus claims, and associated transaction timestamps and reference numbers linked to your account. This data is retained for fraud prevention, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical and Device Data

When you access the 222k platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and clickstream data. This data is used to operate and improve the platform, detect fraud, and ensure security.

2.6 Communications Data

We retain records of any communications you have with our customer support team, including live chat transcripts, email correspondence, and any complaints or feedback you submit. These records help us resolve disputes, improve our service quality, and maintain an audit trail of member interactions.

3. How We Use Your Data

222k uses the personal data we collect for the following purposes. We process your data only where we have a lawful basis to do so, as described in Section 4 of this Policy.

• Account management: Creating, maintaining, and administering your 222k account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods. Verifying that payment accounts are registered in your verified name.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 English-language support team.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised account access, bonus abuse, and other illegal or policy-violating behaviour on the platform.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering laws, Know Your Customer requirements, age verification regulations, and other legal obligations.
• Responsible gaming: Monitoring betting patterns and account activity to identify signs of problem gambling and to enforce deposit limits, self-exclusion requests, and other responsible gaming measures you have activated.
• Platform improvement: Analysing usage data to improve the functionality, performance, and user experience of the 222k platform, including optimising game loading times, improving navigation, and personalising content.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting our support team.

4. Legal Basis for Processing

222k processes your personal data on the following legal bases:

4.1 Contractual Necessity

The majority of data processing carried out by 222k is necessary for the performance of the contract between you and 222k — namely, the Terms & Conditions you agreed to upon registration. This includes processing your registration data, KYC documents, financial data, and transaction data to operate your account and provide the services you have signed up for.

4.2 Legal Obligation

Certain processing activities are required by law, including KYC identity verification, anti-money laundering record-keeping, and age verification. 222k is obligated to carry out these activities regardless of your individual preferences.

4.3 Legitimate Interests

222k processes some data on the basis of legitimate interests, including fraud detection and prevention, platform security monitoring, responsible gaming oversight, and general platform improvement. When relying on legitimate interests, 222k has assessed that its interests do not override your fundamental privacy rights.

4.4 Consent

Where 222k processes data on the basis of your consent — for example, sending you promotional emails or SMS messages — you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Data

222k does not share your personal data with third parties except in the circumstances described below. All third parties with whom we share data are required to handle it in accordance with applicable data protection standards.

5.1 Payment Service Providers

We share necessary financial data with payment processors and mobile financial service providers — including bKash, Nagad, Rocket, Upay, and card processing partners — in order to process your deposits and withdrawals. These providers receive only the minimum data necessary to complete the transaction and are bound by their own data protection obligations.

5.2 Identity Verification Services

We may share your registration and KYC data with third-party identity verification services to assist in verifying your identity and age. These services are contractually bound to process your data solely for verification purposes and to maintain appropriate security measures.

5.3 Game and Technology Providers

222k integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver the game to your device. They do not receive your full name, contact details, or financial information.

5.4 Legal and Regulatory Disclosure

222k may disclose your personal data to law enforcement authorities, regulatory bodies, or other government agencies where required by applicable law, a court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of such disclosure where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 222k's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 222k will ensure that appropriate data protection safeguards are in place and will notify affected members as required by applicable law.

6. Cookies and Tracking Technologies

222k uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the platform to recognise your device, maintain your session, and remember your preferences.

6.1 Essential Cookies

Essential cookies are strictly necessary for the platform to function. They enable core features such as user authentication, session management, and security. You cannot opt out of essential cookies while using the 222k platform, as they are required for it to operate correctly.

6.2 Analytics Cookies

We use analytics cookies to understand how members interact with the platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This information helps us identify areas for improvement and optimise the platform experience. Analytics data is aggregated and does not identify you personally.

6.3 Functional Cookies

Functional cookies remember your preferences and settings, such as your preferred language, display settings, and whether you have acknowledged certain platform notices. These cookies improve your experience but are not strictly necessary for core platform functionality.

6.4 Managing Cookies

You can control cookie settings through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the 222k platform and may prevent some features from working correctly. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7. Data Retention

222k retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal, regulatory, and business obligations. The following retention periods apply:

• Account registration and KYC data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five years following the date of the transaction, for compliance and dispute resolution purposes.
• Communications and support records: Retained for a minimum of three years following the date of the communication, to support dispute resolution and service quality monitoring.
• Technical and device data: Typically retained for up to twelve months from the date of collection, unless retention for a longer period is required for fraud investigation or legal proceedings.
• Marketing consent records: Retained for the duration of your account and for a reasonable period following account closure as evidence of consent or opt-out.

Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you. Where data is anonymised rather than deleted, the anonymised data may be retained for statistical and analytical purposes indefinitely.

8. Security Measures

222k takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

8.1 Encryption

All data transmitted between your device and the 222k platform is encrypted using industry-standard 256-bit SSL (Secure Sockets Layer) / TLS (Transport Layer Security) protocols. This ensures that your login credentials, personal information, and financial data cannot be intercepted during transmission over the internet.

8.2 Access Controls

Access to member personal data within 222k is restricted to authorised personnel who require that access to perform their job functions. All staff members with access to personal data are subject to confidentiality obligations and receive regular training on data protection best practices.

8.3 Secure Storage

Personal data is stored on secure servers with appropriate physical and logical access controls. Financial data — including payment card details — is handled in accordance with Payment Card Industry Data Security Standards (PCI-DSS). Full payment card numbers are never stored on 222k servers.

8.4 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 222k will notify affected members without undue delay and will take all appropriate steps to contain the breach and mitigate its impact. 222k maintains an incident response plan for this purpose.

9. Your Rights

222k respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting our support team at [email protected]:

9.1 Right of Access

You have the right to request a copy of the personal data that 222k holds about you. We will provide this information within a reasonable timeframe following verification of your identity.

9.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update certain account details directly through your 222k account settings, or by contacting our support team.

9.3 Right to Erasure

In certain circumstances, you have the right to request that 222k delete your personal data. Please note that this right is subject to limitations — in particular, we may be legally required to retain certain data for regulatory compliance purposes and cannot delete data that falls within a mandatory retention period.

9.4 Right to Restrict Processing

You have the right to request that 222k restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.

9.5 Right to Data Portability

Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.

9.6 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of 222k marketing communications, contact our support team at [email protected] and we will action your request promptly.

10. Minors and Age Restriction

The 222k platform is strictly for individuals aged 21 years and above. 222k does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not attempt to register an account on 222k or use any of its services.

If 222k becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has provided personal data to 222k, please contact us immediately at [email protected] so that we can take appropriate action.

222k employs automated and manual age verification procedures as part of the KYC process. Providing a false date of birth during registration is a serious breach of the 222k Terms & Conditions and this Privacy Policy, and may result in permanent account closure and reporting to relevant authorities.

11. Changes to This Privacy Policy

222k reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered members by email and/or by displaying a prominent notice on the platform prior to the change taking effect.

The "Last updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 222k is protecting your personal data. Your continued use of the platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

Previous versions of this Privacy Policy are available upon request by contacting our support team at [email protected].

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 222k handles your personal data, please contact our dedicated support team using the details below. Our team is available 24 hours a day, 7 days a week and will respond to all privacy-related enquiries within 2 hours.

Email: [email protected] (plain text only — not a clickable link)

Response time: Within 2 hours for all privacy-related enquiries.

Support language: English (available to all members across Bangladesh, including Dhaka, Chittagong, Sylhet, and all other regions).

When contacting us about a privacy matter, please include your registered account username and a clear description of your request or concern. We may need to verify your identity before processing certain requests, such as data access or erasure requests.