b2222 Privacy Policy

This Privacy Policy ("Policy") describes how b2222 ("b2222", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of users ("you", "Player", "User") who access or use the b2222 platform at b2222.io, including all associated services, mobile-optimised interfaces, live betting features, casino products, and support channels.

By registering an account with b2222, accessing the platform, or using any of our services, you acknowledge that you have read this Policy, that you understand its content, and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue your use of the b2222 platform immediately.

This Policy forms part of b2222's broader legal framework alongside the Terms & Conditions and the Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail with respect to matters of contract, and this Policy shall prevail with respect to matters of data privacy.

b2222 operates as an offshore online gaming platform and its services are primarily accessed by players in Bangladesh. This Policy is written in English and is governed by the data protection obligations applicable to b2222 as an offshore gaming operator. Players are responsible for understanding the data protection laws that apply to them in their own jurisdiction.

When you create a b2222 account, we collect the personal information you provide directly, including:

• Full legal name;
• Date of birth (to verify you are aged 21 or above);
• Email address;
• Mobile phone number;
• Residential address (city, district, division);
• Preferred currency (Bangladeshi Taka / BDT);
• Username and encrypted password.

As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents, including:

• National Identity Card (NID);
• Passport;
• Driving licence;
• Proof of residential address (utility bill, bank statement);
• Selfie or live photograph for identity matching.

KYC documentation is stored with strict access controls and is used exclusively for identity verification, anti-money laundering (AML) compliance, and fraud prevention purposes.

When you make deposits or withdrawals, we collect transaction-related data including your bKash, Nagad, Rocket, or Upay mobile number, Dutch-Bangla Bank or other bank account details (where applicable), Visa/Mastercard details (card number, expiry — stored in tokenised form only), transaction amounts, timestamps, and transaction reference numbers. b2222 does not store full card numbers on its own servers; card data is tokenised and handled by our PCI-DSS compliant payment processor.

We automatically collect data about how you interact with the b2222 platform, including:

• Pages visited and features used;
• Games played, bet history, wagering amounts, and game session durations;
• Login timestamps and session length;
• Device type, operating system, and browser version;
• IP address and approximate geographic location (city-level);
• Referral source (how you arrived at b2222.io).

When you contact b2222 support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments you submit. These records are used for quality assurance, dispute resolution, and training purposes.

b2222 processes your personal data on the following legal bases: (a) performance of a contract — processing necessary to operate your account and deliver the services you have requested; (b) legal obligation — processing required to comply with AML, KYC, and other applicable regulatory obligations; (c) legitimate interests — processing necessary for fraud prevention, platform security, and service improvement where those interests are not overridden by your rights; and (d) consent — processing based on your explicit agreement, such as receiving promotional communications.

Your personal data is used to operate the b2222 platform, including to:

• Create and manage your b2222 account;
• Process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods;
• Settle bets, record game results, and calculate winnings;
• Provide 24/7 customer support in English;
• Send account-related transactional notifications (e.g., deposit confirmations, withdrawal updates);
• Enforce the one-account-per-player rule and prevent duplicate registrations.

b2222 uses your data to fulfil its legal and security obligations, including:

• Verifying your identity and age (21+ requirement) via KYC;
• Detecting and preventing fraud, money laundering, and bonus abuse;
• Monitoring for unusual betting patterns that may indicate match-fixing or arbitrage;
• Maintaining audit logs for regulatory and dispute resolution purposes;
• Implementing and enforcing self-exclusion and responsible gaming limits.

We use aggregated and anonymised behavioural data to understand how players use b2222, which features are most popular, and where the platform can be improved. This analysis does not identify individual players and is used solely to enhance the quality, reliability, and range of our services for players across Bangladesh.

With your consent, b2222 may send you promotional communications about new games, bonus offers, and platform updates via email or SMS. You may withdraw your consent at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

b2222 does not sell, rent, lease, or trade your personal data to any third party for marketing or commercial purposes. Your personal information is not a product. It is shared only in the limited circumstances described below.

b2222 shares personal data with trusted third-party service providers who process data on our behalf under strict contractual confidentiality obligations, including:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing partners, to facilitate deposits and withdrawals;
• KYC verification providers — to assist with identity and age verification;
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens necessary to deliver game content; they do not receive your full personal profile;
• Platform infrastructure providers — cloud hosting and CDN providers who store and serve platform data under data processing agreements.

b2222 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, court order, or regulatory directive. b2222 will notify you of such disclosure where it is legally permitted to do so.

In the event of a merger, acquisition, or sale of all or part of b2222's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Policy that result from it.

Cookies are small text files placed on your device by a website to help it remember information about your visit. b2222 uses cookies and similar technologies (e.g., local storage, session tokens) to ensure the platform functions correctly and to improve your experience.

b2222 does not use third-party advertising cookies, behavioural profiling cookies, social media tracking pixels, or any tracking technology designed to follow your activity across other websites. We do not participate in cross-site advertising networks.

You may disable or delete cookies via your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the b2222 platform, including your ability to remain logged in and to place bets. Analytics and functional cookies may be disabled without affecting core platform functionality.

b2222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When data is no longer required, it is securely deleted or anonymised.

• Account and registration data — retained for the duration of your active account plus 5 years after account closure, to meet AML record-keeping requirements;
• KYC and identity verification documents — retained for 5 years from the date of submission or 5 years from account closure, whichever is later;
• Financial transaction records — retained for 7 years from the date of each transaction in accordance with standard financial record-keeping practice;
• Bet and game history — retained for 3 years from the date of the relevant activity;
• Support communications — retained for 2 years from the date of the last interaction;
• Anonymised analytics data — may be retained indefinitely as it does not constitute personal data.

Closure of your b2222 account does not result in the immediate deletion of all personal data. Data required to be retained under clause 6.2 above will be held securely for the applicable retention period, after which it will be permanently and securely deleted. You may request confirmation of your data retention schedule by contacting our support team.

You have the right to request a copy of the personal data that b2222 holds about you. Upon receiving a verified access request, b2222 will provide a summary of your data within 30 days. Your request must be submitted via live chat or email to [email protected] and must include sufficient information to verify your identity.

If any personal data b2222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly within your account settings. For corrections to KYC data or other sensitive records, please contact support.

You may request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been unlawfully processed. b2222 will honour erasure requests where there is no conflicting legal obligation to retain the data (see Section 6).

You have the right to object to the processing of your personal data where b2222 relies on legitimate interests as the legal basis for processing. b2222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for legal claims.

Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for promotional communications can be done via your account notification settings or by contacting support.

To exercise any of the rights described above, contact the b2222 support team via live chat (available 24/7) or send a written request to [email protected]. b2222 will respond within 30 days of receiving a verified request. b2222 reserves the right to verify your identity before processing any data rights request.

b2222 employs a range of technical measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and payment credentials;
• Payment card tokenisation via PCI-DSS Level 1 compliant processors — full card numbers are never stored on b2222 servers;
• Multi-factor authentication options for account login;
• Automated intrusion detection and real-time threat monitoring systems;
• Regular third-party penetration testing and security audits.

Access to personal data within b2222 is restricted on a strict need-to-know basis. Staff with access to personal data receive regular data protection training and are bound by confidentiality obligations. b2222 maintains internal data handling procedures and incident response protocols.

In the event of a personal data breach that poses a risk to your rights and freedoms, b2222 will notify affected players without undue delay, providing details of the nature of the breach, the data affected, the likely consequences, and the measures taken or proposed to address the breach. b2222 maintains a documented data breach response procedure.

While b2222 takes every reasonable precaution to protect your data on our side, you are responsible for maintaining the security of your account credentials. You should use a strong, unique password for your b2222 account and never share it with any third party. If you suspect that your account has been compromised, contact b2222 support immediately via live chat.

b2222 integrates games from leading international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, a session token is shared with the relevant provider to authenticate and deliver the game session. Game providers may collect certain technical data (e.g., session duration, game results) necessary to operate their games. This data is governed by each provider's own privacy policies. b2222 does not share your full name, contact details, or payment information with game providers.

To process transactions, b2222 works with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard processing networks. Each payment partner operates under its own terms of service and privacy policy. b2222 shares only the minimum data necessary to complete each transaction — typically your registered mobile number or tokenised payment reference. b2222 is not responsible for the data practices of payment partners once data has been transmitted to them for transaction processing.

b2222 uses infrastructure and analytics providers to host the platform and measure aggregate usage metrics. Any analytics data shared with these providers is anonymised or pseudonymised and cannot be used to identify individual players. b2222 does not use Google Analytics, Meta Pixel, or any social media tracking tools on its platform.

The b2222 platform does not contain links to third-party websites. If you navigate away from b2222.io independently, please be aware that b2222 has no control over the privacy practices of other websites and accepts no responsibility for their content or data handling.

b2222 is an adults-only platform. Players must be aged 21 years or older to register an account or use any b2222 service. This requirement applies to all players regardless of their location within Bangladesh or any other jurisdiction.

b2222 does not knowingly collect, process, or store personal data from persons under the age of 21. Age verification is conducted as part of the KYC process for all new registrations. If b2222 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all data associated with it will be handled in accordance with applicable law, and any funds held in the account will be returned through the original deposit method after identity verification.

If you have reason to believe that a person under the age of 21 has registered or is using a b2222 account, please contact our support team immediately via live chat or at [email protected]. b2222 takes underage gambling extremely seriously and will investigate all such reports promptly.

b2222 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new product features, or feedback from players. The updated Policy will be published on this page with a revised effective date.

When b2222 makes material changes to this Policy — changes that significantly affect how your personal data is collected or used — we will notify registered players via email and/or an in-platform notification at next login, providing a summary of the key changes and the date on which they take effect.

Your continued use of the b2222 platform after any revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the platform and contact support to request account closure before the effective date of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data b2222 holds about you, please contact the b2222 support team using the details below. All privacy-related enquiries are handled in English and will receive a response within 30 days of receipt.

• Live Chat: Available 24/7 directly within the b2222 platform — average response time under 3 minutes.
• Email: [email protected] (plain text — not a clickable link)
• Support Language: English
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

b2222 is committed to responding to all privacy-related requests within 30 calendar days of receipt of a verified request. Complex requests or those requiring extensive data searches may take longer, in which case b2222 will notify you of the extended timeline within the initial 30-day period.