Privacy Policy — 222rr Casino Bangladesh

1. Information We Collect

When you register for and use the 222rr platform, we collect personal data in several ways. The categories of data we collect, and the circumstances under which we collect them, are described in full below.

1.1 Registration Data

When you create a 222rr account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (used for age verification — players must be 18 or older)
• Email address (used for account notifications, support communications, and promotional messaging where consent has been given)
• Mobile phone number (used for account verification, two-factor authentication, and communication via mobile wallet payment services)
• Residential address within Bangladesh (city, district, and full postal address as required for KYC verification)
• Username and encrypted password (the password is hashed and is never stored or transmitted in plain text)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and store copies of:

• National Identity Card (NID) — front and back
• Passport biographic data page
• Driving licence
• Proof of address documents such as utility bills or bank statements dated within 90 days
• Selfie or liveness-check photograph taken at the time of KYC submission to match against your ID document

KYC documents are stored in encrypted form and accessed only by authorised 222rr compliance personnel on a need-to-know basis.

1.3 Financial Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, Upay, and bank transfer, 222rr records:

• Mobile wallet number or bank account details (account number and bank name — never your full banking PIN or OTP)
• Transaction amounts, timestamps, and reference numbers
• Deposit and withdrawal history maintained for financial audit and AML compliance purposes

1.4 Gameplay and Betting Activity Data

222rr records a complete log of your gameplay activity on the platform, including:

• Game sessions played, bet amounts, outcomes, and resulting account balance changes
• Sports betting markets selected, stake amounts, odds at time of bet placement, and settlement outcomes
• Bonus offers claimed, wagering progress, and bonus expiry events

This data is used for account integrity monitoring, responsible gaming assessments, customer support, and dispute resolution. It is also used in aggregated, anonymised form for platform improvement purposes.

1.5 Technical and Device Data

When you access 222rr via a web browser or mobile device, we automatically collect certain technical data including:

• IP address (used for geolocation, fraud detection, and session security)
• Device type, operating system version, and browser type and version
• Session timestamps, pages visited, and navigation path within the platform
• Referring URL (the address of the page from which you navigated to 222rr)

2. How We Use Your Data

222rr uses the personal data it collects for the following clearly defined purposes. We do not process your data for any purpose not described in this section without first obtaining your explicit consent.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, device data	Contractual necessity
Age and identity verification (KYC)	Registration data, KYC documents	Legal obligation
Payment processing in BDT	Financial transaction data	Contractual necessity
Fraud prevention and AML monitoring	All categories	Legal obligation / Legitimate interest
Customer support and dispute resolution	All categories relevant to the query	Contractual necessity
Responsible gaming assessments	Gameplay data, transaction data	Legal obligation / Legitimate interest
Promotional communications	Email address, mobile number	Consent (opt-in only)
Platform analytics and improvement	Anonymised gameplay and technical data	Legitimate interest

2.1 Marketing Communications

222rr will only send you marketing emails or SMS messages if you have explicitly opted in to receive them during registration or via your Account Settings page. You may withdraw your marketing consent at any time by updating your preferences in Account Settings or by contacting support at [email protected]. Withdrawal of marketing consent does not affect your ability to use the 222rr platform or receive transactional communications such as deposit confirmations and withdrawal notifications.

2.2 Automated Decision-Making

222rr uses automated systems to detect suspicious account activity, potential fraud, and problem gambling indicators. These systems may result in automated actions such as account flags, temporary deposit limits, or session alerts. Where an automated decision results in a material action against your account — such as a suspension — you have the right to request a human review of that decision by contacting [email protected].

3. Data Sharing & Third Parties

222rr does not sell your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the described purpose.

3.1 Payment Processors

To process your BDT deposits and withdrawals, 222rr shares the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, and Upay. Data shared is limited to your registered mobile number (for mobile wallet transactions), transaction amount, and transaction reference. These partners operate under their own privacy policies and are independently responsible for the security of data within their own systems.

3.2 Game Studio Providers

Live casino games on 222rr are provided by third-party studios including Evolution Gaming and Ezugi. To facilitate your participation in live dealer games, a session token is passed to the relevant studio. This token identifies your session but does not include your full name, NID, or financial account details. Studios are contractually prohibited from using session data for any purpose other than delivering the game service.

3.3 Legal and Regulatory Authorities

222rr may disclose your personal data to relevant authorities, law enforcement agencies, or regulatory bodies if required to do so by applicable law, by court order, or in connection with a formal investigation into suspected financial crime, fraud, or underage gambling. Such disclosures are made without prior notice to the account holder where notice is legally prohibited.

3.4 Service Providers

222rr engages a small number of specialist service providers who process data on our behalf under strict data processing agreements. These include cloud infrastructure providers (for secure data storage), cybersecurity vendors (for DDoS protection and fraud monitoring), and email delivery services (for transactional notifications). These providers are not permitted to use your data for their own purposes and must adhere to 222rr's data protection standards.

4. Cookies & Tracking Technologies

222rr uses cookies and similar client-side storage technologies to operate the platform efficiently, keep you securely logged in, and understand how the site is used in aggregate. This section describes the types of cookies we use and how you can manage them.

4.1 Essential Cookies

These cookies are strictly necessary for the 222rr platform to function. They include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure consistent server routing during your session. Essential cookies cannot be disabled without disrupting your ability to use the platform.

4.2 Analytics Cookies

222rr uses first-party analytics to understand how players navigate the platform — which pages are visited most, where sessions begin and end, and how performance metrics such as page load time affect user experience. Analytics data is collected in aggregated, anonymised form and is never linked back to an individual player's account record.

4.3 Fraud Prevention Cookies

To protect players and the integrity of the 222rr platform, we set cookies that help identify unusual device behaviour, detect automated bot activity, and flag sessions that match patterns associated with known fraud attempts. These cookies do not track your activity on other websites.

4.4 No Third-Party Advertising Cookies

222rr does not place third-party advertising or retargeting cookies on your device. We do not participate in cross-site advertising networks, and your 222rr browsing activity is not shared with social media platforms or advertising exchanges for the purpose of serving targeted advertisements on other websites.

4.5 Managing Cookies

You can manage or disable non-essential cookies through your browser's settings. The following browsers provide cookie management options:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Preferences → Privacy & Security → Cookies and Site Data
• Safari (iOS/macOS): Settings → Safari → Privacy → Block All Cookies
• Samsung Internet (Android): Settings → Privacy → Smart Anti-Tracking

Please note that disabling essential cookies will prevent you from logging in and using core platform features. 222rr recommends maintaining essential cookies enabled for the best and most secure experience.

5. Data Retention & Storage

222rr retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and in compliance with applicable legal obligations. The following retention schedule applies to the main categories of data we hold.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	AML legal obligation
KYC identity documents	Duration of account + 5 years post-closure	AML legal obligation
Financial transaction records	7 years from transaction date	Financial records obligation
Gameplay and betting logs	3 years from session date	Dispute resolution / RG monitoring
Support communications	3 years from last interaction	Contractual / dispute resolution
Technical / device log data	12 months on a rolling basis	Fraud prevention / legitimate interest
Marketing consent records	Until consent is withdrawn + 2 years	Consent compliance

Upon expiry of the applicable retention period, data is securely deleted or anonymised such that it can no longer be attributed to an individual. Where a legal hold is in place — for example, in connection with an active fraud investigation or court proceeding — data may be retained beyond the standard period until the hold is lifted.

5.1 Data Storage Location

222rr stores player data on secure cloud infrastructure. All storage environments are protected by access controls, encryption at rest, and regular security audits. Data is not transferred to or stored in jurisdictions with materially weaker data protection standards than Bangladesh without the implementation of appropriate contractual safeguards.

6. Data Security Measures

222rr implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key technical and organisational security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or app and 222rr servers is encrypted in transit using TLS 1.3, the current industry standard for secure web communications.
• Password Hashing: Your 222rr account password is hashed using bcrypt with a unique per-account salt before storage. Plain-text passwords are never stored or logged by 222rr systems.
• Two-Factor Authentication (2FA): 222rr offers optional two-factor authentication for all accounts. We strongly recommend enabling 2FA via your Account Security settings to add an additional layer of protection beyond your password.
• Role-Based Access Control (RBAC): Access to player personal data within 222rr's internal systems is restricted to authorised staff on a strict need-to-know basis. Access is logged, reviewed periodically, and revoked immediately upon staff departure.
• Regular Security Audits: The 222rr platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident Response Plan: In the event of a personal data breach that poses a risk to players, 222rr will notify affected account holders without undue delay and implement its incident response plan to contain the breach and prevent recurrence.

7. Your Rights as a Player

As a registered 222rr player based in Bangladesh, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 10 business days on Bangladesh Standard Time (UTC+6).

7.1 Right to Access

You have the right to request a copy of the personal data 222rr holds about you, including the categories of data held, the purposes for which it is processed, and the retention periods that apply. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) where technically feasible.

7.2 Right to Rectification

If any personal data 222rr holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the correction relates to core identity data such as your legal name or date of birth, we will require supporting documentation to verify the change before updating our records.

7.3 Right to Erasure

You may request that 222rr delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that this right is subject to limitations — specifically, we are legally required to retain certain financial and identity records for AML compliance purposes even after account closure. In such cases, we will delete all data not subject to a legal hold and inform you of any data that must be retained and the reason why.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a rectification request is being reviewed — you may request that 222rr restrict processing of your personal data to storage only, without further active use. During a restriction period, your data will not be used for analytics, profiling, or marketing.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive the personal data you have provided to 222rr in a portable format so that it can be transferred to another service provider if you wish.

7.6 Right to Object to Marketing

You have the absolute right to object to your personal data being used for direct marketing at any time. Upon receiving your objection, 222rr will immediately cease using your data for marketing purposes. You can exercise this right via Account Settings or by emailing [email protected].

8. Updates to This Privacy Policy

222rr reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform's data handling infrastructure. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the 222rr platform for a period of at least 7 days prior to the revised policy taking effect.

The effective date of the current version of this Privacy Policy is displayed in the hero section at the top of this page and in the metadata badges below. It is your responsibility to review this policy periodically. Continued use of the 222rr platform following any update to this policy constitutes your acceptance of the revised terms.

8.1 Governing Language

This Privacy Policy is written in English. The English version is the sole authoritative version. In the event of any conflict between the English text and any translation provided for user convenience, the English text shall prevail in all respects.

8.2 Contact for Privacy Queries

For any questions, concerns, or requests relating to this Privacy Policy or 222rr's data handling practices, please contact our support team in writing at [email protected]. Our team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6) and will respond to formal privacy queries within 5 business days.