222tb Privacy Policy — How We Protect Your Data

Introduction

222tb ("we", "us", "the Platform") is committed to protecting the privacy of every player who registers and plays on the 222tb platform. This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the conditions under which we may share it with third parties, and the rights available to you as a data subject. This Policy applies to all users of the 222tb website and related services, including players accessing the platform from Bangladesh and any other location.

By registering an account or using any service on the 222tb platform, you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not create an account or use the platform. This Policy should be read alongside our Terms and Conditions, which govern the overall relationship between you and 222tb.

Our Privacy Commitments at a Glance

Six core principles that define how 222tb handles your personal information.

1. What Personal Data We Collect

222tb collects personal data across several categories. We collect only the data that is necessary for the specific purpose described. Below is a summary of the categories of data we collect and the circumstances in which each category is collected.

222tb does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily. We do not collect biometric data. All data collected is stored on secure servers with access restricted to authorised personnel only.

2. How We Use Your Data

222tb processes your personal data only for legitimate, specified purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The following describes the main purposes for which your data is used.

• Account creation and management: to register your account, verify your identity, maintain your account settings, and process KYC documentation.
• Financial transaction processing: to receive your deposits, process your withdrawal requests, maintain an accurate ledger of your account balance, and comply with anti-money laundering obligations.
• Platform security and fraud prevention: to detect and investigate suspicious activity, prevent multiple account registrations, identify bonus abuse, and protect the integrity of the platform for all users.
• Responsible gaming: to monitor gameplay patterns for signs of problem gambling, to enforce deposit limits and self-exclusion tools, and to comply with responsible gaming obligations.
• Customer support: to respond to your queries, complaints, and requests, and to maintain a record of communications for quality assurance and dispute resolution purposes.
• Platform improvement: to analyse aggregated, anonymised usage data in order to improve the performance, usability, and content of the 222tb platform. Individual player data is not used for this purpose without anonymisation.

222tb does not use your personal data for unsolicited direct marketing. If 222tb introduces a marketing communications programme in the future, participation will be strictly opt-in, and you will have the right to withdraw consent at any time.

3. Legal Basis for Processing

222tb processes personal data on the following legal bases. Each processing activity is mapped to at least one of these bases, and we will not process your data without a legitimate lawful basis for doing so.

• Contractual necessity: processing required to fulfil the contract between you and 222tb, including account registration, transaction processing, and customer support.
• Consent: processing carried out on the basis of your explicit consent, including the optional submission of additional personal information for account personalisation or responsible gaming assessments.
• Legal obligation: processing necessary for compliance with applicable law, including anti-money laundering regulations, age verification requirements, and fraud reporting obligations.
• Legitimate interests: processing carried out for 222tb's legitimate business interests where those interests are not overridden by your rights, including platform security monitoring, fraud prevention, and aggregated analytics for service improvement.

4. Sharing Your Data with Third Parties

222tb does not sell your personal data to any third party. We may share your data with carefully selected third-party service providers where sharing is strictly necessary for the operation of the platform. All third-party recipients are contractually bound to process your data only for the specific purpose for which it was shared, to protect it with appropriate security measures, and not to retain it beyond the period necessary for that purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment processors receive transaction data necessary to process your deposits and withdrawals. They process this data under their own privacy policies and are independent data controllers for payment processing purposes.
• Identity verification providers: third-party KYC and age verification services may receive copies of your identification documents in order to complete the mandatory verification process. These providers are bound by strict data handling agreements.
• Fraud prevention and security services: aggregated or anonymised data may be shared with fraud detection platforms to identify patterns of suspicious behaviour across the industry. No individually identifiable data is shared for this purpose without a specific legal basis.
• Law enforcement and regulatory authorities: where required by applicable law or a valid legal order, 222tb may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units. 222tb will notify you of any such disclosure where legally permitted to do so.

222tb does not transfer your personal data outside of the jurisdictions in which it operates without ensuring that equivalent data protection standards are in place at the destination. Where international transfers occur, they are governed by appropriate data transfer mechanisms and contractual safeguards.

5. Cookies & Tracking Technologies

222tb uses cookies and similar session technologies to operate the platform effectively and securely. Cookies are small text files stored on your device by your browser when you visit the 222tb website. They are not used to collect personal data for advertising purposes. The table below summarises the types of cookies used on the 222tb platform.

222tb does not use third-party advertising cookies, cross-site tracking technologies, or social media tracking pixels. You may control cookie settings through your mobile browser preferences. Disabling essential cookies may prevent the platform from functioning correctly.

6. Data Retention

222tb retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention periods apply: account data and KYC documents are retained for a minimum of 5 years following account closure to satisfy anti-money laundering and fraud prevention obligations; transaction records are retained for a minimum of 5 years following the date of each transaction; support communications are retained for 2 years following resolution of the relevant query or complaint; usage and session data is retained in anonymised form for up to 24 months for platform analytics purposes.

When personal data is no longer required and there is no legal basis for continued retention, 222tb will securely delete or anonymise that data. Secure deletion involves overwriting stored data so that it cannot be reconstructed. Where full deletion is not immediately possible due to system architecture, the data will be isolated and protected from further processing until deletion is completed.

7. Your Rights Over Your Personal Data

As a user of the 222tb platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the 222tb support team using the email address displayed in the footer of this website. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

• Right of access: you have the right to request a copy of the personal data 222tb holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: you have the right to request that inaccurate or incomplete personal data held by 222tb be corrected or completed without undue delay.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements that override this right in specific circumstances.
• Right to restrict processing: you have the right to request that 222tb restrict the processing of your personal data in certain circumstances, such as while the accuracy of your data is being contested or while a complaint is under investigation.
• Right to withdraw consent: where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

222tb will not charge a fee for handling data subject requests. We may ask you to verify your identity before fulfilling a request in order to ensure that personal data is not disclosed to an unauthorised party. If your request is refused, we will explain the reason and advise you of any available right of appeal.

8. Security Measures

222tb implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption on all data transmissions between your device and our servers; encrypted storage of sensitive account data and KYC documents at rest; access controls that limit internal access to personal data to authorised personnel with a legitimate operational need; regular security assessments of platform infrastructure; and monitoring systems that detect and alert on unusual access patterns or potential data breaches. While 222tb takes reasonable and proportionate steps to protect your data, no security system is entirely infallible. In the event of a personal data breach that is likely to result in a high risk to your rights, 222tb will notify affected players without undue delay.

9. Minors & Age Restriction

The 222tb platform is strictly for adults aged 21 years and above. 222tb does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you are a parent or guardian and you believe that your child has registered on 222tb without your knowledge, please contact us immediately using the support email in the footer of this page so that we can take prompt action.

10. Changes to This Privacy Policy

222tb reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this Policy, we will notify registered users via the contact details held on their account and update the "Last updated" date at the top of this page. Non-material changes (such as corrections to typographical errors or clarification of existing language) will be reflected by updating the "Last updated" date only, without individual notification.

Your continued use of the 222tb platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The most current version of this Policy will always be available at the Privacy Policy page of the 222tb website.

11. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 222tb handles your personal data, please contact the 222tb support team by sending an email to the address shown in the footer of this website. All privacy-related enquiries will be acknowledged within 48 hours and handled with priority. If you wish to exercise any of your data subject rights as described in Section 7, please state clearly in your message which right you wish to exercise and provide sufficient information to verify your identity.