222kd Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 222kd ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of players and visitors who access or use the 222kd website at https://222kd.io ("the Site"). 222kd is an internationally operated online betting and casino platform serving English-speaking adult players in Bangladesh.

This Policy is incorporated by reference into the 222kd Terms and Conditions and forms part of the binding agreement between 222kd and each registered account holder. By creating an account, making a deposit, or continuing to use the Site, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.

This Policy applies to all personal data collected by 222kd through the Site, including data collected during account registration, identity verification (KYC), payment transactions, customer support interactions, and general platform usage. It does not apply to the data practices of third-party game providers, payment processors, or other external services whose own privacy policies govern their data handling.

Data We Collect

222kd collects personal data across several categories depending on the nature of your interaction with the Platform. The following table provides a comprehensive overview of the data categories collected, their specific examples, and the purpose for which each category is gathered.

2.1 Data You Provide Directly

The majority of personal data held by 222kd is data that you actively provide to us during account registration, the KYC verification process, payment transactions, or when contacting our customer support team. You are under no obligation to provide this data, but failure to do so may prevent you from accessing certain Platform features, completing verification, or processing withdrawals.

2.2 Data Collected Automatically

When you access the 222kd Site, certain technical and usage data is collected automatically by our servers and analytics systems. This includes your device's IP address, the browser and operating system you are using, pages and game lobbies you visit, the duration of your sessions, and click-level interaction data. This data is used exclusively for Platform security, fraud prevention, and service quality improvement purposes.

How We Use Your Data

222kd uses the personal data it collects for specific, documented purposes only. We do not use your data for purposes that are incompatible with those stated in this Policy. The primary purposes for which we process your personal data are as follows:

• Account Administration: To create and manage your 222kd account, authenticate your identity at login, and enable access to Platform features including games, betting markets, and balance management tools.
• Identity Verification (KYC): To verify that you are at least 21 years of age, that the identity information you have provided is accurate, and that your payment methods are registered in your own name — as required for safe and compliant Platform operation.
• Payment Processing: To process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain accurate transaction records for your account history.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance relating to your account or any game session.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, underage access, and other activities that are prohibited under our Terms and Conditions.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, to enforce self-exclusion and deposit limit settings you have activated, and to proactively reach out where we identify a concern.
• Legal & Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, financial crime prevention requirements, and lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game performance, website design, and the overall player experience on 222kd.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, BPL and T20 cricket betting alerts, and seasonal promotions where you have given explicit consent to receive such communications.

Legal Basis for Processing

222kd processes your personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions, including account creation, payment processing, and customer support.
• Legitimate Interests: Processing necessary for fraud prevention, Platform security, responsible gaming monitoring, and improving service quality — where these interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable law, including AML and KYC obligations and responses to lawful authority requests.
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit, freely withdrawable consent. You may withdraw consent at any time via account settings or by contacting [email protected].

Data Sharing & Disclosure

222kd does not sell your personal data to any third party. We share your data only in the following limited and documented circumstances:

• Payment Processors: We share financial transaction data with our approved payment partners (including bKash, Nagad, Rocket, Upay, and card processing gateways) solely to the extent required to process your deposits and withdrawals. These partners are contractually bound to process your data only for payment purposes.
• KYC Verification Providers: Identity documents submitted for verification may be processed by our contracted KYC service providers who operate dedicated, secure document verification infrastructure. These providers are prohibited from using your documents for any purpose other than verifying your identity for 222kd.
• Fraud Prevention Services: Technical data including IP addresses and device fingerprints may be shared with fraud detection services to identify suspicious account activity, multi-accounting, and bot-driven behaviour.
• Game Providers: When you play a game provided by a third-party studio such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, or Microgaming, your player session data (player ID, wager amounts, session outcomes) is shared with that provider as technically necessary to operate the game. Game providers maintain their own data security standards and certifications.
• Legal Authorities: We may disclose personal data to law enforcement, regulatory bodies, or other competent authorities where we are legally required to do so or where disclosure is necessary to prevent serious harm.

Cookies & Tracking Technologies

222kd uses cookies and similar browser-based technologies on the Site to support Platform functionality, maintain session security, and understand how Players interact with the website. We categorise our cookie usage as follows:

• Strictly Necessary Cookies: These cookies are essential for the Site to function correctly. They enable secure login session management, shopping cart and balance display, fraud detection scripts, and page navigation. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: With your consent, we may use first-party analytics tools to collect anonymised data on page views, session duration, and user journey paths. This data is used exclusively to improve the Site and is never used for cross-site advertising profiling.
• Preference Cookies: These cookies remember your language settings, display preferences, and responsible gaming tool configurations so that your settings are preserved across sessions.

222kd does not deploy third-party advertising cookies, retargeting pixels, or social media tracking cookies. You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use Platform features.

Data Retention

222kd retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law or regulatory obligation. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted from 222kd's active systems and any long-term backup storage, or will be irreversibly anonymised such that it can no longer be linked to an identifiable individual.

Data Security

222kd implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and 222kd servers is encrypted using industry-standard TLS 1.3 protocol. This prevents interception of your data in transit.
• Encrypted Data Storage: Sensitive data fields — including payment account references and identity document metadata — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access Controls: Access to personal data within 222kd's internal systems is governed by role-based access controls on a strict need-to-know basis. No member of staff has unrestricted access to the full range of player personal data.
• Two-Factor Authentication: All 222kd internal administrative accounts are protected by mandatory two-factor authentication. Player accounts also support two-factor authentication via SMS OTP.
• Penetration Testing: 222kd's technical infrastructure is subjected to periodic penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: 222kd maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, you will be notified within a reasonable timeframe along with details of the nature of the incident and the steps we have taken.

Your Rights as a Data Subject

As a 222kd account holder, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request" and your registered account email address:

• Right of Access: You may request a copy of the personal data 222kd holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: Where any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Note that this right is subject to our legal obligation to retain certain categories of data (such as KYC documents and transaction records) for defined periods.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Right to Object: You have the right to object to processing based on legitimate interests. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

222kd will acknowledge all data rights requests within five (5) business days and will provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by up to a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

Children & Minors

The 222kd Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain the personal data of any person under the age of 21. Account registration is prohibited for individuals under 21, and our KYC verification process is specifically designed to detect and reject underage registrations.

If 222kd becomes aware — through its own verification processes or through a report — that personal data belonging to a person under the age of 21 has been collected, all such data will be deleted immediately, the relevant account will be closed, and any associated funds will be handled in accordance with our responsible gaming standards.

If you are a parent or guardian and you believe that a minor in your care has registered a 222kd account or submitted personal data to our Platform, please contact us immediately at [email protected] so that appropriate action can be taken without delay. 21+ Only

International Data Transfers

222kd is an internationally operated platform. As a result, your personal data may be processed on servers or by service providers located outside of Bangladesh. Where personal data is transferred internationally, 222kd ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Such safeguards may include contractual data transfer agreements between 222kd and its overseas service providers that impose equivalent data protection obligations, or transfers to jurisdictions that maintain recognised levels of data protection infrastructure. By using the 222kd Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

Third-Party Links

The 222kd Site does not contain outbound hyperlinks to third-party websites as a matter of design policy. However, the third-party game providers whose games are embedded within the Platform operate their own technical environments and, in some cases, their own player-facing interfaces. 222kd is not responsible for the privacy practices of third-party game studios, payment gateways, or any other external services accessed in connection with Platform use.

We encourage all Players to review the privacy policies of any third-party services they interact with, including mobile wallet providers such as bKash, Nagad, and Rocket, whose own privacy terms govern their handling of your mobile financial data.

Marketing Communications

222kd may send you promotional emails, SMS notifications, and in-platform messages regarding bonuses, cricket betting promotions, BPL season offers, Eid special promotions, and new game launches, but only where you have given explicit consent to receive such communications at the time of registration or subsequently via your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link contained in any marketing email sent by 222kd.
• Updating your communication preferences in the account settings section of your 222kd account dashboard.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Please note that opting out of marketing communications will not affect the delivery of transactional or account-related messages, such as deposit confirmations, withdrawal status updates, or security alerts. These are necessary account communications and cannot be disabled.

Updates to This Privacy Policy

222kd reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, the introduction of new Platform features, or updates to applicable legal and regulatory requirements. The effective date shown at the top of this document will be updated whenever a new version of the Policy is published.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your data — we will notify registered account holders by email to their registered address at least fourteen (14) days prior to the updated Policy taking effect. Your continued use of the 222kd Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically to stay informed about how 222kd protects your personal information. The most current version will always be accessible at https://222kd.io/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 222kd handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data compliance team and will receive a response within five (5) business days.

• Email: [email protected] (please use subject line: "Privacy Enquiry")
• Website: https://222kd.io/privacy-policy
• Response Time: Within 5 business days (Bangladesh Standard Time, UTC+6)

When submitting a privacy enquiry or data rights request, please include your registered email address and account username so that our team can locate your account record and respond efficiently and accurately.