2c222 Privacy Policy

2c222 operates the online casino and sports betting platform accessible at 2c222.io (the "Platform"). In the course of providing our services to players across Bangladesh, we collect, process, and store certain personal information about you. We take our obligations regarding your personal data with the utmost seriousness.

This Privacy Policy (the "Policy") describes in full detail the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, the security measures we apply to protect it, how long we retain it, and the rights you have as a data subject. This Policy applies to all users of the 2c222 Platform, including registered players, visitors browsing the Platform without an account, and any individual who contacts us via our support channels.

By accessing or using the 2c222 Platform, you confirm that you have read, understood, and agreed to the collection and use of your personal data as described in this Policy. If you do not agree to this Policy, you must not access or use the 2c222 Platform.

This Policy should be read alongside our Terms and Conditions, which govern your overall use of the 2c222 Platform. In the event of any conflict between this Policy and the Terms and Conditions on a privacy-related matter, this Policy shall prevail.

2c222 collects personal data in the following categories. The specific data points collected from any individual player will vary depending on the features and services they use on the Platform.

2c222 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide actively when registering an account, completing identity verification (KYC), making a deposit or withdrawal, contacting Player Support, or filling in any form on the Platform.
• Automated Technical Collection: Data collected automatically as you interact with the Platform, including through cookies, web beacons, pixel tags, session-replay technologies, and server log files. See Section 7 (Cookies & Tracking) for full details.
• Payment Processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor shares a transaction reference and confirmation status with 2c222. No full financial credentials are transmitted to 2c222.
• Identity Verification Partners: Where 2c222 uses a third-party KYC provider to verify your identity documents, that provider may share the outcome of the verification check (pass / fail / escalate) and relevant data points with 2c222. These partners are bound by strict data processing agreements.
• Fraud Prevention & Anti-Money-Laundering Services: 2c222 may receive data from specialist fraud-detection and AML screening services to cross-reference against watchlists, sanctions lists, and known fraud patterns.
• Publicly Available Sources: In limited circumstances, 2c222 may supplement the information you provide with data from publicly available sources, such as electoral registers or public records, solely for the purpose of identity verification and fraud prevention.

2c222 uses the personal data it collects for the following specific purposes. We process only the minimum data necessary for each purpose (the principle of data minimisation).

• Account Creation and Management: To register your player account, maintain your profile, authenticate your identity at login, and administer your account settings and preferences.
• Age and Identity Verification: To verify that you are aged 21 or above and that the identity information you have provided is accurate, as required by our responsible gaming commitments and applicable compliance standards.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), to record transaction histories, and to investigate any disputed transactions.
• Platform Delivery and Improvement: To provide access to 500+ casino games, live cricket betting, sports markets, arcade games, and all other features of the 2c222 Platform; to monitor Platform performance; and to develop, test, and improve our products and services.
• Customer Support: To respond to your support queries, complaints, and feedback via email or live chat, and to maintain records of communications for quality assurance and training purposes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and any other prohibited conduct described in the 2c222 Terms and Conditions.
• Responsible Gaming: To administer deposit limits, loss limits, self-exclusion requests, cool-off periods, and session time reminders; to monitor player behaviour for signs of problem gambling; and to intervene where appropriate in accordance with our responsible gaming policy.
• Legal and Regulatory Compliance: To comply with any applicable legal obligation, including record-keeping requirements, reporting obligations, and responses to lawful requests from courts or regulatory authorities.
• Personalised Experience and Marketing (where consented): To personalise the content, game recommendations, and promotional offers displayed to you on the Platform, and — where you have given explicit consent — to send you promotional communications about 2c222 offers, bonuses, and new features via your registered mobile number or email address.

2c222 processes your personal data on the following legal bases, depending on the purpose for which the data is used:

• Contractual Necessity: The majority of the data processing described in Section 4 is necessary for the performance of the contract between you and 2c222 — specifically, the Terms and Conditions you accepted upon registration. Without this processing, 2c222 could not provide its services to you.
• Legal Obligation: Certain processing activities — including identity verification, age verification, anti-money-laundering checks, and financial record-keeping — are required by applicable legal and regulatory standards. 2c222 must carry out this processing regardless of your preferences.
• Legitimate Interests: 2c222 processes certain data (such as technical and usage data for fraud detection, Platform security monitoring, and service improvement) on the basis of its legitimate interests as a business, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where 2c222 sends you direct marketing communications or uses non-essential tracking technologies, we do so only on the basis of your explicit, freely given, and informed consent. You may withdraw consent at any time without penalty.

2c222 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa network processors, and Mastercard network processors, to facilitate your deposit and withdrawal transactions.
• Identity Verification (KYC) Providers: Third-party identity verification services that assist 2c222 in verifying the authenticity of identity documents and confirming that players meet the 21+ age requirement.
• Fraud Prevention and AML Services: Specialist providers of anti-fraud and anti-money-laundering screening technology that help 2c222 protect the Platform and its players from financial crime.
• Game Content Providers: Game studios and platform providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive only the minimum technical data required to deliver game sessions (such as a pseudonymous session token). They do not receive your full identity or financial data.
• IT Infrastructure and Cloud Service Providers: Hosting, storage, and infrastructure providers that store and process Platform data on behalf of 2c222, subject to strict contractual data protection obligations.
• Professional Advisers: Legal counsel, auditors, and accountants, where disclosure is necessary for the provision of professional services to 2c222.
• Law Enforcement and Regulatory Authorities: Where 2c222 is required to disclose personal data by law, court order, or the lawful instruction of a competent authority, we will comply with that obligation and, where legally permitted, notify the affected player.

2c222 uses cookies and similar tracking technologies to operate the Platform effectively, to remember your preferences, to analyse how the Platform is used, and — where you have consented — to deliver personalised content. A "cookie" is a small text file placed on your device by our server when you visit the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account authentication, session management, game loading, and the prevention of cross-site request forgery attacks. You cannot opt out of strictly necessary cookies while using the Platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most frequently, where users encounter errors, and how long sessions last. This data helps us continuously improve 2c222 for players in Dhaka, Chittagong, Sylhet, Khulna, and across Bangladesh.
• Functional Cookies: These cookies remember choices you have made on the Platform, such as your preferred display settings, responsible gaming reminder intervals, and last-viewed game category, to provide a more personalised experience.
• Targeting and Personalisation Cookies (Consent Required): Where you have provided consent, these cookies are used to tailor the promotional offers, game recommendations, and content displayed to you, based on your prior activity on the Platform. You may withdraw consent for these cookies at any time via your account settings.

Most web browsers are set to accept cookies by default. You may configure your browser to reject all cookies or to alert you when a cookie is being placed. Please note that disabling certain cookies may affect the functionality of the 2c222 Platform and prevent some features from operating correctly.

2c222 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-Bit SSL Encryption: All data transmitted between your device and the 2c222 Platform is encrypted using TLS/SSL technology with a minimum 256-bit key strength, the same standard used by major international financial institutions.
• Encrypted Data Storage: Sensitive personal data held in our databases — including identity documents, financial transaction records, and account credentials — is stored in encrypted form.
• Access Controls: Access to personal data within 2c222's systems is restricted to staff and contractors who require it in order to perform their legitimate business functions. All such access is logged and subject to regular review.
• Two-Factor Authentication: 2c222 supports two-factor authentication for player accounts. We strongly recommend all players activate this feature to protect their account from unauthorised access.
• Regular Security Audits: 2c222's Platform and data infrastructure are subject to regular internal and third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected individuals, 2c222 will take immediate steps to contain the breach, assess its scope, and notify affected players and relevant authorities in accordance with applicable law.

2c222 retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to retain it by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Personal data associated with an active player account is retained for the lifetime of the account and for a minimum period of five (5) years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction Records: Financial transaction records — including deposit and withdrawal histories — are retained for a minimum of seven (7) years following the date of the transaction, consistent with applicable financial compliance obligations.
• Identity Verification Documents: Copies of identity documents submitted during KYC verification are retained for a minimum of five (5) years following account closure.
• Customer Support Records: Communications with Player Support (emails, chat logs, support tickets) are retained for a maximum of three (3) years from the date of the communication, unless they relate to an ongoing dispute or investigation.
• Responsible Gaming Records: Records of self-exclusion requests and responsible gaming tool activations are retained for the full duration of the relevant restriction period and for five (5) years thereafter, to prevent the inadvertent re-registration of excluded players.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with consent management obligations.

When personal data is no longer required and its retention period has expired, 2c222 will securely delete or anonymise it so that it can no longer be linked to any identifiable individual.

Subject to applicable law, you have the following rights in relation to the personal data that 2c222 holds about you. To exercise any of these rights, please contact our Player Support team at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data that 2c222 holds about you, along with information about how that data is being used.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request that 2c222 delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations or to defend against legal claims.
• Right to Restriction of Processing: You may request that 2c222 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. Where processing is based on legitimate interests, you may also object, and 2c222 must cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that took place prior to withdrawal.

The 2c222 Platform is strictly intended for adults aged 21 years and above. 2c222 does not knowingly collect personal data from persons under the age of 21, and we employ active age-verification measures during the registration process to enforce this requirement.

If 2c222 discovers or is notified that personal data has been collected from a person under the age of 21, it will immediately suspend the relevant account, delete the collected data to the extent permitted by applicable law, and take all steps required under our responsible gaming policy. Any parent or guardian who believes that a minor in their care has registered on the 2c222 Platform should contact us immediately at [email protected] so that we can take prompt action.

The 2c222 Platform may contain references to third-party game providers and payment services. While 2c222 partners with reputable providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, these third parties operate under their own privacy policies and data practices, which are independent of this Policy.

2c222 accepts no responsibility or liability for the privacy practices of any third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with. 2c222 does not include links to unaffiliated external websites, and this Policy applies exclusively to the 2c222 Platform at 2c222.io.

2c222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players by posting a prominent notice on the Platform and updating the "Last updated" date at the top of this document.

Your continued use of the 2c222 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you have concerns about any changes to this Policy, you are encouraged to contact our Player Support team before continuing to use the Platform.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 2c222 is handling your personal data, please contact our Player Support team. We are available 24 hours a day, 7 days a week, 365 days a year.

Email: [email protected] (plain text — not a clickable link)

Please include your registered account username and mobile number in all data-related enquiries so that we can verify your identity and process your request efficiently. All formal data rights requests will be acknowledged within 5 business days and resolved within 30 days, in accordance with applicable data protection standards.