db2222 Privacy Policy

1.1 Information You Provide Directly

When you register an account, make a deposit, contact support, or update your profile, you provide us with personal information including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you are 21 years of age or older)
• Residential address in Bangladesh
• Mobile phone number registered in Bangladesh
• Email address
• Payment method details — mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account details for withdrawal processing
• Identity documents submitted for KYC verification (National Identity Card, passport, or driving licence)
• Any correspondence or communications you send to our support team

1.2 Information Generated by Platform Use

When you use db2222, certain technical and behavioural data is automatically generated and recorded. This includes:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session duration, login and logout timestamps (Bangladesh Standard Time, UTC+6)
• Pages visited, games played, bets placed, and features accessed
• Deposit and withdrawal transaction records, including amounts in BDT and payment method used
• Bonus and promotional activity — which offers were claimed and associated wagering history
• Responsible gaming tool usage — deposit limits set, cool-off periods activated, self-exclusion requests

1.3 Information from Third Parties

To fulfil our obligations around identity verification and fraud prevention, db2222 may receive limited personal data from third-party service providers, including:

• Identity verification agencies that cross-reference the documents you submit during KYC against official records
• Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay) who confirm transaction status
• Fraud screening and AML (anti-money laundering) compliance tools that flag unusual transaction patterns
• Game providers (e.g., Evolution Gaming, Pragmatic Play, Spribe) who may share limited session data for dispute resolution purposes

db2222 does not purchase marketing lists or receive personal data from social media platforms for targeting purposes.

2.1 Legal Basis for Processing

db2222 processes your personal data on the following legal bases:

• Contract performance — processing necessary to provide the services you have signed up for, including account management and payment processing
• Legal obligation — processing required to comply with applicable AML regulations, identity verification requirements, and law enforcement requests
• Legitimate interests — fraud detection, platform security, responsible gaming monitoring, and anonymised analytics, where these do not override your fundamental rights
• Consent — direct marketing communications, where you have explicitly opted in and may withdraw consent at any time

3.1 When We Share Your Data

db2222 shares personal data with third parties only in the following limited circumstances:

• Payment processors: mobile financial service providers (bKash, Nagad, Rocket, Upay) and local banks receive the minimum data required to execute your deposit or withdrawal transaction
• Identity verification providers: KYC partners receive copies of identity documents you submit in order to complete the verification process
• Game providers: licensed game studios such as Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe receive limited session identifiers necessary to deliver their games and resolve any technical disputes
• Fraud and AML screening tools: transaction data is processed by compliance software to flag patterns that may indicate money laundering or fraudulent activity
• Law enforcement and regulatory authorities: where we are required by law, court order, or binding regulatory instruction to disclose personal data, we will do so and will notify you where legally permitted

3.2 International Data Transfers

Some of db2222's technology partners and game providers are based outside Bangladesh. Where personal data is transferred internationally, db2222 ensures that appropriate safeguards are in place — including contractual data protection clauses — to maintain a standard of protection equivalent to that described in this policy. No personal data is transferred to a jurisdiction that does not provide adequate protections for the type of data being transferred.

3.3 Business Transfers

In the event that db2222 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held about registered players may form part of the transferred assets. In such an event, db2222 will notify affected players via the email address associated with their account before their personal data becomes subject to a different privacy policy.

4.1 What Cookies db2222 Uses

db2222 uses a small number of first-party cookies to operate the platform correctly. These include:

• Session cookies — keep you logged in during your active session; automatically deleted when you close your browser
• Preference cookies — remember settings such as your chosen language or responsible gaming limits within the interface
• Security cookies — used to detect unusual login patterns and protect your account from unauthorised access attempts
• Analytics cookies — anonymised data about how pages are navigated, used to improve the platform experience; no personally identifiable information is stored in analytics cookies

db2222 does not use third-party advertising cookies or tracking pixels for behavioural advertising.

4.2 Managing Cookies

You can control cookie behaviour through your browser settings. Note that disabling session or security cookies will prevent you from logging in to your db2222 account, as these are technically essential for the platform to function. Disabling analytics cookies will not affect your ability to use any feature of the platform.

5.1 Right of Access

You may request a copy of all personal data db2222 holds about you at any time. We will provide this in a structured, commonly used format within 30 days of receiving a verified request. To submit a data access request, email [email protected] from the email address registered to your account with the subject line "Data Access Request".

5.2 Right to Rectification

If any personal data db2222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your phone number) can be made directly in your account dashboard. For corrections to identity documents or KYC-verified data, please contact [email protected] with supporting evidence.

5.3 Right to Erasure

You may request that db2222 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to override by our legal retention obligations: AML compliance rules require us to retain transaction and identity records for a defined period after account closure, and we cannot delete data we are legally required to hold.

5.4 Right to Restrict Processing

You may ask db2222 to pause processing of your personal data while a dispute about its accuracy is resolved, or while you are contesting our right to continue processing it. During a restriction period, db2222 may store the data but will not actively use it for any purpose other than storage and security monitoring.

5.5 Right to Object to Marketing

If you have opted in to receive promotional communications from db2222 — including seasonal offers tied to BPL, Eid, Pohela Boishakh, or other events — you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or receive account-essential communications.

5.6 Right to Data Portability

Where db2222 processes your personal data on the basis of contract performance or your explicit consent, you have the right to receive that data in a portable, machine-readable format so that you can transfer it to another service provider if you wish. To request a portable data export, contact [email protected].

6.1 No Data Collection from Persons Under 21

db2222 does not knowingly collect personal data from any person under the age of 21. If it comes to our attention that a person under 21 has provided personal data to db2222, that data will be deleted promptly and the associated account closed. Parents and guardians who believe a minor has accessed db2222 should contact [email protected] immediately.

6.2 Data Retention Schedule

The following general retention periods apply to different categories of personal data held by db2222:

• Account registration data: held for the life of the account plus 5 years after closure
• Transaction records (deposits, withdrawals): held for 7 years to meet AML compliance obligations
• KYC identity documents: held for 5 years after the last transaction on the account
• Support correspondence: held for 3 years after the issue was resolved
• Marketing consent records: held for the duration of consent plus 2 years
• Anonymised analytics data: retained indefinitely — contains no personal identifiers

6.3 Policy Updates

db2222 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform services. Where changes are material — meaning they significantly affect how your data is used or your rights over it — we will notify registered players by email at least 14 days before the updated policy takes effect. The effective date at the top of this policy will always reflect the date of the most recent substantive revision. Continued use of the db2222 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.