222ber Privacy Policy

1 Data We Collect

222ber collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party service providers who assist in delivering our services. The categories of data we collect are described below.

1.1 Registration Data

When you create a 222ber account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number (used for account security and optional SMS notifications)
• Residential address including city, district, and postal code (Bangladesh addresses accepted)
• Preferred currency (Bangladeshi Taka, BDT)
• Username and encrypted password

1.2 KYC and Identity Verification Data

As part of our mandatory Know Your Customer (KYC) process, we collect:

• A copy of a valid government-issued photo ID (National Identity Card, passport, or driving licence)
• A live selfie or photograph for facial matching against the submitted ID document
• Proof of ownership of the payment method used (e.g., a screenshot of your bKash or Nagad account showing the registered name)
• Any additional documentation requested in the course of an enhanced due diligence review

1.3 Financial Transaction Data

For every deposit and withdrawal processed through your 222ber account, we record:

• Transaction type (deposit or withdrawal), amount, and currency
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Transaction reference numbers and timestamps (Bangladesh Standard Time, UTC+6)
• Account name and number associated with the payment method (stored in encrypted form)

1.4 Gaming Activity Data

We record a full history of your gaming and betting activity on the platform, including:

• Games played, bet amounts, and outcomes for all casino and slot sessions
• Cricket betting markets, selections, stake amounts, and settlement results
• Bonus claims, wagering progress, and promotion usage history
• Session start and end times, game duration, and frequency of play

This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud prevention — not for selling to third parties.

1.5 Technical and Device Data

When you access the 222ber platform, our systems automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP (city and country level only)
• Device type, operating system, and browser version
• Session identifiers, login timestamps, and session duration
• Referring URL (the page from which you navigated to 222ber, where applicable)

2 Use of Data

222ber processes your personal data for specific, legitimate purposes. We do not use your data in any way that is incompatible with the purpose for which it was collected. The primary purposes for which your data is used are detailed below.

2.1 Marketing Opt-Out

If you have opted in to marketing communications, you may withdraw your consent at any time by updating your notification preferences in your account settings or by sending an opt-out request to [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect your ability to use the 222ber platform.

3 Cookies & Tracking Technologies

222ber uses cookies and similar tracking technologies to operate the platform, remember your preferences, and maintain session security. This section explains the types of cookies we use and how you can manage your cookie preferences.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a web server when you visit a website. They allow the site to recognise your device across page visits and sessions. Cookies do not contain executable code and cannot access other files on your device.

3.2 Categories of Cookies Used by 222ber

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language selection, last visited game category, and notification settings. These are retained for the duration of your session or up to 30 days where a "Remember Me" option is selected.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — pages visited, time spent, and error events. This data is used in aggregate to improve platform performance and is never linked to your personal identity.
• Security Cookies: Support fraud detection and account security features such as device fingerprinting (used to flag unusual login locations) and bot detection. These are strictly necessary for platform security.

3.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or set your browser to notify you when a cookie is being placed. Please note that disabling functional or analytics cookies may affect your experience on the 222ber platform but will not prevent access to core services.

On supported browsers, you can manage cookies through the following paths:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
• Safari (iOS/macOS): Settings → Safari → Privacy & Security → Block All Cookies

4 Data Sharing

222ber does not sell your personal data to any third party. We share personal data only where it is strictly necessary to deliver our services, comply with our legal obligations, or protect the integrity of the platform. The categories of third parties with whom data may be shared are described below.

4.1 Service Providers and Data Processors

We engage carefully selected third-party companies to perform specific functions on our behalf. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and card payment networks (Visa, Mastercard) receive transaction data necessary to execute deposit and withdrawal requests. These processors operate under their own privacy policies and regulatory obligations.
• KYC and Identity Verification Providers: Third-party identity verification services receive copies of your ID documents and selfie to carry out automated and manual verification checks on behalf of 222ber.
• Game and Data Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and player ID to facilitate game sessions. They do not receive your full personal profile, payment details, or identity documents.
• Cloud Infrastructure and Hosting: The 222ber platform is hosted on secure cloud infrastructure. Our hosting provider processes data on our behalf under a strict data processing agreement and has no independent right to use your data.
• Customer Support Tools: Our live chat and email support systems process communication data (your messages and account reference) to enable our support team to assist you. Support data is retained for 24 months for quality assurance and dispute resolution purposes.

All service providers who process personal data on behalf of 222ber are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to maintain appropriate security standards.

4.2 Legal and Regulatory Disclosure

222ber may disclose personal data to governmental authorities, law enforcement agencies, or financial intelligence units where required to do so by applicable law. Examples include:

• Responses to lawful court orders, subpoenas, or official government requests
• Reporting obligations under anti-money laundering regulations
• Cooperation with investigations into fraud, financial crime, or underage gambling

Where disclosure is legally required, we will notify you unless we are legally prohibited from doing so.

4.3 Business Transfers

In the event that 222ber undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address registered to your account before the transfer takes effect, and the new data controller will be required to honour the terms of this Privacy Policy or provide you with a reasonable period to close your account.

5 Data Retention

222ber retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with our legal and regulatory obligations. We do not retain data longer than necessary.

5.1 Active Accounts

While your 222ber account is active, we retain all registration data, KYC documents, transaction history, gaming activity records, and communication logs. This data is necessary for the ongoing operation of your account, dispute resolution, and regulatory compliance.

5.2 Closed Accounts

Following voluntary or company-initiated account closure, the following retention periods apply:

• Registration and KYC data: Retained for 5 years from the date of account closure in accordance with anti-money laundering compliance requirements.
• Financial transaction records: Retained for 5 years from the date of each transaction.
• Gaming activity logs: Retained for 3 years from the date of account closure for responsible gaming audit purposes.
• Support communications: Retained for 24 months from the date of each communication.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent.

5.3 Anonymisation

Where personal data is no longer required for its original purpose but retains analytical value for platform improvement, it may be anonymised rather than deleted. Anonymised data — from which no individual can be identified — falls outside the scope of this Privacy Policy and may be retained and used indefinitely for statistical analysis and service development.

6 Your Rights

As a player on the 222ber platform, you hold a set of rights with respect to the personal data we hold about you. These rights are described below along with instructions on how to exercise each one.

6.1 Right of Access

You have the right to request a copy of all personal data that 222ber holds about you. This includes your registration data, KYC records, transaction history, gaming logs, and support communications. Access requests are processed within 30 days of receipt and provided in a structured, machine-readable format where technically feasible.

6.2 Right to Rectification

If any personal data that 222ber holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections (e.g., phone number update), you may make changes directly in your account profile. For corrections to KYC-verified data (e.g., a name change following a legal name change), please contact [email protected] with supporting documentation.

6.3 Right to Erasure

You may request deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and no other legal basis for processing applies; or the data has been processed unlawfully. Note that erasure requests cannot override our legal obligation to retain certain financial and identity records for the periods specified in Section 5.

6.4 Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) for transfer to another service provider. This right applies to data processed on the basis of your consent or contractual necessity.

6.5 Right to Object to Processing

You have the right to object to processing carried out on the basis of legitimate interest — in particular, profiling for responsible gaming monitoring and fraud detection. In such cases, 222ber will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment or defence of a legal claim.

6.6 Right to Withdraw Marketing Consent

Where processing is based on your consent (e.g., marketing emails or SMS promotional alerts), you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, update your preferences in your account settings or email [email protected] with the subject line "Marketing Opt-Out".

6.7 How to Exercise Your Rights

To exercise any of the rights described in this section, contact the 222ber data team at [email protected] with the subject line "Data Rights Request — [Your Account Username]". Please specify which right you wish to exercise and provide sufficient information for us to verify your identity before processing the request. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days.

7 Data Security

222ber applies a layered, defence-in-depth approach to protecting the personal data we hold. Our security measures are reviewed and updated regularly to reflect current best practices in online gaming platform security.

7.1 Technical Measures

• Transport Encryption: All data in transit between your browser and the 222ber platform is encrypted using TLS 1.2 or higher. HTTPS is enforced on all platform pages via HTTP Strict Transport Security (HSTS).
• Data at Rest Encryption: Personal data stored in our databases — including KYC documents, payment method details, and player profiles — is encrypted using AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted to authorised 222ber staff on a strict need-to-know basis. All administrative access requires multi-factor authentication and generates an audit log.
• Intrusion Detection: The platform is protected by automated intrusion detection and prevention systems that monitor for unusual traffic patterns, brute force attacks, and SQL injection attempts around the clock.
• Vulnerability Management: 222ber conducts regular security assessments of the platform, including automated vulnerability scanning and periodic penetration testing by independent security professionals.

7.2 Organisational Measures

• All staff with access to personal data receive mandatory data protection training as part of their onboarding and on an ongoing annual basis.
• Third-party service providers are assessed for security compliance before engagement and are subject to contractual security requirements.
• A formal incident response procedure is in place to identify, contain, and remediate data security incidents promptly.

7.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, 222ber will notify affected individuals without undue delay and within 72 hours of becoming aware of the breach where feasible. Notification will be made via the email address registered to each affected account and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to address it.

8 Policy Updates & Contact

222ber reserves the right to update this Privacy Policy at any time to reflect changes in our services, our data practices, or applicable legal requirements. We are committed to communicating policy changes transparently and in a timely manner.

8.1 Notification of Changes

Where a planned update to this Privacy Policy constitutes a material change — for example, a new category of data being collected, a new third-party processor being engaged, or a change in the legal basis for processing — we will notify all registered players via the email address on file at least 7 days before the updated policy takes effect. The notification will summarise the key changes in plain English and link to the full updated document.

For minor, non-material updates (such as corrections to typographical errors, clarifications that do not change the substance of any provision, or updates to contact information), the policy may be updated without individual notification. The "Last Updated" date at the top of this document will reflect any update, material or otherwise.

8.2 Continued Use as Acceptance

Your continued use of the 222ber platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. If you disagree with any material change, you have the right to close your account before the updated policy takes effect by contacting [email protected].

8.3 Contact the Data Team

For all privacy-related enquiries, data rights requests, or questions about this Privacy Policy, please contact the 222ber data team using the details below:

• Email: [email protected] (Subject: "Privacy Enquiry — [Your Account Username]")
• Response time: Acknowledgement within 5 business days; substantive response within 30 days
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published at https://222ber.net/privacy-policy represents the current binding version applicable to all users of the platform.