2c222 Privacy Policy

2c222 collects personal data through several channels: directly from you when you register an account or complete identity verification; automatically when you interact with the platform; and in limited circumstances from trusted third-party sources such as payment processors and identity verification services.

Registration and Identity Data

When you create a 2c222 account, we collect the following personal identifiers: your full legal name, date of birth, residential address in Bangladesh (including district and division), a valid email address, mobile phone number, and the username you choose for your account. This data is required to establish your account, communicate with you, and fulfil our Know Your Customer (KYC) and age verification obligations.

Identity Verification Documents

As part of the mandatory KYC process, we collect copies of government-issued identity documents. Accepted documents include your Bangladesh National Identity Card (NID), passport, or birth certificate. We may also collect proof of address documentation such as a utility bill, bank statement, or official correspondence dated within the last 90 days.

Financial and Transaction Data

To process deposits and withdrawals, 2c222 collects payment-related data including your bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details (account name, account number, and bank name) where bank transfers are used; and transaction reference numbers for all deposits and withdrawal requests. We do not store full debit or credit card numbers on our servers — card payment processing is handled by PCI-DSS compliant third-party payment gateways.

Technical and Usage Data

When you access the 2c222 platform, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session start and end times, pages visited and features used, and game session logs including wager amounts, outcomes, and timestamps. This data is used for fraud detection, platform security, responsible gaming monitoring, and aggregate statistical analysis.

2c222 processes personal data only for specified, explicit, and legitimate purposes. Below is a comprehensive account of the purposes for which your data is used and the legal basis upon which each processing activity rests.

Account Management and Platform Delivery

Your registration and identity data is used to create and manage your player account, authenticate your identity each time you log in via the 2c222 Login portal, deliver the games and services you have requested, and communicate account-related information including transaction confirmations, security alerts, and policy updates.

Payment Processing

Financial data is processed exclusively to facilitate deposits from and withdrawals to your nominated payment methods — including bKash, Nagad, Rocket, Upay, and approved Bangladeshi bank accounts. We verify that the payment account is registered in your verified name before processing any withdrawal, in line with our anti-money-laundering obligations.

Identity Verification and Fraud Prevention

We use identity and technical data to verify your age and identity as required for KYC compliance, detect and prevent fraudulent account activity, identify suspicious wagering patterns that may indicate bonus abuse or money laundering, and protect the security and integrity of the 2c222 platform for all users.

Responsible Gaming Monitoring

Gaming activity logs are used to support our responsible gaming programme, including monitoring for signs of problem gambling behaviour such as unusually long play sessions, rapid increases in wager size, or frequent deposit activity. Where such patterns are identified, 2c222's responsible gaming team may reach out proactively or apply protective account measures.

Marketing Communications

With your explicit consent provided at registration, 2c222 may use your contact information to send promotional emails and SMS messages about new games, special offers, seasonal promotions, and VIP programme updates relevant to players in Bangladesh. You may withdraw this consent and opt out of marketing communications at any time by contacting [email protected] or updating your notification preferences within your account settings.

Legal and Regulatory Compliance

In certain circumstances, 2c222 is required to process and disclose personal data to comply with applicable laws and regulations, respond to lawful requests from competent authorities, enforce our Terms & Conditions, or protect the rights, property, and safety of 2c222, its players, and the public.

2c222 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Data is shared externally only in the following limited and controlled circumstances.

Payment Service Providers

To process financial transactions, 2c222 shares relevant payment data with authorised payment processors and mobile financial service providers including bKash, Nagad, Dutch-Bangla Bank (Rocket), and Upay. Each provider receives only the minimum data necessary to execute and confirm the transaction. These providers operate under their own privacy policies and are independently regulated.

Identity Verification Partners

To fulfil our KYC obligations, 2c222 may share identity document data with specialist identity verification service providers. These partners are contractually bound to use the data solely for the purpose of verifying your identity on behalf of 2c222 and to maintain appropriate data security standards.

Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — may receive a pseudonymous player identifier and game session data for the purpose of delivering game content, calculating outcomes, and resolving disputes. These providers do not receive your full name, contact details, or financial data.

Legal and Regulatory Authorities

2c222 may disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or official request. We will, where legally permitted, notify the affected player of any such disclosure.

The 2c222 website uses cookies and similar client-side storage technologies to deliver a functional, secure, and personalised user experience. By continuing to use the 2c222 platform, you consent to the use of cookies in accordance with the purposes described in this section.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain session state (such as keeping you logged in during an active gaming session).

Types of Cookies Used by 2c222

Managing Cookies

You may configure your browser to refuse all cookies, accept only first-party cookies, or prompt you before accepting any cookie. Please note that disabling strictly necessary cookies will prevent you from logging in to your 2c222 account and will impair the core functionality of the platform. Analytics and functional cookies can be declined without affecting your ability to play. Browser-level cookie management instructions are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge).

2c222 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent our standard practice.

• Active account data (registration details, KYC documents, contact information): retained for the duration of your active account plus a minimum of 5 years following account closure, in line with standard anti-money-laundering record-keeping requirements.
• Financial transaction records (deposit and withdrawal histories, payment method details): retained for a minimum of 5 years from the date of the transaction.
• Gaming activity logs (wager histories, game session records): retained for a minimum of 3 years to support dispute resolution and responsible gaming review.
• Customer support communications (live chat transcripts, email correspondence): retained for 2 years from the date of the most recent interaction.
• Marketing consent records: retained for the duration of the consent period plus 1 year following withdrawal of consent, to demonstrate compliance.
• Fraud investigation records: retained for as long as necessary to conclude any open investigation, plus the applicable legal retention period.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data (e.g., statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data.

2c222 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online system can guarantee absolute security, the measures we maintain represent current industry best practice for online gaming platforms.

Technical Safeguards

• TLS/SSL encryption: All data in transit between your browser or device and the 2c222 servers is encrypted using TLS 1.2 or higher. The presence of HTTPS in the address bar at https://2c222.app confirms that your connection is secured.
• Data-at-rest encryption: Sensitive data fields — including identity document scans, payment method details, and authentication credentials — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Password hashing: Player passwords are never stored in plain text. All passwords are hashed using a modern one-way cryptographic algorithm with per-user salting, meaning that even internal 2c222 staff cannot retrieve your password — only reset it.
• Firewall and intrusion detection: Our server infrastructure is protected by enterprise-grade web application firewalls (WAF) and continuous intrusion detection systems (IDS) that monitor for anomalous access patterns in real time.
• Regular security audits: 2c222 conducts periodic penetration testing and vulnerability assessments on the platform to identify and remediate security weaknesses proactively.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only staff members whose roles require access to specific data categories are granted the relevant permissions.
• All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Data access activities are logged and reviewed periodically by the 2c222 compliance team.

Reporting a Security Concern

If you believe your 2c222 account has been compromised, or if you discover a potential security vulnerability in the platform, please contact our security team immediately at [email protected]. We take all security reports seriously and respond to credible vulnerability disclosures within 48 hours.

As a player on the 2c222 platform, you hold a number of rights with respect to your personal data. These rights are detailed below. To exercise any of them, contact our support team at [email protected] from your registered email address, clearly identifying the right you wish to exercise. We will respond to all valid requests within 14 business days.

Right of Access

You have the right to request confirmation of whether 2c222 holds personal data about you and, if so, to receive a copy of that data together with information about how and why it is being processed. Access requests are fulfilled at no charge for the first request per 12-month period.

Right to Rectification

If any personal data held about you on the 2c222 platform is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. For changes to core identity data (name, date of birth), updated documentary evidence will be required to ensure KYC integrity.

Right to Erasure

In certain circumstances — such as where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no overriding legal basis for continued processing — you may request deletion of your personal data. Note that this right is subject to legal retention obligations; we cannot delete financial records or KYC documents that must be retained under applicable regulations.

Right to Restrict Processing

You may request that 2c222 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data you have contested is being verified.

Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, 2c222 will cease all marketing communications to you without delay.

Right to Withdraw Consent

Where 2c222 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent can be requested via [email protected].

2c222 reviews this Privacy Policy periodically and reserves the right to update it at any time to reflect changes in platform features, data processing practices, or applicable legal requirements. The "Last Updated" date displayed at the top of this page and in the page hero will be revised each time material changes are made.

Where changes are material — meaning they significantly affect the way we use your personal data or your rights as a data subject — 2c222 will notify registered players via the email address on file at least 7 days before the updated policy takes effect. Continued use of the 2c222 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

We encourage all players to review this page periodically, particularly following any platform update announcements. Archived versions of previous Privacy Policy editions are available on request by contacting our support team.

How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 2c222 processes your personal data, please get in touch with our dedicated privacy support team:

• Email (plain text — not a link): [email protected]
• Response language: English and Bengali
• Support availability: 24 hours a day, 7 days a week
• Average live chat response time: 2–5 minutes
• Privacy rights request turnaround: Within 14 business days of receipt

We are committed to resolving all privacy-related queries promptly, fairly, and transparently. If you are not satisfied with our response to a privacy concern, you may seek further guidance from a competent data protection authority in your jurisdiction.