d222 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how d222 ("d222", "we", "us", "our"), the operator of the online betting and casino platform at d222.im, collects, processes, stores, and protects personal data provided by players and visitors ("you", "your") in connection with the use of the d222 platform and services.

d222 is an English-language platform designed for players in the Bangladesh market. All communications, support interactions, and this Privacy Policy are conducted and published in English. We are committed to protecting the personal data of every player who registers and interacts with d222, and we hold ourselves to a high standard of data stewardship, transparency, and security.

This Policy should be read alongside the d222 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you have any questions about how we handle your personal data, please contact us at [email protected] at any time.

2. Personal Data We Collect

d222 collects personal data in several categories depending on how you interact with the platform. The categories of personal data we may collect include:

2.1 Identity Data

Full legal name, date of birth, gender, and identity document details (National Identity Card number, passport number, or equivalent) provided during account registration or identity verification.

2.2 Contact Data

Mobile phone number (Bangladeshi), email address, and residential address. These are used for account communications, security alerts, and withdrawal processing.

2.3 Financial Data

Payment method details including bKash, Nagad, Rocket, and Upay wallet numbers, and bank account or card details where applicable. We do not store full card numbers — payment card data is tokenised and handled by our payment processor partners.

2.4 Transaction Data

Records of all deposits, withdrawals, wagers, game outcomes, bonus claims, and account balance changes associated with your d222 account.

2.5 Technical Data

IP address, browser type and version, device type and operating system, screen resolution, time zone, session duration, pages visited, and referring URLs. This data is collected automatically when you access the d222 platform.

2.6 Usage Data

Information about how you use the d222 platform, including game preferences, betting history, search queries within the platform, and feature interaction patterns.

2.7 Communications Data

Records of all communications between you and d222 customer support, including emails, chat transcripts, and any documents you submit in connection with a support request or dispute.

2.8 Responsible Gaming Data

Records of any responsible gaming tool settings you apply to your account, including deposit limits, loss limits, self-exclusion requests, and cooling-off periods. This data is retained for compliance and player protection purposes.

3. How We Collect Your Data

d222 collects personal data through the following channels and methods:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the d222 platform.
• Payment processors: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Third-party verification services: Identity and age verification data received from third-party KYC (Know Your Customer) providers used to confirm your identity in accordance with our compliance obligations.
• Game providers: Game session data and outcomes received from our game technology partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — in connection with your use of their games on the d222 platform.
• Publicly available sources: In limited circumstances, we may cross-reference identity information against publicly available sources for fraud prevention and compliance purposes.

4. How We Use Your Personal Data

d222 uses the personal data we collect for the following purposes:

d222 will not use your personal data for any purpose that is incompatible with those listed above without obtaining your prior consent, except where required by law.

5. Legal Basis for Processing

d222 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, manage your betting activity, and process your financial transactions under the d222 Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, fraud reporting obligations, and other applicable legal duties.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing of your data for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting support or adjusting your account notification preferences.

6. Sharing Your Personal Data

d222 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

6.1 Payment Processors

We share financial and identity data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — as required to process your deposits and withdrawals. These partners process data under their own privacy policies and are bound by contractual data protection obligations.

6.2 Identity Verification Providers

We share identity data with third-party KYC and age verification service providers as required to fulfil our compliance obligations. These providers act as data processors under our instruction and are contractually prohibited from using your data for any other purpose.

6.3 Game Technology Partners

Game session data is shared with our game provider partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver, monitor, and verify game outcomes on the d222 platform.

6.4 Legal and Regulatory Authorities

d222 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law, court order, or in connection with the prevention or investigation of fraud, money laundering, or other criminal activity.

6.5 Business Transfers

In the event that d222 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that may result.

7. Data Retention

d222 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with anti-money laundering and Know Your Customer obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction for regulatory compliance purposes.
• Responsible gaming records: Retained for a minimum of 5 years from the date of any self-exclusion or limit-setting action, to allow enforcement of those measures if the player attempts to re-register.
• Customer support communications: Retained for 3 years from the date of last interaction, unless the communication relates to an open dispute or regulatory inquiry.
• Technical and usage data: Retained in aggregated or anonymised form indefinitely for platform analytics; individual session-level data is retained for up to 24 months.
• Marketing consent records: Retained for the duration of consent and for 1 year following withdrawal of consent, as evidence of the consent having been obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with d222's internal data management procedures.

8. Data Security

d222 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the d222 platform.
• Encrypted data storage for sensitive fields including identity document references, financial account identifiers, and authentication credentials.
• Access controls ensuring that internal access to player personal data is granted only to authorised personnel with a legitimate operational need.
• Regular security audits and penetration testing carried out by qualified information security professionals.
• Fraud monitoring systems that flag unusual account activity in real time for investigation.
• Secure password hashing — your account password is never stored in plain text. d222 support staff cannot view or retrieve your password.

While d222 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying d222 immediately at [email protected] if you suspect any unauthorised access to your account.

9. Cookies & Tracking Technologies

d222 uses cookies and similar tracking technologies to operate, secure, and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies we use fall into the following categories:

9.1 Strictly Necessary Cookies

These cookies are essential for the d222 platform to function. They enable core features such as account login session management, security token validation, and fraud detection. These cookies cannot be disabled without significantly affecting platform functionality.

9.2 Performance and Analytics Cookies

These cookies collect anonymised information about how visitors use the d222 platform — such as which pages are visited most frequently and how long sessions last — to help us improve platform performance and user experience. This data is aggregated and does not identify individual users.

9.3 Functional Cookies

These cookies allow d222 to remember your preferences and settings — such as your preferred language, display settings, and whether you have previously dismissed informational notices — to provide a more personalised platform experience.

9.4 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive a warning before a cookie is placed. Note that disabling certain cookies may impair the functionality of the d222 platform. For full details on which cookies are in use at any given time, please contact us at [email protected].

10. Your Privacy Rights

As a d222 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request in English to [email protected]. d222 will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data d222 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by d222.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to d222's legal retention obligations. Note that certain data cannot be deleted while an account is active or where legal obligations require retention.
• Right to restrict processing: You may request that d222 restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of personal data you have provided to d222 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where d222 processes your data on the basis of consent (e.g., for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling, where your individual circumstances justify the objection.

Please note that exercising some of these rights may affect d222's ability to provide certain services to you. Where this is the case, we will inform you before acting on your request.

11. Minors & Age Verification

d222 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21 years. All players are required to confirm that they are 21 or older at the point of registration, and d222 conducts age verification checks on all accounts as part of the KYC process.

If d222 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question (except where retention is required for regulatory purposes), and take appropriate action in accordance with our Terms & Conditions. Any funds deposited by an underage account will be handled in accordance with applicable law and d222's internal underage gambling procedures.

Parents or guardians who have reason to believe that a minor has registered an account on d222 are encouraged to contact us immediately at [email protected].

12. International Data Transfers

d222 operates as a platform serving players primarily in Bangladesh. In certain circumstances, your personal data may be processed by service providers or technology partners located outside Bangladesh — for example, cloud infrastructure providers, KYC verification services, or game platform operators with data centres in other countries.

Where such international transfers occur, d222 takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that afforded in Bangladesh, including through the use of contractual data processing agreements that impose data protection obligations on all recipient parties.

By registering a d222 account, you acknowledge that your personal data may be transferred to and processed in countries other than Bangladesh as described in this section. If you have specific concerns about international data transfers, please contact us at [email protected].

13. Changes to This Privacy Policy

d222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes — those that affect how we collect, use, or share your personal data in a way that may impact your rights — will be communicated to registered players via the email address or mobile number on file no fewer than 7 days before the amendment takes effect.

Minor updates, such as corrections of typographical errors or clarifications that do not alter the substance of data processing activities, may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the d222 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should discontinue use of d222 and may request account closure by contacting support.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way d222 handles your personal data, please contact our dedicated privacy support team. All privacy-related correspondence must be submitted in English.

d222 does not provide telephone support. All privacy requests must be submitted via email. Please do not include your full password, full payment card number, or full NID number in support emails — reference these details by type only.