222tb Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how 222tb ("222tb", "we", "us", "our"), the operator of the online casino and sports betting platform at 222tb.io, collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who visit or register on the 222tb platform.

222tb is committed to protecting your privacy and handling your personal data with transparency, care, and respect. We recognise that the players who use our platform trust us with sensitive information, and we take that responsibility seriously. This Policy has been written in plain, accessible English so that every player — including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — can understand how their data is handled.

By creating a 222tb account or using any part of the 222tb platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the 222tb Terms & Conditions, which govern the overall relationship between you and 222tb.

2 Data Controller

For the purposes of this Policy, 222tb acts as the data controller in respect of the personal data it collects from players using the 222tb platform. As data controller, 222tb determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

If you have any questions or concerns about how 222tb processes your personal data, or if you wish to exercise any of your rights as described in this Policy, please contact our privacy team using the details provided in Section 15 of this Policy.

3 Personal Data We Collect

222tb collects a range of personal data from players in order to provide a secure, compliant, and high-quality gaming experience. The categories of personal data we collect are set out in the table below.

222tb does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless such data is voluntarily provided by you in the context of a responsible gaming request or support inquiry.

4 How We Collect Your Data

222tb collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies: When you access the 222tb platform, we automatically collect certain technical and usage data through cookies, log files, pixel tags, and similar tracking technologies. See Section 11 for details on our use of cookies.
• Payment service providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, we receive transaction confirmation data from those providers to credit your account and process withdrawals.
• Identity verification partners: Where we use a third-party KYC service to verify your identity documents, that provider may share the result of the verification check with us.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level game data with us for settlement, auditing, and fair play monitoring purposes.

5 How We Use Your Personal Data

222tb uses your personal data only for legitimate, clearly defined purposes. The primary purposes for which we process your data are:

• Account management: Creating, maintaining, and securing your 222tb account, including authentication and password management.
• Identity and age verification: Confirming that you are who you say you are and that you meet the 21+ age requirement before processing withdrawals or large transactions.
• Payment processing: Facilitating deposits and withdrawals in ৳ BDT through your chosen payment method, reconciling transactions, and handling payment disputes.
• Platform operation: Delivering the games, betting markets, promotions, and other features of the 222tb platform to you in a reliable and personalised manner.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorised access, and other unlawful behaviour on the platform.
• Legal compliance: Meeting our obligations under applicable anti-money-laundering (AML) legislation and other regulatory requirements, including responding to lawful requests from law enforcement or regulatory authorities.
• Responsible gaming: Monitoring for signs of problem gambling behaviour and enforcing player-requested restrictions such as deposit limits, cooling-off periods, and self-exclusion orders.
• Customer support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Marketing and promotions: Sending you information about 222tb bonuses, tournaments, and seasonal promotions where you have consented to receive such communications. You may opt out of marketing communications at any time.
• Analytics and improvement: Analysing how players use the platform in aggregate to improve our products, fix bugs, and develop new features.

222tb will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by applicable law.

6 Legal Basis for Processing

222tb processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to fulfil our obligations to you under the 222tb Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including AML obligations, age verification mandates, and responses to regulatory or law enforcement requests.
• Legitimate interests: Processing that is necessary for 222tb's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing for purposes such as direct marketing communications, where we have obtained your prior consent. You may withdraw consent at any time by contacting our support team.

7 Sharing Your Personal Data

222tb does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients where necessary to deliver our services or meet our legal obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive transaction data to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services may process your identity documents on our behalf to confirm your eligibility.
• Game studios and platform providers: Certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to operate their games on our platform.
• IT and hosting providers: Cloud infrastructure and technology partners who host, maintain, and secure the 222tb platform under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, courts, regulators, and government bodies where we are required by law to disclose information, including in connection with AML investigations.
• Professional advisers: Lawyers, auditors, and consultants who provide professional services to 222tb on a confidential basis.

All third parties with whom 222tb shares personal data are contractually required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection requirements.

8 Payment Data & Financial Privacy

Given the financial nature of the 222tb platform, payment data receives a heightened level of protection. All deposit and withdrawal transactions are processed in Bangladeshi Taka (৳ BDT) and are conducted over encrypted connections. 222tb does not store full card numbers, CVV codes, or mobile banking PINs on its own servers.

When you transact via bKash, Nagad, or Rocket, your mobile wallet credentials are entered directly into the payment provider's secure interface and are never transmitted to or stored by 222tb. For bank card transactions via Visa or Mastercard, payment tokenisation is used so that only a secure token — not your actual card details — is stored by our payment processor.

Transaction records, including deposit and withdrawal amounts, timestamps, and payment method references, are retained in your 222tb account history for the period specified in Section 9 of this Policy, primarily to support dispute resolution, AML compliance, and financial auditing.

9 Data Retention

222tb retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are as follows:

• Active account data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to meet AML and financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five (5) years following the completion of the verification check, or longer if required by applicable law.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Support communications: Retained for a period of three (3) years following the resolution of the relevant inquiry or dispute.
• Marketing consent records: Retained for the duration of your consent and for a period of three (3) years following withdrawal of consent, as evidence of the consent record.
• Technical and usage data: Typically retained in identifiable form for up to twelve (12) months, after which it may be aggregated and anonymised for analytical purposes.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, 222tb will securely delete or anonymise it.

10 Security Measures

222tb implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our platform.
• Encrypted storage of passwords and sensitive account data using industry-standard hashing algorithms.
• Access controls restricting internal access to personal data to authorised personnel on a strict need-to-know basis.
• Two-factor authentication (2FA) options available to players for additional account security.
• Continuous monitoring of platform infrastructure for anomalous activity, intrusion attempts, and security incidents.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and respond to data security breaches promptly.

While 222tb takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been compromised, please contact our support team immediately.

11 Cookies & Tracking Technologies

222tb uses cookies and similar tracking technologies to operate and improve the platform, remember your preferences, and analyse how players interact with our site. A cookie is a small text file stored on your device when you visit a website. The cookies we use fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They enable you to log in, navigate between pages, and use core features such as game loading and payment processing. These cookies cannot be disabled.
• Functional cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience on subsequent visits.
• Analytics cookies: These cookies collect aggregated, anonymised information about how players use the 222tb platform, helping us identify popular features, diagnose technical issues, and improve the overall user experience.
• Security cookies: These cookies support our fraud detection and security monitoring systems, helping us identify suspicious activity and protect player accounts.

You can control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 222tb platform. 222tb does not use third-party advertising cookies or behavioural targeting cookies for the purpose of serving advertisements on external websites.

12 Your Rights as a Data Subject

222tb respects your rights in relation to your personal data. Subject to applicable law and certain limitations, you have the following rights:

• Right of access: You have the right to request a copy of the personal data 222tb holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 222tb be corrected or updated without undue delay.
• Right to erasure: You have the right to request that 222tb delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You have the right to request that 222tb restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease processing for marketing purposes immediately upon receipt of your objection.

To exercise any of the above rights, please contact our support team using the contact details in Section 15 of this Policy. We will respond to all valid requests within 30 days. In some cases, we may need to verify your identity before processing a request.

13 Minors & Child Protection

222tb is strictly an adult platform. The minimum age to register and use the 222tb platform is 21 years. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through a false age declaration or any other means — we will immediately close the relevant account, delete or anonymise the associated personal data, and take any other steps required by applicable law. Any deposits associated with an underage account will be handled in accordance with our Terms & Conditions.

If you believe that a minor has registered an account on 222tb using false information, please contact our support team immediately. We take child protection seriously and will act promptly on all such reports.

14 Changes to This Privacy Policy

222tb reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by email or by displaying a prominent notice on the platform prior to the changes taking effect. The effective date at the top of this page will be updated to reflect the date of the most recent revision.

Your continued use of the 222tb platform following notification of changes to this Policy constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. If you do not agree to the updated Policy, you should discontinue use of the platform and contact support to close your account.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 222tb processes your personal data, please contact our privacy and support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related inquiries within 48 hours.

You may reach us at: support at 222tb.io (plain text — not a clickable link). Please include "Privacy Policy" in the subject line of your message so that your inquiry is directed to the appropriate team.

All data subject rights requests will be acknowledged within 5 business days and resolved within 30 days. Where a request is particularly complex or where a large volume of requests have been received, we may extend this period by a further 30 days, with written notification provided to you explaining the reason for the extension.