db2222 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how db2222 ("db2222", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("you", "your", "Player") who access or use the online casino and sports betting platform available at db2222.win.

db2222 is committed to handling your personal data with care, transparency, and respect. We operate in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR), and apply those principles consistently to protect the privacy of our players based in Bangladesh and elsewhere.

By registering an account with db2222, or by continuing to use the db2222.win platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to close your account.

This Policy should be read alongside our Terms & Conditions, which govern your use of the platform as a whole. In the event of any conflict between the two documents on matters of data privacy, this Privacy Policy shall prevail.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is db2222, the operator of the platform accessible at db2222.win. All data protection enquiries, subject access requests, and complaints should be directed in writing to our support team at the contact details set out in Section 14 of this Policy.

Where db2222 engages third-party service providers (such as payment processors, KYC verification providers, or game studios) to process personal data on its behalf, those parties act as data processors under written agreements that bind them to data protection standards consistent with this Policy.

3. Personal Data We Collect

db2222 collects the following categories of personal data from players:

3.1 Identity & Account Data

• Full legal name as it appears on official identity documents
• Date of birth
• Gender (where provided during registration)
• Username and encrypted account password
• Profile photograph (where voluntarily submitted)

3.2 Contact Data

• Email address
• Mobile phone number (used for account verification and WhatsApp support)
• Residential address (district, city, postal code)

3.3 Identity Verification (KYC) Data

• Copies of government-issued identity documents (National Identity Card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within three months)
• Proof of payment method ownership (screenshots or statements for bKash, Nagad, Rocket, Upay, or bank accounts)
• Selfie or liveness check images where required by our verification partner

3.4 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (mobile wallet numbers, partial card numbers, bank account references)
• Transaction reference numbers
• Account balance history
• Bonus activation and wagering records

3.5 Gaming & Betting Activity Data

• Game session logs (games played, stakes placed, outcomes, session duration)
• Sports betting history (markets, odds accepted, settlement results)
• Responsible gaming tool usage (deposit limits set, self-exclusion periods)

3.6 Technical & Device Data

• IP address and approximate geolocation at time of login
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Pages visited, features used, and click-path analytics

3.7 Communications Data

• Content of emails, live chat transcripts, and WhatsApp messages exchanged with db2222 support
• Customer satisfaction survey responses (where voluntarily completed)
• Marketing preference settings (opt-in or opt-out status for promotional emails and SMS)

4. How We Collect Personal Data

db2222 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or filling out any form on the platform.
• Automated collection: Technical and device data collected automatically when you browse or interact with db2222.win, via server logs, session tracking, and analytics tools.
• Third-party sources: Identity and fraud-risk data received from our KYC verification providers during the account verification process. Payment confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when you transact on the platform.
• Cookies and similar technologies: As described in Section 10 of this Policy.

5. Purpose & Legal Basis for Processing

The table below summarises the key purposes for which db2222 processes your personal data, together with the lawful basis relied upon for each purpose:

Purpose of Processing	Lawful Basis
Account registration and management	Performance of a contract
Identity verification (KYC) and age confirmation	Legal obligation; Legitimate interests
Processing deposits and withdrawals	Performance of a contract
Providing access to games and betting markets	Performance of a contract
Fraud detection, anti-money laundering checks	Legal obligation; Legitimate interests
Responsible gaming monitoring and intervention	Legal obligation; Legitimate interests
Customer support communications	Performance of a contract; Legitimate interests
Sending promotional offers and bonus notifications	Consent (opt-in)
Platform analytics and service improvement	Legitimate interests
Legal claims and dispute resolution	Legal obligation; Legitimate interests

Where we rely on legitimate interests as our lawful basis, we have assessed that our interests do not override your fundamental privacy rights. You may request further information about this balancing assessment by contacting our support team.

Where we rely on consent (e.g., for marketing communications), you may withdraw that consent at any time by updating your notification preferences within your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

db2222 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent required for the stated purpose:

6.1 Payment Processors

Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard solely to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for data they control.

6.2 KYC & Identity Verification Providers

Identity documents and verification data are shared with our third-party KYC verification partner to confirm your identity, age, and address. This partner is bound by a data processing agreement requiring data protection standards consistent with this Policy.

6.3 Game & Platform Technology Providers

Game session data (username, stake, outcome) is necessarily transmitted to game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe in order to deliver live dealer and RNG game services. These providers receive only the minimum data necessary to run game sessions.

6.4 Fraud Prevention & Security Services

Technical identifiers (IP address, device fingerprint, session data) may be shared with third-party fraud detection and cybersecurity services to protect the platform and its users from fraudulent activity, account takeovers, and unauthorised access.

6.5 Legal & Regulatory Authorities

db2222 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in response to a lawful request. We will notify you of any such disclosure where legally permitted to do so.

6.6 Business Transfers

In the event that db2222 undergoes a merger, acquisition, asset sale, or corporate restructuring, personal data held by db2222 may form part of the transferred assets. Affected players will be notified of any change in data controller identity prior to or at the point of transfer.

7. International Data Transfers

db2222's primary operations are focused on the Bangladesh market. However, some of our third-party technology and game providers operate servers located outside Bangladesh. Where personal data is transferred internationally, db2222 takes steps to ensure that appropriate safeguards are in place, such as contractual data protection clauses binding the recipient to standards equivalent to those described in this Policy.

By using the db2222 platform, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence, and you consent to such transfers where they are necessary to provide the services you have requested.

8. Data Retention

db2222 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with db2222 and for a period of at least five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, in accordance with financial crime prevention obligations.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the relevant transaction.
• Support communications: Retained for three (3) years from the date of the interaction, or longer where the communication relates to an unresolved dispute or ongoing investigation.
• Marketing preference data: Retained until you withdraw consent or close your account, plus a short additional period to record the opt-out action.
• Technical and device logs: Typically retained for twelve (12) months on a rolling basis, unless a specific log is flagged in connection with a security or fraud investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

9. Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data that db2222 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you (a "Subject Access Request"). We will respond within 30 days of receiving a valid request.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held about you. You may also update certain account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe processing is unlawful. Note that this right is not absolute — we may be required by law to retain certain data for a minimum period.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to the withdrawal.

10. Cookies & Similar Technologies

db2222.win uses cookies and similar browser-based technologies to deliver, secure, and improve the platform experience. A cookie is a small text file placed on your device by a website server. Cookies cannot execute programmes or deliver viruses to your device.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as account login sessions, security token validation, and the cashier. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Performance & Analytics Cookies: These collect anonymous, aggregated information about how visitors interact with db2222.win — which pages are visited most frequently, where users encounter errors, and how navigation flows. This data is used solely to improve the platform and does not identify individual users.
• Functional Cookies: These remember your preferences such as language settings, preferred deposit method, and responsible gaming tool configurations to provide a more personalised experience on return visits.
• Session Cookies: Temporary cookies that expire when you close your browser, used to maintain your session state while you are actively using the platform.

10.2 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's settings menu. You can set your browser to refuse all cookies, accept only certain types, or to alert you when a cookie is being sent. Please note that disabling strictly necessary cookies will impair your ability to log in and use the db2222 platform. Disabling performance cookies will not affect your access but will prevent us from improving the platform based on aggregated usage data.

For guidance on managing cookies in your specific browser, please refer to the browser's official help documentation. db2222 does not use any third-party advertising or cross-site tracking cookies.

11. Data Security

db2222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and db2222.win is encrypted in transit using industry-standard Transport Layer Security protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored using encryption at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Administrative access requires multi-factor authentication and is logged and audited.
• Password Hashing: Account passwords are never stored in plain text. We use a strong, salted hashing algorithm to protect credentials.
• Intrusion Detection: Our infrastructure is monitored continuously for unusual access patterns, potential attacks, and suspicious activity.
• Regular Security Audits: db2222 conducts periodic internal and third-party security assessments to identify and address vulnerabilities in our systems and processes.

Despite our best efforts, no system connected to the internet can be guaranteed to be completely secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, db2222 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

12. Minors & Age Restriction

db2222 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. Persons under 18 years of age are prohibited from registering an account, placing bets, playing casino games, or accessing any paid feature of the db2222 platform.

As part of our KYC verification process, all players are required to confirm their date of birth and provide documentary proof of age before withdrawal privileges are activated. Where db2222 has reasonable grounds to suspect that an account holder may be under 18, the account will be suspended pending age verification. If it is confirmed that a player is under 18, the account will be permanently closed and any deposits returned, minus any amounts wagered prior to the age being identified.

If you are a parent or guardian and you believe that a minor has registered an account or used the db2222 platform without your knowledge, please contact us immediately at [email protected]. We take child protection matters with the utmost seriousness and will act without delay upon receiving a credible report.

13. Changes to This Privacy Policy

db2222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new product features, legal requirements, or regulatory guidance. Where a material change is made to this Policy, we will notify registered players by email and/or via a prominent notice within the platform at least 14 days before the change takes effect.

The effective date at the top of this Policy indicates when the current version entered into force. We recommend that you review this Policy periodically to remain informed about how we protect your personal data. Continued use of db2222.win following the effective date of any revised Policy constitutes your acceptance of the updated terms.

Previous versions of this Privacy Policy are available on request by contacting our support team.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the manner in which db2222 processes your personal data, please contact our Data Protection team using the details below. All written requests are logged and handled in accordance with the timescales set out in Section 9.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your db2222 account dashboard
• WhatsApp: +880 1700 000000 (available 08:00–00:00 BST, UTC+6)

When submitting a data subject rights request, please include your registered email address and, where possible, a brief description of your request so that we can locate your records efficiently. You may be asked to provide proof of identity before we process a Subject Access Request or Erasure Request.