Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how gd2222 ("we", "us", "our", "the Platform") collects, uses, stores, and shares personal data obtained from individuals ("you", "the Player", "the User") who visit, register on, or otherwise interact with the gd2222 platform at gd2222.bet. This Policy applies to all services offered by gd2222, including casino games, sports betting, promotions, and customer support.

This Policy is incorporated by reference into the gd2222 Terms & Conditions and forms part of the overall agreement between you and gd2222. Where terms are used in this Policy without definition, they carry the meaning assigned to them in the Terms & Conditions. We are committed to handling your personal data responsibly, transparently, and in a manner that respects your rights as a player in Bangladesh.

2 Personal Data We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, or health information. If you voluntarily disclose such data (for example, in a support communication regarding responsible gaming), we will handle it with additional care and will not use it for any purpose beyond the direct support interaction.

3 How We Collect Your Data

gd2222 collects personal data through several channels:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical and usage data collected automatically via cookies, log files, and similar tracking technologies when you access the platform from any device.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, or any other payment partner when you initiate a financial transaction.
• Third-party game providers: Anonymised or aggregated gameplay data from game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe, used to resolve disputes and ensure fair play.
• Fraud and security services: Risk signals received from third-party fraud detection partners used to protect the integrity of player accounts and the platform.

4 Legal Basis and Purpose of Processing

gd2222 processes your personal data only where a lawful basis exists. The primary purposes for which we process personal data, together with the corresponding lawful basis, are as follows:

• Account registration and management: Processing is necessary to perform our contract with you and to provide the platform services you have requested.
• Identity and age verification: Processing is necessary for compliance with our legal obligations and to enforce our strict 21+ age restriction policy.
• Payment processing: Processing is necessary to fulfil the contractual obligation to deposit, hold, and withdraw funds on your behalf.
• Fraud prevention and security: Processing is in our and your legitimate interests to detect, investigate, and prevent fraudulent activity, money laundering, and platform abuse.
• Responsible gaming monitoring: Processing is in your vital interests and our legitimate interest to identify signs of problem gambling and fulfil our duty of care.
• Marketing communications: Processing is based on your explicit consent, freely given at registration or through your account preferences. You may withdraw this consent at any time without affecting your ability to use the platform.
• Platform analytics and improvement: Processing is in our legitimate interest to understand how players use the platform and to improve the user experience over time.
• Legal compliance: Processing is necessary to comply with applicable legal obligations, including responding to lawful requests from competent authorities.

5 Cookies and Tracking Technologies

gd2222 uses cookies and similar technologies (including local storage tokens and session identifiers) to operate the platform, maintain your session, and improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: Required for basic platform functionality, including authentication, session management, and security. These cannot be disabled as the platform cannot function without them.
• Performance and analytics cookies: Collect anonymised data on how players navigate the platform, which games are most popular, and where errors occur. This data is used solely to improve the platform.
• Functional cookies: Remember your preferences such as language, last-visited game category, and notification settings to personalise your experience on return visits.

We do not use cookies to serve third-party advertising or to track your activity on other websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the platform. Most modern mobile browsers on Android and iOS allow granular cookie management through their privacy settings.

6 How We Share Your Data

gd2222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment service providers: We share the minimum necessary financial and identity data with bKash, Nagad, Rocket, Upay, and any other payment partner required to process your transactions securely.
• Game providers: Transaction and session identifiers are shared with third-party game studios (e.g., Evolution Gaming, Pragmatic Play) to facilitate gameplay and resolve disputes. These providers operate under strict data processing agreements.
• Fraud and risk management partners: Anonymised risk signals may be shared with fraud detection services to protect the platform and its players.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal request.
• Business successors: In the event of a merger, acquisition, or sale of all or part of the business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection obligations.

7 Data Retention

gd2222 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The general retention principles we apply are:

• Active account data is retained for the lifetime of your account plus a minimum period following account closure, as required to comply with applicable legal obligations.
• Financial transaction records and identity verification documents are retained for a minimum of five years following the date of the last transaction, in accordance with anti-money-laundering requirements.
• Marketing preference records are retained until you withdraw your consent or close your account, whichever comes first.
• Support communications are retained for two years from the date of the interaction, after which they are securely deleted unless they relate to an unresolved dispute or legal matter.
• Technical and usage data logs are anonymised or deleted on a rolling 12-month basis.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8 How We Protect Your Data

gd2222 implements a range of technical and organisational measures to protect personal data from unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the gd2222 servers.
• Encrypted storage for sensitive data including identity documents, financial details, and authentication credentials.
• Role-based access controls that restrict internal access to personal data to staff who have a legitimate operational need to view it.
• Regular internal security audits and vulnerability assessments of the platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.

While we take reasonable and proportionate steps to secure your data, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected players promptly and take immediate steps to contain the incident.

9 Your Data Rights

As a player on the gd2222 platform, you hold the following rights with respect to your personal data:

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Restriction
• Right to Portability
• Right to Object
• Right to Withdraw Consent

Right to Access: You may request a copy of the personal data we hold about you at any time. We will provide this within a reasonable timeframe upon verification of your identity.

Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through your account settings.

Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain data (e.g., financial records).

Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of your data is being contested.

Right to Portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of personal data you have provided to us.

Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

Withdrawing Consent: Where we process your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time via your account notification settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat on the platform. We may ask you to verify your identity before fulfilling your request. We aim to respond to all data rights requests within 30 days.

10 Minors and Age Restriction

gd2222 is strictly an adults-only platform. We do not knowingly collect or process personal data from any person under the age of 21. Our registration process includes age verification steps specifically designed to prevent access by minors. If we become aware that personal data has been submitted by an individual under 21, we will delete that data and close the associated account immediately.

If you believe that a minor has registered on the platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

11 Changes to This Privacy Policy

gd2222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When we make material changes, we will update the "Last updated" date at the top of this page. Where the changes are significant, we may also notify active players via the platform's notification system or by email.

Continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we handle your data.

12 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gd2222 handles your personal data, please reach out to our support team. We take all privacy-related enquiries seriously and will respond promptly.

You may contact us via live chat, available 24 hours a day, seven days a week, directly on the gd2222 platform. Alternatively, you may write to us at [email protected] (plain text — not a clickable link). Our team serves players across Bangladesh including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar and is available around the clock at Bangladesh Standard Time (BST, UTC+6).