dd222 Privacy Policy

dd222 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our online casino and sports betting services at dd222.io. This Privacy Policy sets out in clear terms what personal data we collect from players in Bangladesh and elsewhere, the lawful bases on which we process that data, how long we retain it, and the rights you hold as a data subject.

By registering an account with dd222 or continuing to use our platform after this Policy has been posted, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and dd222. In the event of a conflict between this Privacy Policy and the Terms & Conditions on a privacy matter, this Privacy Policy will take precedence.

dd222 collects only the personal data that is reasonably necessary to deliver our services, meet our legal obligations, and protect the security and integrity of the platform. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you create a dd222 account, we collect: full legal name, date of birth, email address, mobile phone number, and the country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna). This data is used to create and manage your account and to verify that you meet our minimum age requirement of 21 years.

2.2 KYC Verification Data

To comply with Know Your Customer (KYC) and anti-money-laundering (AML) obligations, dd222 may collect copies of identity documents such as your Bangladesh National Identity Card (NID), passport, or driving licence, as well as proof-of-address documents such as utility bills, bank statements, or mobile financial service statements (e.g., bKash, Nagad, Rocket, Upay). Source-of-funds declarations may also be requested for high-value transactions.

2.3 Financial & Transaction Data

dd222 records all deposit and withdrawal transactions made through your account, including transaction amounts (in BDT / ৳), timestamps, payment methods used, and transaction reference numbers. dd222 does not store full card numbers or mobile banking PINs; payment processing is handled by third-party payment providers under their own security standards.

2.4 Gameplay & Betting Data

We collect records of all game sessions, bets placed, game outcomes, bonus usage, and wagering activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and to comply with record-keeping obligations.

2.5 Technical & Device Data

When you access dd222, we automatically collect certain technical information including: IP address, browser type and version, operating system, device type, screen resolution, time zone setting (Bangladesh Standard Time, UTC+6), and the URLs you navigate to within the platform.

2.6 Communications Data

If you contact dd222 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and the agent or system involved in the response. This data is used for quality assurance, training, and dispute resolution purposes.

dd222 collects personal data through the following channels:

• Directly from you: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automatically via the platform: Technical and device data collected through cookies, server logs, and similar technologies when you access dd222.io on any device.
• From third-party service providers: Data received from payment processors (e.g., bKash, Nagad, Rocket, Upay, DBBL, Visa, Mastercard) and identity verification providers in connection with KYC processes.
• From game providers: Gameplay and session data relayed from licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, etc.) to support account-level bet histories and dispute resolution.
• From fraud-prevention tools: Risk signals and device-fingerprinting data generated by security systems used by dd222 to detect suspicious activity and protect player accounts.

dd222 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services you have contracted for when creating a dd222 account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC obligations, and data retention mandates.
• Legitimate interests: Processing carried out for purposes that serve dd222's legitimate business interests and that do not override your fundamental privacy rights — including fraud prevention, security monitoring, responsible gaming enforcement, and platform analytics.
• Consent: Where dd222 processes data for purposes that require your explicit consent (e.g., certain categories of marketing communications), we will obtain that consent separately and clearly at the point of collection. You may withdraw such consent at any time by contacting [email protected].

dd222 uses the personal data we collect for the following purposes:

• Creating and managing your dd222 player account, including authentication and account recovery.
• Verifying your identity and age (21+ requirement) through KYC processes.
• Processing deposits and withdrawals in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, Upay, bank transfers, and card payments.
• Delivering casino games, live dealer tables, and sports betting markets including cricket (BPL, IPL, T20 World Cup), football, and kabaddi.
• Applying bonus offers, promotions, and loyalty rewards to your account.
• Detecting and preventing fraud, money laundering, collusion, and other prohibited activities.
• Monitoring gameplay patterns to identify potential problem gambling behaviours and applying responsible gaming interventions where necessary.
• Responding to player support enquiries via live chat and email.
• Conducting platform analytics to improve game selection, payment options, and the overall user experience for Bangladesh players.
• Complying with applicable legal and regulatory requirements, including providing data to competent authorities where lawfully required.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

dd222 does not sell, rent, or trade your personal data. We share personal data with third parties only where necessary for the purposes described in this Policy, and only with parties that have agreed to maintain appropriate data protection standards. Categories of recipients include:

6.1 Payment Processors

Transaction data is shared with payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard) to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and PCI-DSS security standards.

6.2 KYC & Identity Verification Providers

Where dd222 uses third-party identity verification services to conduct KYC checks, we share necessary identity document data with those providers. All such providers are contractually bound to use your data solely for verification purposes and to maintain appropriate security measures.

6.3 Game Providers

Licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive session-level data necessary to deliver their games and resolve any game-related disputes. Game providers do not receive broader account or financial data beyond what is required for game delivery.

6.4 Legal & Regulatory Authorities

dd222 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory demand. dd222 will, where legally permitted, notify affected players of such disclosures.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of dd222's business assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

dd222 uses cookies and similar technologies (including local storage and session storage) to operate and improve the platform. The types of cookies we use are as follows:

You may disable non-essential cookies through your browser's cookie settings. Please note that disabling essential or security cookies may impair your ability to log in or use certain platform features. dd222 does not use third-party advertising cookies or cross-site tracking technologies.

dd222 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain your active account, and to meet our legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active account relationship with dd222 plus a minimum of 5 years following account closure, to meet AML and record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or longer where required by applicable law.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for a minimum of 3 years from the date of the last communication.
• Technical & device logs: Retained for up to 12 months from collection, unless retained longer due to an active security investigation or legal hold.
• Marketing consent records: Retained for the duration of your marketing opt-in plus 2 years following withdrawal of consent, as evidence of consent management.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

dd222 implements a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in transit: All data transmitted between your device and dd222 servers is encrypted using TLS 1.2 or higher (256-bit SSL). dd222.io enforces HTTPS across all pages and subdomains.
• Encryption at rest: Sensitive data stored in dd222 databases — including identity document data and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data is restricted on a strict need-to-know basis using role-based access controls. All internal access to sensitive data is logged and subject to periodic review.
• Two-factor authentication: dd222 offers 2FA to all players and requires it for certain high-value account actions. Internal system access also requires multi-factor authentication.
• Penetration testing: dd222 conducts periodic security assessments and penetration tests on its platform infrastructure to identify and remediate vulnerabilities.
• Incident response: dd222 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, dd222 will notify affected players without undue delay and in accordance with applicable legal requirements.

Subject to applicable law, you hold the following rights in respect of the personal data dd222 holds about you. To exercise any of these rights, contact [email protected]. dd222 will respond to all valid requests within 30 days, or sooner where legally required.

• Right of Access: You may request a copy of the personal data dd222 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Note that corrections to KYC-verified data may require re-submission of supporting documents.
• Right to Erasure: You may request that dd222 delete your personal data. This right is subject to dd222's legal retention obligations; data required for AML compliance, fraud investigation, or active dispute resolution cannot be deleted until the applicable retention period has elapsed.
• Right to Restriction of Processing: You may request that dd222 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to dd222, for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing carried out on the basis of dd222's legitimate interests. dd222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

dd222 is strictly an adult gambling platform. Our services are not directed at, and are not intended to be used by, any individual under the age of 21. dd222 does not knowingly collect personal data from individuals under 21 years of age. If dd222 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that a minor may have registered a dd222 account should contact [email protected] immediately. dd222 takes underage gambling extremely seriously and applies KYC age verification to all accounts as a core compliance measure.

The dd222 platform may contain references to third-party services such as payment providers (bKash, Nagad, Visa, Mastercard) or game studios. Any interaction you have with these third-party services — including visiting their websites or using their applications — is governed by their own privacy policies, which dd222 has no control over and takes no responsibility for. We encourage you to review the privacy policies of any third-party service you engage with in connection with your dd222 account.

dd222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will post the updated Policy on this page with a revised effective date. Where the changes are significant, we may also notify you directly via the email address registered to your account.

Your continued use of dd222 following the posting of any updated Privacy Policy constitutes your acceptance of those changes. If you do not agree with the amended Policy, you should cease using the platform and request account closure by contacting [email protected]. We recommend reviewing this page periodically to stay informed of how dd222 protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dd222 processes your personal data, please contact us using the details below. All contact information is provided as plain text — please use your own email client to reach us.

• Privacy Enquiries & Data Rights Requests: [email protected]
• General Account Support: [email protected]
• Response Commitment: dd222 aims to acknowledge all privacy enquiries within one business day (Bangladesh Standard Time, UTC+6) and to provide a substantive response to data rights requests within 30 calendar days.
• Live Chat: Available 24/7 via your dd222 account dashboard for general support queries.

When contacting dd222 about a data rights matter, please include your full name, the email address registered to your account, and a clear description of your query or request. We may ask you to verify your identity before we process any request that involves access to, or modification of, your personal data.