gb2222 Privacy
Policy

Introduction & Scope

This Privacy Policy describes how gb2222 ("we", "us", "our") collects, processes, stores, and protects the personal information of users ("you", "your", "Player") who access or use the gb2222 platform, available at gb2222.org and any associated mobile-optimised interfaces (collectively, the "Platform").

We are committed to handling your personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. This policy applies to all personal data gathered in connection with your use of gb2222, including data collected during account registration, identity verification, deposits, withdrawals, gameplay, and customer support interactions.

By using the gb2222 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree with any part of this policy, you should discontinue use of the Platform and contact us at [email protected] to request account closure and data deletion where applicable.

This policy applies specifically to players accessing gb2222 from Bangladesh, including users located in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. References to payment methods such as bKash, Nagad, Rocket, and Upay throughout this policy reflect the Bangladesh-specific payment infrastructure integrated into the gb2222 platform.

Data We Collect

gb2222 collects personal data through several channels depending on your interaction with the Platform. The categories of personal data we collect include the following:

Registration & Identity Data: When you create a gb2222 account, we collect your full legal name, date of birth, email address, residential address, and a username and password of your choosing. This information is mandatory for account creation and is used for identity verification and account management.

Verification Documents: To comply with our age verification and anti-fraud obligations, we may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as utility bills or bank statements. These documents are processed securely and retained only for as long as required by our verification and compliance obligations.

Financial & Transaction Data: We collect information relating to all deposits, withdrawals, and transactions conducted on the Platform. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method identifiers (such as bKash mobile wallet numbers or Nagad account references), and transaction status records. We do not store full card numbers — only masked card references are retained for reconciliation purposes.

Gameplay & Betting Data: We record details of your gaming activity including games played, bets placed, wager amounts, game outcomes, session durations, and bonus transactions. This data is used to ensure fair play, to power responsible gaming tools such as deposit limits and session reminders, and for regulatory reporting where required.

Device & Technical Data: When you access the gb2222 Platform, we automatically collect technical information including your IP address, device type and model, operating system, browser type and version, screen resolution, and connection type. This data is used for fraud prevention, security monitoring, and platform performance optimisation.

Communications Data: If you contact gb2222 via email, live chat, or WhatsApp support, we retain records of those communications for customer service quality assurance and dispute resolution purposes.

How We Use Your Data

gb2222 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which gb2222 processes your personal data are:

• Account Management: To create and maintain your gb2222 account, verify your identity and age, and administer your account settings, preferences, and security configurations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods in Bangladeshi Taka (৳), and to maintain accurate transaction records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To power responsible gaming tools including deposit limits, session time reminders, reality checks, and self-exclusion mechanisms. Gameplay data is actively monitored to identify patterns that may indicate problem gambling behaviour.
• Customer Support: To respond to your support queries, resolve disputes, and improve the quality of our customer service based on interaction histories.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the gb2222 platform's performance, game selection, user interface, and overall player experience.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about new games or features at gb2222. You may withdraw this consent at any time by contacting [email protected].
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws, including record-keeping, anti-money-laundering (AML) reporting, and responding to lawful requests from regulatory or law enforcement authorities.

Legal Basis for Processing

gb2222 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: The majority of data processing by gb2222 is necessary for the performance of the contract between you and gb2222 — specifically, the Terms & Conditions you accepted upon registering your account. Without this processing, gb2222 cannot provide you with account services, process payments, or allow you to participate in games.
• Legal Obligation: Certain processing activities — particularly identity verification, age verification, and transaction monitoring for AML compliance — are required by applicable law. gb2222 is obligated to conduct these activities regardless of your consent, and cannot waive them upon player request.
• Legitimate Interests: gb2222 processes certain categories of data (such as device identifiers and behavioural analytics) on the basis of our legitimate interest in maintaining platform security, preventing fraud, and improving service quality. We apply a balancing test to ensure our legitimate interests do not override your fundamental privacy rights.
• Consent: Where gb2222 processes your data for optional purposes — such as sending personalised marketing communications or using optional analytics cookies — we rely on your explicit consent. You have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Data Sharing & Third Parties

gb2222 does not sell your personal data to third parties. We do not trade, rent, or commercially exchange your personal information with any organisation for their own marketing or commercial purposes.

We may share your personal data with carefully selected third parties in the following limited circumstances:

• Payment Processors: To process your deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card network processors. These providers receive only the minimum data required to execute and confirm your payment transaction.
• Identity Verification Partners: Where automated or manual identity verification is required, we may share your name, date of birth, and document data with third-party verification service providers operating under strict data processing agreements.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive your account session token and anonymised player identifier to facilitate game delivery. These providers do not receive your full identity data or financial account details.
• Fraud Prevention & Security Services: We use third-party fraud detection and security monitoring platforms. Anonymised and pseudonymised behavioural data may be shared with these services for risk scoring and threat detection purposes.
• Legal & Regulatory Authorities: Where required by law, court order, or a legitimate regulatory request, gb2222 will disclose personal data to the relevant authority. We will notify you of such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gb2222's business, your personal data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections.

Cookies & Tracking Technologies

gb2222 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, remember your preferences, and gather analytics data to improve the player experience. Below is a summary of the cookies used on the gb2222 platform:

Cookies are small text files placed on your device by the gb2222 Platform. You can manage or delete cookies through your browser settings. Please note that disabling essential or security cookies may prevent you from logging into your account or completing payment transactions. If you are accessing gb2222 via a mobile device in Bangladesh using browsers on the Grameenphone, Robi, or Banglalink networks, the same cookie settings apply as on desktop browsers.

Data Retention

gb2222 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply to the primary categories of personal data held by gb2222:

• Account & Identity Data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure to satisfy anti-money-laundering record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations.
• Verification Documents (NID, passport, etc.): Retained for a minimum of 5 years from the date of verification, or longer if required by a specific legal or regulatory obligation applicable to your account.
• Gameplay & Betting Records: Retained for 3 years following the last recorded gameplay session, used for fair play monitoring, responsible gaming assessment, and dispute resolution.
• Customer Support Communications: Retained for 3 years from the date of each interaction, used for quality assurance and dispute reference.
• Marketing Consent Records: Retained for the duration of your consent plus 1 year following withdrawal, to demonstrate compliance with consent obligations.
• Technical & Device Logs: Retained for 12 months from the date of collection, after which they are anonymised or deleted.

When personal data is no longer required, gb2222 securely deletes or anonymises it in accordance with industry-standard data destruction practices. Anonymised, aggregated data that cannot be linked to any individual may be retained indefinitely for statistical and analytical purposes.

Data Security

gb2222 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and the gb2222 servers is encrypted using 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols. This applies to login sessions, payment transactions, and all API communications.
• Password Hashing: Your account password is never stored in plain text by gb2222. Passwords are processed using industry-standard cryptographic hashing algorithms (bcrypt) before storage, ensuring they cannot be recovered even in the unlikely event of a data breach.
• Two-Factor Authentication (2FA): gb2222 supports optional two-factor authentication for account login, providing an additional layer of security beyond your username and password.
• Access Controls: Access to personal data within gb2222's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All internal data access is logged and audited.
• Fraud Detection Systems: gb2222 operates automated fraud detection and anomaly monitoring systems that continuously analyse login patterns, transaction behaviour, and device identifiers to identify and respond to suspected security threats in real time.
• Secure Data Centres: gb2222's data infrastructure is hosted in secure, access-controlled data centres with physical security measures, redundant power systems, and environmental protections.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your gb2222 account has been accessed without your authorisation, you must contact us immediately at [email protected] so that we can take swift protective action, including temporary account suspension and forced password reset.

Your Privacy Rights

As a player on the gb2222 platform, you have a number of rights in relation to your personal data. gb2222 is committed to facilitating the exercise of these rights promptly and without undue barrier. Your rights include:

• Right of Access: You have the right to request a copy of the personal data that gb2222 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If any of your personal data held by gb2222 is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly within your account settings, or contact support for assistance with more complex corrections.
• Right to Erasure ("Right to Be Forgotten"): You may request that gb2222 delete your personal data. Note that this right is not absolute — where gb2222 is required to retain data for legal compliance purposes (such as AML record-keeping), we will retain the minimum necessary data for the required period and delete all other personal data associated with your account.
• Right to Restrict Processing: In certain circumstances, you may request that gb2222 pause the processing of your personal data, for example while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that your personal data be provided to you in a machine-readable format (such as JSON or CSV).
• Right to Object: You have the right to object to the processing of your personal data where gb2222 relies on legitimate interests as its legal basis, and where your individual circumstances justify an override of those interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications or optional analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please send a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". gb2222 will verify your identity before processing any data rights request and will respond within 30 days. For complex requests, this period may be extended to 60 days with prior notification to you.

Payment Data & Financial Information

gb2222 applies additional safeguards to the processing of payment and financial data given its sensitive nature. All payment transactions on the gb2222 platform are denominated in Bangladeshi Taka (৳). The following points set out gb2222's specific approach to payment data:

• bKash, Nagad, Rocket & Upay: When you transact via mobile wallet providers, gb2222 receives a transaction reference number and wallet identifier (typically a mobile number) from the payment processor. gb2222 does not receive your full wallet PIN, mPIN, or authentication credentials at any point.
• Card Payments (Visa, Mastercard): Card transactions are processed by PCI DSS-compliant payment processors. gb2222 does not store your full card number, CVV, or card expiry date. Only a masked card reference (e.g., ****1234) is retained for reconciliation and dispute handling.
• Transaction History: Your full transaction history is accessible within your gb2222 account dashboard at all times. This includes all deposits, withdrawals, bonus transactions, and game wagering activity, with timestamps in Bangladesh Standard Time (BST, UTC+6).
• AML Monitoring: gb2222 monitors all financial transactions for patterns consistent with money laundering, fraud, or the use of stolen payment instruments. Where suspicious activity is identified, transactions may be held, accounts suspended, and the matter reported to the relevant authorities. This processing is conducted under our legal obligation and cannot be opted out of.

If you have a query about a specific transaction, deposit, or withdrawal, please contact gb2222 support at [email protected] with your account username, the approximate transaction date, and the amount in question. Our payments team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time.

Minors & Age Verification

gb2222 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from any person under the age of 18. Our Terms & Conditions require all players to be 18 years of age or older, and gb2222 enforces this requirement through an active age verification process at the point of registration and during account review.

If gb2222 discovers or has reasonable grounds to believe that an account belongs to a person under the age of 18, we will immediately:

• Suspend access to the account pending investigation.
• Permanently close the account upon confirmation that the account holder is under 18.
• Return any deposits made to the original payment method.
• Forfeit any winnings accumulated during the underage period.
• Delete all personal data associated with the underage account as soon as legally permissible, retaining only the minimum records required to prevent re-registration.

If you are a parent or guardian and believe that your child has registered an account with gb2222, please contact us immediately at [email protected]. We will investigate and action your report as an urgent priority.

Changes to This Policy

gb2222 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable law, or improvements to the gb2222 platform. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last Updated" date at the top.
• Sending a notification to your registered email address summarising the key changes, where the changes are material and directly affect your rights or our obligations.
• Displaying a notice within your gb2222 account dashboard for a period of at least 14 days following any material revision.

Your continued use of the gb2222 platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how gb2222 protects your personal data. The most current version of this policy is always available at gb2222.org/privacy-policy.