2z222 Privacy
Policy

The personal data we collect about you is used for the following purposes:

• Account Registration and Management: To create and maintain your 2z222 account, verify your identity and age, manage your login credentials, and ensure that only eligible players — aged 18 and above — can access real-money services.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to maintain accurate wallet records; to handle payment disputes; and to issue correct bonus credits tied to qualifying deposits.
• Customer Support: To respond to enquiries, investigate complaints, resolve disputes, and provide technical assistance. Support communications are retained to maintain a record of interactions and to improve service quality.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money-laundering (AML) and counter-terrorism-financing (CTF) requirements; to respond to lawful requests from government bodies, law enforcement agencies, or courts; and to conduct fraud screening and prohibited-conduct investigations.
• Responsible Gaming: To monitor play patterns for signs of problem gambling; to apply self-exclusion or account restriction tools at a player's request; and to facilitate referrals to responsible gaming resources where appropriate.
• Marketing Communications: To send you promotional offers, bonus announcements, and seasonal campaign information (such as BPL and IPL cricket promotions, Eid and Pohela Boishakh specials) where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the 2z222 platform, optimising game content, and enhancing the overall user experience for Bangladeshi players.
• Security and Fraud Prevention: To monitor for suspicious login activity, detect and investigate potential fraud or account takeover attempts, and protect the integrity of the platform and its player community.

We may share your personal data with the following categories of third parties, subject to strict contractual data-protection obligations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card-processing partners receive only the transactional data necessary to process your specific deposit or withdrawal request. They are not provided with your gaming history or any other data beyond what the transaction requires.
• Identity Verification Providers: Third-party KYC and AML compliance services that assist 2z222 in verifying player identity and age, and in screening against sanctions and politically exposed persons (PEP) lists. These providers process the minimum data necessary for verification purposes.
• Game Content Providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as session tokens and stake amounts) to deliver game content. They do not receive your full personal profile.
• Technology and Infrastructure Partners: Cloud hosting providers, cybersecurity firms, and IT support services that maintain the technical infrastructure of the 2z222 platform. These partners act as data processors under contractual terms that prohibit independent use of your data.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, courts, regulatory bodies, or government authorities when required to do so by applicable law, court order, or regulatory direction. We will, where legally permitted, notify you of such a disclosure.
• Business Transfers: In the event that 2z222 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may form part of the transferred assets. We will notify you in advance of any such transfer and ensure that the receiving party maintains the same standard of data protection as set out in this policy.

All third parties with whom 2z222 shares personal data are required to implement appropriate technical and organisational measures to protect that data, and are prohibited from using it for any purpose other than the specific purpose for which it was disclosed.

2z222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the duration of your account registration and for a period of five years following permanent account closure, in order to comply with AML record-keeping obligations and to handle any post-closure disputes.
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support Communications: Chat transcripts and email correspondence are retained for three years from the date of the last interaction, unless a longer period is required for an unresolved dispute or legal proceeding.
• Marketing Consent Records: Records of your consent to receive marketing communications, or your withdrawal of that consent, are retained for the life of your account and for three years following account closure, to demonstrate compliance with consent obligations.
• Technical and Usage Logs: Server logs and analytics data are retained for a maximum of 12 months, after which they are either deleted or anonymised for long-term trend analysis.

When data is no longer required for any of the purposes listed above, it is securely deleted or anonymised so that it can no longer be attributed to you as an individual. Where anonymisation is technically not feasible, data is pseudonymised and stored with access controls that prevent re-identification.

2z222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 2z222 servers is encrypted in transit using industry-standard SSL/TLS protocols, ensuring that your credentials, financial data, and account information cannot be intercepted.
• Encrypted Data Storage: Sensitive data fields — including identity document scans, payment method details, and account passwords (stored as salted hashes, never in plaintext) — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within the 2z222 organisation is granted strictly on a need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff with administrative access to player data systems.
• Regular Security Audits: 2z222's platform and infrastructure are subject to periodic security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities proactively.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, 2z222 will notify you via your registered email address without undue delay, providing details of the nature of the breach, the data categories affected, and the steps we are taking to mitigate harm.

While we take every reasonable precaution to secure your data, no digital system can be guaranteed to be entirely immune from attack. You play an important role in keeping your own account secure by maintaining a strong, unique password, not sharing your login credentials, and reporting any suspicious account activity to [email protected] immediately.

2z222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify you via the email address registered to your account at least 7 days before the updated policy takes effect.

Minor updates such as typographical corrections, clarifications that do not alter the substance of the policy, or changes required by law that take immediate effect may be published without prior notice. The effective date displayed at the top of this page will always reflect the date of the most recent version.

We encourage you to review this page periodically to stay informed about how 2z222 protects your data. Your continued use of the platform following the effective date of any update constitutes your acknowledgement of the revised policy. If you do not agree with a material change, you should close your account before the change takes effect.

Contact Us: If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 2z222, please contact our Data Protection team. All privacy-related enquiries should be directed to our support team at the email address below. We aim to respond to all privacy enquiries within 5 business days.

Email (plain text — not a link): [email protected]
Subject line: "Privacy Policy Enquiry" or "Privacy Rights Request"
Response time: Within 5 business days (BST, UTC+6)