222be Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how 222be ("the Platform", "we", "us", "our"), operating at https://222be.io, collects, processes, stores, and protects the personal information of individuals ("you", "your", "the Player") who visit, register on, or otherwise interact with the 222be platform.

222be is committed to handling all personal data with the highest standards of care, confidentiality, and security. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about using the 222be platform.

By creating an account on 222be, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or continue to use the platform.

222be collects personal data across several categories. The specific data collected depends on whether you are simply browsing the site, registering an account, verifying your identity, making a deposit, or contacting support.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless you voluntarily disclose such information in a support request (for example, when raising a responsible gaming concern). In those cases, the information is used solely to assist you and is not stored beyond the resolution of your request.

222be uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the 222be platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions linked to your account.
• Identity verification (KYC): To confirm that you are who you say you are, that you meet the 21+ age requirement, and that your payment method belongs to you. Verification documents may be reviewed by 222be staff or a licensed third-party verification provider.
• Fraud prevention and security: To monitor for suspicious account activity, detect multi-accounting, investigate potential money laundering, and protect the integrity of the 222be platform and its players.
• Customer support: To respond to your enquiries, resolve account disputes, and handle responsible gaming requests in a timely manner.
• Personalisation: To tailor promotional offers, game recommendations, and loyalty rewards to your preferences and activity patterns, where you have consented to such personalisation.
• Legal and regulatory compliance: To retain records as required by applicable law, and to respond to lawful requests from law enforcement or regulatory authorities.
• Platform improvement: To analyse aggregate usage patterns, diagnose technical issues, and improve the performance and reliability of the 222be platform.

222be processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the account registration contract — including identity verification, payment processing, and the delivery of betting and casino services.
• Legitimate interests: Processing carried out to protect the security of the platform, detect and prevent fraud, enforce our Terms & Conditions, and conduct internal analytics to improve the service. Our legitimate interests are balanced against your right to privacy and do not override your fundamental rights.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money-laundering (AML) obligations, record-keeping requirements, and responses to lawful authority requests.
• Consent: Processing for optional purposes — such as sending promotional communications or enabling cookie-based personalisation — where you have freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

222be uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the platform. Cookies are small data files placed on your device when you visit a website. They help us recognise your browser across sessions, maintain your login state, and gather aggregate usage analytics.

The following categories of cookies are used on 222be:

• Strictly necessary cookies: Essential for the platform to function. These cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies.
• Functional cookies: Enable the platform to remember your preferences such as language settings, preferred payment method, and display options. Disabling these may reduce the quality of your experience.
• Analytics cookies: Allow 222be to measure aggregate traffic patterns, understand which features are most used, and identify pages that may need technical improvement. These cookies collect anonymised or pseudonymised data only.
• Marketing cookies: Used only if you have consented to personalised promotional content. These cookies help 222be tailor bonus offers and campaign messaging to your demonstrated interests.

You may manage cookie preferences through your browser settings. Note that disabling all cookies may prevent certain features of the 222be platform from functioning correctly, including the ability to remain logged in.

222be does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only where necessary, and only under strict contractual confidentiality obligations. The categories of third parties with whom we may share data include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for their handling of shared data.
• Identity verification providers: Licensed KYC service providers may receive copies of identity documents you submit during the verification process. These providers are contractually bound to use the documents solely for verification purposes.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Ezugi receive technical session data necessary to deliver their games within the 222be platform. No personally identifiable information beyond a pseudonymous session identifier is shared with game providers.
• Fraud prevention and security services: Specialist third-party services that assist 222be in identifying suspicious activity, detecting multi-accounting, and protecting platform integrity may process technical data (such as IP addresses and device fingerprints) on our behalf.
• Law enforcement and regulatory authorities: 222be may disclose personal data to competent authorities where required to do so by law, court order, or lawful regulatory request.

222be retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure, in compliance with standard financial record-keeping obligations.
• Identity and KYC documents: Retained for a minimum of five (5) years from the date of verification, in line with anti-money-laundering regulatory requirements.
• Transaction records: All deposit and withdrawal records are retained for a minimum of five (5) years following the date of the transaction.
• Support communications: Email and chat records are retained for up to three (3) years from the date of the interaction, unless a longer period is required for an open legal or regulatory matter.
• Technical and analytical data: Anonymised or aggregated analytics data may be retained indefinitely since it cannot be linked back to any individual player.
• Marketing consent records: Retained for the duration of your consent plus one (1) year following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual.

222be implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the 222be platform.
• Encrypted password storage using industry-standard one-way hashing algorithms. 222be staff members cannot read or retrieve your password in plain text.
• Access controls: Internal access to personal data is governed by a least-privilege model. Only personnel with a legitimate operational need are granted access to specific data categories, and all internal access is logged and audited.
• Firewalls and intrusion detection systems to monitor for and respond to external threats to the platform's infrastructure.
• Regular security assessments to identify and remediate vulnerabilities in the platform before they can be exploited.
• Data minimisation practices: Systems are designed to collect and store only the minimum personal data required for each operation.

Despite our best efforts, no security system is entirely impenetrable. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 222be will notify affected players promptly and take all reasonable steps to mitigate the impact.

As a registered player on 222be, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within a reasonable timeframe.

• Right of access: You may request a copy of the personal data 222be holds about you, along with information about how it is being processed.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that 222be delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that certain data (such as financial transaction records) must be retained for a minimum statutory period and cannot be erased on request during that period.
• Right to restrict processing: You may request that 222be pause its processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable export of the personal data you have provided to 222be.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of 222be's legitimate interests where your particular situation gives rise to grounds for objection.

The 222be platform is strictly for adults aged 21 years and over. 222be does not knowingly collect or process personal data belonging to persons under the age of 21. If we become aware that a minor has registered an account or provided personal data to the platform, we will immediately suspend the account and permanently delete all associated personal data.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered on 222be, please contact us immediately at [email protected]. We will investigate and act on credible reports without delay. Please include as much identifying information as possible — such as the email address used to register — to assist our investigation.

222be reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the features of the platform. Where changes are material — meaning they affect the nature of the data collected, the purposes for which it is used, or your rights as a data subject — we will notify registered players by email at least seven (7) days before the changes take effect.

Minor updates, such as typographical corrections, clarifications that do not alter the substance of the Policy, or changes required by law with immediate effect, may be made without advance notice. The "Effective" date at the top of this document will always reflect the date on which the current version came into force.

We encourage you to review this Policy periodically. Your continued use of the 222be platform after any published update constitutes acceptance of the revised Policy. If you do not agree with a material change, you must stop using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 222be's handling of your personal data, please contact our dedicated support team using the details below. All privacy-related communications should be submitted in English.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Support hours: 24 hours a day, 7 days a week
• Response time: Under 3 minutes for general support during peak BST hours; data rights requests will be acknowledged within 2 business days

For responsible gaming concerns or self-exclusion requests, please use the subject line "Responsible Gaming Request" so that your message is routed to the appropriate team member immediately.