b22bet Privacy Policy

1. Introduction

b22bet ("we", "us", "our", "the Company") is the operator of the online betting and casino platform accessible at b22bet.app. We are committed to protecting the personal data of every individual who visits, registers with, or uses our Platform ("you", "the Player", "the User").

This Privacy Policy explains:

• What categories of personal data we collect from you.
• The purposes for which we use that data and the legal basis for each use.
• Who we share your data with and under what conditions.
• How long we keep your data and how we protect it.
• The rights you hold over your personal data and how to exercise them.

This Privacy Policy forms part of the overall agreement between you and b22bet, alongside the Terms & Conditions and the Responsible Gaming Policy. By registering an account or continuing to use the b22bet Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

b22bet acts as the data controller in respect of all personal data collected through the Platform. As data controller, b22bet determines the purposes and means by which personal data is processed. All enquiries relating to data protection, privacy rights, and this Privacy Policy should be directed to our support team at [email protected].

3. Data We Collect

b22bet collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — players must be 18 or older).
• Residential address, including city, district, and postal code.
• Email address and/or mobile phone number registered to your account.
• Copies of identification documents submitted during KYC verification (National ID, passport, driving licence).
• Proof-of-address documentation (utility bill, bank statement, official correspondence).

3.2 Financial Data

• Payment method details, including mobile money account numbers (bKash, Nagad, Rocket, Upay) and partial card details (last four digits, expiry date — full card numbers are not stored by b22bet).
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references.
• Bonus credits received, wagering activity, and net gaming result records.

3.3 Account & Activity Data

• Username and encrypted password hash.
• Login timestamps, session durations, and device identifiers.
• Betting history — events bet on, stake amounts, odds accepted, and settlement outcomes.
• Casino game history — games played, bet sizes, win/loss records, and session length.
• Responsible gaming settings applied to your account (deposit limits, cooling-off periods, self-exclusion status).

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP.
• Browser type, operating system, and device type.
• Pages visited, features accessed, and clickstream data within the Platform.
• Cookies and similar tracking technologies (see Section 10).

3.5 Communications Data

• Records of communications between you and b22bet customer support, including email correspondence, live chat transcripts, and support ticket history.
• Marketing preferences — whether you have opted in or out of promotional communications.

4. How We Collect Your Data

b22bet collects personal data through the following methods:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or update your account profile.
• Automatically — through cookies, server logs, and analytics tools as you browse and use the Platform.
• From third parties — identity verification service providers who confirm document authenticity; payment processors who confirm transaction status; fraud prevention services who flag suspicious activity patterns.

5. Purposes of Processing and Legal Basis

b22bet processes personal data only for defined, legitimate purposes. The table below outlines the primary processing activities, the data categories involved, and the legal basis relied upon for each:

6. Data Sharing

b22bet does not sell personal data to any third party. We share data only with the following categories of trusted service partners, and only to the extent necessary for the defined purpose:

• Payment processors — bKash, Nagad, Rocket, Upay, and card network processors require transaction reference data to process deposits and withdrawals. b22bet transmits only the minimum data required for each transaction.
• KYC and identity verification providers — third-party document verification services process copies of identity documents to confirm authenticity. These providers are contractually bound to use your data only for the verification purpose.
• Game software providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and account reference when you launch their games. They do not receive your full identity or payment information.
• Fraud prevention and AML screening services — specialist providers that screen transactions and account activity for indicators of fraud, money laundering, or match-fixing. These providers operate under strict data processing agreements.
• IT infrastructure and hosting providers — cloud hosting and content delivery partners who process data as part of providing the technical infrastructure for the Platform.
• Regulatory and law enforcement authorities — b22bet will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory request. We will notify you of such disclosures where legally permitted to do so.

All third-party service providers engaged by b22bet are required to enter into data processing agreements that bind them to appropriate confidentiality and security standards. b22bet remains responsible for ensuring that data shared with processors is handled in a manner consistent with this Privacy Policy.

7. International Data Transfers

The b22bet Platform serves players in Bangladesh and may involve the transfer of personal data to servers or service providers located outside Bangladesh. Where personal data is transferred internationally, b22bet takes appropriate steps to ensure that the receiving country or organisation provides an adequate level of data protection. These steps may include contractual safeguards, standard data protection clauses, or reliance on the receiving party's participation in a recognised data protection framework.

Players who have concerns about international data transfers are invited to contact b22bet at [email protected] for further information about the specific safeguards in place.

8. Data Retention Periods

b22bet retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention guidelines apply:

• Account data (active accounts): Retained for the full duration of the account relationship and for a period of five (5) years after account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to a dispute that remains unresolved.
• Technical and usage logs: Typically retained for thirteen (13) months for platform performance and security purposes, then deleted or anonymised.
• Marketing consent records: Retained for as long as you remain opted in, and for one (1) year after you opt out, as evidence of compliance.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised or aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and analytical purposes.

9. Security Measures

b22bet employs a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and the b22bet Platform.
• Encryption of sensitive data fields at rest within our database systems.
• Role-based access controls that restrict employee access to personal data to those with a legitimate business need.
• Regular security vulnerability assessments and penetration testing of the Platform's infrastructure.
• Multi-factor authentication requirements for internal system access by b22bet staff.
• Incident response procedures that ensure prompt identification, containment, and notification in the event of a data security breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, b22bet will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

10. Cookies & Tracking Technologies

b22bet uses cookies and similar technologies (local storage, session tokens, web beacons) on the Platform. Cookies are small text files placed on your device that help the Platform function correctly and enable us to understand how players use the site.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during a visit, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, preferred payment method, and responsible gaming limits you have set. These improve your experience but are not essential.
• Analytics Cookies: Help b22bet understand how players navigate the Platform — which pages are most visited, where users drop off, and how features are used. This data is aggregated and does not identify individual users.
• Performance Cookies: Used to monitor Platform stability, identify technical errors, and measure page load performance.

10.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when a new cookie is set. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including staying logged in and completing transactions. Disabling functional or analytics cookies will not prevent you from accessing core features.

For guidance on managing cookies in your specific browser, please refer to your browser's official help documentation.

11. Your Data Rights

Subject to applicable data protection law, you hold the following rights in relation to your personal data processed by b22bet:

• Right of Access: You may request a copy of the personal data b22bet holds about you. We will provide this information within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as a misspelled name or outdated address) can be made directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal obligation to retain certain records (e.g., AML-required transaction data).
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing that objection.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a brief description of your request. b22bet will acknowledge receipt within 5 business days and aim to fulfil the request within 30 calendar days. Complex or high-volume requests may take up to 60 days, in which case we will notify you of the extended timeframe.

12. Minors

The b22bet Platform is strictly for adults aged 18 and over. 18+ b22bet does not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step in the account registration and KYC process. If b22bet becomes aware that a minor has provided personal data or created an account, all data associated with that account will be deleted immediately and the account will be permanently closed. If you have reason to believe that a minor has registered with b22bet, please contact us immediately at [email protected].

13. Third-Party Platforms and Links

The b22bet Platform may contain references to third-party game providers and payment partners. b22bet is not responsible for the privacy practices of those third parties. When you interact directly with a third-party service — for example, when using a bKash or Nagad wallet interface — that interaction is governed by the respective provider's own privacy policy. b22bet recommends reviewing the privacy policies of any third-party services you use in connection with the Platform.

14. Changes to This Privacy Policy

b22bet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, b22bet will publish an updated version of this Privacy Policy on the Platform and, where appropriate, notify registered players by email or in-platform message. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a revised Privacy Policy, you should cease using the Platform and request account closure by contacting support.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or b22bet's data protection practices, please contact us:

• Email: [email protected]
• Subject line for data enquiries: "Privacy Enquiry" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 calendar days.

b22bet takes all privacy complaints seriously. If you submit a complaint and are not satisfied with our response, you may have the right to escalate the matter to a relevant data protection authority or supervisory body in your jurisdiction.