Privacy Policy — dd2222 Data Practices
dd2222 is committed to protecting the privacy of every player who uses our platform. This Privacy Policy explains in plain terms what personal data we collect, why we collect it, how it is stored and used, and what rights you hold as a player based in Bangladesh.
Privacy Principles at dd2222
Before diving into the full policy, here is a concise overview of the core privacy principles that guide every data decision we make at dd2222.
Minimal Data Collection
dd2222 collects only the personal data that is strictly necessary to provide our services, verify player identity, process payments, and meet our legal obligations. We do not collect data speculatively or for purposes unrelated to platform operation.
Secure Storage
All personal data held by dd2222 is stored on servers protected by industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, and strict access controls limiting who within our organisation can view player records.
No Sale of Personal Data
dd2222 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is shared only with the service providers and partners that are directly necessary for platform operation, as described in this policy.
Transparency
We are clear about what we collect and why. This Privacy Policy is written in plain English so that players based in Bangladesh — and elsewhere — can understand exactly how their data is handled without having to wade through impenetrable legal jargon.
Your Rights Are Respected
dd2222 recognises and upholds your right to access, correct, and request deletion of personal data we hold about you. Requests are handled promptly, and we will never use your personal data in ways that you have not been informed about and had the opportunity to object to.
Lawful Basis for Processing
Every category of personal data that dd2222 processes has a defined lawful basis — either contractual necessity, legal obligation, legitimate interest, or your explicit consent. We do not process personal data without a documented purpose and a valid legal ground for doing so.
Data We Collect
dd2222 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the main data categories, specific data points within each, and the reason we collect them.
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, gender, National ID (NID) number or passport number, photograph | Account registration, age and identity verification, fraud prevention |
| Contact Data | Email address, mobile phone number, residential address (city, district, postal code) | Account communications, promotional notifications (where consented), support correspondence |
| Financial Data | bKash/Nagad/Rocket mobile number, bank account details, transaction history, deposit and withdrawal amounts in BDT | Payment processing, anti-money-laundering checks, transaction records required by law |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session timestamps | Platform security, fraud detection, service optimisation, geographic access controls |
| Usage Data | Pages visited, games played, wagers placed, session duration, bonus claims, betting history | Responsible gaming monitoring, personalisation, platform improvement, promotional targeting (where consented) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support delivery, dispute resolution, quality assurance, staff training |
| Verification Documents | Scanned copies of NID, passport, utility bills, bank statements submitted during KYC review | Regulatory compliance, identity verification, withdrawal authorisation |
Data Collected from Minors
dd2222 does not knowingly collect personal data from individuals under the age of 18. Our registration process requires users to confirm that they are 18 years of age or older. If we become aware that we have inadvertently collected personal data from a minor, we will promptly delete all such data and close the associated account. If you believe a minor has registered on our platform, please contact us at [email protected] immediately.
Data You Provide Voluntarily
In addition to the data categories listed above, you may choose to provide additional information voluntarily — for example, when completing a player survey, submitting feedback, or participating in a promotional competition. Such data is collected and used solely for the purpose for which it was provided and is not retained beyond the period necessary to fulfil that purpose.
How We Use Your Data
Lawful Basis: dd2222 processes your personal data only where a valid lawful basis exists under applicable data protection principles. The primary lawful bases we rely on are: (a) contractual necessity — processing required to deliver the services you have signed up for; (b) legal obligation — processing required by applicable laws including anti-money-laundering regulations; (c) legitimate interests — processing that serves a genuine operational need proportionate to the privacy impact; and (d) consent — processing that you have explicitly agreed to, which you may withdraw at any time.
Account Management and Service Delivery
The primary use of your personal data is to operate your dd2222 account, process your deposits and withdrawals in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, and other supported payment methods, deliver the games and betting markets you participate in, and provide customer support when you need it. Without this processing, we cannot deliver the dd2222 service to you.
Identity Verification and Fraud Prevention
dd2222 uses identity data and financial data to verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that payment methods used on your account are registered in your own name. This processing also underpins our fraud detection systems, which monitor account activity for patterns consistent with account takeover, bonus abuse, multi-accounting, or financial crime.
Responsible Gaming Monitoring
dd2222 uses your usage data — specifically your wagering history, session durations, deposit frequency, and game participation patterns — to monitor for signs of problem gambling behaviour. Where our responsible gaming algorithms identify potential risk indicators, our team may proactively contact you to offer support tools such as deposit limits, cool-off periods, or self-exclusion. This processing is in your interest and is conducted under our legitimate interest basis.
Promotional Communications
Where you have provided explicit consent to receive marketing communications, dd2222 may use your contact data and usage data to send you information about promotions, bonuses, new game releases, and seasonal offers relevant to players in Bangladesh — for example, Eid bonus promotions, BPL cricket betting offers, or Pohela Boishakh special events. You may withdraw your marketing consent at any time by contacting our support team or updating your account preferences.
Platform Improvement and Analytics
Aggregated, anonymised usage data is used by the dd2222 product and development teams to understand how players interact with the platform, identify performance bottlenecks, prioritise new features, and improve the overall user experience. This analytics processing does not involve individually identifiable personal data and is conducted under our legitimate interests basis.
Legal and Regulatory Compliance
dd2222 retains certain categories of personal data — including transaction records, identity verification documents, and communications logs — for defined periods in order to comply with applicable anti-money-laundering obligations, respond to regulatory enquiries, and defend or pursue legal claims. This processing is conducted under the legal obligation basis and cannot be opted out of by individual players.
Data Sharing & Disclosure
No Sale of Data: dd2222 does not sell, rent, auction, or otherwise transfer your personal data to third parties for their own commercial purposes. The sharing described below is limited to what is operationally necessary to run the platform and fulfil our legal obligations.
Payment Processors
To process deposits and withdrawals, dd2222 must share relevant financial data — including your registered mobile number and transaction amounts — with payment service providers such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks Visa and Mastercard. This sharing is strictly limited to the data required to execute each individual transaction and is governed by the respective provider's own data protection terms.
Game Content Providers
dd2222 integrates games and live casino products from third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, a session token and basic account identifier are shared with the relevant provider when you launch a game. These providers do not receive your full personal profile, payment data, or contact information.
Identity Verification and KYC Partners
To fulfil our age verification and anti-money-laundering obligations, dd2222 may share identity documents and identity data with specialist KYC (Know Your Customer) service providers. These partners are contractually bound to use the data solely for verification purposes and to maintain security standards equivalent to those applied by dd2222 itself.
Legal and Regulatory Authorities
dd2222 may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory bodies where required by applicable law or a valid legal order. In such cases, dd2222 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permitted to do so, notify the affected player of the disclosure.
Business Transfers
In the event that dd2222 is subject to a merger, acquisition, restructuring, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it, providing adequate time to close their account if they do not consent to the transfer.
Data Retention
dd2222 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years following closure | Legal obligation (AML, KYC regulatory requirements) |
| Financial Transaction Records | 7 years from the date of each transaction | Legal obligation (financial recordkeeping requirements) |
| Verification Documents (KYC) | 5 years from account closure | Legal obligation (AML regulations) |
| Support Communications | 3 years from the date of each interaction | Legitimate interest (dispute resolution, quality assurance) |
| Marketing Consent Records | Until consent is withdrawn, plus 3 years | Legal obligation (demonstrating lawful consent) |
| Technical / Log Data | Up to 12 months | Legitimate interest (security monitoring, fraud detection) |
| Analytics Data (anonymised) | Up to 24 months | Legitimate interest (platform improvement) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with dd2222's internal data lifecycle management procedures. Where data cannot be immediately deleted due to ongoing legal proceedings, regulatory enquiries, or unresolved disputes, it will be preserved in a restricted access state until the relevant matter is concluded.
Data Security
SSL Encrypted Platform: All data transmitted between your device and the dd2222 platform is protected by TLS 1.3 encryption. The dd2222 website operates exclusively over HTTPS. No unencrypted HTTP connections are accepted. Your login credentials, payment details, and personal information are never transmitted in plaintext.
dd2222 implements a layered security architecture to protect player personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures include:
- Encryption at rest: All personal data stored in dd2222's databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated on a scheduled basis.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. dd2222 staff who require access to player data to perform their role are granted the minimum access level necessary. All staff data access is logged and subject to periodic audit.
- Two-factor authentication (2FA): Players are encouraged to enable 2FA on their dd2222 accounts. All dd2222 administrative accounts require 2FA as a mandatory control.
- Intrusion detection: dd2222's infrastructure is monitored continuously by automated intrusion detection systems that alert the security team to anomalous access patterns, login attempts from unusual locations, and other potential indicators of compromise.
- Penetration testing: dd2222 commissions independent security assessments of its platform on a regular basis. Identified vulnerabilities are remediated according to a risk-based prioritisation framework.
- Staff training: All dd2222 employees with access to personal data complete mandatory data protection and security awareness training on joining the organisation and on an annual basis thereafter.
Data Breach Response
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, dd2222 will notify impacted players without undue delay, providing clear information about the nature of the breach, the categories of data affected, the likely consequences, and the steps dd2222 has taken or intends to take to address the breach and mitigate its effects. Affected players will be advised on any protective steps they should take, such as changing their account password.
Your Privacy Rights
As a player on the dd2222 platform, you hold the following privacy rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or email us at [email protected]. We will acknowledge all rights requests within 48 hours and respond substantively within 30 calendar days.
Right of Access
You have the right to request a copy of all personal data that dd2222 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the parties with whom it has been shared. We will provide this information in a commonly used, machine-readable format where technically feasible.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Where a correction is made to data that has previously been shared with a third party, we will inform that party of the correction where it is practicable to do so.
Right to Erasure
You may request that dd2222 delete personal data we hold about you where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and no other lawful basis applies; (c) you have objected to processing under the legitimate interest basis and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Please note that erasure requests cannot be fulfilled where we are required to retain data by law — for example, transaction records subject to financial regulatory retention requirements.
Right to Restrict Processing
You may request that dd2222 temporarily suspend processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed. Restriction means the data is retained but not actively used.
Right to Object
You have the right to object to processing of your personal data carried out under dd2222's legitimate interest basis, including profiling conducted for responsible gaming monitoring purposes. You also have an unconditional right to object to processing for direct marketing purposes, including profiling related to marketing.
Right to Withdraw Consent
Where processing is based on your explicit consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal was made.
Policy Updates & Contact
Updates to This Privacy Policy
dd2222 reviews this Privacy Policy on a regular basis and may update it to reflect changes in our data practices, changes to applicable law, or feedback from players. When we make material changes to this policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the dd2222 platform for a period of at least 14 days before the updated policy takes effect.
The effective date displayed at the top of this document indicates when the current version of the policy came into force. If you continue to use the dd2222 platform after the effective date of an updated Privacy Policy, you will be taken to have accepted the updated terms. If you do not accept the updated policy, you should cease using the platform and contact us to request account closure.
The most current version of this Privacy Policy is always available at https://dd2222.vip/privacy-policy. We recommend bookmarking this page and checking it periodically, particularly before making a new deposit or participating in a new promotional offer.
How to Contact Us About Privacy
If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data dd2222 holds about you, please reach out to our support team. We are available 24 hours a day, 7 days a week via live chat on the dd2222 platform. For formal privacy rights requests and data protection enquiries, you may also contact us by email. Our support contact email is: [email protected]
18+ Platform: dd2222 is an adult-only platform. Players must be 18 years of age or older to register and use our services. We are committed to protecting the privacy of all users, including ensuring that minors are not permitted to use the platform. If you are aware of a minor accessing dd2222, please contact us immediately at [email protected].
Ready to Play at dd2222?
Your privacy is protected every step of the way. Explore our games, read the FAQ, or learn about responsible gaming — all in a safe, secure environment built for players in Bangladesh.