2bd22 Privacy Policy
How We Collect, Use & Protect Your Data
At 2bd22, your privacy is not an afterthought — it is a foundational principle. This Privacy Policy explains in clear, plain English exactly what personal information we collect when you use our platform, why we collect it, how we store and protect it, who we share it with, and what rights you hold over your own data.
Six Core Privacy Principles at 2bd22
Our approach to privacy is built on six commitments we make to every player on our platform.
We collect only the personal information that is strictly necessary to provide our services, meet legal obligations, and protect players. We do not collect data speculatively or for purposes beyond those stated in this Policy.
All data stored by 2bd22 is protected with bank-grade SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
Your personal data is never sold, rented, or traded to third-party advertisers or data brokers. We share data only with the trusted service partners required to operate the platform — payment processors, identity verifiers, and game providers.
We tell you clearly — in plain English — what data we collect, why we collect it, and how long we keep it. There are no hidden data practices. This Privacy Policy is the complete and accurate record of how 2bd22 handles your information.
You can access, correct, export, or request deletion of your personal data at any time by contacting our support team. Marketing communications can be opted out of instantly via your account settings or by emailing us directly.
2bd22 processes personal data in accordance with applicable data protection law. Our KYC and AML compliance procedures follow internationally recognised standards to protect both individual players and the integrity of the financial system.
Information We Collect
When you register for and use 2bd22, we collect personal information across several categories. The type of information collected depends on the specific activity — for example, simply browsing the site collects less data than registering an account and placing bets. Below is a complete breakdown of the categories of personal data we collect and their sources.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport copy | Provided by you during registration and KYC |
| Contact Data | Email address, mobile number (Bangladesh), city of residence | Provided by you during registration |
| Financial Data | bKash/Nagad/Rocket/Upay account numbers, bank account details, deposit and withdrawal history | Provided by you when transacting; recorded automatically |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Collected automatically via server logs and cookies |
| Usage Data | Pages visited, games played, bets placed, bonus claims, session duration, click behaviour | Collected automatically via platform analytics |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Generated when you contact our support team |
| Marketing Preferences | Opted-in/opted-out status for email and in-platform promotional notifications | Set by you in account settings; updated automatically on opt-in/opt-out actions |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data unless specifically required for identity verification in exceptional circumstances and with your explicit consent.
If you choose not to provide certain information — for example, if you decline to complete KYC identity verification — we may be unable to process withdrawals, honour bonuses, or in some cases maintain your account in good standing. We will always inform you at the point of collection when providing a particular piece of information is mandatory versus optional.
How We Use Your Data
2bd22 uses the personal information we collect for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with those stated here. The primary purposes for which we process personal data are as follows:
- Account Creation & Management: To register your account, verify your identity and age (18+ confirmation), manage your profile, and maintain your account in good standing throughout your use of the platform.
- Processing Transactions: To facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfer, process withdrawal requests to your verified payment method, and maintain accurate financial records for your account.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. This includes automated monitoring of betting and transaction patterns.
- Legal & Regulatory Compliance: To fulfil obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) regulations, including retaining transaction records for the legally required minimum retention period.
- Customer Support: To respond to your enquiries, resolve complaints, provide technical assistance, and maintain a record of communications for quality assurance and dispute resolution purposes.
- Personalised Experience & Bonuses: To tailor bonus offers — including the 2bd22 daily bonus programme — to your gameplay preferences, and to present game recommendations and promotions relevant to your activity. This personalisation relies on usage and gameplay data and is only applied where you have not opted out of marketing.
- Platform Improvement: To analyse aggregated usage data, identify technical issues, improve game performance, and develop new features. Where data is used for this purpose it is anonymised wherever possible.
- Responsible Gaming: To monitor for indicators of problem gambling behaviour, enforce self-exclusion periods and deposit limits, and contact players who may benefit from responsible gaming guidance as part of our duty of care obligations.
We will never use your personal data to build advertising profiles for third-party marketing platforms, to make automated high-stakes decisions about you without human review, or for any purpose not listed in this Privacy Policy without first obtaining your explicit consent.
Legal Basis for Processing
Every processing activity carried out by 2bd22 rests on one or more of the following lawful bases. We have mapped each primary use of your data to its corresponding legal basis below.
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract — necessary to provide the service you have signed up for |
| Processing deposits and withdrawals | Performance of a contract — necessary to execute the financial transactions you initiate |
| KYC identity and age verification | Legal obligation — required to confirm 18+ eligibility and meet AML compliance standards |
| Fraud detection and security monitoring | Legitimate interest — protecting the platform and all players from financial crime and abuse |
| Customer support communications | Performance of a contract and legitimate interest — resolving issues and improving service quality |
| Personalised bonus and marketing communications | Consent — only where you have actively opted into marketing at registration or via account settings |
| Responsible gaming monitoring | Legitimate interest and legal obligation — duty of care to prevent gambling-related harm |
| Platform analytics and improvement | Legitimate interest — improving our product using anonymised aggregated data |
Where our processing relies on your consent — most notably for personalised marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing, update your preferences in your account settings or contact .
Data Sharing & Third Parties
2bd22 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only with the categories of trusted partners listed below, and only to the extent strictly necessary to fulfil the stated purpose. All third-party partners are required by contract to handle your data securely and in accordance with applicable data protection law.
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
- Identity Verification Partners: Third-party KYC and age verification service providers receive copies of identity documents you submit. These partners are subject to strict data processing agreements and are not permitted to use your identity data for any purpose other than verification on behalf of 2bd22.
- Game Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to support game functionality, RNG certification, and technical troubleshooting. These providers do not receive your name, contact details, or financial information.
- Analytics Providers: We use privacy-respecting analytics tools to understand how players use our platform. Where personal data is involved, it is anonymised or pseudonymised before processing. Analytics providers are not permitted to use this data for their own commercial purposes.
- Law Enforcement & Regulatory Bodies: We may disclose personal data to competent authorities — including financial intelligence units, law enforcement agencies, and regulatory bodies — where required by law, court order, or in connection with a formal investigation into financial crime or fraud.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of 2bd22, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Privacy Policy.
Data Retention
2bd22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below sets out our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC documents | 5 years from account closure | AML regulatory obligation |
| Financial transaction records | 5 years from the date of each transaction | AML and financial compliance requirements |
| Account registration data | Duration of account + 2 years after closure | Contractual record-keeping and dispute resolution |
| Gameplay and betting history | Duration of account + 1 year after closure | Dispute resolution and responsible gaming monitoring |
| Support communications | 3 years from the date of each interaction | Quality assurance and dispute resolution |
| Marketing preference records | Duration of account; opt-out records kept for 5 years | Demonstrating compliance with consent obligations |
| Technical / log data | 13 months from collection | Security monitoring and fraud detection |
| Analytics data (anonymised) | Up to 26 months (aggregated, no personal identifiers) | Platform performance analysis and improvement |
When a retention period expires, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated statistical purposes without any privacy risk to you.
In some circumstances, we may be required to retain data beyond the standard periods listed above — for example, where data is subject to a legal hold in connection with ongoing litigation, a regulatory investigation, or a law enforcement request. In such cases, the data will be held only for the duration necessary to comply with that requirement and will then be deleted in accordance with our normal retention schedule.
Your Privacy Rights
As a player on 2bd22, you hold a number of rights regarding the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, contact our support team via live chat or by writing to . We will respond to all verified requests within 30 days.
- Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a commonly used, structured electronic format within 30 days of receiving your verified request at no charge (for reasonable first requests).
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic profile details, you can update information directly in your account settings. For identity documents and financial records, contact our support team.
- Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no other lawful basis for retention. Note that this right is subject to overriding legal obligations — for example, we cannot erase financial transaction records that we are legally required to retain for AML compliance purposes.
- Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you do not wish the data to be erased — you may request that we restrict our use of your data to storage only while the issue is resolved.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and where processing is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
- Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests, or where data is processed for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on your consent — such as for personalised marketing — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Data Security Measures
Protecting the security of your personal data is a top priority for 2bd22. We have implemented a comprehensive set of technical and organisational security measures designed to guard against unauthorised access, accidental loss, destruction, or disclosure of the data we hold.
- SSL/TLS Encryption in Transit: All data transmitted between your device and the 2bd22 platform is protected by industry-standard SSL/TLS encryption. The padlock icon in your browser's address bar confirms that your connection is encrypted.
- Encryption at Rest: Personal data stored in our databases and file systems is encrypted using AES-256 encryption. This means that even in the unlikely event of unauthorised physical access to our servers, stored data cannot be read without the encryption keys.
- Access Controls: Access to personal data within 2bd22 is restricted to authorised staff members on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly when no longer required. All staff with access to personal data undergo data protection training.
- Security Monitoring: Our systems are continuously monitored for suspicious activity, intrusion attempts, and unusual access patterns. Automated alerts trigger immediate investigation when anomalous behaviour is detected.
- Regular Security Reviews: We conduct periodic independent security audits and penetration tests of our platform infrastructure. Findings are remediated according to risk priority, and critical vulnerabilities are patched without delay.
- Vendor Security Standards: All third-party service providers who process personal data on our behalf are required to demonstrate adequate security measures as a condition of their data processing agreements with 2bd22. We perform due diligence on new vendors before onboarding.
Despite these measures, no internet transmission or electronic storage system is completely immune to risk. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take all reasonable steps to contain the breach and mitigate its impact.
You also play an important role in keeping your account secure. Use a strong, unique password for your 2bd22 account, never share your login credentials with anyone, and contact our support team immediately if you suspect that your account has been accessed without your authorisation.
Changes to This Policy
2bd22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make a material change to this Policy, we will notify you by placing a prominent notice within the platform and, where appropriate, by sending an email to the address registered on your account.
The effective date at the top of this page will always reflect the date on which the current version of the Policy came into force. We encourage you to review this page periodically so that you remain informed about how we handle your personal data.
Your continued use of the 2bd22 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material change to this Policy, you should cease using the platform and contact our support team to request account closure and data deletion in accordance with your rights under Section 7 above.
Contact & Privacy Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 2bd22 handles your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond to every substantive question within five business days.
- Email: — use the subject line "Privacy Enquiry" for fastest routing to our data protection team.
- Live Chat: Available 24/7 within the 2bd22 platform. Our support agents can handle general privacy questions and escalate formal complaints to the data protection team.
- Response Time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a full response within 5 business days. Complex data subject access requests may take up to 30 days to fulfil.
- Support Hours: 24 hours a day, 7 days a week, 365 days a year — operating on Bangladesh Standard Time (BST, UTC+6).
For formal data subject rights requests — including access requests, erasure requests, and objections to processing — please email with the subject line "Privacy Rights Request" and include your registered account email address and a clear description of the right you wish to exercise. We will ask you to verify your identity before processing any request that involves disclosure or deletion of personal data.
Your Privacy Is Protected at 2bd22
Now that you understand how 2bd22 handles your data, explore everything our platform has to offer — from daily bonuses and cricket betting to 500+ casino games, all secured with bank-grade encryption.