gd2222 Privacy Policy — How We Collect, Use & Protect Your Personal Data

gd2222 collects personal data from players in Bangladesh across several categories, each serving a specific and legitimate operational purpose. We collect only the information that is genuinely necessary to provide a safe, compliant, and personalised betting and casino experience. Below is a full account of the categories of personal information we may collect from you.

1.1 Information You Provide Directly

When you register a gd2222 account, complete a KYC verification request, contact our support team, or participate in a promotion, you may provide us with the following personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification document.
• Contact Data: Email address, mobile phone number registered in Bangladesh, and residential address (city, district, division).
• Identity Verification Documents: Scanned copies or photographs of your National Identity Card (NID), passport, or driver's licence, submitted during the KYC process.
• Financial Data: The mobile banking account number (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to make deposits and receive withdrawals. Full card numbers are never stored — only masked references are retained.
• Communications Data: Records of your correspondence with gd2222 customer support, including live chat transcripts, email threads, and support ticket histories.

1.2 Information We Collect Automatically

When you access and use the gd2222 platform, certain technical data is collected automatically by our systems. This information helps us maintain platform security, detect fraud, and optimise the player experience:

• Device & Technical Data: IP address, device type, operating system version, browser type, screen resolution, and device identifiers.
• Usage Data: Pages visited on gd2222.app, games played, bet history, session duration, click patterns, search queries made within the platform, and navigation paths.
• Transaction Data: Records of all deposits, withdrawals, bonus claims, wagers placed, and game outcomes associated with your account.
• Location Data: Approximate geographic location derived from your IP address, used to confirm that you are accessing the platform from Bangladesh and to apply appropriate responsible gaming prompts.
• Cookie & Tracking Data: Session identifiers, preference cookies, and analytics data as described in the Cookies section of this policy.

1.3 Information From Third Parties

In certain circumstances, gd2222 may receive personal data about you from trusted third-party sources in order to verify your identity, prevent fraud, or comply with applicable legal obligations:

• Payment Processors: Transaction confirmation references from bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment gateways.
• Identity Verification Providers: Confirmation results from accredited KYC and age-verification service providers used to validate the authenticity of documents you submit.
• Responsible Gaming Databases: Self-exclusion status information from third-party responsible gaming registries, where applicable, to prevent excluded individuals from creating new accounts.

gd2222 processes your personal data on the basis of one or more of the following lawful grounds: contractual necessity (to fulfil our obligations to you as a registered player), legitimate interest (to operate a safe and commercially viable platform), legal obligation (to comply with anti-money laundering and responsible gaming requirements), and, where required, your explicit consent.

The following table summarises the principal purposes for which gd2222 uses your personal data and the lawful basis applicable to each:

gd2222 does not sell, rent, or otherwise disclose your personal information to third parties for their own commercial or marketing purposes. We share personal data with third parties only in the specific, limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Service Providers and Technology Partners

gd2222 works with a carefully selected set of third-party service providers who assist us in operating the platform. These providers are permitted to access your personal data only to perform services on our behalf and are contractually prohibited from using it for any other purpose:

• Payment Gateway Operators: bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals securely.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a unique anonymous player session identifier to facilitate game play. These providers do not receive your name, contact details, or financial information.
• Identity Verification Services: Accredited KYC providers receive copies of your identity documents solely to confirm authenticity as part of our account verification process.
• Cloud Infrastructure & Security Providers: Server hosting, data storage, DDoS protection, and cybersecurity services require limited access to platform data to maintain uptime and security.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand player behaviour and improve the gd2222 experience.

3.2 Legal and Regulatory Disclosures

gd2222 may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction when required to do so by applicable law, a valid court order, or where we reasonably believe disclosure is necessary to:

• Comply with a legal obligation or respond to lawful government requests from authorities in Bangladesh or internationally.
• Detect, investigate, or prevent fraud, money laundering, match-fixing, or other criminal activity in connection with the gd2222 platform.
• Protect the rights, property, or safety of gd2222, our players, or the general public.
• Enforce these Terms & Conditions or resolve disputes involving player account activity.

gd2222 uses cookies and similar lightweight tracking technologies on the https://gd2222.app website to ensure the platform functions correctly, to maintain your login session, and to gather anonymised analytics data that helps us improve the player experience. This section explains the types of cookies we use and your choices regarding them.

Types of Cookies Used by gd2222

gd2222 does not use third-party advertising cookies, retargeting pixels, social media tracking cookies, or any tracking technology that profiles your behaviour across websites unrelated to gd2222.app. If you wish to control cookie behaviour, you may also adjust your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your gd2222 account.

gd2222 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to the following:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and gd2222 servers is encrypted using TLS 1.2 or higher. Our platform certificate is maintained at all times.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong one-way cryptographic hashing algorithm with a unique salt per account, making them unrecoverable even in the event of a data breach.
• Access Controls: Access to player personal data within gd2222's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their role.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their gd2222 accounts. Internal administrative access to systems containing personal data requires mandatory 2FA for all staff.
• Intrusion Detection & Monitoring: gd2222 systems are monitored continuously for suspicious access patterns, anomalous transaction activity, and potential security incidents. Automated alerts are in place for immediate response.
• Regular Security Audits: gd2222 engages independent cybersecurity professionals to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, gd2222 will notify affected players without undue delay — and no later than 72 hours after becoming aware of the breach — via their registered email address. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures gd2222 has taken or intends to take to address it.

As a gd2222 player, you hold the following rights in relation to the personal data we hold about you. gd2222 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, contact our dedicated privacy team at [email protected] with the subject line "Privacy Rights Request" and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data gd2222 holds about you, along with information about how it is being used and with whom it has been shared. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. You may update certain details (such as your email address or contact number) directly within your gd2222 account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that gd2222 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where we have no legitimate overriding reason to retain it. Please note that gd2222 is legally required to retain certain transaction and identity records for a minimum period for AML compliance purposes — full erasure may therefore not always be immediately possible.
• Right to Restriction of Processing: You may request that gd2222 temporarily limit the processing of your personal data — for example, while the accuracy of certain data is being contested, or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive a structured, machine-readable copy of your personal data so that it can be transferred to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data where gd2222 relies on legitimate interest as its lawful basis — particularly in relation to direct marketing and profiling activities.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to the withdrawal.

gd2222 retains your personal data only for as long as necessary to fulfil the purpose for which it was originally collected, to meet our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The following retention periods apply to the principal categories of personal data we hold:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original information. gd2222 conducts periodic data audits to identify and purge data that has reached or exceeded its retention limit.

gd2222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the features and services available on the platform. When we make material changes to this policy, we will notify registered players by sending a notification to their registered email address and by displaying a prominent update notice on the gd2222.app homepage for a period of at least 14 days following the change.

The effective date of the current version of this Privacy Policy is displayed at the top of this document. We encourage you to review this page periodically to stay informed about how gd2222 protects your personal information. Your continued use of the gd2222 platform following the publication of any updated version of this policy constitutes your acceptance of the revised terms.

How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that gd2222 holds about you, please contact our privacy team using the details below. All privacy enquiries are handled by a dedicated member of our operations team and are treated with strict confidentiality.

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Platform: https://gd2222.app
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. gd2222 is committed to maintaining the highest practical standards of personal data protection for every player on our platform, from Dhaka to Cox's Bazar and every region of Bangladesh in between.