22db Privacy Policy — How We Handle Your Personal Data
At 22db, protecting the personal data of our Bangladesh players is a core responsibility. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and store it, and what rights you have over your own data. We are committed to transparency, security, and treating your information with the highest level of care.
Privacy at a Glance
Our Core Privacy Commitments
Before reading the full policy, here is a plain-English summary of how 22db approaches data privacy for Bangladesh players.
Encrypted Storage
All personal data held by 22db — including your name, Bangladesh mobile number, NID details, and payment account information — is stored using industry-standard encryption. Data at rest and data in transit are both fully protected using 256-bit SSL technology.
No Data Selling
22db does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is used solely to operate and improve the 22db platform and to comply with applicable legal obligations. Your data is yours.
Purpose-Limited Use
22db collects only the data that is necessary for specific, legitimate purposes — account management, payment processing, responsible gaming compliance, fraud prevention, and platform improvement. We do not collect data beyond what is needed for these defined purposes.
Player Controls
22db players have meaningful rights over their personal data, including the right to access a copy of the data held, the right to request corrections, and the right to request deletion of their data subject to legal retention obligations. These requests can be submitted to [email protected].
Transparent Cookies
22db uses cookies and similar tracking technologies to operate the platform, remember player preferences, and analyse aggregate usage patterns. This policy explains exactly which types of cookies are used and how players can manage their cookie preferences through standard browser settings.
Legal Compliance
22db maintains this Privacy Policy in line with international best practices for data protection, including principles derived from GDPR frameworks as they apply to the scope of our operations. All data processing activities are conducted with a defined lawful basis.
1 Information We Collect
22db collects personal data from Bangladesh players through several channels: during the account registration process, during the ongoing use of the platform, through automated technical systems, and occasionally through direct communications with our support team. The categories of data we collect are set out below.
1.1 Registration Data
When you create a 22db account, we collect the following information:
- Full legal name — as it appears on your valid Bangladesh government-issued identity document
- Date of birth — to verify you meet the 18+ age requirement
- Bangladesh mobile phone number — used for account authentication, SMS notifications, and identity verification
- Email address — used for account communications and promotional notifications where consent has been given
- Username and password — your chosen account credentials (passwords are stored in hashed, non-reversible format)
- Preferred BDT payment method — such as your registered bKash number, Nagad number, Rocket number, Upay number, or Bangladesh bank account details
- City or region of residence — for example Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh
1.2 Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to process withdrawal requests above certain thresholds, 22db may request additional verification documents including:
- A copy of your National Identity Card (NID) or passport
- A recent utility bill or bank statement confirming your Bangladesh address
- A screenshot or confirmation of your registered mobile financial service account (bKash, Nagad, Rocket, or Upay)
KYC documents are used solely for identity and age verification and are stored securely with access restricted to authorised compliance personnel only.
1.3 Transactional Data
22db records details of all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment methods used, transaction timestamps, and any bonus credits or adjustments applied. This data is retained for financial audit and legal compliance purposes.
1.4 Gaming Activity Data
We collect data relating to your use of the 22db platform, including games played, bets placed, betting history, session durations, win and loss records, and interaction with responsible gaming tools such as deposit limits and self-exclusion requests. This data is used to personalise your experience, to monitor for problem gambling indicators, and to fulfil responsible gaming obligations.
1.5 Technical and Device Data
When you access 22db via a web browser or mobile device, our systems automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, referring URL, pages visited, and time and date of access. This data is used for security monitoring, fraud prevention, and aggregate platform analytics.
1.6 Communications Data
If you contact the 22db support team via email or through the platform's messaging system, we retain records of those communications — including the content of messages and any attachments — for quality assurance, dispute resolution, and training purposes.
2 How We Use Your Information
22db uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. The lawful basis for each category of processing is indicated alongside the purpose.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, KYC documents | Performance of contract |
| Processing deposits and withdrawals | Payment method details, transactional data | Performance of contract |
| Age verification and identity checks | Date of birth, NID / passport copies | Legal obligation |
| Fraud detection and security monitoring | Technical data, IP address, transaction patterns | Legitimate interest |
| Responsible gaming monitoring | Gaming activity, session data, deposit history | Legal obligation / legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Performance of contract / legitimate interest |
| Platform analytics and improvement | Technical data, aggregated gaming activity | Legitimate interest |
| Marketing and promotional communications | Email address, mobile number | Consent (opt-in only) |
2.1 Marketing Communications
22db will only send you promotional emails or SMS messages about bonuses, new games, and seasonal promotions — such as BPL season offers, Eid promotions, or Pohela Boishakh specials — if you have explicitly opted in to receive such communications. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in any marketing message. Withdrawing consent for marketing does not affect the processing of data carried out under other lawful bases.
2.2 Automated Decision-Making
22db uses automated systems to monitor accounts for signs of fraudulent activity, problem gambling behaviour, or terms violations. Where an automated process results in an account being restricted or flagged, you have the right to request a manual review by a member of the 22db compliance team. Please contact [email protected] to request such a review.
3 Data Sharing and Third Parties
22db does not sell or commercially share your personal data with any third party. However, in order to operate the platform, we work with a limited number of carefully selected third-party service providers and are subject to certain legal disclosure obligations. The categories of data sharing are described below.
3.1 Payment Processing Partners
To process BDT deposits and withdrawals, 22db shares relevant payment data — such as your registered bKash number, Nagad account, Rocket number, Upay details, or bank account information — with the relevant mobile financial service provider or banking institution. These partners process payment data solely to execute the requested transaction and are bound by their own data protection obligations under applicable Bangladesh financial regulations.
3.2 Technology and Infrastructure Providers
22db uses third-party technology providers for hosting, platform infrastructure, game content delivery, and customer support tooling. These providers operate under strict data processing agreements and are permitted to process your personal data only on 22db's instructions and for the specific purpose of delivering the contracted service.
3.3 Game Content Providers
Some games available on the 22db platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive aggregated, anonymised data relating to game performance and player activity to support game integrity and audit functions. No individually identifiable personal data is shared with game studios without a specific legal or contractual basis.
3.4 Legal and Regulatory Disclosure
22db may be required to disclose personal data in response to a valid legal request from a competent authority in Bangladesh, including law enforcement, financial intelligence units, or a court order. In such cases, 22db will disclose only the data that is specifically required by the legal demand and will notify the affected player where legally permitted to do so.
3.5 Business Transfers
In the event that 22db undergoes a business restructuring, merger, or acquisition, player personal data may be transferred to the relevant successor entity as part of that process. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it, with a reasonable period to review and, where applicable, object to the new processing arrangements.
4 Cookies and Tracking Technologies
22db uses cookies and similar tracking technologies (such as local storage and session tokens) to operate core platform functionality, remember your preferences, maintain your logged-in session, and analyse how players interact with the 22db website. This section explains the types of cookies we use and how you can manage them.
4.1 Types of Cookies Used
- Strictly Necessary Cookies: These cookies are essential for the 22db platform to function. They maintain your login session, remember your preferred language and currency (BDT), and enable secure payment flows. You cannot opt out of strictly necessary cookies without severely impairing your ability to use the platform.
- Functional Cookies: These cookies remember your account preferences — such as your preferred game lobby view, responsible gaming limit settings, and notification preferences — so that you do not have to reconfigure them on every visit.
- Analytics Cookies: 22db uses aggregated, anonymised analytics data to understand how players navigate the platform, which games are most popular, and where the user experience can be improved. This data does not identify individual players.
- Security Cookies: These cookies help 22db detect and prevent fraudulent activity, including bot access, account takeover attempts, and unusual transaction patterns. They are part of our platform security infrastructure.
4.2 Managing Cookies
You can manage or delete cookies at any time through the settings of your web browser. Most modern browsers allow you to view, block, or delete cookies from specific websites. Please note that blocking strictly necessary cookies will affect your ability to log in to 22db and use payment features. For full instructions on managing cookies in your specific browser, refer to the browser's own help documentation.
4.3 Third-Party Cookies
Some third-party game providers and technology partners used by 22db may set their own cookies when you interact with their content. These cookies are governed by the respective third party's privacy policy. 22db does not control third-party cookies and recommends that players review the relevant third-party privacy notices for full information.
5 Data Security and Storage
22db implements robust technical and organisational security measures to protect the personal data of Bangladesh players against unauthorised access, accidental loss, destruction, or disclosure. Our security approach is multi-layered and regularly reviewed.
5.1 Technical Safeguards
- 256-bit SSL/TLS encryption for all data transmitted between your device and the 22db platform
- Password hashing — account passwords are stored using one-way cryptographic hashing algorithms; 22db staff cannot read your password in plaintext
- Encrypted data storage for sensitive personal data including KYC documents and payment account details
- Access controls — personal data is accessible only to authorised 22db personnel who require it to perform their specific job function
- Firewall protection and intrusion detection systems on all platform infrastructure
- Regular security audits and vulnerability assessments of the 22db platform and supporting infrastructure
5.2 Data Storage Location
22db stores player data on secure servers. Where data is processed or stored outside Bangladesh, 22db ensures that appropriate contractual and technical safeguards are in place to maintain a level of data protection equivalent to the standards described in this Privacy Policy.
5.3 Data Breach Notification
In the unlikely event of a data security breach that poses a risk to the rights and freedoms of 22db players, we will notify affected players without undue delay via their registered email address or Bangladesh mobile number. The notification will describe the nature of the breach, the data affected, and the steps 22db has taken or intends to take in response.
6 Your Data Rights and Choices
22db respects your right to understand and control how your personal data is used. As a 22db player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and your registered account details.
Right of Access
You have the right to request a copy of all personal data 22db holds about you. We will provide this within thirty (30) calendar days of receiving a valid request.
Right to Rectification
If any personal data held by 22db is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as email address updates) can be made directly in your account settings.
Right to Erasure
You may request that 22db delete your personal data. This right is subject to our legal obligations to retain certain records (such as financial transaction histories) for defined minimum periods.
Right to Restriction
You may request that 22db restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
Right to Data Portability
Where data processing is based on your consent or on contract performance, you may request that your data be provided to you in a structured, machine-readable format (such as CSV or JSON).
Right to Object
You have the right to object to processing carried out on the basis of legitimate interest — including direct marketing. Objections to marketing will be acted upon immediately and without question.
7 Data Retention Policy
22db retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or financial record-keeping obligations. The table below summarises our standard data retention periods.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and regulatory compliance |
| Financial transaction records | 7 years from transaction date | Financial audit and anti-money laundering obligations |
| KYC verification documents | 5 years post-account closure | Identity verification compliance |
| Gaming activity history | 3 years from date of activity | Responsible gaming monitoring and dispute resolution |
| Support communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing consent records | Duration of consent + 2 years | Evidence of consent where required |
| Technical / device logs | 12 months from collection | Security monitoring and fraud prevention |
When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised or aggregated data that cannot be linked to any individual player may be retained indefinitely for platform analytics purposes.
8 Contact and Privacy Complaints
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how 22db has handled your personal data, please contact our privacy team using the details below. All privacy enquiries are handled in English.
8.1 Contacting 22db About Privacy
You may reach the 22db privacy team by email at [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request". Please include your registered username and the Bangladesh mobile number associated with your account so that we can locate your records and respond accurately. We aim to acknowledge all privacy enquiries within forty-eight (48) hours and to resolve them within thirty (30) calendar days.
8.2 Updates to This Privacy Policy
22db reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable legal requirements, or improvements to the 22db platform. When material changes are made, we will notify registered players via the email address or Bangladesh mobile number on their 22db account prior to the change taking effect. The updated Privacy Policy will always be available at https://22db.bet/privacy-policy. Continued use of the 22db platform after the effective date of an updated policy constitutes acceptance of the revised terms.
8.3 Scope of This Policy
This Privacy Policy applies exclusively to personal data collected and processed by 22db through the https://22db.bet platform. It does not apply to the data practices of any third-party websites or services that may be referenced in 22db content or that may link to the 22db platform. 22db is not responsible for the privacy practices of any third party and encourages players to review the privacy notices of any external services they use.
Questions About Your 22db Privacy Rights?
Our support team is available around the clock to help with any privacy-related enquiry. You can also visit our FAQ page for quick answers to common questions about account security, data handling, and how 22db protects Bangladesh players. Ready to explore our full game lobby? Visit 22db Casino.