22zz Privacy Policy — Your Data, Your Rights
This Privacy Policy explains what personal data 22zz collects from Bangladesh players, why we collect it, how it is used and protected, and the rights you hold over your own information.
22zz ("we", "us", "our") operates the online casino and sports betting platform at 22zz.bet (the "Platform"). We are fully committed to protecting the privacy and personal data of every registered player and site visitor. This Privacy Policy sets out clearly how we handle personal information in connection with your use of the Platform.
This Policy applies to all personal data collected through the Platform, including through account registration, deposits, withdrawals, gameplay activity, customer support interactions, and promotional or marketing communications. Please read this Policy carefully before registering an account. By using the Platform you confirm that you have read and understood this Policy.
22zz processes personal data only for the specific purposes described in this Policy. We do not sell personal data to third parties. We do not share personal data with third parties except as described in Section 4 of this Policy.
Privacy at a Glance
Information We Collect
22zz collects personal data across five categories. We collect only the minimum data necessary for each specific purpose. The following describes each category, what we collect, and why we need it.
Full name, date of birth, registered mobile number, and email address. Collected at registration and updated during KYC verification. Used to establish your identity, operate your account, and communicate with you about account matters.
Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account references, and transaction records including deposit amounts, withdrawal amounts, dates and times. Payment card details are handled by our payment processor and are never stored on 22zz systems.
Copies of government-issued identity documents (National ID card, passport), proof of address, and proof of payment method ownership. These documents are used solely for AML compliance and age verification, and are retained only for the period required by law.
IP address, device type, operating system, browser type and version, mobile network operator (Grameenphone, Robi, Banglalink, Teletalk), session duration, and pages visited. Collected automatically when you access the Platform. Used for security monitoring, fraud prevention, and performance optimisation.
Game history, bet history, sports betting selections, wager amounts, win and loss records, bonus redemptions, and responsible gaming tool settings such as deposit limits, session limits, and self-exclusion status. Used to operate the Platform and comply with regulatory obligations.
How We Use Your Information
22zz uses the personal data we collect for the following purposes. We process personal data only where we have a valid legal basis for doing so, as described in Section 3 of this Policy.
- Account creation and management: to set up and maintain your player account, verify your identity, authenticate sessions, and enable you to deposit, play and withdraw funds.
- Payment processing: to process deposit and withdrawal transactions, verify payment method ownership, and maintain accurate financial records on your account in compliance with applicable requirements.
- KYC and AML compliance: to verify your age and identity, comply with anti-money-laundering obligations, detect and prevent fraud, and report suspicious activity to authorities where required by law.
- Responsible gaming: to operate deposit limits, session time controls, cooling-off periods and self-exclusion tools, and to identify players showing signs of problem gambling so that appropriate support can be offered.
- Customer support: to respond to your enquiries, complaints and account queries, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
- Platform security and fraud prevention: to monitor Platform activity for unusual patterns, detect multiple accounts, identify unauthorised access, prevent cheating, and protect the integrity of all games and betting markets.
22zz does not use personal data for fully automated decisions that produce legal or similarly significant effects without human review. Any account restriction based on automated fraud detection is subject to manual review upon written request to [email protected].
Legal Basis for Processing
22zz relies on one or more of the following legal bases when processing your personal data. At least one basis applies to every processing activity described in this Policy.
- Contractual necessity: processing required to fulfil our obligations to you under the Terms and Conditions, including account operation, payment processing, and game provision.
- Legal obligation: processing required for 22zz to comply with applicable legal requirements, including AML and KYC obligations, age verification, and mandatory reporting to competent authorities.
- Legitimate interests: processing carried out in the legitimate interests of 22zz or third parties where those interests are not overridden by your rights — including Platform security, fraud prevention, and service improvement.
- Consent: where 22zz processes personal data based on your freely given, specific, and informed consent — for example, for optional marketing communications. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of prior processing.
Sharing Your Information
22zz does not sell, rent, or trade personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
- Payment service providers (bKash, Nagad, Rocket, Upay, bank partners): to process deposits and withdrawals. Each provider is independently responsible for the personal data it holds within its own systems.
- Game and technology providers (Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, Microgaming and others): to enable gameplay, ensure platform stability, and conduct RNG certification audits. Providers receive only the minimum data necessary for their specific function.
- Identity verification and AML screening providers: to conduct KYC checks and screen against sanctions and PEP lists as required by applicable law.
- Law enforcement and regulatory authorities: where 22zz is required by applicable law, court order, or regulatory direction to disclose personal data. In such cases 22zz will provide only the minimum information legally required.
All third-party service providers who receive personal data from 22zz are contractually required to process that data only on 22zz's documented instructions, to maintain appropriate security measures, and not to use the data for their own independent purposes.
Cookies and Tracking Technologies
22zz uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that allow the Platform to remember information about your visit and preferences. The following types of cookies are used on the Platform.
- Strictly necessary cookies: required for the Platform to function correctly, enabling session authentication, security protections and basic navigation. These cookies cannot be disabled without breaking core Platform functionality.
- Functional cookies: remember your language preferences and other optional settings to personalise your experience on the Platform across sessions.
- Analytics cookies: collect aggregated and anonymised information about how players use the Platform — such as which pages are visited most often — to help us improve performance and user experience.
- Security cookies: used to detect and prevent fraudulent activity, multiple-account creation, and automated bot traffic, processing limited technical data solely for Platform integrity purposes.
You may manage cookie preferences through your mobile browser settings. Disabling strictly necessary cookies will impair or prevent access to key Platform features including account login, deposits and gameplay. 22zz does not use third-party advertising or cross-site tracking cookies.
Data Retention
22zz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply, subject to extension where a legal obligation requires it.
Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements. KYC verification documents are retained for the same period. Gaming activity logs are retained for a minimum of three (3) years following the relevant activity. After the applicable retention period expires and no overriding legal requirement exists, personal data is securely deleted or anonymised.
Your Data Rights
Subject to applicable law, you have the following rights in relation to the personal data that 22zz holds about you. To exercise any of these rights, please contact us in writing at [email protected] with your registered mobile number and a clear description of your request.
22zz will respond to verified rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, of which we will notify you in advance. 22zz will not charge a fee unless the request is manifestly unfounded or excessive.
Data Security
22zz implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, the protective measures we maintain include the following.
In the event of a personal data breach likely to result in a risk to your rights and freedoms, 22zz will notify affected players without undue delay after becoming aware of the breach. Please report any suspected data security incidents to [email protected] immediately.
Children and Minors
The 22zz Platform is strictly intended for adults aged 21 years and above. 22zz does not knowingly collect, use, or retain personal data from any person under the age of 21. Age verification is conducted as a mandatory step during the KYC process, and any account found to belong to a person under the minimum age will be immediately closed and all related data deleted.
If you believe that 22zz has inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected]. We will promptly investigate and, where confirmed, delete all relevant data without undue delay.
Third-Party Services
The Platform integrates third-party payment providers (bKash, Nagad, Rocket) and game studios whose services are embedded within 22zz. These third parties operate under their own independent privacy policies and 22zz is not responsible for their data practices beyond the contractual obligations described in Section 4. Players are encouraged to review the privacy policies of payment and game providers they interact with directly.
Changes to This Privacy Policy
22zz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where a change is material — such as a new category of data being collected or a new third-party sharing arrangement — 22zz will use reasonable efforts to notify registered players via the Platform before the change takes effect.
The date shown at the top of this Policy indicates when it was last revised. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. The most current version of this Policy is always available at 22zz.bet/privacy-policy.
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 22zz has handled your personal data, please contact our privacy team in writing at [email protected]. Please include your registered mobile number and a clear description of your query so that we can respond accurately and promptly.
22zz aims to acknowledge all privacy enquiries within 48 hours and to resolve complaints within 30 days of receipt. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction. 22zz is committed to cooperating fully with any competent supervisory authority investigation.