Privacy Policy — How 22dhk Collects, Uses, and Protects Your Data

1. Introduction

22dhk is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is foundational to the relationship between an online gaming provider and its players, and we take our data protection responsibilities seriously.

This Policy applies to all personal data collected and processed in connection with your use of the 22dhk website, mobile interface, account services, games, sports betting markets, and customer support functions. It covers data collected when you register an account, make deposits or withdrawals, place wagers, contact support, or simply browse the platform.

This Policy is written in English, which is the governing language for all interpretation purposes. If you have any questions about this Policy or how your data is handled, please contact us at [email protected].

2. Data Controller

For the purposes of applicable data protection law, 22dhk acts as the data controller in respect of personal data collected from players who use the platform. As data controller, 22dhk determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, and complaints should be directed to:

• Email: [email protected]
• Subject line: "Data Protection Enquiry" or "Subject Access Request"
• Response time: We aim to respond to all data-related requests within 30 calendar days of receipt.

3. Personal Data We Collect

22dhk collects the following categories of personal data in the course of operating the platform and providing services to players:

3.1 Identity Data

• Full legal name
• Date of birth
• Gender (where provided)
• Government-issued identification document details (National ID, passport, or driving licence number and issuing country)
• Photograph or selfie submitted for KYC purposes

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, district, and country)

3.3 Financial Data

• Payment method details (bKash / Nagad / Rocket / Upay account numbers; Visa / Mastercard last four digits; bank account reference where applicable)
• Transaction history (deposits, withdrawals, wager amounts, and outcomes)
• Account balance information

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end times
• Pages visited, games played, and features accessed
• Referral source (how you arrived at the platform)

3.5 Communications Data

• Records of correspondence with our customer support team (email content, chat logs, and support ticket history)
• Feedback and survey responses where voluntarily submitted

4. How We Collect Your Data

22dhk collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion. You choose what information to provide; however, certain data is mandatory for account creation, payment processing, and regulatory compliance — and failure to provide it may prevent you from using specific services.

4.2 Automatically Through Platform Use

When you access and use the 22dhk platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies. This data helps us operate the platform securely, diagnose technical issues, prevent fraud, and improve the player experience.

4.3 From Third-Party Service Providers

In some circumstances, we receive personal data from third-party providers engaged to support our operations, including:

• KYC and identity verification providers — who confirm the authenticity of identity documents and perform age and sanctions screening;
• Payment processors — who confirm successful transaction completion and flag potentially fraudulent payment activity;
• Fraud detection services — who provide risk scores and alerts based on behavioural and device signals.

5. Purpose and Legal Basis for Processing

The table below sets out the primary purposes for which 22dhk processes your personal data and the legal basis relied upon for each purpose:

Where processing is based on your consent — for example, receiving marketing communications — you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Personal Data

22dhk does not sell, rent, or trade your personal data to third parties. We share data only where it is necessary for the purposes described in this Policy, and only under strict data protection safeguards. The categories of third parties with whom data may be shared are as follows:

6.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Each provider processes data under their own privacy policy and security standards.

6.2 Identity Verification and KYC Providers

To comply with our age verification and anti-money laundering obligations, we engage specialist third-party KYC providers. These providers receive copies of identity documents and may cross-reference data against public and proprietary sanctions and fraud databases.

6.3 Game Providers and Software Suppliers

Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical and session data to facilitate game delivery and resolve disputes about game outcomes. These providers do not receive full identity or financial data unless strictly required for a specific dispute resolution process.

6.4 Regulatory and Law Enforcement Bodies

22dhk may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to a lawful request, court order, or legal obligation. We will always seek to limit such disclosures to the minimum data necessary to satisfy the legal requirement.

6.5 Group Companies and Service Providers

We may share data with companies within our corporate group or with carefully vetted external service providers (such as IT infrastructure providers, cloud hosting services, and analytics platforms) who process data on our behalf under data processing agreements that require them to protect your data to the same standard as 22dhk.

7. International Data Transfers

22dhk operates as an international platform, and some of the third-party service providers we work with are located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where such transfers occur, 22dhk takes appropriate steps to ensure that your data receives an adequate level of protection consistent with this Policy. These steps may include entering into standard contractual clauses with the receiving party, relying on adequacy decisions, or implementing other appropriate transfer safeguards.

By using the 22dhk platform and accepting this Policy, you acknowledge that your personal data may be transferred internationally as described above.

8. Data Retention Periods

22dhk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five years after account closure, to meet anti-money laundering and fraud prevention obligations.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial record-keeping requirements.
• Customer support communications: Retained for three years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Technical and usage data (logs): Typically retained for 12 months in active form, after which it may be anonymised and retained for statistical purposes.
• Marketing preferences and consent records: Retained until consent is withdrawn and for a period of two years thereafter to evidence the withdrawal.

When data reaches the end of its retention period, 22dhk will securely delete it or anonymise it so that it can no longer be associated with you personally. Anonymised data may be retained indefinitely for analytical and reporting purposes.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 22dhk:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is being used. We will provide this information within 30 days of receiving a valid request.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly within your account settings.

9.3 Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that this right is subject to our legal retention obligations: we may be required to retain certain data for regulatory and anti-money laundering purposes even after an account closure request.

9.4 Right to Restriction

You may request that we restrict the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing based on legitimate interests and that objection is being assessed.

9.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

9.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds that override your objection in specific circumstances.

9.7 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days. There is no charge for exercising your rights, except in cases of manifestly unfounded or excessive requests.

10. Cookies and Tracking Technologies

22dhk uses cookies and similar tracking technologies to operate the platform, remember your session and preferences, prevent fraud, and understand how players use the site. The following types of cookies may be set when you use 22dhk:

• Strictly necessary cookies: Essential for the platform to function. These cookies enable core features such as account login sessions, session security tokens, and load balancing. They cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences and settings (such as language preference and display options) to provide a more personalised experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how visitors navigate the platform. This data helps us identify popular features, diagnose errors, and improve the overall player experience. We use analytics data in aggregate form and do not use it to identify individual players.
• Security cookies: Help detect and prevent fraudulent activity, bot access, and unauthorised login attempts.

Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies may impair your ability to use the platform. Disabling analytics or functional cookies will not prevent you from accessing core services but may reduce the quality of your experience.

11. Security Measures

22dhk implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers;
• Encryption at rest for sensitive stored data, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for administrative access to systems holding player data;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Intrusion detection systems monitoring for unusual access patterns and potential data breaches;
• Secure data deletion protocols applied when data reaches the end of its retention period.

While 22dhk takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to keep your account credentials secure and to notify us immediately if you suspect unauthorised access to your account.

In the event of a data breach that poses a risk to your rights and freedoms, 22dhk will notify affected players as promptly as practicable and will take all reasonable steps to mitigate the impact of the breach.

12. Minors

The 22dhk platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the 22dhk platform in any capacity.

If 22dhk becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account with 22dhk or that we may hold data about a person under 21, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

22dhk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When we make material changes to this Policy, we will notify registered players via an on-platform notification or by email to the address registered with your account, at least seven days before the changes take effect where practicable.

The date of the most recent revision is shown at the top of this document. We encourage you to review this Policy periodically to stay informed about how 22dhk handles your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

The current version of this Privacy Policy is always available at https://22dhk.io/privacy-policy.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way 22dhk handles your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond promptly.

• Email: [email protected]
• Subject line: Use "Privacy Policy Enquiry" for general questions, or "Data Rights Request" for subject access requests and deletion requests.
• Response time: We aim to respond to all privacy-related enquiries within 30 calendar days of receipt.
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

If you are not satisfied with our response to a privacy complaint, you may escalate the matter by sending a formal written complaint to the same email address marked "Formal Privacy Complaint" in the subject line. We will acknowledge formal complaints within five business days and aim to resolve them within 30 days.