r2222 Privacy Policy — Your Data, Your Rights

Introduction

This Privacy Policy ("Policy") describes how r2222 ("we", "us", "our") collects, uses, stores, shares and protects personal information provided by players ("you", "your") when you access and use the r2222 platform at r2222.bet, including the website, mobile-optimised version, sports betting services, live casino, slots, baccarat, and all associated services.

By registering an account with r2222 or by continuing to use the platform after this Policy is published or updated, you acknowledge that you have read and understood this Policy. If you do not agree with how r2222 handles your personal data, you should not use the platform.

1Personal Data We Collect

r2222 collects personal data from you in three main ways: directly when you provide it during registration or account use, automatically when you interact with the platform, and from third parties such as payment processors and identity verification services.

Data You Provide Directly

• Registration information: full name, date of birth, Bangladesh mobile number, and a password you create.
• KYC documents: National Identity Card (NID), passport, driving licence or other government-issued photo identification provided during account verification.
• Payment details: mobile financial service account numbers (bKash, Nagad, Rocket, Upay) or bank account numbers used for deposits and withdrawals. r2222 does not store full card numbers.
• Support communications: messages, emails or live chat transcripts you send to r2222's support team, including the content of your enquiry and any attachments.

Data Collected Automatically

• Device and access data: IP address, device type, operating system version, browser type and version, mobile network operator (Grameenphone, Robi, Banglalink, Teletalk), screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: pages visited, games played, bets placed, session duration, navigation paths through the platform, and feature interactions.
• Transaction data: deposit amounts, withdrawal requests, payment method used, transaction timestamps, and bonus claims.

Data From Third Parties

• Payment verification data from bKash, Nagad, Rocket, Upay and partner banks confirming transaction status and the mobile number or account associated with a payment.
• Identity verification data from third-party KYC service providers used to confirm the authenticity of identity documents submitted during account verification.
• Fraud and risk signals from third-party fraud prevention tools that help r2222 identify suspicious account activity, chargeback patterns or unusual betting behaviour.

2How r2222 Uses Your Personal Data

We use the personal data we collect for the following purposes. We only use your data for purposes that are compatible with the reason it was collected.

3Legal Basis for Processing

r2222 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations to you under our Terms and Conditions, including account management, payment processing and customer support.
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC obligations, and fraud prevention requirements.
• Legitimate interests: processing carried out for r2222's legitimate business interests, including fraud detection, platform security, and improving the player experience, where those interests are not overridden by your rights and interests.
• Consent: where we send you promotional communications or use non-essential cookies, we will do so only where you have given us your explicit consent. You may withdraw consent at any time by contacting [email protected].

4Sharing Your Personal Data

r2222 does not sell your personal data to any third party. We may share your personal data with the following categories of recipients where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay and partner banks receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are required to protect your data.
• Identity verification providers: third-party KYC services receive identity document data strictly for the purpose of verifying your identity and age as required under our responsible gaming and compliance obligations.
• Fraud prevention and security partners: anonymised or pseudonymised data may be shared with fraud detection services to identify and prevent suspicious activity. These services do not receive your full identity profile.
• Law enforcement and regulatory authorities: where required by applicable law or a valid legal order, r2222 may disclose personal data to government bodies, law enforcement agencies or regulatory authorities. r2222 will notify you of any such disclosure to the extent permitted by law.

All third-party service providers who receive personal data from r2222 are required to process that data only for the purposes specified by r2222, to maintain appropriate security standards, and to comply with applicable data protection obligations. r2222 does not authorise any third party to use your personal data for their own independent purposes.

5Payment Data and KYC Information

r2222 handles payment data and KYC documents with heightened care, given their sensitive nature. KYC documents (NID, passport, driving licence photographs) are stored in encrypted form on secure servers and are accessible only to authorised r2222 compliance staff and the identity verification service provider. KYC documents are not shared with any other third party.

Payment account details (bKash numbers, Nagad numbers, bank account numbers) are stored securely and used only to process your withdrawal to the correct destination account. r2222 never stores full payment card numbers. Mobile financial service PINs and bank account passwords are never collected or stored by r2222 under any circumstances.

6Data Retention

r2222 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: retained for the duration of your account's active status plus a minimum of 5 years after account closure, to comply with anti-money laundering and financial record-keeping requirements.
• KYC documents: retained for a minimum of 5 years after account closure. Where a legal hold or regulatory investigation is in progress, documents are retained until the matter is resolved.
• Support communications: retained for 2 years from the date of the last communication in a support thread, or longer where the communication relates to an unresolved dispute or legal claim.

7Cookies and Tracking Technologies

r2222 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players use the site so we can improve it. Cookies are small text files stored on your device by your browser.

Types of Cookies We Use

• Essential cookies: required for the platform to operate. These include session authentication cookies (keeping you logged in), security cookies (CSRF protection), and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Analytics cookies: help r2222 understand aggregate player behaviour, such as which game categories are most visited and where players navigate after the homepage. Data is collected in anonymised or pseudonymised form and is not used to build individual profiles.
• Preference cookies: remember your language choice and other display preferences so you do not have to set them again on each visit. These are set only after you interact with the platform.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from accessing certain platform features, including logging in to your r2222 account.

8Data Security

r2222 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption for all data transmissions between your device and r2222 servers, encrypted storage of sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security audits and penetration testing, and 24/7 monitoring of platform infrastructure for anomalous activity.

While r2222 takes all reasonable steps to safeguard your personal data, no internet transmission or electronic storage system is 100% secure. If you have reason to believe that your interaction with r2222 is no longer secure, please notify us immediately at [email protected].

9Your Privacy Rights

As a player using r2222 from Bangladesh, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

• Right of access: you may request a copy of all personal data r2222 holds about you, together with information about how and why it is being processed.
• Right to rectification: you may request correction of any inaccurate personal data r2222 holds about you. For account details you can update yourself (such as your registered mobile number), please use the account settings in the r2222 platform.
• Right to erasure: you may request deletion of your personal data, subject to r2222's legal obligations to retain certain data under AML and financial record-keeping regulations. Where deletion is not possible due to legal retention requirements, we will restrict processing instead.
• Right to restrict processing: you may request that r2222 limits how it uses your personal data while a dispute about accuracy or legitimate interest is being resolved.
• Right to data portability: you may request a copy of the personal data you have provided to r2222 in a structured, machine-readable format, where technically feasible.
• Right to withdraw consent: where r2222 processes your personal data on the basis of consent (such as for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

r2222 will not charge you for exercising any of these rights and will not discriminate against you for doing so. If you are not satisfied with how r2222 handles your data rights request, you may escalate your complaint to [email protected] with the subject line "Data Rights Escalation".

10Children's Privacy — 21+ Only

r2222 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Age verification is carried out during account registration and as part of our KYC process. If r2222 discovers that personal data has been collected from an individual under 21, that data will be deleted immediately and the account will be suspended. If you are a parent or guardian and believe a minor has created an r2222 account, please contact us immediately at [email protected].

11Changes to This Privacy Policy

r2222 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When material changes are made, we will notify registered players via their registered Bangladesh mobile number or by displaying a prominent notice on the r2222 platform for a minimum of 7 days before the change takes effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of r2222 after the updated Policy takes effect constitutes your acceptance of the revised Policy.

12Contact — Privacy Queries

If you have any questions, concerns or requests relating to this Privacy Policy or how r2222 handles your personal data, our support team is available 24 hours a day, 7 days a week.

Email us at: [email protected]