22det Privacy Policy

This Privacy Policy ("Policy") is issued by 22det ("Platform", "we", "us", "our") and applies to all users who access or interact with the 22det website, its mobile-optimised interface, and any associated services including online casino games, sports betting markets, live betting, and payment processing (collectively, "Services"). This Policy describes how 22det collects, uses, stores, shares, and protects personal information in connection with the provision of those Services.

By registering an account on 22det or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the platform.

This Policy should be read alongside the 22det Terms and Conditions, which together govern your relationship with the platform. Capitalised terms not defined here carry the same meaning as in the Terms and Conditions.

22det collects different categories of personal data depending on how you interact with the platform. The principal categories are described below:

22det collects personal data through the following methods and sources:

• Directly from you: when you complete the account registration form, submit identity documents, make a deposit, request a withdrawal, contact support, or respond to a promotion.
• Automatically: through cookies, web beacons, and similar tracking technologies when you visit the 22det website or use the platform on your mobile device.
• From payment providers: when you initiate a deposit or withdrawal, providers such as bKash, Nagad, or Rocket may share transaction confirmation data with 22det to reconcile your account.
• From identity verification providers: 22det may engage third-party KYC providers to verify player identity and age. These providers may return verified data fields to 22det following a successful check.
• From fraud and compliance services: industry-standard databases may flag or supplement information on your account to help 22det meet its legal and anti-money-laundering obligations.

22det processes personal data only for defined, legitimate purposes. The primary purposes are:

• Account management: to create, maintain, verify, and manage your 22det player account, including processing deposits and withdrawals and keeping your betting history.
• Identity and age verification: to confirm your identity and that you meet the minimum age requirement of 21 years, as required by our responsible gaming policy.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities defined in the Terms and Conditions.
• Customer support: to respond to your queries, complaints, and requests, and to maintain support records for quality assurance purposes.
• Service improvement and personalisation: to analyse usage patterns, improve user experience, personalise game and promotion recommendations, and develop new features for Bangladesh players.
• Marketing and promotions: where you have provided consent, to send you information about bonuses, new games, sporting events, and other offers. You may withdraw marketing consent at any time by contacting support.

22det will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

22det does not sell or rent your personal data. We may share it with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Payment providers (bKash, Nagad, Rocket, Upay): to process your deposit and withdrawal transactions. These providers receive only the transaction data required to complete the specific payment.
• Identity verification and KYC providers: to verify your identity and age as part of account opening and ongoing compliance. These providers operate under strict data processing agreements with 22det.
• Technology and hosting providers: companies that provide the infrastructure, software, and hosting services on which the 22det platform runs. These providers act as data processors and are contractually prohibited from using your data for any purpose other than providing services to 22det.
• Regulatory and law enforcement authorities: where 22det is legally required to disclose personal data in response to a valid court order, regulatory request, or law enforcement demand. 22det will notify you where legally permitted to do so.

All third parties with whom 22det shares personal data are required to maintain appropriate security measures to protect that data and are contractually prohibited from using it beyond what 22det has authorised.

The types of cookies used on the 22det platform include:

• Strictly necessary cookies : required for the platform to function correctly, including maintaining your login session, remembering your bet slip, and delivering security features. These cannot be disabled without breaking core functionality.
• Functional cookies: used to remember your preferences such as language settings and display options so that your experience remains consistent across sessions.
• Analytics cookies: used to collect anonymised data about how visitors use the platform, which pages are most visited, and where users encounter errors. This data helps 22det improve the platform over time.
• Security and fraud prevention cookies: used to identify suspicious behaviour, detect bot activity, and protect the platform and its users from fraudulent access attempts.

You may adjust your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality and may prevent you from logging in or placing bets. Disabling analytics or functional cookies will not prevent you from using core features.

22det retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. In practice: account data and transaction records are retained for a minimum period following account closure to satisfy anti-money-laundering and financial record-keeping obligations; KYC documentation is retained for the period prescribed by applicable identity verification requirements; and communications records are kept long enough to resolve any outstanding disputes or claims.

When personal data is no longer required for any legitimate purpose and no legal obligation requires its continued retention, 22det will securely delete or irreversibly anonymise that data. If you request deletion of your account, 22det will process that request promptly, subject to the retention obligations described above.

While 22det applies rigorous security measures, no internet-connected system can be guaranteed completely secure. In the unlikely event of a data breach affecting your personal data, 22det will take prompt remedial action and notify affected players in accordance with applicable data protection obligations.

As a player on 22det, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact 22det support using the email address provided on this page:

• Right of access: you may request a copy of the personal data 22det holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: if any data held about you is inaccurate or incomplete, you may request that it be corrected or completed without undue delay.
• Right to erasure: in certain circumstances you may request that 22det delete personal data held about you. This right is subject to any legal retention obligations that may override your request.
• Right to restriction of processing: you may ask 22det to restrict its processing of your personal data in certain circumstances, such as while the accuracy of your data is being contested.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to object: you may object to processing based on legitimate interests, including profiling. You also have an absolute right to object to use of your personal data for direct marketing at any time.

22det will respond to all data rights requests within a reasonable timeframe. Where a request cannot be fulfilled due to a conflicting legal obligation, 22det will explain the reason in writing. There is no charge for making a data rights request, except where requests are manifestly unfounded or excessive.

If 22det becomes aware that personal data relating to a person under the age of 21 has been collected, it will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the 22det platform, please contact support immediately using the email address provided on this page.

The 22det platform does not contain links to third-party websites for commercial or promotional purposes. To the extent that any reference to a third-party provider appears on the platform, 22det is not responsible for the privacy practices of those third parties. If you visit any third-party website, you should review that site's own privacy policy before providing any personal information.

22det may update or revise this Privacy Policy from time to time to reflect changes in the law, changes in our data processing practices, or changes to the services we offer. When material changes are made, 22det will update the Last Updated date shown at the top of this page.

Your continued use of the 22det platform following any revision to this Policy constitutes your acceptance of the revised Policy. We recommend that you review this page periodically to stay informed of how 22det protects your personal data.

Please include "Privacy Request" in the subject line of your message and provide your registered account details so we can locate your data accurately and respond within the shortest possible timeframe. 22det aims to acknowledge all privacy requests within 2 business days (Bangladesh Standard Time, UTC+6) and to resolve them within 30 calendar days.

If you are dissatisfied with how 22det has handled a privacy concern, you have the right to escalate your complaint in accordance with the dispute resolution procedures set out in the Terms and Conditions.