app222 Privacy Policy

app222 is an online gaming platform operating at https://app222.biz, offering sports betting (including cricket, football, and kabaddi), live casino games, slot games, and fishing games to registered players based in Bangladesh. When this Privacy Policy refers to "app222", "we", "us", or "our", it refers to the operator of the app222 platform and all services provided under the app222 brand.

app222 acts as the data controller in respect of the personal data of all registered users and visitors to the platform. As data controller, app222 determines the purposes for which personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions or concerns regarding the manner in which app222 processes your personal data, please contact our data protection contact point at [email protected] (plain text — not a clickable link). Our support team is available 24 hours a day, seven days a week via the live chat feature on the app222 platform.

app222 collects only the personal data that is necessary to provide a safe, fair, and compliant gaming service. The categories of personal data we collect are set out in the table below:

app222 does not collect or process special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by applicable anti-money-laundering or identity verification law, and only with your explicit consent where such consent is required.

app222 collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal request, contact our support team, or submit a formal complaint.
• Automated technical collection: Data collected automatically by our platform systems when you browse the site or use any of our gaming services — including IP address, device identifiers, session data, and gameplay logs.
• Payment service providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank, limited transaction confirmation data is transmitted to app222 by those payment processors to confirm the status of your transaction.
• Identity verification partners: Where app222 uses a third-party identity verification service to validate documents you provide, that service may return a verification result (pass/fail/pending) to app222 along with metadata about the verification process.
• Cookies and tracking technologies: As described in the Cookies & Tracking section below, app222 uses cookies and similar technologies to collect usage and technical data during your browsing and gaming sessions.

app222 processes your personal data for the following purposes:

• Account creation and management: To register your account, authenticate your identity, maintain your account profile, and communicate with you about your account status.
• Age and identity verification: To comply with our obligation to prevent access by persons under the age of 18 and to verify the identity of users making financial transactions on the platform.
• Transaction processing: To process deposits and withdrawals via your chosen Bangladeshi payment method (bKash, Nagad, Rocket, Upay, or bank transfer) accurately and securely.
• Gameplay delivery: To deliver the gaming services you have requested — including cricket betting markets (BPL, IPL, T20 World Cup), live casino games, slot games, and fishing games — and to maintain accurate records of your betting and gaming activity.
• Responsible gaming compliance: To implement and enforce any responsible gaming tools you have activated on your account, including deposit limits, session limits, cooling-off periods, and self-exclusion.
• Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
• Anti-money-laundering (AML) compliance: To monitor transactions for patterns consistent with money laundering or terrorist financing and to file reports as required by applicable law.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, stability, and user experience of the app222 platform.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Marketing communications: Where you have provided explicit consent, to send you promotional communications about bonuses, new games, seasonal offers (including Eid, Pohela Boishakh, and BPL season promotions), and other app222 news. You may withdraw consent at any time by contacting support or updating your communication preferences within your account settings.

app222 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and app222 — specifically, the Terms & Conditions you accept upon registration. This covers account creation, transaction processing, gameplay delivery, and customer support.
• Legal obligation: Processing required to comply with applicable law — including age verification, identity verification, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing carried out on the basis of app222's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud detection, security monitoring, and aggregated analytics for platform improvement. app222 has assessed that its legitimate interests in these activities are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, informed, and unambiguous consent — specifically, the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

app222 does not sell, rent, or otherwise disclose your personal data to third parties for their own marketing or commercial purposes. Data is shared with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum data necessary to process your deposit or withdrawal transaction. These providers are independently regulated financial institutions operating under Bangladeshi financial law.
• Identity verification providers: Where app222 engages a third-party KYC (Know Your Customer) verification service, your identity documents and verification data are shared with that provider solely for the purpose of completing the verification process. Such providers are contractually bound to process your data only for that purpose.
• Game content providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt) may receive limited technical data (such as session tokens and bet amounts) necessary to deliver the game content you have launched. These providers are bound by data processing agreements with app222.
• Fraud and AML screening tools: app222 may use third-party risk screening tools to assess transactions for fraud or money laundering indicators. These tools receive only the data necessary to generate a risk assessment.
• Legal and regulatory authorities: app222 may be required by law to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies. In such circumstances, app222 will disclose only the data specifically required by the relevant legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of app222's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer via the email address registered to your account prior to the transfer taking effect.

All third-party service providers who process personal data on behalf of app222 are required to comply with data processing agreements that impose confidentiality obligations, restrict use of your data to specified purposes, and require implementation of appropriate technical and organisational security measures.

app222 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with app222, plus a minimum of five years following account closure, to satisfy AML record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• Transaction and betting records: Retained for a minimum of five years from the date of each transaction or wager, in accordance with financial record-keeping requirements.
• Verification documents: Retained for the same period as identity data. Document copies are held in encrypted storage and access is restricted to authorised compliance personnel only.
• Support communications: Live chat transcripts, email correspondence, and complaint records are retained for a minimum of two years from the date of the final communication in each support thread.
• Technical and usage data: Aggregated analytics data is retained indefinitely in anonymised form. Raw session logs and IP address records are retained for a maximum of twelve months from the date of collection.
• Marketing consent records: Consent records (including the date, method, and scope of consent) are retained for the duration of the marketing relationship plus a minimum of three years following consent withdrawal, to demonstrate compliance with consent requirements.
• Responsible gaming records: Self-exclusion records are retained for a minimum of six years from the date of self-exclusion to prevent re-registration during the exclusion period and to maintain an auditable compliance record.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion is carried out in accordance with app222's internal data destruction procedures, which ensure that data cannot be recovered or reconstructed after deletion.

app222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the app222 platform, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at rest for all sensitive personal data and financial records stored on app222 servers, using industry-standard AES-256 encryption.
• Access controls: Personal data is accessible only to app222 personnel and authorised third-party processors who have a legitimate need to access it for the specific purpose for which it was collected. Role-based access controls and audit logging are applied to all systems containing personal data.
• Two-factor authentication (2FA): Available to all registered users and enforced for all app222 administrative system access. All users are strongly encouraged to enable 2FA on their accounts, particularly those making regular deposits via bKash, Nagad, or Rocket.
• Regular security audits and penetration testing: The app222 platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, app222 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

app222 uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and understand how users interact with our services. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your responsible gaming settings, and enable core security features such as CSRF protection. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how users navigate the app222 platform — such as which pages are most visited, how long sessions last, and which game categories attract the most engagement. This data is used solely to improve platform performance and user experience.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting (English) and display preferences — so that you do not need to re-enter them on each visit.
• Security cookies: These cookies support our fraud detection and account security systems by detecting anomalous access patterns, unusual IP addresses, and other indicators of unauthorised account access.

app222 does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your interests for use by third-party advertisers. Any analytics processing carried out on the basis of cookie data is conducted using aggregated, anonymised data sets that cannot be linked back to an individual user.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent access to the app222 platform. Disabling other cookie categories will not affect platform access but may result in reduced functionality or less personalised experiences.

As a registered user of app222, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the app222 support team via live chat or by email at [email protected]. app222 will respond to all verified data rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of all personal data that app222 holds about you, together with information about how it is processed, where it is stored, and with whom it has been shared.
• Right to rectification: You have the right to request that any inaccurate or incomplete personal data held by app222 be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been processed unlawfully. This right is subject to app222's legal obligations to retain certain data — for example, transaction records subject to AML retention requirements cannot be deleted prior to the expiry of the applicable statutory retention period.
• Right to restriction of processing: You have the right to request that app222 restrict its processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: You have the right to request that personal data you have provided to app222 be transmitted to you, or directly to another controller, in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You have the right to object to processing of your personal data where that processing is carried out on the basis of legitimate interests. app222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (such as direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

app222 will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be charged. Where app222 is unable to comply with a request, you will be provided with a written explanation of the reason within the 30-day response window.

app222 employs age verification procedures at the point of registration and during the account lifecycle to prevent underage access. Where app222 becomes aware, or has reasonable grounds to believe, that personal data has been collected from a person under the age of 18, app222 will:

• Immediately suspend the account pending investigation;
• Delete all personal data associated with the account that is not required to be retained for legal or compliance purposes;
• Void and forfeit any winnings accrued in the account; and
• Cooperate fully with any relevant authority investigating underage access to the platform.

If you are a parent or guardian and believe that a minor in your care has registered an account on app222, please contact our support team immediately via live chat. app222 takes this matter extremely seriously and will act promptly upon receiving a verified report of underage access.

app222 is a platform serving Bangladesh-based users. The majority of personal data collected by app222 is processed and stored on servers located in data centres serving the South and Southeast Asia region. However, some of app222's third-party service providers — including certain game content providers and technical infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party processor operating in a jurisdiction outside Bangladesh, app222 ensures that appropriate safeguards are in place, which may include:

• Contractual clauses imposing data protection obligations equivalent to those applicable under this Privacy Policy;
• Requirements that the receiving party implement technical and organisational security measures equivalent to those maintained by app222; and
• Restrictions on the use of transferred data to the specific purpose for which the transfer was made.

app222 does not transfer personal data to any jurisdiction or recipient that cannot provide an adequate level of protection for that data. If you have questions about the safeguards governing any specific international transfer, please contact our support team.

app222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or improvements to our services. When material changes are made, app222 will update the "Last Updated" date at the top of this page and, where practicable, provide notice to registered users via the email address associated with their account or via a prominent notice displayed within the platform upon next login.

Your continued use of the app222 platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the revised policy. app222 encourages you to review this page periodically so that you remain informed of how your personal data is being protected. If any update materially affects your rights or the way in which your consent-based data processing operates, app222 will seek fresh consent from you before the updated processing activities commence.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way app222 processes your personal data, please contact our data protection team using the details below:

• Live chat: Available 24/7 on the app222 platform — the fastest way to reach our support team.
• Email: [email protected]  (plain text — not a clickable link)

app222 will acknowledge all privacy-related enquiries within 48 hours and will provide a substantive response within 30 days of receipt. Where a request requires extended investigation — for example, a complex erasure request involving multiple data categories and applicable retention obligations — app222 will notify you of the extension and provide an estimated response date.

For a full understanding of the rules governing your use of the app222 platform, please also review our Terms & Conditions and our Responsible Gaming policy.