cd222 Privacy Policy — Your Data, Your Rights

1. Who We Are

cd222 ("cd222", "we", "us", "our") operates the online casino and sports betting platform accessible at cd222.io. cd222 is the data controller responsible for the personal information collected through this platform. We offer cricket betting, live casino games, slots, and related services primarily to players located in Bangladesh.

This Privacy Policy applies to all personal data collected through the cd222 website, mobile-optimised interface, live chat, email correspondence, and any other communication channel operated under the cd222 brand. It applies to all registered players, visitors browsing the platform without an account, and individuals who contact our Support team.

Questions or concerns about this policy or our data practices should be directed to our Support team — contact details are provided in Section 14 of this document.

2. Data We Collect

cd222 collects the following categories of personal data in the course of operating our platform and delivering our Services to players in Bangladesh:

2.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — players must be 21 years or older)
• Residential address (city, district, Bangladesh postal code)
• Email address
• Mobile phone number (for bKash, Nagad, Rocket, and Upay account verification)
• Nationality and country of residence

2.2 Identity Verification (KYC) Documents

• Copy of government-issued photo identification (National ID Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or mobile financial service statement dated within 90 days)
• Proof of payment method ownership (screenshot or statement confirming mobile wallet registration in your name)
• Source-of-funds documentation (where requested as part of enhanced due diligence)

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method identifiers (bKash account number, Nagad number, Rocket number, Upay number)
• Account balance history and transaction logs
• Bonus and promotional credit history
• Wagering history and game session records

2.4 Technical & Usage Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Session start/end times and session duration
• Pages visited, features accessed, and navigation path through the platform
• Referring URL (the website or search result that brought you to cd222)
• Crash reports and error logs generated during platform use

2.5 Communications Data

• Content of live chat conversations with cd222 Support
• Email correspondence and support ticket history
• Responses to promotional surveys or player satisfaction requests (where participated voluntarily)

3. How We Collect Your Data

cd222 collects personal data through the following means:

• Direct Collection — Registration: When you create a cd222 account, you provide identity, contact, and date-of-birth data directly through the registration form.
• Direct Collection — KYC Submission: When you submit identity verification documents to unlock withdrawal capability, those documents are collected and stored by our compliance team.
• Direct Collection — Transactions: Each time you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, transaction details are recorded automatically.
• Direct Collection — Support Interactions: When you contact cd222 Support via live chat or email, the content of your communications is stored in our support system.
• Automated Collection — Technical Data: When you browse the cd222 platform, our servers automatically log technical data including your IP address, device information, session timestamps, and page interactions.
• Automated Collection — Cookies: cd222 uses cookies and similar tracking technologies to maintain session state, remember your login, and analyse platform usage. See Section 6 for full details.
• Third-Party Sources: In certain circumstances, cd222 may receive data about you from third-party identity verification providers, payment processors, or fraud-detection services as part of our KYC and anti-fraud obligations.

4. Legal Basis for Processing

cd222 processes your personal data on the following legal grounds:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
Identity verification (KYC)	Legal obligation / legitimate interest
Fraud prevention and security monitoring	Legitimate interest / legal obligation
Responsible gaming tools and monitoring	Legal obligation / legitimate interest
Sending service-related communications	Performance of a contract with you
Sending promotional and marketing communications	Your consent (withdrawable at any time)
Platform analytics and performance improvement	Legitimate interest
Compliance with legal and regulatory obligations	Legal obligation

5. How We Use Your Data

The personal data collected by cd222 is used exclusively for the following purposes:

5.1 Account Operations

Your identity and contact data is used to create and manage your cd222 account, verify your age and eligibility to participate on the platform (players must be 21 years or older), authenticate your login sessions, and communicate essential account-related information such as deposit confirmations, withdrawal notifications, and account status updates.

5.2 Payment Processing

Financial and transaction data is used to process your deposit and withdrawal requests via bKash, Nagad, Rocket, and Upay, to reconcile transaction records, to investigate disputed or failed transactions, and to ensure that withdrawals are returned to a payment method registered in your own name.

5.3 Identity Verification & Compliance

KYC documentation is used to verify your identity, confirm your age, establish your residential address in Bangladesh, and satisfy our legal and compliance obligations. This process is mandatory before withdrawals can be processed and may be triggered at any point during the player relationship as part of ongoing due diligence.

5.4 Fraud Prevention & Platform Integrity

Technical and usage data is used by cd222's security team to detect and prevent fraudulent activity, identify potential multi-accounting, monitor for unusual betting patterns, and protect the platform and its players from financial crime and abuse. This processing is conducted in cd222's legitimate interest and is a fundamental requirement of operating a responsible gambling platform.

5.5 Responsible Gaming

cd222 uses wagering history, session data, and account behaviour patterns to identify players who may be exhibiting signs of problem gambling. This data is used to trigger responsible gaming interventions such as automated alerts, proactive outreach from our Support team, and the application of account-level restrictions where necessary for player protection.

5.6 Customer Support

Communications data is retained in our support system to enable our Support team to provide accurate, contextually-informed assistance. Support agents have access to your account history and previous support interactions so that queries can be resolved efficiently without requiring you to repeat information.

5.7 Platform Improvement & Analytics

Aggregated and anonymised usage data is used to analyse how players navigate the cd222 platform, identify usability issues, measure the performance of new features, and make evidence-based improvements to the player experience. This analysis is conducted on anonymised datasets wherever possible.

5.8 Marketing Communications

Where you have given your explicit consent, cd222 may use your contact data to send promotional emails or messages about new games, bonus offers, seasonal promotions relevant to players in Bangladesh (such as Eid or Pohela Boishakh specials), and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting Support.

6. Cookies & Tracking Technologies

cd222 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve our platform. The categories of cookies we use are as follows:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, remember your language preference, and enable core platform functionality. Without these cookies, the platform cannot function.	No — essential for platform operation
Functional	Remember your display preferences, game history view settings, and responsible gaming tool configurations.	Yes — via browser settings
Analytics	Collect anonymised data about how players navigate the platform to help us identify performance bottlenecks and improve user experience.	Yes — via browser settings
Security	Support fraud detection, identify suspicious login attempts, and protect the integrity of active sessions.	No — required for account security

You can manage or delete cookies at any time through your browser settings. Please be aware that disabling non-essential cookies may affect some aspects of your cd222 experience. cd222 does not use cookies to serve third-party advertising or to track your behaviour across other websites.

7. Sharing Your Data

cd222 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

7.1 Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the minimum data necessary to complete the transaction is shared with the relevant payment processor. These providers operate under their own privacy policies and are bound by their respective regulatory obligations as licensed financial service providers in Bangladesh.

7.2 Identity Verification Providers

cd222 may engage third-party KYC and identity verification service providers to assist in validating the authenticity of documents submitted as part of the account verification process. These providers are contractually prohibited from using your data for any purpose other than the specific verification task for which they are engaged.

7.3 Technology & Infrastructure Providers

cd222 uses third-party cloud infrastructure, data hosting, and software-as-a-service providers to operate the platform. These providers may process personal data on our behalf as data processors, acting strictly on cd222's documented instructions and subject to confidentiality and data security obligations.

7.4 Fraud Prevention & Security Services

cd222 may share relevant technical data (such as IP addresses, device fingerprints, and behavioural signals) with fraud prevention and cybersecurity service providers for the purposes of detecting and preventing fraudulent activity, money laundering, and other financial crime.

7.5 Legal & Regulatory Disclosure

cd222 may disclose personal data to law enforcement agencies, regulatory authorities, or other competent government bodies where required to do so by applicable law, court order, or lawful legal process. We will notify affected players of such disclosures where legally permitted to do so.

7.6 Business Transfers

In the event that cd222 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via email or in-platform notification prior to any such transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

8. Data Retention

cd222 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Data Category	Retention Period
Account registration data (active accounts)	Duration of account plus 5 years after closure
KYC / identity verification documents	5 years from submission or account closure (whichever is later)
Financial transaction records	7 years from transaction date (financial crime compliance)
Betting and gaming history	5 years from the date of each wager
Support communications	3 years from the date of the interaction
Technical / server log data	12 months from collection
Marketing consent records	Until consent is withdrawn, plus 3 years

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond these standard periods due to an active legal dispute, investigation, or regulatory inquiry, it will be retained until the matter is fully resolved.

9. Data Security

cd222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• SSL/TLS Encryption in Transit: All data transmitted between your device and the cd222 platform is encrypted using Transport Layer Security (TLS 1.2 or higher), protecting it from interception during transmission.
• Encryption at Rest: Sensitive personal data stored in our databases — including KYC documents, payment method identifiers, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within cd222's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo security awareness training and are bound by confidentiality obligations.
• Two-Factor Authentication: cd222 supports two-factor authentication (2FA) on all player accounts and requires it for internal administrative access to systems containing personal data.
• Vulnerability Management: cd222 conducts regular security assessments and vulnerability scans of its platform infrastructure to identify and remediate security weaknesses in a timely manner.
• Incident Response: cd222 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to player data, affected players will be notified without undue delay and appropriate remedial action will be taken.

While cd222 applies all reasonable security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their cd222 accounts and to enable two-factor authentication. If you suspect that your account has been compromised, contact Support immediately.

10. Your Rights

As a cd222 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our Support team using the details in Section 14. We will respond to all valid requests within 30 days.

10.1 Right of Access

You have the right to request a copy of the personal data that cd222 holds about you, together with information about how it is used and with whom it is shared. This is commonly referred to as a Subject Access Request (SAR).

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address or phone number) directly within your account settings. For corrections to identity data, please contact Support.

10.3 Right to Erasure

In certain circumstances, you have the right to request that cd222 delete the personal data we hold about you. This right is subject to overriding legal obligations — for example, we are required to retain financial transaction records and KYC documentation for specified periods under applicable anti-money laundering regulations, and those records cannot be deleted upon request until the mandatory retention period has elapsed.

10.4 Right to Restrict Processing

You have the right to request that cd222 restrict the processing of your personal data in circumstances where you contest the accuracy of the data, you object to its processing, or the processing is unlawful but you prefer restriction to erasure.

10.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and the processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

10.6 Right to Object

You have the right to object to the processing of your personal data where cd222 relies on legitimate interest as the legal basis for that processing. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.

10.7 Right to Withdraw Consent

Where cd222 relies on your consent as the legal basis for processing (specifically, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Children & Minors

The cd222 platform is strictly intended for adults aged 21 years and above. cd222 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts found to belong to individuals below the minimum age threshold are immediately suspended.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account with cd222 using false age information, please contact our Support team immediately. We will take prompt action to investigate and close the account, and will securely delete any personal data associated with it to the extent permitted by our legal obligations.

12. Third-Party Links

The cd222 platform may contain references to third-party services — such as payment providers like bKash, Nagad, Rocket, and Upay — whose own platforms operate independently under their own privacy policies. cd222 is not responsible for the privacy practices or data handling of any third-party platform. When you navigate away from cd222.io to any third-party website or application, we recommend reviewing that platform's own privacy policy before providing any personal information.

13. Policy Updates

cd222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address on record or via an in-platform notification at least 7 days before the revised policy takes effect. The "Last Updated" date at the top of this document will be revised accordingly.

Your continued use of the cd222 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should discontinue use of the platform and contact Support to request account closure.

We encourage all players to review this Privacy Policy periodically to stay informed about how cd222 protects and handles your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data cd222 holds about you, please contact our dedicated Support team:

• Email: support at cd222.io (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the cd222 platform
• Response Time: Live chat queries are handled immediately; email responses within 4–12 hours
• Language: English support available at all times

For information about your account or responsible gaming tools, visit our Responsible Gaming page. For answers to common questions, visit our FAQ page.