da222 Privacy Policy

da222 operates as an online betting and casino platform serving players in Bangladesh. We take the privacy and security of your personal data seriously. This Privacy Policy has been prepared to help you understand what information we collect about you, the purposes for which we use that information, the limited circumstances under which we share it, and the choices and rights available to you.

This Privacy Policy applies to all services offered through da222.io, including sports betting, live casino, slots, crash games, and any customer support or account management interactions. It covers data collected through our website, any associated mobile-optimised web views, and any communications you have with the da222 support team.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are published on this website. Together these documents govern your relationship with da222. If you have any questions about this Privacy Policy or your personal data, please contact us as described in Section 15.

da222 collects the following categories of personal data, depending on how you interact with the platform:

da222 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated Technologies: Technical and usage data collected automatically when you visit da222.io, including via server logs, cookies, pixel tags, and session-recording technologies.
• Payment Processors: Transaction reference data received from payment processors such as bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. da222 receives confirmation and reference data, not your full account credentials.
• Game Software Providers: Game session data including round IDs, bet amounts, and outcomes passed to da222 by licensed game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi for the purpose of maintaining accurate account balances and resolving disputes.
• Fraud Prevention Partners: Risk scoring signals and device fingerprinting data provided by fraud detection services used to protect the platform and all players from account takeover and payment fraud.
• Publicly Available Sources: Where required for anti-money-laundering compliance, da222 may consult publicly available registers, sanctions lists, or adverse media sources to verify player identity.

da222 processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual Necessity: Processing required to register your account, accept deposits, settle bets and game outcomes, process withdrawals, and deliver all other services described in the da222 Terms and Conditions. Without this processing, we cannot provide the service.
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering obligations, age verification requirements, fraud reporting duties, and responses to lawful requests from regulatory authorities and law enforcement agencies.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the platform, prevent fraud and multi-accounting, manage responsible gaming obligations, improve platform performance and user experience, and conduct internal analytics — provided these interests do not override your fundamental rights.
• Consent: Where da222 sends you direct marketing communications by email or on-platform notification, we rely on your explicit consent, which you may withdraw at any time as described in Section 13.

da222 uses the personal data we collect for the following purposes:

• To create, verify, maintain, and close your da222 player account.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and USDT, and to maintain accurate financial records of all transactions.
• To settle bets and game rounds, credit winnings, and apply bonuses and promotions to your account balance.
• To verify your identity and age (21+) during registration and at subsequent points in the account lifecycle as required by our compliance obligations.
• To detect, investigate, and prevent fraud, multi-accounting, money laundering, bonus abuse, and other forms of prohibited conduct described in our Terms and Conditions.
• To enforce our Terms and Conditions, including account suspension and termination where material breaches occur.
• To provide customer support, respond to your queries, and resolve disputes regarding bets, transactions, or account access.
• To deliver and manage responsible gaming tools including deposit limits, self-exclusion, session reminders, and reality checks.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you promotional communications about da222 bonuses, new games, and special offers — only where you have provided consent or where applicable law permits such communications.
• To analyse platform usage patterns, improve game offerings, and optimise the player experience on da222.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from authorities.

da222 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: bKash, Nagad, Rocket, Upay, and USDT network intermediaries receive the minimum data necessary to process your deposit or withdrawal transaction and verify its legitimacy.
• Game Software Providers: Licensed providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and bet data necessary to run game rounds and return outcomes to your account. These providers are bound by their own data processing agreements with da222.
• Identity Verification Partners: Third-party KYC and age-verification service providers receive identity documents and personal details where required to complete the verification process. These partners process data solely on da222's instruction and under strict confidentiality obligations.
• Fraud Prevention & Security: Fraud detection and device intelligence providers receive technical signals (IP address, device fingerprint, behavioural data) to generate risk scores used to protect the platform and all players.
• Legal and Regulatory Authorities: da222 may disclose your personal data to law enforcement agencies, regulators, tax authorities, or courts where required to do so by applicable law, court order, or lawful regulatory request. Such disclosures are made in accordance with applicable legal process and are logged internally.
• Business Transfers: In the event that da222's business or assets are transferred to a new operator, player account data may be transferred as part of that transaction. You will be notified of any such transfer and your rights over your data will be preserved.

da222 uses cookies and similar tracking technologies on the da222.io website. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the website to recognise your device and remember certain information about your visit.

da222 does not use advertising or cross-site tracking cookies. We do not share cookie-derived data with advertising networks. You may manage or disable cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies may impair your ability to log in or use core platform features.

da222 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with our legal obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account relationship with da222 and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of 5 years following the date of the transaction, for financial compliance and audit purposes.
• Betting and Gaming Records: Retained for a minimum of 3 years following the date of the game session or bet, to support dispute resolution and regulatory reporting.
• Customer Support Records: Retained for 2 years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for the duration of the consent and for 2 years following withdrawal of consent, to demonstrate compliance with marketing regulations.
• Technical and Usage Data (Logs): Retained for up to 12 months in active systems and up to 24 months in archived form for security and fraud investigation purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to any individual player. Aggregate anonymised data may be retained indefinitely for statistical and business intelligence purposes.

da222 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your browser or device and da222.io is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced site-wide with HSTS headers to prevent downgrade attacks.
• Encryption at Rest: Sensitive data fields including identity document records and payment method details are encrypted at the database level using AES-256 encryption.
• Access Controls: Access to player personal data within da222's internal systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all administrative accounts.
• Intrusion Detection: da222's infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and other indicators of compromise. Security events are logged and reviewed by our operations team.
• Penetration Testing: da222 commissions periodic third-party security assessments of its web application and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Vendor Security: All third-party data processors engaged by da222 are required to demonstrate equivalent security standards as a condition of their data processing agreements.

Depending on the applicable law in your jurisdiction, you may have the following rights in relation to your personal data held by da222. All requests should be submitted to our support team as described in Section 15.

• Right of Access: You may request a copy of the personal data da222 holds about you, together with information about how it is being used. da222 will provide this information within 30 days of a verified request.
• Right to Rectification: If any personal data da222 holds about you is inaccurate or incomplete, you have the right to request correction. Most profile data can be updated directly in your account settings; supporting documentation may be required for identity data changes.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to da222's legal retention obligations. Note that data subject to mandatory retention periods (e.g., financial records) cannot be deleted until those periods have elapsed.
• Right to Restrict Processing: You may request that da222 restrict the processing of your data in certain circumstances, for example where you have contested the accuracy of the data and verification is pending.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to da222 directly (e.g., account profile data, transaction history), for the purpose of transmitting it to another service provider.
• Right to Object: You may object to da222's processing of your data where that processing is based on legitimate interests. da222 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where da222's processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

da222 is strictly an adult gambling platform. Access to da222 is restricted to individuals aged 21 years or above. da222 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21.

If da222 identifies or is notified that an account has been registered by or on behalf of an individual under the age of 21, the account will be immediately suspended, all pending transactions will be held pending review, and the account will be permanently closed. Any data associated with an underage account will be deleted in accordance with applicable legal requirements.

If you believe that a minor has registered an account on da222, please contact our support team immediately at support at da222.io so that we can investigate and act promptly.

da222 serves players in Bangladesh. Some of the third-party service providers we engage — including game software providers, fraud detection tools, and cloud infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, da222 takes the following safeguards:

• Data is transferred only to processors who have agreed to da222's data processing terms, which require equivalent data protection standards to those applied domestically.
• Where standard contractual clauses or equivalent mechanisms are applicable and provide additional legal protection for international transfers, da222 implements those mechanisms.
• da222 conducts data transfer impact assessments where required to evaluate the risk of international transfers and to determine whether additional safeguards are necessary.

By using the da222 platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh as described above.

da222 may send you promotional communications about new games, bonus offers, seasonal promotions (including Eid, Pohela Boishakh, and Victory Day specials), and platform updates. We will only send marketing communications where you have provided explicit consent or where applicable law otherwise permits such communications.

• You may opt in to receiving marketing communications during registration or at any time through your account notification settings.
• You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team at support at da222.io with the subject line "Marketing Opt-Out".
• Opting out of marketing communications does not affect the delivery of essential transactional communications such as deposit confirmations, withdrawal status updates, and account security alerts, which are sent regardless of marketing preferences.
• Players who have activated self-exclusion will not receive any promotional communications from da222 during the exclusion period.

da222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Privacy Policy, we will notify registered players by posting a prominent notice on the da222.io website and, where appropriate, by sending a notification to the email address associated with your account.

The "Last updated" date at the top of this Privacy Policy reflects when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how da222 is protecting your data. Your continued use of the da222 platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the updated terms.

If we make changes that materially reduce your rights or significantly alter the way we process your personal data, we will provide at least 14 days' advance notice before the changes take effect. If you do not agree with the updated Privacy Policy, you should stop using the da222 platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way da222 handles your personal data, please contact our dedicated support team. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days.

For data rights requests (access, rectification, erasure, portability, objection), please use the subject line "Data Rights Request" so that your message is routed directly to the appropriate team. You may be asked to verify your identity before your request is processed, in order to protect the security of your account and prevent unauthorised access to your data.

For responsible gaming concerns including self-exclusion requests and deposit limit adjustments, please visit our Responsible Gaming page or contact support with the subject line "Responsible Gaming Request".