Your Privacy Matters
at dc222

Introduction

dc222 is Bangladesh's trusted online casino and sports betting platform, serving registered players since 2018. As a platform that processes financial transactions and handles sensitive personal data belonging to players across Bangladesh — including cities such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — dc222 recognises the critical importance of transparent and responsible data management.

This Privacy Policy is part of the agreement between you and dc222 and should be read alongside dc222's Terms & Conditions and Responsible Gaming Policy, both of which are published on this Platform. In the event of any conflict between this Policy and dc222's Terms & Conditions, the Terms & Conditions shall prevail unless this Policy expressly provides otherwise.

dc222 is committed to complying with applicable data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability. Every data practice described in this Policy is aligned with these principles.

Data Controller

dc222 acts as the data controller in respect of all personal data collected through the Platform. As data controller, dc222 determines the purposes for which personal data is collected and the manner in which it is processed. dc222 is responsible for ensuring that all personal data processing activities are carried out in accordance with this Policy and applicable law.

Where dc222 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, and game content providers — those parties act as data processors and are subject to contractual obligations that require them to protect personal data to a standard at least equivalent to dc222's own practices.

Data We Collect

dc222 collects personal data in several categories depending on the nature of your interaction with the Platform. The categories of personal data we collect are described in the table below.

How We Collect Data

dc222 collects personal data through the following channels:

Direct Collection

You provide personal data directly to dc222 when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, respond to a survey or promotion, or update your account profile. The accuracy of directly provided data is your responsibility, and you should notify dc222 promptly if any information changes.

Automated Collection

When you visit or use the Platform, dc222 automatically collects certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This automated collection occurs each time you access the Platform and includes your IP address, device identifiers, browser information, session timestamps, and navigation paths. For more information on cookies, please refer to Section 6 of this Policy.

Third-Party Sources

dc222 may receive personal data about you from trusted third-party sources, including:

• Identity verification and anti-fraud service providers who help dc222 verify the accuracy of the information you submit during registration and KYC.
• Payment service providers such as bKash, Nagad, Rocket, and Upay, who confirm the status of payment transactions.
• Analytics partners who provide aggregated behavioural data to help dc222 improve Platform performance and user experience.

Data received from third-party sources is combined with information dc222 already holds about you and is subject to the same protections described in this Policy.

Purposes & Legal Bases for Processing

dc222 processes personal data only for specific, legitimate purposes. The table below describes each processing purpose and the legal basis on which dc222 relies.

Cookies & Tracking Technologies

dc222 uses cookies and similar tracking technologies to operate and improve the Platform, remember your preferences, analyse usage patterns, and support fraud prevention measures. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not harm your device and cannot access other files stored on it.

Types of Cookies Used by dc222

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session management, login authentication, and security checks. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: These cookies remember your preferences — such as your language setting, preferred game category, and display settings — to personalise your experience on the Platform.
• Analytical Cookies: dc222 uses analytical cookies to understand how players navigate and interact with the Platform. This data is used in aggregate form to identify opportunities to improve Platform performance and user experience.
• Security Cookies: These cookies support dc222's fraud detection and account security systems by identifying unusual device or behaviour patterns that may indicate unauthorised account access or fraudulent activity.

Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the dc222 Platform, including your ability to log in or access certain game features. Instructions for managing cookies in common browsers are available through each browser's official help documentation.

Data Sharing & Disclosure

dc222 does not sell, rent, or otherwise commercially exploit your personal data. dc222 shares personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Service Providers (Data Processors)

dc222 engages trusted third-party service providers to assist in delivering the Platform. These providers process personal data on dc222's behalf and are bound by data processing agreements that require them to protect your data. Categories of service provider engaged by dc222 include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors)
• Identity verification and KYC service providers
• Anti-fraud and risk management technology providers
• Casino game content providers (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe)
• Cloud hosting and infrastructure service providers
• Customer support platform providers
• Platform analytics and performance monitoring providers

Legal Disclosure

dc222 may disclose personal data to government authorities, law enforcement bodies, or regulatory agencies when required to do so by applicable law, court order, or regulatory demand. dc222 will always seek to limit the scope of any such disclosure to the minimum data required to satisfy the legal obligation.

Business Transfers

In the event that dc222 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held about Platform users may be transferred to the acquiring or successor entity. dc222 will notify affected players of any such transfer in advance and will ensure that the successor entity is bound by data protection obligations at least equivalent to those set out in this Policy.

International Data Transfers

The dc222 Platform serves players in Bangladesh and dc222's primary data processing infrastructure is located in secure data centres in the Asia-Pacific region. However, some of dc222's third-party service providers — particularly game content providers and cloud infrastructure partners — may process personal data in jurisdictions outside Bangladesh.

Where personal data is transferred to a country that does not provide a level of data protection equivalent to Bangladesh's standards, dc222 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual data protection clauses, technical security measures, and access controls that limit who can view or process your data within those jurisdictions.

Data Retention

dc222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational requirements. The table below summarises dc222's standard data retention periods by data category.

When personal data reaches the end of its retention period, dc222 securely deletes or anonymises it so that it can no longer be associated with any individual. Anonymised data — which cannot identify any individual — may be retained indefinitely for statistical and analytical purposes.

Data Security

dc222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your device and the dc222 Platform is encrypted using SSL/TLS protocols to prevent interception during transit.
• Data at Rest Encryption: Personal data stored in dc222's databases is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within dc222's systems is restricted on a strict need-to-know basis. Only authorised dc222 personnel and verified service providers with a legitimate operational requirement may access personal data.
• Two-Factor Authentication: dc222 strongly recommends that all players enable two-factor authentication (2FA) on their accounts to add an additional layer of protection against unauthorised access.
• Penetration Testing: dc222's Platform and infrastructure undergoes regular independent security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: dc222 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, dc222 will notify affected players without undue delay.
• Staff Training: All dc222 employees and contractors who handle personal data are required to complete regular data protection and security awareness training.

Your Data Rights

As a dc222 player, you have a number of important rights over the personal data dc222 holds about you. These rights are described below. To exercise any of these rights, please contact dc222 at [email protected] with the subject line "Data Rights Request" and your registered account username or email address.

Children & Minors

The dc222 Platform is strictly intended for adults aged 21 years and above. dc222 does not knowingly collect, process, or store personal data belonging to any person under the age of 21. The 21+ age restriction is actively enforced through dc222's KYC and identity verification processes, which require all players to submit valid government-issued identification confirming their date of birth before their account is activated.

If dc222 discovers or has reason to believe that personal data has been collected from a person under the age of 21, dc222 will immediately suspend the relevant account, delete or destroy all personal data associated with it, and void any balances or transactions connected to that account in accordance with dc222's Terms & Conditions.

Marketing Communications

dc222 may send you promotional communications about bonuses, new game releases, tournaments, seasonal promotions (such as Eid, Pohela Boishakh, or Victory Day offers), and other dc222 Platform news — but only where you have given your explicit consent to receive such communications at the time of registration or subsequently via your account settings.

Marketing communications from dc222 will be sent to the email address registered on your account. dc222 will never use third-party channels, unsolicited SMS messages, or social media accounts not officially registered to dc222 to distribute promotional communications.

Withdrawing Marketing Consent

You may withdraw your consent to receive marketing communications from dc222 at any time, free of charge, by:

• Clicking the "Unsubscribe" link included in every dc222 marketing email.
• Updating your communication preferences in your dc222 account settings.
• Contacting dc222 support at [email protected] with the subject line "Unsubscribe — Marketing".

Withdrawal of marketing consent will take effect within 5 Bangladesh Standard Time (BST, UTC+6) business days. Withdrawing marketing consent does not affect your ability to use the dc222 Platform or receive essential service communications such as deposit confirmations, withdrawal notifications, account security alerts, and policy update notices.

Third-Party Links

The dc222 Platform may contain references to third-party services, game content providers, and payment partners. While dc222 takes care to partner only with reputable organisations, dc222 has no control over the privacy practices of third-party websites or services and is not responsible for their content or data handling practices.

This Privacy Policy applies solely to personal data collected and processed by dc222 through the dc222 Platform at dc222.io. If you navigate to any third-party website or service — including payment provider portals such as the bKash or Nagad apps — the privacy policy of that third party will govern how your data is handled. dc222 encourages you to review the privacy policies of any third-party services you use in connection with your dc222 account.

Changes to This Policy

dc222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in dc222's data practices, applicable law, or the services offered through the Platform. When material changes are made to this Policy, dc222 will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a period of at least 14 days following the update.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the dc222 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree to a revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].

Minor updates — such as typographical corrections, clarifications of existing practices, or updated contact details — may be made without advance notice but will always be reflected in the "Last Updated" date. dc222 recommends bookmarking this page and reviewing it periodically to stay informed of how your personal data is being handled.

Contact & Data Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data dc222 holds about you, please contact dc222's data protection team using the details below. dc222's customer support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

• Email: [email protected]
• Subject Line for Data Requests: "Privacy / Data Request — [Your Username]"
• Response Time: Within 2 BST business days for acknowledgement; within 30 days for full resolution
• Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Language: English

When contacting dc222 about a data rights matter, please include your registered dc222 username or account email address, a clear description of your request, and — for erasure or portability requests — confirmation that you understand the implications for your account access and balance.