22f999 Privacy Policy —
Your Data, Protected

§1 Introduction & Scope

22f999 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://22f999.app and all associated subdomains. This Privacy Policy explains how we collect, use, store, share, and protect personal information relating to individuals ("you", "your") who visit, register on, or use any part of the 22f999 platform.

This Policy applies to all personal data processed by 22f999 in connection with the provision of its services to players in Bangladesh, including account registration, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications where you have opted in to receive them.

By creating a 22f999 account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should cease use of the platform and contact our support team to close your account.

§2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, mobile number, device identifiers, IP address, and financial transaction records.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transmission, and deletion.
• "Data Controller" means 22f999, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of 22f999 under a contractual arrangement (for example, a payment gateway or cloud hosting provider).
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

§3 Data We Collect

22f999 collects personal data in the following categories, depending on how you interact with our platform:

22f999 does not intentionally collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information, except where age and identity verification may incidentally require review of an official document containing such details. In those cases, the document is reviewed solely for verification purposes and is not stored beyond the period necessary for that purpose.

§4 How We Use Your Data

22f999 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 22f999 account, including verifying your identity and age as required by our responsible gaming obligations.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records for your account.
• Service Delivery: To provide access to casino games, sports betting markets, and all other platform features, and to ensure correct settlement of bets and game outcomes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage access, multi-accounting, and other prohibited conduct set out in our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to apply responsible gaming tools requested by you (such as deposit limits or self-exclusion), and to fulfil any associated legal obligations.
• Customer Support: To respond to your queries, complaints, and support requests efficiently and accurately.
• Legal Compliance: To comply with applicable laws and regulations, including identity verification, anti-money-laundering requirements, and cooperation with lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, design, and content of the 22f999 platform.
• Marketing (with your consent): To send you promotional offers, bonus notifications, and platform updates via SMS or email, where you have opted in to receive such communications.

§5 Legal Basis for Processing

22f999 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 22f999, including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required for 22f999 to comply with applicable legal obligations, including identity verification, age verification, and anti-money-laundering checks.
• Legitimate Interests: Processing is necessary for the legitimate interests of 22f999, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent (for example, the sending of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

§6 Data Sharing & Disclosure

22f999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data may be shared in the following limited circumstances:

• Payment Processors: We share necessary financial data with bKash, Nagad, Rocket, and Upay solely to process your deposit and withdrawal requests. Each payment provider acts as an independent data controller in respect of the data it receives.
• Game Providers: We share your account identifier and session data with certified game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent required to deliver their games within the 22f999 platform.
• Identity Verification Services: We may share identity documents with third-party KYC verification service providers who assist us in fulfilling our age and identity verification obligations.
• Fraud Prevention Agencies: We may share data with fraud prevention and anti-money-laundering service providers where we have reasonable grounds to suspect fraudulent or unlawful activity on your account.
• Legal Authorities: We may disclose personal data to competent law enforcement or regulatory authorities where we are required to do so by applicable law or by a valid court order.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the 22f999 business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

§7 Payment Data & Transactions

All financial transactions on the 22f999 platform are processed through certified payment gateways. 22f999 does not store full payment account credentials (such as complete bKash PINs or Nagad account passwords) on its own servers. Transaction records — including deposit amounts, withdrawal amounts, dates, and reference numbers — are retained by 22f999 for the period specified in Section 9 (Data Retention) to meet financial record-keeping and anti-money-laundering obligations.

All payment data is transmitted over encrypted connections. 22f999 employs industry-standard tokenisation practices where available to minimise the exposure of raw payment identifiers within our systems.

§8 Cookies & Tracking Technologies

22f999 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function correctly. These cookies maintain your login session, remember your language and display preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your account preferences, such as your chosen odds format or notification settings, across sessions.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and interact with the platform, enabling us to identify and resolve usability issues and improve page performance. No personally identifiable information is included in analytics data sets.
• Fraud Prevention Cookies: Used to detect unusual or suspicious activity patterns that may indicate bot access, account takeover attempts, or other security threats.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the 22f999 platform. 22f999 does not use third-party advertising cookies or cross-site tracking cookies.

§9 Data Retention

22f999 retains personal data for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to meet anti-money-laundering, fraud investigation, and dispute resolution obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• KYC / Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to allow for complaint follow-up and quality assurance.
• Marketing Preference Records: Retained for as long as your account is active. Opt-out records are retained indefinitely to ensure we do not send unwanted communications.
• Technical / Log Data: Retained for up to twelve (12) months, unless retained longer in connection with a specific fraud investigation or legal matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction practices.

§10 Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 22f999:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your account preferences or contacting our support team.

To exercise any of these rights, please contact 22f999 support using the details in Section 16. We will respond to all verified data rights requests within 30 days of receipt. We may ask you to verify your identity before processing a data rights request.

§11 Data Security

22f999 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 22f999 platform;
• Industry-standard password hashing algorithms for account credential storage;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of platform infrastructure;
• Automated monitoring for unusual login patterns, bot activity, and potential account compromise;
• Secure, encrypted backups maintained in geographically separate data centres.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, 22f999 will notify affected players and relevant authorities in accordance with applicable legal requirements, without undue delay.

§12 Children & Minors

The 22f999 platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. All registration applications are subject to age verification checks, and accounts where the holder is found to be under 18 will be immediately and permanently closed.

§13 Marketing Communications

22f999 may send you promotional offers, bonus announcements, and platform updates via SMS or email, but only where you have explicitly opted in to receive such communications at registration or through your account settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the 22f999 account settings;
• Following the unsubscribe instructions in any marketing email you receive from us;
• Contacting our support team directly and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional communications relating to your account (such as deposit confirmations, withdrawal notifications, or important security alerts), which are sent as part of the contractual service regardless of your marketing preferences.

§14 Third-Party Links

The 22f999 platform may from time to time contain references to third-party services, game providers, or payment partners. While we take care to work only with reputable partners, 22f999 is not responsible for the privacy practices or content of any third-party website or service. Once you navigate away from the 22f999 platform to a third-party site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party services you access.

§15 Changes to This Policy

22f999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where changes are material, we will provide notice to active account holders via their registered mobile number or email address, or by means of a prominent notice on the 22f999 platform, at least 14 days before the updated Policy takes effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically. Continued use of the platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

§16 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 22f999 holds about you, please contact our support team. We aim to acknowledge all data-related enquiries within 24 hours and to provide a substantive response within 30 days.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Language: All privacy-related correspondence should be submitted in English

Please include your registered username and a clear description of your request when contacting us regarding your personal data rights. 22f999 may ask you to verify your identity before actioning any data rights request, in order to protect your account from unauthorised third-party access.