22bt Privacy Policy — How We Handle Your Personal Data

01 Introduction

This Privacy Policy ("Policy") describes how 22bt ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "the User", "the Player") who visit, register on, or otherwise interact with the 22bt website at https://22bt.io and any associated services.

22bt is an offshore-licensed online betting and casino platform serving adult players primarily based in Bangladesh. Given that our platform processes financial transactions and identity-related information, we treat data protection as a core operational responsibility — not an afterthought.

This Policy should be read alongside the 22bt Terms & Conditions, available at /terms-conditions. The two documents together form the complete agreement governing your relationship with 22bt. By creating an account or using any feature of the platform, you acknowledge that you have read and accepted this Policy in full.

This Policy is written and maintained in English. Where any translation is provided for convenience, the English version shall prevail in the event of any inconsistency.

02 Data We Collect

22bt collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:

03 How We Collect Data

We collect personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically via cookies, server logs, and similar tracking technologies each time you access the platform.
• Payment processors: Transaction confirmation and status data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and partner banks when you initiate a deposit or withdrawal.
• Game providers: Session and outcome data relayed from third-party game studios (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe) during live casino and slots gameplay.
• Fraud and security partners: Risk signals and device fingerprint data from third-party fraud prevention services used to protect the integrity of the platform.
• Publicly available sources: Where necessary for identity verification or fraud screening, we may cross-reference data against publicly accessible records.

04 How We Use Your Data

22bt uses your personal data solely for the purposes listed below. We do not use data for purposes that are incompatible with the original reason for collection.

Where you have opted in to receive promotional communications — such as bonus offers tied to BPL season, T20 World Cup events, Eid specials, or Pohela Boishakh promotions — we will use your contact data to send relevant messages. You may opt out of promotional communications at any time by contacting [email protected].

05 Legal Basis for Processing

22bt processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, transaction processing, and bet settlement.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming oversight, and analytics, where these interests do not override your fundamental rights.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering obligations and identity verification mandates.
• Consent: Processing carried out for optional purposes such as direct marketing, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

06 Data Sharing and Disclosure

22bt does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only to the extent necessary to operate the platform and only with the categories of recipients described below.

6.1 Payment Processors

Your financial data is shared with mobile financial service providers (bKash, Nagad, Rocket, Upay) and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank) solely to process deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by contractual data protection obligations when processing data on behalf of 22bt.

6.2 Game Studio Providers

When you play a live casino game or slot title, session data is necessarily transmitted to the relevant game studio (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe) for game operation and outcome determination. These providers receive only the minimum data required for game delivery and settlement.

6.3 Fraud Prevention and Security Services

To protect players and the integrity of the platform, technical and identity data may be shared with accredited fraud prevention service providers. These services help 22bt detect multi-accounting, unusual betting patterns, and potential financial crime indicators.

6.4 Legal and Regulatory Authorities

22bt may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 22bt, its players, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 22bt's business, personal data held on the platform may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Policy that may result from it.

07 Data Retention

22bt retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following guidelines:

• Active accounts: All personal data associated with an active account is retained for the lifetime of the account plus a mandatory post-closure retention period.
• Closed accounts: Following account closure, identity and financial data is retained for a minimum of 5 years and a maximum of 7 years to satisfy anti-money laundering record-keeping obligations and to allow for dispute resolution.
• Transaction records: Individual deposit and withdrawal records are retained for 7 years from the date of the transaction.
• Support communications: Customer support records are retained for 3 years from the date of the last interaction.
• Technical logs: Server and device logs are retained for up to 12 months unless a specific security investigation requires extended retention.
• Marketing data: Contact data used for promotional communications is deleted promptly upon receipt of an opt-out request, except where retention is required for record-keeping purposes.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

08 Data Security

22bt employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 22bt platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls ensuring that staff access to personal data is limited to those with a legitimate operational need;
• Regular security audits and penetration testing of platform infrastructure;
• Multi-factor authentication for internal administrative systems;
• Automated fraud detection and anomaly monitoring operating continuously across all account activity.

While 22bt takes all reasonable steps to protect your data, no system connected to the internet can be guaranteed to be entirely secure. You are responsible for keeping your account credentials confidential and for notifying 22bt immediately at [email protected] if you suspect any unauthorised access to your account.

09 Cookies and Tracking Technologies

22bt uses cookies and similar tracking technologies to ensure the platform functions correctly, to analyse usage patterns, and to personalise your experience. The following categories of cookies are in use:

• Strictly necessary cookies: Required for core platform functionality, including session management, authentication, and security. These cannot be disabled without impairing the platform's operation.
• Functional cookies: Enable the platform to remember your preferences, such as language and display settings, to provide a consistent experience across sessions.
• Analytics cookies: Collect anonymised data about how users navigate the platform — such as pages visited and session duration — to help 22bt improve the user experience. No personally identifiable information is included in analytics reports.
• Marketing cookies: Used, with your consent, to deliver relevant promotional messages based on your activity on the 22bt platform. You may withdraw consent for marketing cookies at any time.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the availability of some platform features. For a full list of cookies in use, contact [email protected].

10 Your Data Rights

As a user of the 22bt platform, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. 22bt will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of access: You may request a copy of the personal data that 22bt holds about you, along with information about how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may also update basic profile details directly within your account settings.
• Right to erasure: You may request that your personal data be deleted, subject to 22bt's legal retention obligations. Where deletion is not possible due to a legal requirement, we will inform you of the reason and the expected retention period.
• Right to restrict processing: You may request that 22bt pause the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: You may request a copy of the personal data you have provided to 22bt in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though 22bt may continue processing if it can demonstrate compelling grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11 Children's Privacy

The 22bt platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual who is under 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the verified payment method used, net of any bonuses received.

If you believe that a minor has registered an account on 22bt, please notify us immediately at [email protected]. We will investigate and act promptly. For guidance on protecting young people from the potential harms of gambling, please visit our Responsible Gaming page at /responsible-gaming.

12 Third-Party Services and Links

The 22bt platform integrates third-party services — including game studio software, payment gateways, and fraud prevention tools — that operate under their own independent privacy policies. 22bt is not responsible for the data practices of these third-party providers, and we encourage you to review their policies where relevant.

22bt does not host external links to third-party websites within the main platform content. Any third-party services accessed through the platform (such as live casino games powered by Evolution Gaming or Ezugi) are governed by contractual data protection agreements between 22bt and those providers. These agreements require third parties to use player data only for the purpose of service delivery and to maintain security standards consistent with those of 22bt.

13 Policy Amendments

22bt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Material changes to the Policy will be communicated to registered players via SMS or email to the contact details associated with their account, no fewer than 7 calendar days before the changes take effect. The updated Policy will be published at https://22bt.io/privacy-policy with a revised effective date.

Where changes are required immediately for security or legal reasons, the updated Policy will be published without advance notice, and players will be notified as soon as practicable. Continued use of the 22bt platform after a Policy update constitutes acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 22bt handles your personal data, please contact our data support team using the details below. All privacy-related enquiries are handled in English and are treated with strict confidentiality.

Email: [email protected]
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
Operating hours: 24 hours a day, 7 days a week

When submitting a data rights request, please include your registered mobile number and a brief description of your request to help us process it promptly. Do not include your account password or full payment credentials in any communication.