Your Privacy at hd222

Section 1

Introduction

This Privacy Policy ("Policy") describes how hd222 ("hd222", "we", "us", or "the Company"), the operator of the online gaming platform at https://hd222.io and all associated subdomains and mobile-optimised interfaces, collects, uses, discloses, stores, and protects the personal information of individuals ("you", "the Player", or "the User") who access or use our services.

This Policy is incorporated by reference into the hd222 Terms and Conditions. By creating an account, making a deposit, or otherwise using the hd222 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the hd222 platform.

This Policy applies to all personal data we process regardless of the medium through which it is collected — including our website, any associated applications, live chat, email correspondence, and telephone interactions with support agents.

Section 2

Personal Data We Collect

hd222 collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in Section 4 of this Policy.

2.1 Identity and Contact Data

When you register an account or complete identity verification (KYC), we collect:

• Full legal name (as it appears on your national identity document)
• Date of birth (to verify you are aged 21 or above)
• Residential address (including division, district, and postal code within Bangladesh)
• Email address
• Mobile telephone number (used for SMS verification and linked to your mobile financial service account)
• Copies of identity documents: National ID Card (NID), passport, or birth certificate
• Proof of address: utility bill, bank statement, or mobile financial service statement

2.2 Financial and Transaction Data

To process deposits, withdrawals, and to comply with anti-money laundering (AML) obligations, we collect:

• Mobile financial service account details (bKash, Nagad, Rocket, or Upay account number — not your PIN or password)
• Bank account details where bank transfers are used (Dutch-Bangla Bank, City Bank, BRAC Bank)
• International payment card details where applicable (card type, last four digits, expiry date — full card numbers are handled by our PCI-DSS-compliant payment processor and are never stored by hd222 directly)
• Transaction history: deposit amounts, withdrawal amounts, dates, and statuses
• Bonus and promotional transaction records

2.3 Gaming and Behavioural Data

As part of delivering and improving our platform, we collect:

• Game session data: games played, bet amounts, outcomes, session durations, and win/loss history
• Sports betting selections, stake amounts, odds accepted, and settlement outcomes
• Bonus and promotion usage, including wagering progress data
• Responsible gaming tool usage: deposit limits set, cooling-off periods activated, self-exclusion requests

2.4 Technical and Device Data

When you access the hd222 platform, our systems automatically collect:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser type and version
• Session timestamps, login and logout times
• Pages and features accessed, referral source, and navigation paths
• Cookie data and similar tracking technologies (see Section 7)

2.5 Communications Data

When you contact hd222 support or interact with our team, we collect and retain:

• Live chat transcripts
• Email correspondence
• Details of complaints, disputes, or support requests submitted
• Survey or feedback responses where voluntarily provided

Section 3

How We Collect Your Data

hd222 collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and device data collected automatically when you access and use the hd222 platform, including through cookies and server logs.
• Third-party sources: Identity and AML verification data returned by our KYC and fraud-prevention service providers. Payment confirmation data returned by our payment processing partners (bKash, Nagad, Rocket, Upay, and bank partners). We do not receive your payment credentials from these providers — only confirmation of transaction status.
• Publicly available sources: In cases of fraud investigation or AML compliance, hd222 may cross-reference publicly available data sources to verify information you have provided.

Section 4

Why We Use Your Data

hd222 uses your personal data for the following specific purposes:

Purpose	Data Used
Account registration and management	Identity, contact, device data
Age and identity verification (KYC / 21+ compliance)	Identity, KYC documents
Processing deposits and withdrawals	Financial, transaction data
Anti-money laundering (AML) monitoring and compliance	Financial, identity, transaction data
Delivering gaming services and personalising your experience	Gaming, behavioural, device data
Responsible gaming monitoring and intervention	Gaming, behavioural, responsible gaming data
Fraud detection and platform security	Device, IP, transaction, behavioural data
Customer support and complaint handling	Communications, identity, transaction data
Sending promotional communications (with your consent)	Contact, gaming, behavioural data
Platform analytics and service improvement	Device, behavioural, gaming data (aggregated/anonymised where possible)

Section 5

Legal Bases for Processing

hd222 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process payments, and deliver the gaming services you have requested under the hd222 Terms and Conditions.
• Legal obligation: Processing required for compliance with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

Section 6

Sharing Your Data

6.1 Service Partners

hd222 shares your personal data with carefully selected service partners only to the extent necessary for the delivery of our services. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank — for processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents and perform age verification checks.
• Fraud prevention and AML screening services: Providers that screen transactions and account behaviour for suspicious activity patterns.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios receive anonymised session and game data necessary to operate their games on our platform. These providers do not receive your identity or payment details.
• Cloud infrastructure and hosting providers: Secure, access-controlled data centres that store hd222 platform data.

All service partners with whom personal data is shared are bound by data processing agreements that require them to handle your data in accordance with applicable privacy standards and only for the specific purposes authorised by hd222.

6.2 Legal Disclosures

hd222 may disclose your personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, in response to a valid legal order or subpoena, or where necessary to prevent or detect criminal activity including fraud or money laundering.

6.3 No Sale of Data

hd222 does not sell, rent, lease, or exchange your personal data with third parties for their own commercial or marketing purposes. Your data is not a product at hd222.

Section 7

Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. hd222 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform, maintain your session, and — with your consent — to provide personalised content and measure the effectiveness of our promotions.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Required?
Strictly Necessary	Session management, authentication, security, fraud prevention	Yes — cannot be disabled
Functional	Remembering your language preferences, game settings, and display choices	Optional
Analytical / Performance	Understanding how players navigate and use the platform (aggregated, anonymised data)	Optional
Marketing / Targeting	Delivering personalised promotional content relevant to your gaming interests (only with explicit consent)	Optional — consent required

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will prevent the hd222 platform from functioning correctly and you will not be able to log in or use any features of the site. Instructions for managing cookies are available in the help documentation of your browser.

Section 8

Data Retention

hd222 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, to maintain your account, and to comply with applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

Data Category	Retention Period	Reason
Account and identity data	Duration of account + 5 years post-closure	AML compliance, dispute resolution
KYC verification documents	Duration of account + 5 years post-closure	Regulatory obligation
Financial and transaction records	7 years from transaction date	Financial record-keeping law
Gaming and session data	Duration of account + 2 years post-closure	Dispute resolution, responsible gaming monitoring
Support communications	3 years from last interaction	Service quality and dispute evidence
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent management
Cookie and analytical data	Up to 13 months	Platform analytics

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Section 9

Data Security

hd222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport layer security: All data transmitted between your device and hd222 servers is protected by TLS 1.2 or higher (SSL encryption), ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Encryption at rest: Sensitive data stored on hd222 servers — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to hd222 personnel and authorised service partners who have a legitimate need to process it. Role-based access controls and the principle of least privilege are enforced throughout our infrastructure.
• Two-factor authentication: hd222 strongly recommends that all players enable two-factor authentication (2FA) via SMS OTP on their accounts. 2FA adds a critical additional layer of security beyond your password.
• Fraud monitoring: Automated and human-reviewed fraud detection systems monitor account activity in real time for signs of unauthorised access, unusual transaction patterns, or suspicious behaviour.
• Incident response: hd222 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, affected players will be notified promptly in accordance with applicable law.

While hd222 takes all reasonable precautions to protect your data, no system of security is infallible. You play an important role in keeping your account secure: use a strong, unique password; never share your login credentials with anyone; and contact hd222 support immediately if you suspect unauthorised activity on your account.

Section 10

Your Rights

As a hd222 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered account username. We will acknowledge your request within 72 hours and aim to resolve it within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data hd222 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data. For account details, you may update certain information directly from your account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. Note that erasure requests may be declined or partially fulfilled where we are required to retain data for legal or regulatory compliance reasons (e.g., AML record-keeping).
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to hd222, which you can then transfer to another service provider.
• Right to object: You have the right to object to processing of your personal data where that processing is based on hd222's legitimate interests or is used for direct marketing purposes. Objections to marketing will be acted upon immediately.
• Right to restrict processing: In certain circumstances, you may request that hd222 restrict the processing of your personal data — for example, while a rectification request is under review.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Section 11

Children's Privacy

The hd222 platform is strictly intended for adults aged 21 years and above. hd222 does not knowingly collect, process, or store personal data relating to any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and you believe that a person under 21 in your care has created an account on hd222 or provided us with their personal data, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

Section 12

International Data Transfers

hd222 primarily stores and processes player data on infrastructure located in secure data centres serving the South and Southeast Asian region. In some cases — for example, when engaging cloud services, KYC providers, or game studio partners — your data may be transferred to and processed in countries outside Bangladesh.

Where such transfers occur, hd222 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual clauses that impose privacy and security obligations on the receiving party, and selecting partners that maintain internationally recognised data security certifications.

By using the hd222 platform and accepting this Privacy Policy, you consent to the transfer of your personal data to countries outside Bangladesh for the purposes described in this Policy, provided that such transfers are accompanied by the safeguards described above.

Section 13

Updates to This Privacy Policy

hd222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, our services, or applicable legal requirements. The effective date at the top of this Policy indicates when the current version was last revised.

Where updates are material — for example, changes to the types of data we collect, changes to the purposes for which we process data, or changes to how we share data — hd222 will notify registered players via the email address on file or through a prominent notice on the platform prior to the changes taking effect. Non-material updates (such as clarifications or formatting improvements) may take effect immediately upon publication without advance notice.

Your continued use of the hd222 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. We recommend reviewing this page periodically to stay informed of any changes.

Section 14

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which hd222 handles your personal data, please contact us through the following channels:

• Data Privacy Enquiries : [email protected] (subject line: "Privacy Policy Enquiry")
• Data Rights Requests: [email protected] (subject line: "Data Rights Request")
• General Customer Support: 24/7 Live Chat available on the hd222 platform, or email [email protected]
• Support hours operate on Bangladesh Standard Time (BST, UTC+6). English-speaking agents are available around the clock.

We take all privacy-related enquiries seriously and will respond within 72 hours of receipt. For formal data rights requests, we aim to provide a full response within 30 calendar days, in line with our obligations under applicable law.