do222 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by do222 ("the Company", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who register an account with, visit, or otherwise interact with the do222 platform at https://do222.io, including any associated subdomains and mobile-optimised versions of the site.

do222 is committed to protecting the privacy and personal data of all players, including those accessing the platform from Bangladesh. This Policy explains in plain, professional English what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over your own information.

2 Data We Collect

do222 collects personal data in several ways: information you provide directly during registration and verification, data generated automatically through your use of the platform, and information received from licensed third-party service providers. The categories of data we collect are described in the table below.

3 How We Use Your Data

do222 uses the personal data it collects for the following specific purposes. We do not process your data for any purpose not listed here without first updating this Policy and notifying you.

3.1 Account Management

Identity and contact data are used to create and maintain your do222 player account, authenticate your logins, deliver account notifications, and communicate important platform updates. Without this data, a functional and secure player account cannot be maintained.

3.2 Payment Processing

Financial data is used to process BDT deposits via bKash, Nagad, Rocket, Upay, and bank transfer, to execute withdrawal requests to your verified payment method, to maintain transaction records, and to detect and prevent fraudulent payment activity. do222 does not store full payment credentials; references are tokenised by our licensed payment processing partners.

3.3 Identity Verification (KYC)

Verification data is used to confirm that you meet the eligibility requirements to hold a do222 account (including the 21+ age requirement), to satisfy anti-money laundering (AML) obligations under our international gaming licence, and to comply with any regulatory requests for player identity information from our licensing authority.

3.4 Responsible Gaming

Usage and financial data are analysed to monitor for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion preferences set by players, and to provide early intervention where our responsible gaming algorithms detect at-risk patterns. This processing is carried out in the genuine interest of player welfare and in fulfilment of our licence obligations.

3.5 Platform Security & Fraud Prevention

Technical and usage data are used to detect and investigate unauthorised account access, duplicate account creation, automated bot activity, bonus abuse, money laundering, and other prohibited conduct as defined in the do222 Terms & Conditions. Security monitoring operates continuously across all player accounts and transaction flows.

3.6 Customer Support

Communications data is used to respond to your support enquiries, to resolve disputes, to provide updates on your account or transactions, and to maintain a full record of all support interactions for quality assurance and compliance review purposes.

3.7 Marketing Communications (Opt-in Only)

With your explicit consent, contact data may be used to send you promotional offers, bonus notifications, tournament announcements, and seasonal promotions relevant to Bangladesh players (such as Eid, BPL season offers, or Pohela Boishakh specials). You may withdraw consent to marketing communications at any time via your account settings or by contacting support.

4 Legal Basis for Processing

do222 processes personal data on the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the player account agreement — including account creation, payment processing, and support delivery.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, including KYC verification, AML record-keeping, and responsible gaming monitoring requirements.
• Legitimate Interests: Processing carried out for the legitimate interests of do222 and its players, including fraud prevention, platform security, and responsible gaming analytics, where these interests are not overridden by your individual rights.
• Consent: Processing based on your freely given, specific, and informed consent — applied to optional marketing communications. Consent may be withdrawn at any time.

5 Data Sharing & Third Parties

do222 does not sell or rent personal data. We share data only with the following specific categories of third-party partners, strictly for the purposes described:

5.1 Payment Service Providers

Financial data is shared with licensed payment processors — including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) — to execute deposit and withdrawal transactions on your behalf. These providers operate under their own data protection obligations.

5.2 Identity Verification Providers

Identity and verification data may be shared with licensed KYC verification service providers to facilitate automated or assisted identity and age verification in accordance with our licence requirements. All such providers are contractually bound to process data only for the purpose of verification.

5.3 Game Content Providers

Usage data (specifically, anonymised session data required to render games correctly) is shared with licensed game studios and content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. No personally identifiable information is shared with game providers beyond what is technically necessary to deliver the game session.

5.4 Regulatory & Legal Authorities

do222 may be required to disclose personal data to its licensing authority, to law enforcement agencies, or to other regulatory bodies in response to lawful requests, court orders, or as part of our obligations under the terms of our international gaming licence. Such disclosures will be made only to the extent strictly required by law.

6 Cookies & Tracking Technologies

do222 uses cookies and similar tracking technologies (including local storage tokens and session identifiers) to operate the platform, maintain your logged-in session, remember your preferences, analyse platform performance, and deliver relevant content. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. They cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment method, and display options across sessions.
• Analytics Cookies: Used to collect anonymised data about how players use the do222 platform, including which pages are visited most frequently, session duration, and navigation paths. This data helps us improve platform performance and user experience.
• Marketing Cookies (Consent-Based): With your consent, these cookies track your browsing activity in order to deliver personalised promotional content relevant to your gaming interests. These cookies may be disabled at any time via your browser settings.

You can manage or disable non-essential cookies via your browser's cookie settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in to and use the do222 platform.

7 Data Retention

do222 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by our licensing authority or applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with do222, plus a minimum of 5 years following account closure.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with AML record-keeping requirements under our licence.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for 3 years from the date of the most recent communication, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of consent, plus 2 years following withdrawal of consent, to demonstrate compliance.
• Analytics & Technical Logs: Retained in anonymised or aggregated form for up to 2 years for platform performance analysis purposes.

When personal data reaches the end of its applicable retention period, it is securely deleted or permanently anonymised in a manner that prevents reconstruction.

8 Data Security

do222 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and the do222 platform.
• Encryption at rest for all stored personal and financial data using AES-256 or equivalent standards.
• Tokenisation of all payment method references — do222 does not store raw bKash, Nagad, or bank account numbers.
• Role-based access controls ensuring that do222 staff can access personal data only to the extent required by their specific job function.
• Regular security audits and penetration testing by independent third-party security specialists.
• Continuous monitoring of platform infrastructure for anomalous access patterns and potential security incidents.
• Two-factor authentication options available to all registered players for account login.

9 Your Rights

As a player whose personal data is processed by do222, you have the following rights with respect to your information. To exercise any of these rights, please contact our compliance team at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data that do222 holds about you, along with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. Minor updates (e.g., email address changes) can be made directly via your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations under our gaming licence.
• Right to Restrict Processing: You may request that do222 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to Data Portability: You may request a copy of the personal data you have provided to do222 in a structured, commonly used, machine-readable format.
• Right to Object to Marketing: You may withdraw consent to receive marketing communications at any time, without affecting the lawfulness of any marketing sent prior to withdrawal.

All data rights requests are acknowledged within 5 business days and fulfilled within 30 calendar days of receipt. Complex requests may require additional time, in which case you will be notified of the extended timeline.

10 Children & Minors

The do222 platform is strictly intended for adults aged 21 years and above. do222 does not knowingly collect, store, or process personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to do222, we will immediately suspend the account, delete all associated personal data, and void any transactions conducted from that account.

If you believe that a minor has accessed or registered an account with do222, please notify us immediately at [email protected] so that we can take prompt action. We encourage parents and guardians in Bangladesh to use available parental control software to restrict access to online gambling platforms.

11 International Data Transfers

do222 operates under an international gaming licence and works with technology and service partners located in multiple countries. As a result, personal data collected from Bangladesh players may be transferred to and processed in countries outside Bangladesh.

Where such international transfers occur, do222 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with all third-party partners that require them to maintain security standards equivalent to those applied by do222. All international transfers are conducted in strict compliance with our licensing authority's data transfer requirements.

12 Changes to This Policy

do222 reserves the right to update this Privacy Policy at any time. The revised policy will be published on this page with an updated effective date. For material changes — those that significantly affect how your data is used or your rights in relation to it — do222 will provide advance notice via email or an in-platform notification at least 14 days before the changes take effect.

Your continued use of the do222 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this page periodically to stay informed of how do222 protects your personal data.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which do222 handles your personal data, please contact our compliance and data protection team using the details below. All communications must be in English.

• Email: [email protected] (Subject: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the chat widget on the do222 platform
• Response Time: Data-related enquiries are acknowledged within 5 business days and resolved within 30 calendar days

If you are not satisfied with do222's response to a privacy complaint, you may escalate the matter to our licensing authority's player protection division. Details of the escalation process are available from our compliance team upon request.