22app Privacy Policy — How We Protect Your Data

22app collects personal information in several ways: directly from you when you register or use the platform, automatically through your use of the site, and in some cases from third-party identity and payment verification providers. The categories of information we collect are set out below.

1.1 Registration and Account Information

When you create a 22app account, we collect the information you provide during the registration process, including your full legal name, date of birth, email address, mobile phone number, and chosen username. This information is required to create and maintain your account, verify your identity, and comply with our age verification obligations as an 18+ platform.

1.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests, we may ask you to submit copies of government-issued identification documents, proof of address, and in some cases proof of the payment method used for deposits. These documents are handled with strict confidentiality and stored in encrypted form.

1.3 Financial and Transaction Data

We record all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method references (such as bKash or Nagad mobile number references and Visa/Mastercard partial card details), transaction timestamps, and balance history. We do not store full card numbers or mobile banking PINs on our servers.

1.4 Gameplay and Betting Records

We retain a complete log of all bets placed, games played, results, and session durations on the 22app platform. This data is used for dispute resolution, fraud detection, responsible gaming monitoring, and to personalise your experience where you have consented to personalisation features.

1.5 Technical and Device Data

When you access the 22app platform, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, referring URL, pages visited, session duration, and time zone. This information helps us detect fraud, maintain platform security, and improve the user experience for players accessing from Bangladesh and across the region.

1.6 Communications Data

If you contact 22app customer support via live chat or email, we retain records of that correspondence including the content of your messages, timestamps, and any attachments. This data is used to resolve your enquiry, train our support team, and maintain a history of your interactions with us.

22app uses the personal information it collects for specific, clearly defined purposes. The table below summarises the primary purposes for which each category of data is used.

In addition to the purposes listed above, 22app may use aggregated and anonymised data — from which individual Players cannot be identified — for statistical analysis, product development, and platform improvement. Anonymised data is not subject to this Privacy Policy as it does not constitute personal information.

Where you have opted in to promotional communications, we may also use your email address and mobile number to send you information about relevant bonuses, seasonal offers (such as Eid promotions, BPL season specials, and Pohela Boishakh offers), and platform updates. You may withdraw this consent at any time.

22app processes your personal information on the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing your registration details, transaction records, and gameplay data is necessary to perform the contract between you and 22app — namely, to provide you with access to our betting and casino platform services.
• Legal obligation: We are required by applicable law and standard industry practice to carry out identity verification (KYC), retain financial transaction records, and implement anti-money-laundering (AML) screening. These processing activities are mandatory and cannot be refused by opting out.
• Legitimate interests: We process technical and device data on the basis of our legitimate interest in maintaining platform security, detecting and preventing fraud, resolving disputes, and improving the quality and performance of our services. We have assessed that this interest is not overridden by your privacy rights, given the security benefits involved.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

22app does not sell your personal information. We share your data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

• Payment processors: To facilitate deposits and withdrawals, we share your account reference and transaction details with our payment partners including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These partners process your payment data under their own privacy policies and security standards.
• Identity verification providers: When carrying out KYC checks, we may share the documents and information you submit with third-party identity verification services. These providers are contractually bound to use your data solely for verification purposes and are prohibited from retaining or repurposing it.
• Game technology providers: The casino games and sports data feeds on the 22app platform are powered by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive limited session and gameplay data necessary to operate the games. They do not receive your full personal profile.
• Fraud prevention and AML services: We may share transaction patterns and account identifiers with fraud prevention and anti-money-laundering screening services to protect the integrity of the platform and comply with financial crime prevention standards.
• Legal and regulatory authorities: We may disclose your information to law enforcement agencies, courts, regulators, or other public authorities if required to do so by applicable law, court order, or in response to a lawful request. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 22app's business, your personal information may be transferred to the successor entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

All third parties with whom 22app shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

22app uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. Cookies help us recognise your device on return visits, maintain your login session, remember your preferences, and gather analytics data to improve the platform.

The cookies used on the 22app platform fall into the following categories:

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling strictly necessary cookies may impair your ability to log in to or use the 22app platform. Disabling analytics or marketing cookies will not affect access to any core platform feature.

22app implements a range of technical and organisational measures to protect your personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following controls:

• TLS/SSL encryption: All data transmitted between your device and 22app servers is encrypted using Transport Layer Security (TLS) protocol. Our platform enforces HTTPS on all pages and API endpoints.
• Data encryption at rest: Sensitive personal data — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data within 22app's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary for their specific role, and all access is logged and audited.
• Two-factor authentication: 22app offers two-factor authentication (2FA) for all Player accounts. We strongly encourage all Players to enable 2FA via the account security settings panel to protect their account against unauthorised access.
• Penetration testing and security audits: The 22app platform undergoes periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal information, 22app will assess the incident, take immediate containment steps, and notify affected Players in accordance with applicable legal obligations.

While 22app takes its data security obligations seriously and invests significantly in protective measures, no online platform can guarantee absolute security against all possible threats. You are encouraged to take your own precautions — including using a strong, unique password and enabling 2FA — to protect your account.

22app retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention principles apply:

• Active account data: While your account remains open, 22app retains all account registration details, transaction history, and gameplay records for the duration of the account relationship.
• KYC and identity documents: Identity verification documents are retained for a minimum of 5 years from the date of your last transaction or account closure, consistent with standard anti-money-laundering record-keeping requirements.
• Financial transaction records: All financial records are retained for a minimum of 5 years following account closure or the completion of the final transaction, whichever is later.
• Customer support communications: Support chat logs and email correspondence are retained for 3 years from the date of the interaction, unless a longer period is required due to an unresolved dispute.
• Marketing data: If you have opted in to marketing communications, your contact details are retained for this purpose until you withdraw consent. Following opt-out, your details are removed from active marketing lists within 10 business days.
• Closed and inactive accounts: Upon voluntary account closure, personal data that is not subject to mandatory retention periods will be deleted or anonymised within 90 days. Data subject to mandatory retention will be securely archived and not used for any active purpose.

When a retention period expires, 22app either permanently deletes the relevant data from its systems or renders it irreversibly anonymous so that it can no longer be linked to any individual.

The 22app platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or retain any personal information from individuals under the age of 18. Our registration process includes an age declaration step, and we carry out document-based age verification as part of our KYC procedures.

If 22app becomes aware that a registered account belongs to a person under 18 years of age, the following steps will be taken immediately:

• The account will be permanently closed;
• All active bets and game rounds will be voided;
• Any remaining balance will be handled in accordance with applicable law and regulatory guidance, which may require forfeiture rather than return of funds in confirmed underage cases;
• All personal data associated with the underage account will be deleted, subject to any mandatory record-keeping requirements related to the incident itself.

If you are a parent or guardian and believe your child may have accessed or registered on the 22app platform, please contact our support team immediately at [email protected]. We treat all such reports as a priority and will investigate and respond within one business day.

22app supports internet safety for young people and encourages the use of parental control software to restrict access to online gambling sites for minors in your household. 18+ only.

22app reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. The most current version of this Privacy Policy will always be available at https://22app.ws/privacy-policy.

For material changes — those that significantly affect how we collect, use, or share your personal information — we will notify registered Players via the email address on record or through a prominent notice on the platform, providing at least 14 days' advance notice before the change takes effect. For minor clarifications or administrative updates that do not alter the substance of this policy, no advance notice is required beyond updating the revision date at the top of this page.

Your continued use of the 22app platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should cease using the platform and may request account closure and the withdrawal of your remaining balance before the effective date of the change.

We recommend bookmarking this page and reviewing it periodically so you remain informed about how your personal data is handled. If you have any questions about this Privacy Policy or our data practices, please contact our support team at any time.