k2222 Privacy Policy

This Privacy Policy ("Policy") describes how k2222 ("we", "us", "our"), the operator of the online betting and gaming platform available at k2222.bio, collects, uses, stores, shares, and protects the personal data of individuals who access or use the k2222 platform ("you", "your", "the User"). This Policy forms part of the Terms & Conditions governing your use of k2222 and should be read alongside those Terms.

k2222 is committed to handling your personal data with integrity and in accordance with applicable data protection principles. We recognise that users entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to be transparent and plain in its language so that every player, regardless of their technical background, can understand exactly how their data is handled.

By registering an account, making a deposit, placing a bet, or otherwise using the k2222 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the k2222 platform.

This Policy applies to data collected through the k2222 website (k2222.bio), any associated mobile-optimised web pages, and through direct communications with our customer support team. This Policy is written in English, which is the governing language for all purposes.

k2222 collects several categories of personal data depending on how you interact with the platform. The categories are described below:

k2222 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for age or identity verification purposes and with your explicit consent.

k2222 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or submitting any form on the platform.
• Automated collection: Technical and usage data collected automatically when you visit and navigate the k2222 website, through cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party payment providers: Transaction confirmation data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) when you make deposits or request withdrawals.
• Identity verification services: Where we use third-party KYC providers to assist with identity verification, those providers may return verification results and associated data to k2222.
• Fraud detection and security partners: Technical risk signals (such as device fingerprint data or IP reputation scores) provided by security service providers to help k2222 identify fraudulent activity.

k2222 does not purchase personal data from third-party data brokers or marketing list providers. All data collected by k2222 originates from your direct interaction with the platform or from regulated service providers engaged to deliver the k2222 service.

k2222 processes your personal data for the following specific and legitimate purposes:

• Account creation and management: To register your account, authenticate your identity at login, maintain your account settings, and communicate important account-related updates.
• Identity and age verification (KYC): To verify that you are aged 21 or above and that you are who you claim to be, in compliance with our responsible gaming commitments and applicable anti-money laundering obligations.
• Payment processing: To process deposits via bKash, Nagad, Rocket, and Upay, and to disburse withdrawal funds to your verified mobile wallet.
• Provision of betting and gaming services: To accept and settle bets, operate casino games, maintain your betting history, and deliver real-time odds and live game content.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, enforce deposit limits, cooling-off periods, and self-exclusion requests, and to provide you with responsible gaming tools.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, multi-accounting, and other prohibited conduct.
• Customer support: To respond to your enquiries, resolve complaints, process refunds where applicable, and improve our support quality.
• Platform improvement: To analyse usage patterns, diagnose technical issues, test new features, and continuously improve the k2222 platform experience for Bangladeshi mobile users.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant betting news where you have given consent to receive such communications. You may withdraw marketing consent at any time.
• Legal compliance: To comply with applicable laws, respond to lawful requests from authorities, and maintain records required by anti-money laundering regulations.

k2222 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — i.e., to operate your account, accept your bets, process payments, and deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering laws, age verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing undertaken in the legitimate interests of k2222 or third parties, where those interests are not overridden by your rights — including fraud prevention, platform security, and service quality improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and for the use of non-essential cookies. You have the right to withdraw consent at any time without detriment.

Where k2222 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental privacy rights. If you wish to understand the outcome of any specific legitimate interests assessment, please contact us at [email protected].

k2222 does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

• Payment providers: Necessary transaction data is shared with mobile wallet providers (bKash, Nagad, Rocket, Upay) solely to process deposits and withdrawals. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
• KYC and identity verification providers: Identity documents and verification data may be shared with regulated third-party KYC service providers to complete account verification. These providers are contractually bound to process data only for the purposes of identity verification on behalf of k2222.
• Fraud and security technology providers: Technical data (such as IP addresses and device identifiers) may be shared with fraud detection and cybersecurity service providers to protect the integrity of the platform.
• Game content providers: Your username, account identifier, and stake/result data are shared with game studios (including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others) to the extent necessary to deliver their games and settle results. These providers are engaged under data processing agreements.
• Legal and regulatory authorities: k2222 may disclose personal data to law enforcement, financial intelligence units, or other regulatory bodies where required by law or in response to a valid legal process. We will notify you of such disclosures where permitted to do so by law.
• Professional advisers: Lawyers, accountants, and auditors engaged by k2222 may have access to personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

All third parties with whom k2222 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified, agreed purposes.

k2222 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform effectively, maintain your login session, and understand how users interact with the site. The types of cookies used are described below:

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your preferences during a session. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your settings (such as language preference and responsible gaming limits) between sessions, providing a more personalised experience.
• Analytics cookies: Used to collect anonymised data about how users navigate and use the k2222 platform, helping us identify areas for improvement. Data collected through analytics cookies is aggregated and does not identify you individually.
• Marketing cookies: Used to deliver relevant promotional messages and to measure the effectiveness of our marketing campaigns. Marketing cookies are only placed with your consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the k2222 platform. For mobile users in Bangladesh accessing k2222 via a mobile browser, cookie controls are available in your device's browser privacy settings.

k2222 does not use cookies to track your browsing activity on third-party websites outside the k2222.bio domain.

k2222 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any legal retention obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years after account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of 5 years following each transaction or bet settlement, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Customer support records: Retained for 3 years from the date of the last support interaction.
• Marketing consent records: Retained for the duration of your marketing consent plus 2 years following withdrawal, to demonstrate compliance.
• Technical and usage data: Typically retained in identifiable form for up to 12 months, after which it is aggregated or anonymised for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous so that it can no longer be attributed to any individual. In some circumstances, data may be retained for longer where required by a legal hold, ongoing investigation, or unresolved dispute.

k2222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
• Encrypted storage of sensitive data fields including passwords (stored as salted hashes, never in plaintext), financial account numbers, and identity document data
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging
• Regular security reviews and vulnerability assessments of the k2222 platform infrastructure
• Two-factor authentication options for user accounts to protect against unauthorised login
• Intrusion detection systems to identify and respond to anomalous access attempts in real time
• Employee training on data protection responsibilities and secure data handling procedures

While k2222 takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, k2222 will notify affected users without undue delay and will take all appropriate remedial action.

As a user of the k2222 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered account username, and a clear description of your request. We will respond within 30 days of receipt of a valid request.

• Right of access: You have the right to request a copy of the personal data k2222 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by k2222 be corrected or completed without undue delay.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to k2222's legal retention obligations.
• Right to restrict processing: You have the right to request that k2222 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where k2222 relies on legitimate interests as the legal basis, and where your particular circumstances justify such an objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that some rights are subject to limitations and exceptions. For example, k2222 cannot delete data that it is legally required to retain. Where a request cannot be fulfilled in full, k2222 will explain the reason and the extent to which the request can be partially accommodated.

The k2222 platform is strictly intended for adults aged 21 years and above. k2222 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and k2222 reserves the right to request documentary proof of age at any point.

If k2222 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account and take steps to delete all personal data associated with that individual from our records. If you are a parent or guardian and believe that a minor has registered on k2222, please contact us immediately at [email protected].

Some of the third-party service providers engaged by k2222 — including game studios (such as Pragmatic Play, Evolution Gaming, and Spribe) and certain infrastructure providers — may process personal data on servers located outside of Bangladesh. Where such transfers occur, k2222 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable within Bangladesh.

These safeguards may include data processing agreements incorporating standard contractual clauses, verification of the third party's data protection certifications, and assessment of the legal framework in the destination country. k2222 will not transfer personal data to any jurisdiction that does not provide an adequate level of protection for personal data without first implementing appropriate safeguards.

For more information about the specific safeguards applicable to any particular international transfer, please contact us at [email protected].

k2222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The most current version of this Policy will always be available at k2222.bio/privacy-policy, with the effective date updated at the top of the document.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your data — k2222 will provide you with advance notice via your registered contact details or through an on-platform notification, giving you the opportunity to review the changes before they take effect. Your continued use of the k2222 platform following the effective date of any revised Policy constitutes your acceptance of that revised Policy.

We recommend that you review this Privacy Policy periodically to stay informed about how k2222 protects your personal data. If you have any questions about a specific change, please contact our support team at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way k2222 handles your personal data, please do not hesitate to contact our support team. All privacy-related enquiries will be handled promptly and with full confidentiality.