do222 Privacy Policy

1 Data We Collect

do222 collects personal data from players in Bangladesh and other jurisdictions solely for the purposes of operating a safe, compliant, and enjoyable online gaming and sports betting platform. We collect data through three primary channels: information you provide directly, information generated automatically when you use the platform, and information obtained from trusted third-party verification partners.

1.1 Data You Provide Directly

When you register a do222 account, complete identity verification (KYC), contact our support team, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued photo ID number (National ID, passport, or driving licence)
• Contact Data: Email address, mobile phone number (typically linked to your bKash or Nagad wallet), and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Financial Data: Mobile wallet identifiers (bKash number, Nagad number, Rocket number, Upay number), bank account details for bank transfer deposits, and transaction history on the do222 platform
• Account Credentials: Username and encrypted password (do222 never stores passwords in plain text)
• Support Communications: The content of any messages, chat transcripts, or emails you send to do222 support

1.2 Data Collected Automatically

When you access do222.vip through any web browser on desktop or mobile, our platform automatically collects certain technical and behavioural data. This data is used to maintain platform security, improve user experience, and detect fraudulent or suspicious activity:

1.3 Data from Third Parties

To fulfil our identity verification and anti-money-laundering obligations, do222 may receive supplementary data about you from trusted third-party partners. These partners include identity document verification services, payment processing providers (bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks), and fraud prevention database services. Any data received from third parties is processed in accordance with this Privacy Policy and is used exclusively for the purposes for which it was shared.

2 How We Use Your Data

do222 uses personal data collected from players only for legitimate, documented purposes. We do not use your data for purposes that are incompatible with those originally stated at the time of collection. The primary legal bases on which we process your personal data are: performance of a contract (your do222 account agreement), compliance with legal obligations, legitimate interests in operating a secure platform, and your explicit consent where applicable.

2.1 Account Management and Platform Operation

The most fundamental use of your personal data is to create and manage your do222 player account. This includes verifying your identity and age at registration, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, authenticating your login sessions, maintaining your transaction and betting history, and crediting bonuses and promotional rewards to your account.

2.2 Security, Fraud Prevention, and Compliance

do222 uses your data to protect both you and the platform from fraud, money laundering, underage gambling, and other prohibited activity. This includes monitoring account activity for suspicious patterns, conducting KYC and AML (Anti-Money Laundering) checks, verifying that withdrawal destinations match registered payment methods, and cooperating with law enforcement or regulatory bodies where required by applicable law.

2.3 Responsible Gaming

do222 is committed to promoting safe and responsible gaming among all players in Bangladesh. Your usage data — including session frequency, bet sizes, deposit patterns, and game history — is analysed to identify potential signs of problem gambling. This data is used to power our responsible gaming tools including deposit limits, cool-off periods, and self-exclusion features. For full details, please refer to the Responsible Gaming page.

2.4 Customer Support

When you contact do222's support team via live chat or email, the personal data you provide in that communication — including your account details, issue description, and any supporting documents — is used solely to resolve your query. Support interactions are logged for quality assurance and training purposes. Logs are retained for a period of 12 months.

2.5 Marketing Communications

With your explicit consent given at registration or subsequently via account settings, do222 may send you promotional communications about new games, seasonal bonuses (such as Eid or Pohela Boishakh promotions), and platform updates. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal, nor does it affect your ability to continue using the do222 platform.

3 Data Sharing

do222 treats your personal data with strict confidentiality. We do not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to process your data securely and in accordance with applicable data protection standards.

3.1 Service Providers

do222 works with a carefully selected set of third-party service providers who process personal data on our behalf to help us deliver and improve the platform. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to process deposits and withdrawals in BDT
• Identity Verification Partners: Third-party KYC and AML compliance services used to verify player identity and age
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — these providers may receive session data (player ID, bet amounts, game outcomes) necessary to power their game content. They do not receive your full identity data
• Platform Analytics: Server-side analytics tools used to monitor platform performance and detect technical issues
• Customer Support Software: Live chat and ticketing system providers used to manage support interactions

All service providers are required to maintain appropriate technical and organisational security measures and to use your data only for the specific purpose for which it was shared.

3.2 Legal and Regulatory Disclosure

do222 may disclose personal data to law enforcement agencies, government authorities, or regulatory bodies where we are legally required to do so, where disclosure is necessary to prevent fraud or a crime, or where disclosure is necessary to enforce these Terms or protect the rights and safety of do222 or its players. Such disclosures are made only to the extent strictly necessary and in compliance with applicable legal requirements.

3.3 Business Transfers

In the event that do222 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by do222 may form part of the transferred assets. In such circumstances, do222 will notify affected players and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Privacy Policy before any transfer of personal data takes place.

4 Cookies & Tracking Technologies

do222 uses cookies and similar lightweight tracking technologies on do222.vip to make the platform function correctly, to remember your preferences, and to understand how players interact with the site. We do not use third-party advertising cookies or behavioural profiling technologies for the purpose of serving you targeted advertisements on other websites.

4.1 Types of Cookies Used

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies. Please note that disabling strictly necessary cookies will prevent do222 from functioning correctly — you will not be able to log in or maintain a game session if session cookies are blocked. Analytics and functional cookies can be disabled without affecting core platform functionality. Consult your browser's help documentation for instructions on managing cookie settings.

5 Data Retention

do222 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain your active player account, and to comply with our legal obligations under applicable anti-money-laundering, fraud prevention, and financial record-keeping requirements.

5.1 Active Accounts

While your do222 account remains active, we retain all personal data associated with your account, including identity data, contact data, transaction history, game history, and support communications. This data is necessary to operate your account, process payments, apply responsible gaming tools, and resolve any disputes.

5.2 Closed Accounts

Following the closure of a do222 account — whether at your request, due to self-exclusion, or due to a Terms violation — do222 retains certain personal data for a minimum period of five (5) years after account closure. This retention period reflects our obligations under anti-money-laundering regulations and financial record-keeping requirements applicable to offshore gaming platforms. After the mandatory retention period expires, your data will be securely deleted or anonymised.

5.3 Marketing Data

If you have given consent to receive marketing communications from do222 and subsequently withdraw that consent, your contact details will be removed from active marketing lists within 30 days of the withdrawal request. A suppression record (containing only your email address or mobile number and the date of opt-out) will be retained indefinitely to ensure that do222 does not inadvertently re-add you to marketing communications in the future.

5.4 Anonymised Data

do222 may retain anonymised, aggregated data — from which no individual player can be identified — indefinitely for statistical analysis, product development, and platform performance benchmarking purposes. Anonymised data is no longer considered personal data and is therefore not subject to the retention limits described above.

6 Your Rights

As a player on do222, you have the following rights with respect to your personal data. These rights apply regardless of whether your account is currently active or has been closed. To exercise any of the rights listed below, please contact the do222 support team at support@do222.vip. All requests will be acknowledged within 3 business days (Bangladesh Standard Time) and resolved within 30 days wherever technically and legally feasible.

• Right of Access: You may request a copy of the personal data do222 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Changes to identity data may require documentary verification.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. This right is subject to our legal data retention obligations — we cannot delete data that we are legally required to retain for AML or financial record-keeping purposes.
• Right to Restrict Processing: In certain circumstances — such as where the accuracy of your data is disputed — you may request that we pause the processing of your data while the matter is investigated.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on do222's legitimate interests, though in such cases we will assess whether our legitimate interests override your objection.
• Right to Withdraw Consent: Where processing is based on your explicit consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

7 Data Security

do222 takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. No platform can guarantee absolute security, but do222 invests continuously in maintaining best-practice security standards.

7.1 Technical Security Measures

• TLS 1.3 Encryption: All data in transit between your browser and do222's servers is encrypted using Transport Layer Security (TLS) version 1.3, the current industry standard for secure web communications.
• Data Encryption at Rest: Sensitive personal data fields — including identity document data, payment method identifiers, and account credentials — are encrypted at rest using AES-256 encryption.
• Password Security: do222 never stores plain-text passwords. All passwords are hashed using a modern cryptographic hashing algorithm with salt to prevent compromise even in the event of a database breach.
• Access Controls: Access to personal data is restricted to do222 staff and contractors on a strict need-to-know basis. All internal access to player data is logged and audited.
• Fraud Detection Systems: Automated systems monitor login patterns, transaction behaviour, and device signals in real time to detect and respond to suspicious activity.

7.2 Your Responsibilities

While do222 takes extensive measures to protect your data on our side, you also play a critical role in keeping your account secure. You should use a strong, unique password for your do222 account, never share your login credentials with anyone, log out of your account when using a shared or public device, and notify do222 support immediately if you suspect your account has been accessed without your authorisation.

7.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to affected players, do222 will take immediate steps to contain and assess the breach, notify affected players as soon as reasonably practicable, and take remedial action to prevent recurrence. Notification will be provided via the email address registered on the affected account.

8 Policy Changes

do222 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made to reflect updates in our data practices, changes in applicable law, new features or services added to the platform, or feedback from players and regulators. The "Last Updated" date shown at the top of this document will be revised whenever a material change is made.

8.1 Notification of Changes

Where a change to this Privacy Policy is material — meaning it significantly affects how your personal data is collected, used, or shared — do222 will notify registered players via the email address on their account or via a prominent notice on the do222.vip website. The notification will be provided no less than 7 days before the change takes effect, allowing you time to review the updated policy and, if you do not agree, to close your account before the new policy applies to you.

8.2 Continued Use as Acceptance

Your continued use of the do222 platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with any material change to this Privacy Policy, you should cease using the platform and request account closure by contacting the do222 support team before the change takes effect.

8.3 Contact for Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to do222's data practices generally, please contact us at any time. Our support team is available 24 hours a day, 7 days a week, and handles all privacy communications in English.

Email: support@do222.vip

Subject line: "Privacy Policy Inquiry"