Your Privacy Matters at nd222

1 Introduction

nd222 is Bangladesh's premier online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and beyond. We are committed to protecting the privacy and personal data of every player who interacts with the nd222 platform.

This Privacy Policy sets out in clear, plain English: what categories of personal data nd222 collects; the purposes for which that data is processed; the legal basis on which processing is carried out; how long data is retained; who it may be shared with; and the rights that players hold in relation to their own data.

This Privacy Policy applies to all services provided through the nd222 website at nd222.io, including account registration, nd222 Login, deposits and withdrawals, casino and sports betting activity, bonus participation, and all communications between players and the nd222 support team.

nd222 takes its data protection obligations seriously and implements technical and organisational measures designed to ensure that your personal information is kept safe, accurate, and used only for the purposes described in this Policy. We review and update this Policy periodically to reflect changes in our services, technology, and applicable legal requirements.

2 Data Controller

For the purposes of this Privacy Policy, nd222 acts as the data controller in respect of all personal data collected from players via the nd222 platform. As the data controller, nd222 determines the purposes and means of processing your personal information and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how nd222 handles your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you may contact the nd222 data protection team at the email address provided in Section 15.

3 Data We Collect

nd222 collects the following categories of personal data from players, depending on the nature of their interaction with the platform:

nd222 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information. If any such data is incidentally provided by a player (for example, in a support message), it will not be processed for any purpose other than resolving the specific inquiry for which it was submitted.

4 How We Collect Your Data

nd222 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

The majority of personal data held by nd222 is provided directly by the player during the registration process, during KYC verification, when making deposits or withdrawal requests, when contacting nd222 support, or when updating account preferences after nd222 Login.

4.2 Automated Collection

When you access the nd222 platform, certain technical and usage data is collected automatically via server logs, session tracking technologies, and analytics tools. This includes your IP address, device identifiers, and a record of the pages and games you interact with. This data is collected to maintain platform security, optimise performance, and detect unusual account behaviour.

4.3 Third-Party Sources

In limited circumstances, nd222 may receive personal data about you from third-party sources, including:

• Payment processors such as bKash, Nagad, Rocket, and Upay, who may confirm transaction details or flag suspicious payment activity to nd222.
• Identity verification service providers engaged to assist with KYC procedures, who may cross-reference your submitted documents against official data sources.
• Fraud prevention and anti-money laundering screening services, which may provide risk scores or alerts based on data held in their own systems.

Where nd222 receives data about you from third-party sources, it will be used only for the purposes described in this Privacy Policy and will be subject to the same security standards as data collected directly from you.

5 Legal Basis for Processing

nd222 processes personal data only where it has a valid legal basis for doing so. The primary legal bases on which nd222 relies are as follows:

• Contractual Necessity: Processing that is required to fulfil nd222's obligations under the player account agreement — including account management, payment processing, withdrawal handling, and customer support — is carried out on the basis that it is necessary for the performance of the contract between nd222 and the player.
• Legitimate Interests: nd222 processes certain data on the basis of its legitimate interests in operating a safe, secure, and commercially viable platform. This includes fraud prevention, security monitoring, platform analytics, and responsible gaming enforcement. nd222 will not rely on legitimate interests where such processing would override the player's own privacy interests or fundamental rights.
• Legal Obligation: nd222 processes identity and financial data to the extent required to comply with applicable anti-money laundering obligations, KYC requirements, and other legal or regulatory mandates applicable to the operation of online gaming services.
• Consent: Where nd222 relies on consent as the legal basis for processing — such as for sending marketing communications or placing non-essential cookies — that consent will be explicitly requested and may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

nd222 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To create and maintain your nd222 player account, verify your identity, and enable nd222 Login access.
• Transaction Processing: To process deposits via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to process withdrawal requests to your verified payment account.
• KYC and Fraud Prevention: To verify your identity and age (21+), screen for multi-accounting, detect fraudulent activity, and comply with anti-money laundering obligations.
• Platform Personalisation: To personalise your nd222 experience, including recommended games, relevant promotions, and preferred language or currency display settings.
• Customer Support: To respond to your support inquiries, process complaints, and maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To monitor gaming behaviour, identify indicators of problem gambling, and administer responsible gaming tools such as deposit limits, session reminders, cooling-off periods, and self-exclusion arrangements.
• Security Monitoring: To detect and respond to account security incidents, unauthorised access attempts, and suspicious betting or payment activity.
• Marketing Communications: To send promotional emails, bonus notifications, and platform updates to players who have opted in to receive such communications. Marketing data is never shared with third parties for their own marketing purposes.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving nd222's games, interface design, performance, and overall player experience. Such analytics are conducted on anonymised or pseudonymised data wherever possible.
• Legal Compliance: To maintain records required by applicable law, respond to lawful requests from authorities, and enforce nd222's Terms & Conditions.

7 Data Sharing

nd222 does not sell or rent your personal data to third parties. Personal data is shared only in the following limited and controlled circumstances:

7.1 Payment Processors

To facilitate deposits and withdrawals, nd222 shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers are bound by their own privacy and security policies and are not authorised to use nd222 player data for any purpose other than processing the specific transaction.

7.2 Game Studio Partners

Game providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may receive limited technical data (such as a pseudonymous player ID and session token) to facilitate game loading and result recording. These providers do not receive your full identity data and process only what is technically required to deliver the game experience.

7.3 Identity Verification Services

nd222 engages third-party KYC and identity verification service providers to assist in validating player-submitted documents. These providers are contracted to process your identity data solely for verification purposes and to maintain security standards consistent with this Privacy Policy.

7.4 Legal and Regulatory Disclosure

nd222 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or legitimate governmental request. nd222 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, notify affected players of such disclosures.

7.5 Business Transfers

In the event that nd222 undergoes a corporate restructuring, merger, or sale of all or part of its business assets, player personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to confidentiality obligations, and affected players will be notified of any material change in data controller identity.

8 Cookies & Tracking Technologies

nd222 uses cookies and similar tracking technologies to operate the platform, maintain session security, and improve player experience. The following categories of cookies are used on the nd222 platform:

• Essential Cookies: Required for core platform functionality, including maintaining your nd222 Login session, remembering your account preferences, and enabling secure transactions. These cookies cannot be disabled without impairing your ability to use the platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the nd222 platform — including which pages are most visited, how long sessions last, and which game categories attract the most engagement. This data is used solely to improve platform design and performance.
• Functional Cookies: Store player preferences such as display language, currency selection, and notification settings so that these do not need to be re-entered on each visit.
• Security Cookies: Help nd222 identify and respond to unusual login activity, potential account takeover attempts, and other security anomalies by maintaining a fingerprint of typical device and session characteristics for each account.

9 Data Retention

nd222 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or to comply with applicable legal retention obligations. The following general retention periods apply:

Once the applicable retention period has expired, nd222 will securely delete or anonymise the relevant data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

10 Data Security

nd222 implements a comprehensive set of technical and organisational security measures designed to protect player personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between the player's device and nd222 servers is encrypted using industry-standard TLS protocols. This applies to all platform interactions including nd222 Login, deposits, withdrawals, and support communications.
• Access Controls: Access to player personal data within the nd222 organisation is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: nd222's platform is hosted on secure server infrastructure protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability scanning and penetration testing.
• Data Pseudonymisation: Where technically feasible, nd222 pseudonymises personal data used in analytics and platform development contexts, reducing the risk associated with any potential data exposure.
• Incident Response: nd222 maintains a documented data security incident response procedure. In the event of a confirmed data breach that poses a risk to player rights and freedoms, nd222 will notify affected players without undue delay and will take immediate remedial action.

While nd222 takes all reasonable precautions to protect your personal data, no internet-based system is entirely immune from security risk. Players are encouraged to contribute to account security by using a strong, unique password for their nd222 account and enabling any additional security features offered by the platform.

11 Your Data Rights

As a player whose personal data is processed by nd222, you hold the following rights in relation to your information. To exercise any of these rights, please contact nd222 support at the details provided in Section 15.

• Right of Access: You have the right to request a copy of the personal data that nd222 holds about you. nd222 will provide this information in a structured, commonly used format within a reasonable timeframe of receiving your verified request.
• Right to Rectification: You have the right to request that nd222 correct any inaccurate personal data held about you without undue delay. For data that you can update directly via your account settings after nd222 Login (such as your email address), we recommend doing so through the platform first.
• Right to Erasure: In certain circumstances, you have the right to request that nd222 delete your personal data. This right is subject to nd222's legal obligations to retain certain data — for example, for anti-money laundering compliance — and may not always be fulfilable in full.
• Right to Restrict Processing: You may request that nd222 restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contractual relationship with nd222, and is carried out by automated means, you may request that nd222 provide your personal data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to nd222 processing your personal data where that processing is based on legitimate interests. nd222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to Withdraw Consent: Where nd222 relies on your consent as the legal basis for processing (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 Children & Minors

The nd222 platform is strictly intended for adults aged 21 and above. nd222 does not knowingly collect personal data from individuals under the age of 21. The platform's registration process includes an age verification step, and nd222 reserves the right to request documentary proof of age at any point during a player's relationship with the platform.

If nd222 becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to close the relevant account and delete the associated personal data, and will return any deposited funds to the payment source used, subject to verification.

Parents and guardians are strongly encouraged to use appropriate parental control software to prevent individuals under 21 from accessing the nd222 platform. If you believe that a minor may have registered with nd222 using falsified information, please contact the nd222 support team immediately at the details provided in Section 15.

13 Third-Party Links

The nd222 platform may contain references to third-party services — such as game studio providers, payment processors, or responsible gaming organisations — in the form of descriptive text or non-clickable references. Where the nd222 platform does provide navigational links to third-party websites, nd222 is not responsible for the privacy practices or content of those external sites.

This Privacy Policy applies solely to data collected by nd222 via the nd222 platform at nd222.io. Players who interact with third-party platforms — including mobile financial service provider apps such as bKash and Nagad, or game studio lobby environments — should review the privacy policies of those third parties independently. nd222 cannot control, and accepts no responsibility for, the data practices of external service providers once a player leaves the nd222.io domain.

14 Amendments to This Policy

nd222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, nd222's data processing practices, or the services offered on the platform. When material changes are made to this Policy, nd222 will notify registered players via their registered email address and/or via a notification displayed upon their next nd222 Login.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of this Privacy Policy came into effect. Players are encouraged to review this page periodically to stay informed of any changes. Continued use of the nd222 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have objections to any material change in this Privacy Policy, you may contact nd222 support to discuss your concerns or to arrange voluntary closure of your account, with any confirmed real-money balance returned to your verified payment method subject to standard withdrawal terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that nd222 holds about you, please contact the nd222 data protection team using the details below. All privacy-related inquiries are treated with priority and handled in strict confidence.

Contact email: [email protected] (plain text — not a clickable link)

When submitting a data rights request or privacy inquiry, please include your registered account username, a clear description of your request or concern, and — where relevant — the specific section of this Privacy Policy to which your inquiry relates. nd222 aims to acknowledge all privacy-related communications within 48 hours and to resolve straightforward requests within 14 days. Complex requests involving data erasure, portability, or legal compliance considerations may require additional time, but nd222 will keep you informed of progress throughout the process.