dr222 Privacy Policy — Your Data, Your Rights

Last updated: January 2026

Introduction

This Privacy Policy explains how dr222 ("Platform", "we", "us", "our") collects, uses, stores, and protects the personal information of players and users ("you", "your") who access the dr222 website and services at dr222.app. We are committed to handling your personal data responsibly and transparently, in accordance with applicable data protection principles.

By using the dr222 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please refrain from using the platform and contact our support team if you require assistance with account closure or data deletion.

Our Privacy Commitments at a Glance

1. Information We Collect

dr222 collects personal information in the following categories. We collect only what is necessary for the purposes described in this policy:

dr222 does not collect sensitive data such as national ID numbers, passport scans, biometric data, or health information unless expressly required to fulfil a legal obligation (for example, enhanced KYC for high-value withdrawals). In such cases, you will be notified in advance and your explicit consent will be obtained.

2. How We Use Your Information

Personal data collected by dr222 is used exclusively for the following purposes. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent:

• To create, verify, and manage your player account, including age verification and KYC checks as required by our policies.
• To process deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer channels, including reconciliation of transactions and fraud prevention.
• To operate responsible gaming tools including deposit limit monitoring, session time tracking, and self-exclusion enforcement.
• To deliver platform communications, including account notifications, security alerts, transaction confirmations, and promotional offers (where you have consented to receive them).
• To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and other prohibited conduct.
• To improve the platform through anonymous usage analytics, performance monitoring, and user experience research.

dr222 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you, except where such processing is expressly necessary to detect fraud or enforce responsible gaming limits.

3. Legal Basis for Processing

dr222 processes your personal data on the following legal grounds:

• Contractual necessity — processing your identity, financial, and usage data is necessary to fulfil the player agreement and provide the gaming services you have requested.
• Legitimate interests — fraud prevention, platform security, and responsible gaming monitoring are necessary to protect our users and the integrity of the platform.
• Legal obligation — certain data must be retained to comply with applicable anti-money laundering regulations and financial record-keeping requirements.
• Consent — where we send you promotional communications or collect optional preference data, we do so only on the basis of your explicit, freely given consent, which you may withdraw at any time.

4. Sharing Your Information

dr222 does not sell your data. We share personal information with third parties only in the following limited circumstances:

• Payment processors — bKash, Nagad, Rocket, and bank partners receive only the transaction data necessary to process your deposit or withdrawal. They are bound by their own privacy policies and financial data protection regulations.
• Game content providers — Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, Microgaming, and other certified game studios receive anonymised session data to facilitate game delivery. They do not receive personally identifiable information.
• Fraud and AML service providers — we engage specialist third-party services to assist with fraud detection and anti-money laundering screening. These partners process data strictly under our instruction and are bound by confidentiality obligations.
• Law enforcement and regulatory authorities — where required by applicable law, court order, or formal regulatory request, dr222 may be obligated to disclose personal data to competent authorities.

5. Data Retention

dr222 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specifically: account and identity data is retained for a minimum of five years following account closure to satisfy anti-money laundering record-keeping requirements; financial transaction data is retained for a minimum of five years to comply with financial record obligations; technical and usage data is retained for a maximum of 24 months on a rolling basis for security and analytics purposes.

Where you request deletion of your personal data and there is no legal obligation that requires us to retain it, we will delete or anonymise it within 30 days of receiving your verified deletion request. We will confirm the deletion by email. Note that anonymised aggregate data (which cannot identify you as an individual) may be retained indefinitely for analytics and platform improvement.

6. Cookies and Tracking Technologies

dr222 uses cookies and similar local storage technologies on its platform. We use three categories of cookies:

• Essential cookies — strictly necessary to operate the platform. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your language preference. These cannot be disabled without breaking core platform functionality.
• Analytics cookies — anonymous, aggregated data about how users navigate the platform. This helps us identify pages that perform poorly, understand common user journeys, and prioritise improvements. These cookies do not identify you personally.
• Functional cookies — optional cookies that remember your preferences such as display settings and previously visited game categories to personalise your experience. You may opt out of functional cookies without affecting core platform access.

dr222 does not use advertising cookies, cross-site tracking pixels, or third-party remarketing tags. Your browsing behaviour on dr222 is not shared with social media networks or advertising platforms. You may manage cookie preferences through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use the platform.

7. Security Measures

dr222 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include: SSL/TLS encryption on all data transmissions; hashed storage of passwords using industry-standard algorithms; access controls that restrict employee access to personal data on a need-to-know basis; regular security reviews of platform infrastructure; and automated fraud detection systems that monitor for suspicious account activity in real time.

Despite these protections, no online system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights or freedoms of players, dr222 will take prompt action to contain the breach, assess its scope, and notify affected players as soon as reasonably practicable.

8. Your Privacy Rights

As a dr222 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and your registered mobile number:

• Right of access — you may request a copy of the personal data dr222 holds about you, together with an explanation of how it is used and with whom it is shared.
• Right to rectification — if you believe any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure — you may request deletion of your personal data where there is no legal obligation requiring us to retain it. We will process verified erasure requests within 30 days.
• Right to restriction — you may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to withdraw consent — where we rely on your consent to process data (for example, promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

dr222 will respond to all privacy rights requests within 14 business days. In complex cases we may extend this period by a further 14 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your privacy rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

9. Children and Underage Players

The dr222 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, make a deposit, or use any part of the platform.

If dr222 becomes aware that personal data has been collected from an individual who was under 21 at the time of registration, we will take immediate steps to suspend the account, delete the personal data, and return any deposited funds (less any amounts that cannot be lawfully returned). Parents or guardians who believe a minor has registered on dr222 should contact us immediately at [email protected].

10. Changes to This Privacy Policy

dr222 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where practicable, notify active players via their registered contact details.

The most current version of this Privacy Policy will always be available at dr222.app/privacy-policy. Your continued use of the platform following any update constitutes your acceptance of the revised policy. If you do not agree with changes to the Privacy Policy, you should stop using the platform and may request account closure by contacting support.

11. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dr222 handles your personal data, please contact our support team. We take all privacy enquiries seriously and will respond promptly.

Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject of your message along with your registered mobile number so we can locate your account and respond efficiently. Our support team is available 24/7 and handles privacy requests during Bangladesh Standard Time (BST, UTC+6) business hours as a priority.