22win Privacy Policy & Data Protection

1. Data We Collect

22win collects personal data from players in Bangladesh to operate a safe, reliable, and legally compliant gaming platform. We collect only the information that is genuinely necessary to deliver our services, verify your identity, process your transactions, and comply with applicable legal obligations. The categories of data we collect are described below.

1.1 Registration Data

When you create a 22win account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Bangladeshi mobile phone number (used as your primary account identifier and for SMS verification)
• Chosen username and encrypted password
• Preferred payment method (e.g., bKash wallet number, Nagad number)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, 22win may request copies of the following documents to verify your identity before processing withdrawals or when required by our compliance procedures:

• National Identity Card (NID) — front and back
• Valid passport (photo page)
• Driving licence or other government-issued photo ID
• Proof of address (bank statement, utility bill, or official letter dated within 90 days)
• Proof of payment method ownership (screenshot of registered bKash or Nagad account)

1.3 Transaction Data

For every financial transaction conducted on 22win, we record the following:

• Deposit and withdrawal amounts in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank name)
• Transaction reference numbers provided by the payment gateway
• Date, time (Bangladesh Standard Time, UTC+6), and status of each transaction

1.4 Gameplay & Betting Data

We record all gaming and betting activity associated with your account, including wagers placed, game outcomes, bonus usage, session start and end times, and betting history across sports markets (such as BPL, IPL, T20, and international cricket) and casino games.

1.5 Technical & Device Data

When you access 22win, our systems automatically collect certain technical data including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, and the referring URL that brought you to the site. This data is used for security monitoring, fraud prevention, and platform performance optimization.

1.6 Communications Data

If you contact 22win via live chat, email, or any other support channel, we retain a record of that communication including the content of messages, the date and time of correspondence, and any attachments or screenshots shared. This data is used to resolve disputes, improve support quality, and maintain an audit trail.

2. How We Use Your Data

22win uses the personal data it collects for the specific, lawful purposes described in this section. We do not use your data for any purpose that is incompatible with these stated purposes without first notifying you and, where required, obtaining your consent.

2.1 Account Management

Your registration data is used to create and maintain your 22win account, authenticate your identity each time you log in, manage your account settings and preferences, and communicate important account-related notifications such as security alerts, transaction confirmations, and policy updates.

2.2 Payment Processing

Transaction data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banking partners. We share the minimum necessary information with payment processors to complete each transaction securely. Payment data is also used to detect and prevent fraudulent or unauthorized transactions on your account.

2.3 Identity Verification & Compliance

KYC documents are reviewed to verify your age (18+), confirm your identity, and satisfy the anti-money laundering (AML) and fraud prevention obligations that govern online gaming platforms. This verification is a legal obligation and cannot be waived.

2.4 Responsible Gaming

Your gameplay and transaction data is analyzed to identify patterns that may indicate problem gambling behavior, such as rapidly increasing deposit frequency, large deposits followed immediately by withdrawal requests, or extended uninterrupted gaming sessions. Where such patterns are detected, 22win may proactively reach out to you with responsible gaming information or apply temporary account restrictions in your best interest. Full details on our responsible gaming tools are available at Responsible Gaming.

2.5 Platform Security & Fraud Prevention

Technical and device data — including your IP address, device fingerprint, and session metadata — is used by our security systems to detect suspicious login attempts, identify duplicate accounts, flag potential bot activity, and prevent collusion or bonus abuse. This processing is conducted on the basis of our legitimate interest in maintaining a fair and secure platform for all players.

2.6 Customer Support

Communications data from live chat and email interactions is used to provide you with accurate and consistent customer support, to resolve account disputes, and to train our support team. Support conversations may be reviewed by supervisory staff for quality assurance purposes.

2.7 Platform Improvement

Aggregated and anonymized gameplay and technical data is used to improve the performance, reliability, and user experience of the 22win platform. This includes identifying popular games, optimizing page load speeds, and refining our sports betting markets to better serve Bangladeshi players. Aggregated data used for this purpose cannot be traced back to individual users.

3. Data Sharing & Disclosure

22win does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data may be shared only in the limited circumstances described below.

3.1 Payment Service Providers

To process deposits and withdrawals, 22win shares the minimum necessary transaction data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard). These providers are contractually bound to use your data solely for the purpose of completing the relevant financial transaction.

3.2 Game Technology Providers

22win integrates games developed by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive limited session data (such as a tokenized player identifier) to authenticate your game session and calculate outcomes. They do not receive your full name, mobile number, or payment details.

3.3 Legal & Regulatory Disclosure

22win may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a valid court order, subpoena, or official investigation into financial crime, fraud, or money laundering. We will notify you of such disclosure unless prohibited from doing so by law.

3.4 Business Transfers

In the event that 22win undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via on-site notice or email before your data becomes subject to a different privacy policy as a result of such a transfer.

4. Cookies & Tracking

22win uses cookies and similar tracking technologies on its website to provide a functional, personalized, and secure experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preference, and recently viewed games — so that your experience is more consistent and personalized across visits.

4.2 Types of Cookies Used by 22win

4.3 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to block all cookies, block only third-party cookies, or delete cookies already stored on your device. Please note that disabling essential cookies will prevent you from logging into your 22win account and will significantly impair platform functionality. Instructions for managing cookies are available in the help documentation of your specific browser.

5. Data Retention

22win retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

• Account registration data: Retained for the lifetime of your account, plus a minimum of 5 years following account closure to satisfy anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable law or ongoing legal proceedings.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping obligations.
• Gameplay and betting history: Retained for a minimum of 2 years from the date of each wager, and used in aggregate form for platform analytics thereafter.
• Communications data (live chat, email): Retained for a minimum of 2 years from the date of the last interaction.
• Technical and device data (logs): Retained for up to 12 months and then automatically purged unless required for active security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with industry best practices. Anonymized data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

6. Data Security

22win implements a range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following safeguards:

6.1 Encryption

All data transmitted between your browser or app and the 22win servers is encrypted using industry-standard SSL/TLS encryption. Your stored password is hashed using a modern one-way hashing algorithm (bcrypt) — we do not store your plain-text password and our staff cannot read it. KYC documents and payment data are encrypted at rest using AES-256 encryption.

6.2 Access Controls

Access to personal data held by 22win is restricted on a strict need-to-know basis. Only authorized personnel whose roles require access to specific data categories — such as our compliance team for KYC review, or our finance team for transaction processing — are granted access. All internal access to player data is logged and audited regularly.

6.3 Security Monitoring

22win operates continuous security monitoring on its servers and platform infrastructure. Our systems are configured to detect and alert on anomalous access patterns, brute-force login attempts, unusual withdrawal requests, and other indicators of unauthorized activity. Detected incidents are responded to promptly by our technical security team.

6.4 Your Responsibilities

You play an important role in keeping your account secure. 22win strongly recommends that you use a unique, strong password for your account, do not share your login credentials with anyone, log out of your account when using a shared or public device, and contact support immediately if you notice any unauthorized activity on your account. 22win cannot be held responsible for security breaches that arise from your failure to maintain adequate password security on your end.

7. Your Privacy Rights

As a 22win player, you have meaningful rights over the personal data we hold about you. 22win respects and upholds these rights to the fullest extent practicable. The following rights are available to you:

7.1 Right of Access

You have the right to request a copy of the personal data that 22win holds about you. To submit a data access request, contact our support team via live chat or email at [email protected]. We will respond to all valid access requests within 30 days. A copy of your data will be provided in a portable, readable format where technically feasible.

7.2 Right to Rectification

If any personal data held by 22win about you is inaccurate or incomplete, you have the right to request that we correct it. You may update some information (such as your contact preferences) directly within your account settings. For corrections to core identity data (name, date of birth), you will need to contact support and provide supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that 22win is subject to legal record-keeping obligations (particularly in relation to transaction and KYC data) that may prevent us from immediately erasing all data upon request. In such cases, we will delete all data that is not subject to a legal retention obligation and inform you of what data must be retained and why.

7.4 Right to Restrict Processing

You may request that 22win restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved. During any restriction period, we will continue to store your data but will not use it for any purpose beyond storage.

7.5 Right to Object

Where 22win processes your data on the basis of legitimate interest (for example, for security monitoring or platform analytics), you have the right to object to that processing. If you raise a valid objection, 22win will review the processing and cease it unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7.6 How to Exercise Your Rights

To exercise any of the rights described above, contact the 22win privacy team via live chat on site (available 24/7) or by email at [email protected]. Please include your registered mobile number and a brief description of the right you wish to exercise. We may need to verify your identity before processing any data rights request. We aim to respond to all requests within 30 days.

8. Policy Updates & Contact

8.1 Updates to This Policy

22win reserves the right to update this Privacy Policy at any time. Where changes are material — such as a change in the categories of data we collect, a new data-sharing arrangement, or a change in retention periods — we will notify registered players via on-site notice or email to your registered address before the changes take effect. The effective date at the top of this document will always reflect the date of the most recent revision. Your continued use of the 22win platform after a policy update constitutes your acceptance of the revised terms.

8.2 Archived Versions

Previous versions of this Privacy Policy are available upon request. If you would like to review an earlier version of this document, contact our support team and specify the approximate date of the version you are looking for.

8.3 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way 22win handles your personal data, please get in touch using one of the following channels:

• Live Chat: Available 24/7 directly on the 22win website. Our target response time is under 2 minutes.
• Email: [email protected] — we aim to respond to all privacy-related email enquiries within 2 business days.