Privacy & Data

cd22 Privacy Policy – How We Protect Your Data

At cd22, your privacy is not an afterthought — it is built into the way the platform works. This Privacy Policy explains exactly what data cd22 collects, why it is collected, how it is used, and what rights you have over your own information.

Last Updated: January 2025

cd22's Six Core Privacy Commitments to Every Player

Before you read the full policy, here is a plain-language summary of what cd22 promises every player in Bangladesh when it comes to personal data.

Your Data Is Encrypted at Every Step

Every piece of personal information you share with cd22 — from your name and phone number to your payment details — is protected using industry-standard SSL encryption. Data is encrypted both in transit and at rest, meaning it is secured whether it is being sent across the network or stored on cd22's servers.

cd22 Never Sells Your Personal Data

cd22 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data belongs to you. cd22 uses it only to operate your account, process your transactions, and improve the platform experience — nothing else. This is a firm commitment, not a conditional one.

You Control What cd22 Holds About You

cd22 gives every player the ability to access, correct, and request deletion of their personal data. If you want to know what information cd22 holds about you, you can request a full data summary at any time by contacting the support team. If any information is incorrect, cd22 will update it promptly upon your request.

Cookies Are Used Only to Improve Your Experience

cd22 uses cookies to keep you logged in, remember your preferences, and understand how players use the platform so that it can be improved. cd22 does not use cookies to track your activity across other websites or to build advertising profiles. You can manage your cookie preferences through your browser settings at any time.

Strict Access Controls on All Player Data

Access to player data within cd22 is restricted on a strict need-to-know basis. Only staff members who require access to your data in order to perform their job functions — such as processing a withdrawal or resolving a support query — are permitted to view it. All staff access is logged and audited regularly.

You Will Be Notified of Any Significant Changes

If cd22 makes any significant changes to this Privacy Policy that affect how your data is used, you will be notified via the contact details registered on your account before the changes take effect. Minor updates — such as clarifications of existing practices — will be reflected on this page with a revised effective date.

Summary: cd22 collects only the data it needs to operate your account and keep the platform secure. Your data is never sold. You have the right to access, correct, and delete your information at any time. By using cd22, you agree to the practices described in this Privacy Policy.

1 Introduction

This Privacy Policy describes how cd22 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal information of players ("you", "your") who register and use the cd22 platform at cd22.asia. cd22 is committed to handling your personal data responsibly and transparently.

By registering an account on cd22 or by continuing to use the platform after this Privacy Policy has been published or updated, you confirm that you have read and understood this policy and that you consent to the collection and use of your personal data as described her ein.

cd22 serves players in Bangladesh and processes all transactions in Bangladeshi Taka (BDT). This policy applies to all data collected through the cd22 website, mobile application, and any other channel through which you interact with the platform. If you have any questions about this policy, please contact the cd22 support team at [email protected].

2 Data We Collect

cd22 collects personal data that you provide directly, data that is generated automatically when you use the platform, and in some cases data from third-party sources such as payment providers. The table below summarises the categories of data cd22 collects and the circumstances in which each category is collected.

Data Category Examples When Collected
Identity Data Full name, date of birth, national ID number During registration and identity verification
Contact Data Mobile number, email address During registration and account updates
Financial Data bKash / Nagad / Rocket account number, transaction history During deposits and withdrawals
Technical Data IP address, device type, browser type, operating system Automatically when you access the platform
Usage Data Pages visited, games played, session duration, bet history Automatically during platform use
Communications Data Support chat transcripts, emails sent to cd22 When you contact the support team
Verification Documents Copies of national ID, passport, proof of address When identity verification is requested

cd22 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or regulation. cd22 does not collect payment card numbers — all payment transactions are processed directly through bKash, Nagad, or Rocket, and cd22 receives only a transaction reference and confirmation.

3 How We Use Your Data

cd22 uses your personal data for the following purposes:

  • Account Management: To create and maintain your cd22 account, verify your identity, and manage your account settings and preferences.
  • Transaction Processing: To process deposits, withdrawals, and bonus credits accurately and securely.
  • Platform Security: To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities on the cd22 platform.
  • Customer Support: To respond to your queries, resolve disputes, and provide assistance through the cd22 support team.
  • Legal Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
  • Platform Improvement: To analyse usage patterns and improve the features, performance, and user experience of the cd22 platform.
  • Responsible Gaming: To monitor gaming activity and identify players who may need support through cd22's responsible gaming tools.
  • Communications: To send you important account notifications, security alerts, and — where you have opted in — promotional offers from cd22.

cd22 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If cd22's fraud detection systems flag your account for review, a member of the compliance team will conduct a manual assessment before any action is taken.

4 Legal Basis for Processing

cd22 processes your personal data on the following legal bases:

  • Contractual Necessity: Processing that is necessary to fulfil the contract between you and cd22 — for example, processing your deposit so that you can play games on the platform.
  • Legal Obligation: Processing that cd22 is required to carry out in order to comply with applicable laws, such as identity verification under AML regulations.
  • Legitimate Interests: Processing that is necessary for cd22's legitimate business interests, such as fraud prevention and platform security, provided that these interests are not overridden by your rights.
  • Consent: Processing that is based on your explicit consent, such as sending you promotional communications. You may withdraw your consent at any time by contacting the support team.

Note: Where cd22 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing that took place before the withdrawal.

5 Data Sharing

cd22 does not sell, rent, or trade your personal data to any third party. cd22 may share your data with carefully selected third parties only in the following circumstances:

  • Payment Providers: cd22 shares transaction data with bKash, Nagad, and Rocket solely for the purpose of processing your deposits and withdrawals. These providers have their own privacy policies and are responsible for the data they hold.
  • Game Providers: cd22 shares limited technical data with game providers such as PG Soft and Pragmatic Play to enable game functionality and resolve technical disputes. Game providers do not receive your financial or identity data.
  • Fraud Prevention Services: cd22 may share data with third-party fraud detection and identity verification services to protect the platform and its players.
  • Legal Authorities: cd22 may disclose your data to law enforcement or regulatory authorities if required to do so by law, court order, or regulatory directive.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of cd22's business, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third parties with whom cd22 shares data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

6 Cookies and Tracking

cd22 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site so that it can be continuously improved. A cookie is a small text file that is stored on your device when you visit a website.

cd22 uses the following types of cookies:

  • Essential Cookies: These are required for the platform to function. They keep you logged in during your session and enable core features such as the cashier and game lobby. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies: These remember your settings and preferences — such as your preferred language or display settings — so that you do not have to re-enter them each time you visit.
  • Analytics Cookies: These help cd22 understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is used in aggregate form and does not identify individual players.
  • Security Cookies: These help cd22 detect and prevent fraudulent activity, including account takeover attempts and bot traffic.

cd22 does not use advertising cookies or cross-site tracking cookies. You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to use certain features of the cd22 platform.

7 Data Retention

cd22 retains your personal data for as long as your account is active and for a period after account closure as required by applicable laws and regulations. The specific retention periods for different categories of data are as follows:

  • Account and Identity Data: Retained for the duration of your account and for a minimum of five years after account closure, in accordance with AML regulations.
  • Transaction Data: Retained for a minimum of five years from the date of each transaction.
  • Support Communications: Retained for three years from the date of the last communication.
  • Technical and Usage Data: Retained for up to 24 months from the date of collection, after which it is anonymised or deleted.
  • Verification Documents: Retained for the duration of your account and for five years after closure.

When data is no longer required for the purposes for which it was collected and the applicable retention period has expired, cd22 will securely delete or anonymise it. Anonymised data — which cannot be used to identify you — may be retained indefinitely for analytical purposes.

8 Data Security

cd22 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

  • SSL/TLS encryption for all data transmitted between your device and the cd22 platform.
  • Encryption of sensitive data stored on cd22's servers, including financial information and identity documents.
  • Strict access controls that limit data access to authorised personnel on a need-to-know basis.
  • Regular security audits and penetration testing of the cd22 platform and infrastructure.
  • Two-factor authentication options for player accounts to prevent unauthorised access.
  • Continuous monitoring of platform activity for signs of security incidents or data breaches.

Security Incident Response: In the unlikely event of a data breach that affects your personal data, cd22 will notify you as soon as reasonably practicable via the contact details registered on your account, and will take immediate steps to contain and remediate the breach.

While cd22 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

9 Your Rights

As a cd22 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the cd22 support team via live chat or at [email protected].

Right of Access

You have the right to request a copy of all personal data that cd22 holds about you. cd22 will provide this within a reasonable timeframe at no charge.

Right to Rectification

If any personal data cd22 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. cd22 will update your data promptly upon a verified request.

Right to Erasure

You may request that cd22 delete your personal data. This right is subject to cd22's legal obligations — for example, transaction records that must be retained under AML regulations cannot be deleted before the applicable retention period has expired.

Right to Restrict Processing

You may request that cd22 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.

Right to Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you choose.

Right to Object

You have the right to object to the processing of your personal data where cd22 relies on legitimate interests as the legal basis. You may also opt out of receiving promotional communications from cd22 at any time.

10 Children's Privacy

The cd22 platform is strictly intended for adults aged 18 and over. cd22 does not knowingly collect personal data from individuals under the age of 18. If cd22 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on cd22, please contact the support team immediately at [email protected] so that the account can be reviewed and closed without delay.

11 Third-Party Services

The cd22 platform integrates with third-party services including payment providers and game developers. These third parties operate under their own privacy policies and are independently responsible for the data they collect and process. cd22 is not responsible for the privacy practices of third-party services.

cd22 does not embed third-party advertising networks, social media tracking pixels, or cross-site analytics tools on the platform. The only third-party integrations on cd22 are those that are strictly necessary for the platform to function — payment processing and game delivery.

Tip: When you make a deposit or withdrawal via bKash, Nagad, or Rocket, you are interacting directly with that provider's platform. Please review their privacy policies to understand how they handle your data during those transactions.

12 Policy Updates

cd22 may update this Privacy Policy from time to time to reflect changes in the platform, applicable laws, or industry best practices. When significant changes are made, cd22 will notify you via the contact details registered on your account before the changes take effect. The updated policy will always be available on this page with a revised "Last Updated" date.

Your continued use of the cd22 platform after an updated Privacy Policy has been published constitutes your acceptance of the revised policy. If you do not agree with any changes, you should stop using the platform and contact support to close your account and request deletion of your data.

Stay Informed: We recommend bookmarking this page and reviewing it periodically. If you have any questions about a specific change to the policy, the cd22 support team is always available to explain it in plain language.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cd22 handles your personal data, please get in touch with the support team. cd22 is committed to responding to all privacy-related enquiries promptly and transparently.

  • Live Chat: Available 24/7 directly on the cd22 platform — the fastest way to get a response.
  • Email: [email protected] — for detailed enquiries or formal data requests.

For formal data access, rectification, or erasure requests, please email [email protected] with the subject line "Data Privacy Request" and include your registered mobile number so that the team can verify your identity before processing the request.

🔐

Play on cd22 With Confidence – Your Data Is Safe

Now that you know exactly how cd22 protects your privacy, you can play with complete peace of mind. Join hundreds of thousands of players in Bangladesh who trust cd22 for secure, fair, and transparent online gaming.