22ok Privacy Policy

When you register for and use the 22ok platform, we collect certain categories of personal data in order to provide our services, verify your identity, process payments, and comply with our legal obligations. The categories of data we collect are described below.

1.1 Registration Data

When you create a 22ok account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh (including city, district, and postal code), email address, and mobile phone number. This data is required to establish your account and verify that you meet the 18+ age eligibility requirement.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of identity documents including your National Identity Card (NID), passport, or driving licence. We may also collect proof-of-address documents such as a recent utility bill or bank statement, as well as confirmation of ownership of the payment method you use for deposits and withdrawals. KYC data is collected and processed in accordance with our anti-money laundering obligations.

1.3 Transaction Data

We record all financial transactions conducted through your 22ok account. This includes deposit amounts, withdrawal requests, transaction timestamps, payment method identifiers (such as your registered bKash or Nagad mobile number), and transaction reference numbers. We do not store full bank account numbers, card numbers, or mobile banking PINs.

1.4 Gaming Activity Data

We record your gaming activity on the 22ok platform, including games played, bet amounts, game outcomes, bonus usage, and session durations. This data is used to provide the gaming service, calculate winnings, resolve disputes, and support responsible gaming monitoring. It also enables us to personalise your experience and surface promotions relevant to your activity.

1.5 Technical and Device Data

When you access the 22ok platform, we automatically collect certain technical data from your device and browser. This includes your IP address, device type and operating system, browser type and version, screen resolution, language settings, and time zone. We also collect session data including login timestamps, session duration, and pages visited. This data helps us maintain platform security, detect fraud, and improve the user experience.

1.6 Communications Data

If you contact 22ok customer support via live chat or email, we retain records of those communications for quality assurance, training, and dispute resolution purposes. If you opt in to marketing communications, we also retain records of your preferences and the communications we have sent you.

22ok does not sell your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processors

To process deposits and withdrawals, 22ok shares necessary transaction data with our payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Data shared is limited to the information required to complete the transaction, such as your registered mobile number or account reference. Each payment processor operates under its own privacy policy and security standards.

3.2 Game Providers

Games available on 22ok are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To provide these games, certain session and account data (such as a player session token, account balance, and game history) is shared with the relevant provider in real time. Game providers are contractually obligated to handle this data securely and use it only to deliver the gaming service.

3.3 Legal and Regulatory Authorities

22ok may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where we are legally compelled to do so, for example in the context of an anti-money laundering investigation, a court order, or a formal regulatory enquiry. We will notify you of any such disclosure where we are legally permitted to do so.

3.4 Business Transfers

In the event that 22ok undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the relevant acquiring entity as part of that transaction. We will notify affected players of any such transfer and the implications for their data prior to its completion where reasonably practicable.

22ok takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, and destruction.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and 22ok servers is encrypted using SSL/TLS protocols. The platform operates exclusively over HTTPS.
• Password Hashing: Account passwords are stored using industry-standard one-way cryptographic hashing. Passwords are never stored or transmitted in plain text.
• Access Controls: Access to personal data held by 22ok is restricted to authorised personnel who require access in order to perform their job functions. Role-based access controls are in place to enforce this restriction.
• Intrusion Detection: Our systems are monitored continuously for signs of unusual activity, unauthorised access attempts, and potential security incidents.
• Data Backups: Player data is backed up regularly to secure, encrypted storage to ensure continuity and recovery capability in the event of a system failure.

5.2 Organisational Measures

In addition to technical safeguards, 22ok maintains internal data protection policies and provides data security training to all staff who handle personal data. Access to sensitive player data is reviewed periodically, and staff are required to adhere to strict confidentiality obligations.

5.3 Data Breach Response

In the event of a data security breach that is likely to result in a risk to your rights and freedoms, 22ok will take prompt remedial action and notify affected players as soon as reasonably practicable, in accordance with applicable legal requirements. Notifications will be sent to the email address associated with your 22ok account and will include a description of the nature of the breach, the data affected, and the steps 22ok has taken or intends to take in response.

As a player on the 22ok platform, you have a number of rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact the 22ok support team via live chat or by emailing [email protected]. We will respond to all legitimate requests within a reasonable timeframe.

7.1 Right of Access

You have the right to request a copy of the personal data that 22ok holds about you. Upon a valid request, we will provide you with a summary of the data we hold, the purposes for which it is processed, and information about any third parties with whom it has been shared. We may ask you to verify your identity before fulfilling an access request.

7.2 Right to Rectification

If any of the personal data 22ok holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update certain details such as your contact information directly through your account settings. For changes to identity-related data such as your name or date of birth, documentary evidence may be required.

7.3 Right to Erasure

In certain circumstances, you have the right to request that 22ok delete the personal data we hold about you. This right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, anti-money laundering record-keeping requirements) even where you have requested deletion. We will inform you of any data that we are unable to delete and the reason why.

7.4 Right to Restrict Processing

You have the right to request that 22ok restricts the processing of your personal data in certain circumstances, for example while you are contesting the accuracy of data we hold, or where you have objected to processing based on legitimate interests and we are assessing that objection.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications from 22ok, update your notification preferences in your account settings or contact the support team. Once your objection is registered, we will cease sending marketing communications without undue delay.

7.6 Right to Data Portability

Where we process your data on the basis of your consent or in performance of our contract with you, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format. This right enables you to transmit your data to another service provider where technically feasible.