g222 Privacy Policy — How We Handle Your Personal Data

g222 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses the g222 platform at g222.im. This Privacy Policy sets out in clear, plain English how we collect, use, store, share, and protect your personal information in connection with the g222 service.

This policy applies to all data processing activities carried out by g222 in connection with Bangladeshi players and all users who access the g222 platform, regardless of the device or method of access. It should be read alongside the g222 Terms & Conditions, which are available at g222.im/terms-conditions.

g222 acts as the data controller for all personal data collected through the g222 platform. This means we are responsible for deciding how and why your personal data is processed. Where g222 engages third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to process data only in accordance with our instructions and this policy.

We review this Privacy Policy periodically to reflect changes in our data practices, technology, and applicable legal obligations. The "Last Updated" date at the top of this document indicates when the current version was published. Continued use of the g222 platform following any update to this policy constitutes your acceptance of the revised terms.

g222 collects personal data across three broad categories: information you provide directly, information collected automatically through your use of the platform, and information received from third parties.

Information you provide directly:

• Full legal name, date of birth, and gender (provided at account registration)
• Contact details: email address, mobile phone number, and residential address (city, district, division within Bangladesh)
• Login credentials: username and encrypted password hash
• KYC documentation: National Identity Card (NID), passport, or other government-issued photo identification submitted for age and identity verification
• Payment information: mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details for bank transfer withdrawals, and transaction reference numbers
• Communications: messages sent to g222 customer support via live chat or email, including the content and timestamp of those communications
• Responsible gaming preferences: deposit limits, loss limits, cooling-off period activations, and self-exclusion requests submitted through the account dashboard

Information collected automatically:

• Device information: device type, operating system version, browser type and version, and unique device identifiers
• Network information: IP address, approximate geographic location derived from IP address, and internet service provider
• Session data: pages visited, time spent on each page, navigation paths, game sessions initiated, bets placed, and feature interactions
• Cookie data and similar tracking technologies (see Section 06 for full details)

Information received from third parties:

• Identity verification results from KYC processing partners
• Payment status confirmations from mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners
• Fraud screening data from third-party risk management services

g222 uses personal data for the following specific purposes:

• Account management: Creating, maintaining, and securing your g222 account; authenticating your identity at login; processing account-related requests such as password resets and username changes.
• Identity and age verification: Verifying that you are at least 21 years of age and that the identity information provided at registration is accurate and genuine, as required by our responsible gaming obligations.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfer services; reconciling transaction records; and resolving payment disputes.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, duplicate account creation, and other prohibited conduct as defined in the g222 Terms & Conditions.
• Customer support: Responding to enquiries, complaints, and responsible gaming requests submitted via live chat or email.
• Responsible gaming: Monitoring gameplay patterns to identify possible indicators of problem gambling; administering deposit limits, loss limits, cooling-off periods, and self-exclusion requests; complying with responsible gaming obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game content, and user experience.
• Legal and regulatory compliance: Retaining records as required by applicable law; responding to lawful requests from regulatory authorities or law enforcement agencies.
• Service communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts). Marketing communications are sent only where you have provided explicit consent and may be opted out of at any time.

g222 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is required to fulfil our obligations under the g222 Terms & Conditions — including account creation, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of g222's legitimate interests in operating a safe and fair platform, provided those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, data retention requirements, and responses to lawful authority requests, is carried out on the basis of legal obligation.
• Consent: Where processing is not required by contract or law — including the sending of marketing communications and the placement of non-essential cookies — g222 relies on your freely given, specific, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

g222 may share your personal data with the following categories of third parties, solely to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners receive transaction data necessary to process your deposits and withdrawals. These partners are independent data controllers for their own services and are governed by their own privacy policies.
• KYC verification partners: Identity and age verification service providers receive copies of KYC documentation submitted by players, solely for the purpose of verifying identity and age as required by responsible gaming obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game providers may receive a pseudonymous player identifier and session token for the purpose of delivering game content. They do not receive your full name, contact details, or payment information.
• Fraud and risk management services: Third-party fraud detection partners receive anonymised or pseudonymised behavioural and device data for the purpose of detecting prohibited conduct and protecting the integrity of the platform.
• Legal and regulatory authorities: g222 will disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, a valid court order, or a lawful regulatory request. g222 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of g222 or its assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Affected players will be notified prior to any such transfer where feasible.

All third-party data processors engaged by g222 are bound by contractual data processing agreements that require them to process personal data only in accordance with g222's instructions and to maintain appropriate security measures.

g222 uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and analyse platform usage. Cookies are small text files placed on your device when you access the g222 platform.

g222 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as your selected display language and responsible gaming settings. These improve your experience but are not strictly required for platform operation.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the g222 platform. This data helps g222 identify performance issues and improve the user experience. Analytics cookies are placed only with your consent.
• Security cookies: Used to detect and prevent fraudulent sessions, duplicate account creation, and automated bot activity. These are placed on the basis of legitimate interest in platform security.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the g222 platform. Disabling analytics cookies has no effect on platform functionality. For detailed cookie management instructions, consult the help documentation for your specific browser.

g222 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide:

• Account data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC documentation: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for a minimum of 3 years from the date of the last communication in a given support thread.
• Session and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Raw session logs are retained for up to 12 months.
• Responsible gaming records: Self-exclusion records are retained permanently to prevent re-registration by self-excluded players. Other responsible gaming preference records are retained for a minimum of 3 years.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Players who request account closure prior to the expiry of a mandatory retention period should note that g222 is obligated to retain certain records for the full mandatory period regardless of account status.

g222 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the g222 platform is encrypted using 256-bit SSL/TLS encryption. This applies to all pages of the platform, including account login, deposit, and withdrawal flows.
• Encryption at rest: Sensitive personal data stored in g222's databases, including passwords and KYC documentation, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within g222's internal systems is restricted on a strict need-to-know basis, governed by role-based access controls. All internal access is logged and auditable.
• Security audits: g222 conducts regular internal security reviews and vulnerability assessments. Critical systems are subject to periodic third-party penetration testing.
• Incident response: g222 maintains an incident response procedure for data security events. In the event of a data breach that poses a risk to player rights, affected players will be notified without undue delay.

While g222 takes all reasonable technical precautions, no online platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and for using strong, unique passwords. Do not share your g222 password with any third party.

As a registered g222 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact g222 customer support via live chat or email. Requests will be acknowledged within 5 business days and fully resolved within 30 calendar days.

The g222 platform is strictly restricted to individuals aged 21 years and above. g222 does not knowingly collect personal data from individuals under the age of 21. If g222 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed.

If you have reason to believe that a person under 21 has registered an account on the g222 platform, please notify us immediately via live chat or the contact email address stated in Section 13 of this policy. g222 takes underage access seriously and will act without delay on any credible report.

The g222 platform integrates with third-party game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver game content. These providers may process certain technical session data as part of game delivery. g222 takes reasonable steps to ensure that these providers maintain adequate data protection standards, but cannot accept responsibility for the data practices of independent third-party controllers.

The g222 platform does not contain links to external third-party websites. However, if you access the g222 platform via a link from a third-party source, please be aware that g222 has no control over the data practices of that source. This Privacy Policy applies solely to data collected through the g222 platform at g222.im.

g222 reserves the right to update this Privacy Policy at any time to reflect changes in data practices, applicable law, or platform functionality. Where changes are material, g222 will notify registered players via email or an in-platform notification at least 7 days before the changes take effect. Non-material clarifications may be published without advance notice.

The current version of this Privacy Policy is always available at g222.im/privacy-policy. The "Last Updated" date at the top of this document identifies the current version. Your continued use of the g222 platform following the effective date of any amendment constitutes your acceptance of the revised policy.

If you do not agree with any changes to this Privacy Policy, you should stop using the g222 platform and contact support to request account closure. Upon closure, g222 will retain data only for the mandatory retention periods described in Section 07.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by g222, please contact our support team using the following details:

• Live Chat: Available 24/7 directly within the g222 platform. Average response time: 2 to 5 minutes. Identify your query as a privacy-related request for fastest routing.
• Email: support@g222.im (plain text — not a clickable link). Include "Privacy Request" in the subject line.
• Operating Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Headquarters: Dhaka, Bangladesh
• Response Language: English and Bengali
• Response Time: Privacy-related requests are acknowledged within 5 business days and resolved within 30 calendar days

When submitting a data subject rights request (Section 09), please include your registered account username and a brief description of the right you wish to exercise. g222 may request additional identity verification before processing requests to ensure data is not disclosed or deleted at the request of an unauthorised party.