tb2222 Privacy Policy

tb2222 is the data controller responsible for the personal information collected and processed through the tb2222 platform at https://tb2222.app. As data controller, tb2222 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all privacy-related queries, data access requests, or complaints regarding tb2222's data handling practices, players may contact the tb2222 data protection team directly:

• Platform: tb2222 — https://tb2222.app
• Support Contact: [email protected] (plain text — not a clickable link)
• Response Time: Within 5 business days of receipt of a privacy request
• Operating Hours: 24/7 support available in Bangladesh Standard Time (BST, UTC+6)

tb2222 collects personal data through several channels: information you provide directly at registration and during account management, information generated automatically through your use of the platform, and information received from third-party payment providers and identity verification services. The categories of data tb2222 collects are detailed in the table below.

Data We Do Not Collect

tb2222 does not collect or store full card numbers or card security codes. tb2222 does not collect biometric data beyond what may be embedded in identity documents submitted for KYC. tb2222 does not collect data about minors; if we discover that a person under 18 has provided personal data, we will delete that data immediately and close the associated account.

Every instance of personal data processing carried out by tb2222 rests on one of the following lawful bases. tb2222 processes your data only where a valid legal basis exists.

• Contractual Necessity: Processing your identity, contact, and financial data is necessary for tb2222 to fulfil its contractual obligations to you — specifically, to operate your account, process deposits and withdrawals, settle bets, and provide customer support.
• Legal Obligation: tb2222 is required by anti-money-laundering (AML) obligations and financial record-keeping requirements to collect and retain certain identity and transaction data for a minimum period. This processing is mandatory and cannot be declined.
• Legitimate Interests: tb2222 processes technical and usage data on the basis of its legitimate interest in operating a secure, fraud-resistant platform, detecting and preventing cheating and bonus abuse, and improving the overall player experience. tb2222 conducts a balancing test before relying on legitimate interests to ensure this basis does not override your rights.
• Consent: Where tb2222 sends you promotional communications (such as bonus offers, seasonal promotions, or VIP programme updates), this is done on the basis of your consent. You may withdraw consent to marketing communications at any time by contacting [email protected] or adjusting your account notification preferences.

tb2222 uses the personal data it collects for the following specific purposes. Each purpose is matched to the legal basis on which it relies.

Automated Decision-Making

tb2222 uses automated systems to flag unusual transaction patterns, detect potential bonus abuse, and enforce responsible gaming deposit limits. Where an automated decision results in an account restriction or bet void, players have the right to request a human review of that decision by contacting the support team.

tb2222 does not sell or rent your personal data to third parties. tb2222 shares personal data only with the categories of recipients listed below, and only to the extent strictly necessary for the stated purpose.

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum financial data required to process your deposit or withdrawal transaction. These processors operate under their own privacy and security policies.
• Game Providers: Where game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe require a player session token to launch a game, a pseudonymous session identifier is shared. No personally identifiable information such as your name or contact details is shared with game providers.
• Identity Verification Services: Third-party KYC service providers may process identity document images on tb2222's behalf for age and identity verification. These providers act as data processors under contractual agreements that bind them to tb2222's data protection standards.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics tools to support platform performance monitoring. No individually identifiable data is included in these analytics feeds.
• Legal and Regulatory Authorities: tb2222 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or regulatory directive. tb2222 will notify affected players of such disclosures to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of tb2222's business assets, personal data held about players may be transferred to the acquiring entity. Players will be notified of any such transfer and the privacy practices of the new controller before the transfer takes effect.

tb2222 uses cookies and similar technologies (such as local storage and session storage) to operate the platform, maintain your login session, detect fraud, and understand how players navigate the site. The following categories of cookies are used.

Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may control functional and analytical cookies through your browser settings. Please note that disabling functional cookies may affect your user experience, including the need to re-enter preferences on each visit. tb2222 does not use third-party advertising cookies.

tb2222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply.

• Account and Identity Data: Retained for the duration of your account relationship with tb2222, plus a minimum of 5 years following account closure. This period is required to fulfil anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping requirements.
• KYC Documents: Retained for the duration of your account, plus 5 years following account closure. KYC documents are stored in an isolated access-controlled environment and are not used for any purpose beyond identity verification and regulatory compliance.
• Communications and Support Records: Retained for 3 years from the date of the communication, to support dispute resolution and quality assurance.
• Technical and Usage Data: Retained for 13 months in identifiable form for fraud detection and responsible gaming monitoring, after which data is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your account, plus 2 years following account closure, to demonstrate the basis on which marketing communications were sent.

Once the applicable retention period expires, tb2222 will securely delete or anonymise your personal data so that it can no longer be associated with you.

As a tb2222 player, you hold the following rights with respect to your personal data. tb2222 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access: You may request a copy of the personal data tb2222 holds about you, along with information about how it is used and with whom it is shared. tb2222 will provide this information within 5 business days of a verified request.
• Right to Rectification: If any personal data tb2222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most data points, you can update information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that certain data must be retained to fulfil legal obligations and cannot be deleted on request.
• Right to Restrict Processing: In certain circumstances — such as while a dispute about data accuracy is being resolved — you may request that tb2222 restrict the processing of your personal data to storage only.
• Right to Data Portability: You may request a copy of the personal data you provided to tb2222 in a structured, machine-readable format (JSON or CSV) for the purpose of transferring it to another service provider.
• Right to Object: Where tb2222 relies on legitimate interests as the legal basis for processing, you have the right to object. tb2222 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

How to Exercise Your Rights

To exercise any of the above rights, contact tb2222 at [email protected] with the subject line "Privacy Request — [Your Username]". Please include your registered phone number or email address so tb2222 can verify your identity before processing the request. tb2222 will not charge a fee for rights requests unless the volume is manifestly unfounded or excessive.

tb2222 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• Transport Encryption: All data transmitted between your device and tb2222 servers is encrypted using TLS 1.2 or higher, with a 256-bit SSL certificate. This applies to all platform pages, API endpoints, and payment flows.
• Data-at-Rest Encryption: Sensitive personal data stored in tb2222's databases — including identity records and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is granted strictly on a need-to-know basis. Staff with access to player data undergo background screening and are bound by confidentiality agreements. KYC documents are accessible only by authorised compliance personnel.
• Intrusion Detection: tb2222's infrastructure is monitored continuously for intrusion attempts, unusual access patterns, and potential data breaches. Automated alerts and incident response procedures are in place.
• Password Security: Player passwords are stored using a salted hashing algorithm. tb2222 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Two-Factor Authentication: tb2222 offers SMS OTP two-factor authentication for player accounts. Players are strongly encouraged to enable this feature from their account security settings.
• Third-Party Security Assessments: tb2222 periodically engages independent security professionals to conduct penetration testing and vulnerability assessments of the platform.

Data Breach Response

In the event of a personal data breach that poses a risk to player rights and freedoms, tb2222 will notify affected players without undue delay. Notifications will be sent to the email address or phone number registered on the affected account, describing the nature of the breach, the categories of data affected, and the steps tb2222 is taking to address the incident and prevent recurrence.

tb2222 reserves the right to update this Privacy Policy at any time to reflect changes in the platform's data practices, applicable legal requirements, or industry standards. When updates are made, the revised policy will be published on this page with an updated effective date at the top of the document.

Where changes are material — meaning they significantly affect how tb2222 processes your personal data or alter your privacy rights — tb2222 will provide at least 7 days' advance notice via a platform notification and, where feasible, via SMS or email to your registered contact details. Continued use of the tb2222 platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

For changes that are non-material — such as corrections of typographical errors, clarifications of existing practices that do not alter your rights, or updates to contact information — amendments may take effect immediately upon publication without prior notice.

This Privacy Policy was last reviewed and updated on 1 January 2026. For the full terms governing your use of tb2222, please also review the Terms & Conditions and the Responsible Gaming Policy.