gr222 Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") is issued by gr222 ("gr222", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "Player", "User") who visit, register on, or interact with the gr222 online casino and sports betting platform accessible at https://gr222.io ("the Platform").

This Policy covers personal data collected through the gr222 website, mobile-optimised browser interface, customer support channels (live chat and email), and any promotional communications sent by gr222. It applies to all registered players located in Bangladesh and to any visitor who browses the Platform without registering.

This Policy should be read alongside the gr222 Terms & Conditions, which govern the contractual relationship between you and gr222, and the gr222 Responsible Gaming Policy, both of which are available on this website.

2 Data Controller Information

gr222 acts as the data controller in respect of the personal data it collects from players and visitors. As data controller, gr222 determines the purposes for which personal data is processed and the means by which it is processed.

For all privacy-related enquiries, data access requests, data deletion requests, and complaints regarding the handling of your personal data, please contact the gr222 data protection team using the contact details set out in Section 14 of this Policy.

3 Personal Data We Collect

gr222 collects the following categories of personal data from players and visitors to the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on your Bangladesh National Identity Card (NID)
• Date of birth (used for 21+ age verification)
• NID number (collected during KYC verification)
• Username chosen at registration
• Profile photograph (where submitted as part of KYC documentation)

3.2 Contact and Communication Data

• Bangladeshi mobile number (primary contact and security channel)
• Email address
• Records of all live chat, email, and support communications between you and gr222

3.3 Financial and Transaction Data

• bKash, Nagad, Rocket, or Upay account number associated with your gr222 deposits and withdrawals
• Transaction history (deposit amounts, withdrawal amounts, dates, payment method used)
• Bonus claim history and wagering activity
• Account balance history

3.4 Technical and Usage Data

• IP address at the time of registration and at each login
• Device type, operating system, and browser type
• Session duration and login timestamps
• Pages visited and games played on the gr222 platform
• Click-stream data and navigation patterns within the Platform

3.5 Responsible Gaming Data

• Self-exclusion preferences and active exclusion periods
• Deposit limit settings and history of limit changes
• Session time reminders and cooling-off period configurations

gr222 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related context in the course of a responsible gaming support interaction, in which case such information is treated with the strictest confidentiality and is used solely to provide appropriate support.

4 How We Collect Your Data

gr222 collects personal data through the following channels:

4.1 Directly From You

The majority of personal data gr222 holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact the support team, or participate in a promotion. You are not required by law to provide this data, but without it gr222 cannot open or maintain your account.

4.2 Automatically During Platform Use

When you access the gr222 platform, certain technical data is collected automatically by our servers and analytics systems, including your IP address, device identifiers, browser configuration, and session behaviour. This data is collected to ensure the security and stability of the Platform and to detect fraudulent or abusive activity.

4.3 From Third-Party Service Providers

gr222 may receive identity verification data from third-party KYC partners who cross-reference information you have provided against official Bangladesh government NID databases. gr222 may also receive fraud-risk signals from payment processors (bKash, Nagad, Rocket, Upay) in connection with specific transactions.

4.4 From Cookies and Similar Technologies

gr222 uses cookies and similar browser-based tracking technologies to maintain your logged-in session, remember your language and display preferences, and analyse Platform performance. For full details, see Section 8 of this Policy.

5 How We Use Your Personal Data

gr222 uses your personal data for the following purposes:

gr222 does not use your personal data for automated decision-making that produces significant legal effects, except in the context of automated fraud detection, where any automated flag is reviewed by a member of the gr222 compliance team before action is taken on your account.

6 Legal Bases for Processing

gr222 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to open and maintain your gr222 account, process transactions, and provide the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable financial crime, anti-money laundering, and age verification obligations.
• Legitimate interests: Processing undertaken by gr222 for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where those interests are not overridden by your rights and interests.
• Consent: Processing undertaken on the basis of your consent, including the sending of promotional communications. You may withdraw your consent to marketing communications at any time by contacting [email protected].

7 Sharing Your Data with Third Parties

gr222 does not sell, rent, or trade your personal data. We share your data with third parties only in the following limited circumstances:

7.1 Payment Processors

To process deposits and withdrawals, gr222 shares necessary transaction data (such as your registered mobile number and transaction amount) with the relevant mobile financial service — bKash, Nagad, Rocket, or Upay. These providers operate under their own privacy policies and are responsible for data they independently collect during the transaction.

7.2 Identity Verification Partners

gr222 uses third-party KYC service providers to verify the identity documents submitted by players during account verification. These partners receive only the data necessary to perform the verification function and are bound by strict data processing agreements with gr222.

7.3 Game Content Providers

Game providers such as Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi may receive anonymised technical session data (such as a session token or player ID) necessary to load and operate their games on the gr222 platform. These providers do not receive your name, mobile number, NID, or financial data.

7.4 Law Enforcement and Regulatory Bodies

gr222 may disclose personal data to law enforcement agencies, financial intelligence units, or other government authorities where required to do so by applicable law, by a valid court order, or where disclosure is necessary to prevent or detect a serious crime.

8 Cookies and Tracking Technologies

gr222 uses cookies — small text files stored on your device by your browser — and similar technologies to operate and improve the Platform. The following types of cookies are used:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit. Without them, the gr222 platform cannot operate correctly.
• Security cookies: Used to detect and prevent fraudulent login attempts and to protect the integrity of your account session.
• Preference cookies: Store your display and language preferences so that the Platform behaves consistently between visits.
• Analytics cookies: Used to collect anonymised data about how players navigate the gr222 platform, which pages receive the most traffic, and how game categories perform. This data helps gr222 improve the user experience.

You may control cookie settings through your browser settings. Please note that disabling essential cookies will prevent you from logging into and using the gr222 platform. Analytics and preference cookies may be disabled without affecting core Platform functionality.

9 Data Security Measures

gr222 employs a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure.

Technical measures in place at gr222 include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data stored at rest (including NID numbers and financial identifiers), firewalled and access-controlled database infrastructure, and continuous intrusion-detection monitoring. Organisational measures include role-based access controls limiting staff access to personal data on a strict need-to-know basis, mandatory data security training for all gr222 staff, and a documented incident response plan for data breach events.

In the event of a personal data breach that is likely to result in a risk to your rights and interests, gr222 will notify affected players without undue delay and will implement immediate containment measures.

10 Data Retention

gr222 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or for as long as is required by applicable law. The following retention periods apply:

When personal data reaches the end of its retention period, it is securely and irreversibly deleted from gr222's systems. Data that has been anonymised (where all identifying information has been removed) may be retained indefinitely for statistical and analytical purposes.

11 Your Rights

As a player whose personal data is processed by gr222, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data gr222 holds about you at any time.
• Right to rectification: You may request that gr222 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request that gr222 delete your personal data where gr222 no longer has a legal basis or legitimate need to retain it. This right does not apply where gr222 is required to retain your data by law (for example, for the retention periods described in Section 10).
• Right to restriction: You may request that gr222 suspend the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being disputed.
• Right to data portability: Where gr222 processes your data by automated means on the basis of your consent or a contract, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, although gr222 may be able to demonstrate compelling grounds to continue.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

To exercise any of the above rights, please contact the gr222 data protection team at [email protected], clearly marking your request "Privacy Request". gr222 will respond within 14 business days. gr222 may need to verify your identity before fulfilling a data rights request.

12 Children and Minors

The gr222 platform is strictly for adults aged 21 years and above. gr222 does not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory age verification against Bangladesh NID data specifically to enforce this requirement.

If gr222 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, that data will be permanently deleted, the associated account will be closed, and any deposited funds will be handled in accordance with gr222's underage gaming procedures as set out in the Terms & Conditions.

If you are a parent or guardian and believe that a person under 21 in your household has registered a gr222 account, please contact the gr222 support team immediately at [email protected].

13 Changes to This Policy

gr222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. When material changes are made to this Policy, gr222 will notify registered players via email to their registered address or via a prominent in-platform notification, at least seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the gr222 platform after the effective date of a revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not agree with the revised Policy, you should close your gr222 account before the revised Policy takes effect.

14 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how gr222 has handled your personal data, please contact us using the following details. All contact information is provided as plain text — please copy the relevant address into your email client.

• General Privacy Enquiries: [email protected] (subject: "Privacy Request")
• Data Deletion Requests: [email protected] (subject: "Data Deletion Request")
• Data Access Requests: [email protected] (subject: "Data Access Request")
• Responsible Gaming Data: [email protected]
• Response Time: Acknowledgement within 48 hours; substantive response within 14 business days (BST)

gr222 takes all privacy complaints seriously and will investigate every complaint thoroughly. If you are not satisfied with gr222's response to a privacy complaint, you may escalate your complaint in writing to [email protected], clearly marked "Formal Privacy Complaint", for review by a senior member of the gr222 compliance team.