gr222 Privacy Policy

Your Privacy at a Glance

The cards below highlight the key principles of this Privacy Policy. They are a summary only — the full operative text of each section below governs how gr222 handles your personal data.

1. Introduction

This Privacy Policy ("Policy") describes how gr222 ("gr222", "we", "us", "our") collects, uses, stores, and shares personal information provided by or generated through users ("you", "your", "Player") of the gr222 online gaming platform, accessible at gr222.org and any associated mobile interfaces.

gr222 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that the players who choose gr222 as their online gaming platform in Bangladesh place trust in us to safeguard their information, and we take that responsibility seriously.

2. Information We Collect

gr222 collects personal information through three primary channels: information you provide directly to us, information generated automatically through your use of the platform, and information received from trusted third-party partners involved in operating and securing the platform.

Information You Provide Directly

When you register a gr222 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you may provide us with:

• Identity information — your full legal name, date of birth, gender, and nationality, as provided during registration and KYC verification.
• Contact information — your Bangladesh mobile phone number, email address, and current residential address.
• Identity documents — scanned or photographed copies of your National Identity Card (NID), passport, or other government-issued identification submitted for KYC verification.
• Payment information — the mobile banking account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to make deposits and receive withdrawals. Full card numbers are never stored by gr222 — only truncated references are retained for transaction matching.
• Support correspondence — the content of any messages, emails, or live chat transcripts you send to the gr222 customer support team, including any attachments or screenshots provided.

Information Generated Automatically

When you use the gr222 platform, our systems automatically collect technical and behavioural data to ensure the platform operates correctly, detect fraud, and improve your experience:

• Device and connection data — your IP address, device type and model, operating system, browser type and version, and mobile network information.
• Platform usage data — pages visited, games played, bet amounts, session duration, login timestamps, and navigation patterns within the gr222 platform.
• Transaction logs — a complete record of all deposits, withdrawals, bonus credits, wager placements, and game outcomes associated with your account, maintained for compliance and dispute resolution purposes.
• Cookies and similar technologies — data collected through session cookies, persistent cookies, and analytics pixels used to maintain your login state, remember your preferences, and measure platform performance.

Information from Third Parties

In certain circumstances, gr222 may receive personal data about you from trusted third-party sources, including:

• Identity verification partners — third-party KYC and anti-money-laundering (AML) service providers who perform document checks and identity screening on our behalf.
• Payment processors — confirmation and status data from bKash, Nagad, Rocket, Upay, and card payment networks relating to deposits and withdrawal transactions processed through your gr222 account.
• Fraud prevention and compliance agencies — data received in response to legally mandated checks or in connection with an investigation into suspected fraudulent activity associated with your account.

3. How We Use Your Information

gr222 uses the personal data we collect only for the purposes set out below. We do not use your data for purposes that are incompatible with those stated in this Policy without first obtaining your explicit consent or where otherwise required by law.

• Account creation and management — to register your gr222 account, authenticate your login, maintain your account preferences and settings, and provide you with access to the platform's full range of services.
• Identity verification and KYC compliance — to verify your identity, confirm your age (21+ requirement), and meet our obligations under applicable anti-money-laundering and know-your-customer regulations.
• Payment processing — to process your deposits, verify payment method ownership, execute approved withdrawal requests, and maintain accurate financial records of all transactions on your account.
• Customer support — to respond to your enquiries, resolve disputes, process complaints, and provide you with assistance across our 24/7 support channels.
• Fraud prevention and platform security — to detect, investigate, and prevent fraudulent transactions, account takeover attempts, bot activity, collusion, bonus abuse, and other activities that violate our Terms and Conditions or applicable law.
• Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling behaviour, apply responsible gaming tools (deposit limits, session limits, self-exclusion) at your request, and fulfil our duty of care obligations toward our players.
• Service improvement and analytics — to analyse aggregated, anonymised usage data to improve the performance, reliability, and content of the gr222 platform, and to understand which features and game categories are most valued by our Bangladesh player community.

4. Legal Basis for Processing

gr222 processes personal data only where a lawful basis exists for doing so. The legal bases we rely on are:

• Contract performance — processing that is necessary to perform our agreement with you, including creating and managing your account, processing payments, and delivering the gaming and betting services you have requested.
• Legal obligation — processing that is necessary for gr222 to comply with applicable legal requirements, including KYC and AML obligations, financial record-keeping mandates, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests — processing carried out to pursue gr222's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, responsible gaming oversight, and service improvement analytics.
• Consent — where we rely on your consent as the basis for processing (for example, to send you promotional communications about gr222 bonuses and new features), you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings.

5. Sharing Your Information

gr222 does not sell your personal data. We do not share your personal information with third parties for their own independent marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

Service Providers

gr222 engages carefully selected third-party service providers who assist in operating the platform. These include KYC and identity verification vendors, payment processing partners (bKash, Nagad, Rocket, Upay, card networks), cloud hosting and infrastructure providers, fraud detection services, and customer support platform vendors. All service providers are bound by data processing agreements that prohibit them from using your personal data for any purpose other than providing the agreed service to gr222. They may not sell, rent, or independently exploit your data.

Legal and Regulatory Authorities

gr222 may be required to disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where disclosure is required by applicable law, court order, or lawful authority. In such cases gr222 will disclose only the minimum information necessary to satisfy the legal requirement and will, where legally permissible, notify you of the disclosure.

Business Transfers

In the event that gr222 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held about players may be transferred to the acquiring entity as part of that transaction. gr222 will notify registered players of any such transfer via email and will ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy before any transfer takes place.

No Sale of Data

gr222 will never sell, rent, or trade your personal data to third-party marketers, data brokers, advertising networks, or any other commercial entity for their independent use. This commitment applies regardless of whether you are an active player, a dormant account holder, or a former player whose account has been closed.

6. Payment Data and Security

gr222 treats payment data with the highest level of protection available. All financial transactions on the platform are processed through encrypted, authenticated channels. The following security measures are applied specifically to payment and financial data:

gr222 does not store full card numbers. Payment card data is tokenised at the point of entry by our payment processor partners, and only a truncated reference (typically last four digits) is retained in gr222 systems for transaction identification purposes. The following protections are additionally in place:

• 256-bit SSL encryption — all data transmitted between your device and gr222 servers is protected by 256-bit SSL/TLS encryption, preventing interception by third parties.
• Access controls — financial records and KYC documents are accessible only to authorised gr222 personnel with a demonstrated need to access them in order to perform their job functions. Access logs are maintained and reviewed regularly.
• Withdrawal name-matching — all withdrawal payments are verified against the name on the player's gr222 account and KYC-verified identity documents before funds are released, ensuring that withdrawals cannot be directed to a third party.

7. Cookies and Tracking Technologies

gr222 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit a website. They serve a range of functions, from keeping you logged in to helping us understand how the platform is used.

Essential Cookies

Essential cookies are strictly necessary for the gr222 platform to function. Without them, core features such as maintaining your login session, remembering your language preference, and securing your account interactions would not be possible. Essential cookies cannot be disabled without breaking the platform's core functionality. No consent is required for essential cookies as they are integral to the service you have requested.

Analytics Cookies

Analytics cookies help gr222 understand how players use the platform, which pages are most visited, where users encounter difficulties, and how we can improve the overall experience. The data collected by analytics cookies is aggregated and anonymised — it cannot be used to identify you personally. You may opt out of analytics cookies by adjusting your browser settings to block third-party cookies, though this will not affect your ability to use the gr222 platform.

Managing Your Cookie Preferences

Most modern browsers allow you to control cookie behaviour through their settings. You can typically configure your browser to block all cookies, block third-party cookies only, or notify you before a cookie is set. Instructions for managing cookies in the most commonly used browsers are available through your browser's built-in help documentation.

Please note that disabling essential cookies will prevent you from logging into your gr222 account and using core platform features. gr222 is not responsible for any degradation in service quality resulting from your choice to block or disable cookies.

8. Data Retention

gr222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard data retention periods are as follows:

• Account and KYC data — retained for a minimum of 5 years from the date of account closure, in compliance with applicable anti-money-laundering record-keeping requirements. Where a longer retention period is mandated by law, that longer period will apply.
• Transaction records — all deposit, withdrawal, wager, and bonus records are retained for a minimum of 5 years from the date of the transaction, for financial compliance, audit, and dispute resolution purposes.
• Support correspondence — communications with the customer support team are retained for 2 years from the date of the final message in each conversation, to enable follow-up on unresolved issues and to defend against potential complaints or legal claims.

When personal data is no longer required, gr222 will securely delete or anonymise it in a manner that prevents reconstruction. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for analytics and platform improvement purposes.

9. Your Data Rights

As a gr222 player, you have a number of rights in respect of the personal data we hold about you. These rights may be subject to certain conditions and limitations under applicable law, but gr222 is committed to facilitating their exercise wherever possible. Your rights include:

• Right of access — you have the right to request a copy of the personal data gr222 holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your gr222 account settings.
• Right to erasure — in certain circumstances you have the right to request that gr222 delete the personal data we hold about you. This right is not absolute — we may be required to retain certain data to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions, and in such cases deletion requests will be declined for the relevant data only.
• Right to restriction of processing — you may request that gr222 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to object — where gr222 processes your personal data based on legitimate interests, you have the right to object to that processing. gr222 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent — where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to your withdrawal.

To exercise any of these rights, please contact the gr222 data support team at [email protected] with the subject line "Data Rights Request" and a description of your request. gr222 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days, subject to identity verification and any applicable legal limitations.

10. Children's Privacy

The gr222 platform is strictly intended for adults aged 21 years and over. gr222 does not knowingly collect, process, or retain personal data from individuals under the age of 21. As part of the account registration and KYC verification process, gr222 collects date-of-birth information and verifies age using identity documents to prevent underage access to the platform.

11. Responsible Gaming and Your Data

gr222 uses certain personal data — specifically your transaction history, session duration records, and gaming behaviour patterns — to fulfil our responsible gaming obligations. This includes monitoring for signs of problem gambling, applying self-exclusion and time-out restrictions at your request, enforcing deposit limits you have set, and where required, flagging accounts for internal review by our player welfare team.

Responsible gaming monitoring is carried out on the basis of gr222's legitimate interests and its duty of care to players. The data used for this purpose is never shared with third-party marketers and is processed solely to protect player welfare. For more information about gr222's responsible gaming tools, please visit our Responsible Gaming page.

12. Third-Party Links

The gr222 platform does not contain links to external third-party websites. All navigation within the platform remains within the gr222 domain. gr222 is not responsible for the privacy practices or content of any external website that you may reach independently of the gr222 platform. This Privacy Policy applies solely to the gr222 platform and the data gr222 processes directly.

13. Changes to This Privacy Policy

gr222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this Policy, gr222 will notify registered players by email and by displaying a prominent notice on the gr222 platform for a minimum of 7 days before the updated Policy takes effect.

The effective date shown at the top of this Policy indicates when the current version was last reviewed and approved. Your continued use of the gr222 platform after the effective date of any change constitutes your acceptance of the updated Privacy Policy.

14. Contact and Data Requests

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a concern about how gr222 handles your personal data, please contact our support team. We handle all data-related enquiries in English and Bengali, 24 hours a day, 7 days a week.

Email: [email protected]

Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your email so that our team can route your message to the correct team member promptly.