Privacy Policy — How ea222 Collects, Uses, and Protects Your Data

1 Introduction

This Privacy Policy ("Policy") describes how ea222 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects personal data provided by or generated by users ("you", "Player", "Account Holder") who access and use the ea222 online betting and casino platform at https://ea222.io (the "Site").

ea222 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that players entrusting us with their personal information — including financial data and identity documents — are placing a significant degree of trust in our platform, and we take that responsibility seriously.

This Policy applies to all personal data collected through the Site, through our customer support channels, through account registration and verification processes, and through any promotional communications you have opted into. It should be read in conjunction with the ea222 Terms and Conditions and Responsible Gaming Policy.

By registering an account on ea222 and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not register an account or use the ea222 platform.

2 Data We Collect

ea222 collects personal data from you in three primary ways: data you provide directly, data generated automatically by your use of the platform, and data received from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal), and a chosen username and password.
• Identity verification (KYC) documents: Scanned copies or photographs of your National Identity Card (NID), passport, or other government-issued photo identification, as well as proof-of-address documents where requested.
• Financial data: Payment method identifiers such as your bKash or Nagad mobile wallet number, bank account details, or the last four digits of your Visa or Mastercard. Note: ea222 does not store full card numbers. Full card data is handled by PCI-DSS-compliant payment processors.
• Communications data: Any messages, complaint submissions, or support requests you send to ea222 via email ([email protected]) or live chat.
• Preference data: Your stated preferred language, notification preferences, and responsible gaming tool settings (deposit limits, loss limits, session time limits, self-exclusion requests).

2.2 Data Collected Automatically

• Technical data: IP address, device type and operating system, browser type and version, screen resolution, and referring URL.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and error logs generated during your use of the ea222 platform.
• Transaction data: A record of all deposits, withdrawals, bets, game results, bonuses claimed, and account balance changes associated with your account.
• Cookie data: Session identifiers, authentication tokens, and analytics data collected via cookies and similar tracking technologies as described in Section 8.

2.3 Data Received from Third Parties

• Payment providers: Transaction confirmation data, payment status updates, and fraud-screening results from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks.
• Identity verification services: Confirmation of identity document authenticity and age verification results from regulated KYC service providers.
• Fraud and risk screening: Risk scores and flagging data from anti-fraud and anti-money-laundering screening services used to protect the platform and its players.

3 Legal Basis for Processing

ea222 processes your personal data on the following legal grounds, depending on the specific processing activity:

4 How We Use Your Data

ea222 uses the personal data described in Section 2 for the following specific purposes:

• Account creation and management: To register your account, maintain your account profile, authenticate your login sessions, and provide access to the ea222 platform and its full range of betting and casino products.
• Age and identity verification: To confirm that you are at least 21 years of age and to verify your identity as required for regulatory compliance and responsible gaming obligations. This includes processing KYC documents and cross-referencing data with identity verification providers.
• Financial transaction processing: To process your BDT deposits via bKash, Nagad, Rocket, Upay, and card networks; to issue withdrawal payments to your designated account; and to maintain an accurate record of your transaction history.
• Fraud, security, and AML compliance: To detect and investigate suspicious activity, prevent money laundering, identify multi-accounting or bonus abuse, and fulfil any reporting obligations to relevant authorities.
• Customer support: To respond to your queries, process formal complaints, and resolve account, payment, or gaming disputes in a timely manner.
• Responsible gaming: To administer the responsible gaming tools you activate (deposit limits, loss limits, session controls, self-exclusion), to monitor your gaming activity for signs of problematic behaviour, and to send responsible gaming reminders where appropriate.
• Marketing communications: Where you have given explicit consent, to send you emails or notifications about ea222 promotions, new game releases, seasonal offers (e.g., Eid bonuses, BPL cricket promotions, Pohela Boishakh specials), and platform updates. You may withdraw consent at any time by adjusting your notification preferences in your account settings or by emailing [email protected].
• Platform analytics: To analyse aggregated, anonymised usage data to understand player behaviour, identify usability issues, optimise page performance for Bangladeshi mobile users, and improve the overall ea222 platform experience.

5 Sharing Your Data

ea222 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your personal data is shared only in the following circumstances and only with the categories of recipients described below:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banking institutions including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers process your data under their own privacy policies and are bound by applicable financial data protection regulations.

5.2 Identity Verification and KYC Providers

To fulfil our age-verification and anti-money-laundering obligations, we share identity document data and relevant personal details with regulated third-party KYC and compliance service providers. These providers are contractually bound to process data solely for the verification purpose and to maintain appropriate security standards.

5.3 Game Providers

When you play games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — anonymised session and transaction data is passed to those providers for game result validation and account settlement. These providers do not receive your full personal profile; they receive only the data necessary to operate the game session.

5.4 Fraud Prevention and Security Services

To protect the platform and its players, we share relevant data with fraud detection, cybersecurity, and anti-money-laundering screening services. These services help us identify suspicious patterns, prevent account takeover, and comply with applicable financial crime prevention obligations.

5.5 Legal and Regulatory Disclosure

ea222 may disclose your personal data to relevant authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, including in response to a valid court order, subpoena, or statutory reporting obligation. In such cases, ea222 will disclose only the minimum data required to satisfy the legal obligation.

6 Data Retention

ea222 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

When personal data is no longer required, ea222 will securely delete or anonymise it in a manner that prevents recovery or reconstruction. Physical documents are shredded; digital data is overwritten or cryptographically erased.

7 Security Measures

ea222 implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and the ea222 platform is encrypted using TLS 1.2 or higher. This protects your login credentials, personal data, and payment information in transit.
• Encrypted Storage: Sensitive data fields — including passwords (stored as salted hashes), payment identifiers, and identity document scans — are encrypted at rest using industry-standard encryption algorithms.
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and are monitored by intrusion-detection systems that flag and respond to anomalous access patterns in real time.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems use role-based access controls, and all privileged access is logged and audited.
• Two-Factor Authentication: ea222 supports two-factor authentication (2FA) for player accounts, adding an additional verification layer beyond username and password.

7.2 Organisational Safeguards

• All ea222 staff with access to personal data undergo mandatory data protection and security awareness training.
• Third-party service providers with access to ea222 player data are required to sign data processing agreements and demonstrate compliance with applicable security standards.
• ea222 conducts periodic internal security reviews and works with external security professionals to assess and improve the platform's security posture.

8 Cookies and Tracking Technologies

ea222 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse how players use the site. The following categories of cookies are used:

ea222 does not use third-party advertising cookies or behavioural targeting cookies. No cookie data is shared with advertising networks or social media platforms.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary or fraud-prevention cookies may impair your ability to log in to and use the ea222 platform.

9 Your Privacy Rights

As an ea222 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data ea222 holds about you, including what data is stored, why it is stored, and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update some data directly via your account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to ea222's legal retention obligations (see Section 6) — data that must be retained for regulatory compliance cannot be deleted ahead of the applicable retention period.
• Right to Restrict Processing: You may request that ea222 restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or object to our processing on legitimate-interest grounds — while your request is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to ea222 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to ea222 processing your personal data on legitimate-interest grounds, including for direct marketing purposes. You may also withdraw consent for marketing communications at any time via your account notification settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

10 Protection of Minors

The ea222 platform is strictly intended for adults aged 21 years and above. ea222 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement and is supported by identity verification procedures designed to confirm that all account holders meet the minimum age requirement.

If ea222 becomes aware that personal data has been collected from an individual who is under 21 years of age, the following actions will be taken immediately:

• The account will be permanently closed without prior notice.
• Any funds deposited by the underage individual will be returned to the originating payment method, net of any winnings which will be forfeited.
• All personal data collected in connection with the underage account will be deleted as soon as the legal minimum retention requirements permit.
• The matter will be escalated internally and handled in accordance with ea222's child protection and responsible gaming policies.

If you believe that an individual under the age of 21 has registered an account on ea222, please contact us immediately at [email protected]. ea222 treats all underage-access reports as urgent matters and will act promptly upon receipt of a credible report.

11 International Data Transfers

ea222 operates primarily within the Bangladesh market and processes the majority of player data on servers located within the Asia-Pacific region. However, some of our third-party service providers — including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as certain technical infrastructure partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, ea222 takes the following steps to ensure that your data receives an adequate and consistent level of protection regardless of where it is processed:

• Contractual safeguards: We require all international data recipients to sign data processing agreements that incorporate standard contractual clauses obligating the recipient to maintain data protection standards equivalent to those applied by ea222.
• Vendor due diligence: All third-party processors are assessed for their data security practices prior to engagement and are subject to periodic review. Only vendors that meet ea222's minimum security and privacy standards are permitted to process player data.
• Data minimisation on transfer: When data is transferred to international partners, only the minimum data required for the specific operational purpose is transferred. Full personal profiles are not shared with international game providers or analytics partners.

By using the ea222 platform and providing your personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Bangladesh as described in this section, subject always to the safeguards described above.

12 Changes to This Policy

ea222 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, platform enhancements, or new service offerings. The date of the most recent revision will always be displayed at the top of this page.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data, or materially affect your privacy rights — ea222 will notify registered account holders by email at least 14 days prior to the changes taking effect. The notification email will summarise the key changes and link to the updated Policy on the Site.

For non-material changes (such as clarifications of existing language, corrections of typographical errors, or minor structural reorganisation that does not affect the substance of the Policy), ea222 may update this page without prior individual notification. We therefore recommend bookmarking this page and reviewing it periodically.

13 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ea222 processes your personal data, please contact our dedicated data support team using the details below. All privacy-related communications should be directed to the email address provided — please do not send sensitive personal data or account credentials via any other channel.

Formal Complaints

If you are not satisfied with ea222's response to a privacy concern or rights request, you have the right to escalate the matter as a formal complaint. Please first allow ea222's internal complaints process to run its course — send your formal complaint to [email protected] with the subject line "Formal Privacy Complaint" and allow up to 30 days for a full written response. ea222 takes all formal privacy complaints seriously and will conduct a thorough internal review before issuing a final response.

If you remain unsatisfied following ea222's final response, you may seek independent resolution through an appropriate dispute resolution body or legal channel available in your jurisdiction. ea222 will cooperate fully with any legitimate regulatory or legal process arising from an unresolved privacy complaint.