Privacy Policy
of net22

Introduction & Scope

net22 is an online casino and sports betting platform operated for players in Bangladesh. We are committed to handling all personal data entrusted to us with integrity, transparency, and security. This Privacy Policy describes our data practices in plain, accessible English so that every player — regardless of technical background — can fully understand how their information is used.

This policy applies to all individuals who:

• Visit the net22 website (net22.io) whether or not they register an account;
• Register and maintain an active player account on the platform;
• Contact our customer support team via live chat, WhatsApp, or email;
• Participate in promotions, tournaments, or loyalty programmes offered by net22;
• Interact with net22 through any affiliated channel or service.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and net22.

Data We Collect

net22 collects personal data through several distinct channels. The categories of data we collect are set out in the table below, together with the context in which each category is gathered.

2.1 Data You Provide Directly

The majority of personal data we hold is provided directly by you when you register your account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are always in control of what you submit to us in these contexts.

2.2 Data We Collect Automatically

When you access the net22 platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser type, and session activity logs. This data is used primarily for fraud prevention, platform security, and service optimisation. We do not use automated profiling to make legally significant decisions about you based solely on this technical data.

How We Use Your Data

net22 uses personal data for clearly defined purposes. We do not use your data for any purpose that has not been disclosed to you in this policy. The primary purposes for which we process personal data are as follows:

• Account Management: Creating, maintaining, and managing your net22 player account, including password resets and account preference updates.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years, confirming that your identity matches the payment methods you use, and fulfilling our anti-money-laundering obligations.
• Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfers. Confirming transaction accuracy and resolving payment disputes.
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, duplicate registrations, bonus abuse, money laundering, and unauthorised access attempts.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance across live chat, email, and WhatsApp.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and proactively reaching out to players who may be at risk.
• Platform Improvement: Analysing anonymised and aggregated usage data to improve game performance, user experience, and platform reliability.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal campaign messages to players who have opted in. Marketing communications are never sent without prior consent.
• Legal & Regulatory Compliance: Maintaining records and fulfilling reporting obligations as required by applicable law.

Legal Basis for Processing

net22 processes personal data on the following legal grounds:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your account, process transactions, and deliver the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and fraud reporting obligations.
• Legitimate Interests: Processing necessary for net22's legitimate business interests, including fraud detection, platform security, customer support, and service improvement, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

Sharing Your Data

net22 does not sell your personal data. We share personal data only in the following strictly controlled circumstances:

• Payment Service Providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, and participating bank partners solely to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity Verification Partners: We may use third-party KYC and identity verification services to confirm the authenticity of documents submitted during account verification. These partners process data under strict data-processing agreements.
• Game Studio Providers: When you play games powered by third-party studios such as Pragmatic Play, Evolution Gaming, Spribe, or Microgaming, limited technical session data (such as player session tokens) is shared with those studios to deliver the game. No personally identifiable data beyond session identifiers is shared.
• Fraud Prevention Services: We may share technical data (IP address, device fingerprint) with specialised fraud-detection platforms to identify and prevent account abuse, money laundering, and bonus fraud.
• Legal Authorities: net22 will disclose personal data to law enforcement or regulatory authorities where required to do so by applicable law, valid court order, or to protect the rights and safety of the platform and its users.

Cookies & Tracking Technologies

net22 uses cookies and similar tracking technologies to ensure that the platform functions correctly, to remember your preferences, and to understand how players interact with the site. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They include session cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: These cookies remember your preferences (e.g., language settings, preferred deposit method) so that you do not have to re-enter them on each visit.
• Analytical Cookies: We use anonymised analytics tools to understand page performance, navigation patterns, and feature usage. This data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and session hijacking.

You can manage cookie preferences through your browser settings. Disabling cookies other than strictly necessary ones will not prevent you from using the platform but may affect certain personalisation features. net22 does not use third-party advertising cookies or cross-site tracking cookies.

Data Security

net22 implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Role-based access controls that restrict internal access to personal data to authorised personnel only, on a strict need-to-know basis;
• Two-factor authentication for all internal systems access by net22 staff;
• Regular security audits and penetration testing conducted by independent security specialists;
• Automated intrusion detection systems that monitor for suspicious activity and trigger alerts in real time;
• Secure data centre infrastructure with physical access controls, redundant power, and continuous monitoring.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a risk to your rights and freedoms, net22 will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

Data Retention

net22 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to provide our services to you, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Your Rights

As a net22 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address listed in Section 14.

• Right of Access: You may request a copy of all personal data net22 holds about you. We will fulfil verified access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that data subject to mandatory retention periods (e.g., for AML compliance) cannot be deleted until those periods have elapsed.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, including objecting to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

The net22 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that a registered account belongs to a person under the minimum age, we will immediately close the account, delete all associated personal data to the extent permitted by our legal retention obligations, and forfeit any associated balance in accordance with our Terms & Conditions.

If you believe a minor has accessed or registered on the net22 platform, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action without delay.

Marketing Communications

net22 sends promotional communications — including bonus offers, seasonal promotions tied to events such as BPL, IPL, Eid, and Pohela Boishakh, and platform news — only to players who have explicitly opted in to receive them during registration or through their account settings.

You may opt out of all marketing communications at any time by:

• Updating your communication preferences in the account settings panel;
• Contacting our support team via live chat and requesting removal from all marketing lists;
• Replying "STOP" to any promotional SMS sent by net22.

Please allow up to 48 hours for opt-out requests to take full effect across all communication channels. Opting out of marketing does not affect transactional messages such as deposit confirmations, withdrawal notifications, security alerts, or support responses — these are sent regardless of marketing preference as they relate to the delivery of the services you have requested.

Third-Party Links

The net22 platform may occasionally reference third-party services such as payment processors or game studio support pages. net22 is not responsible for the privacy practices or content of any third-party website or service that you access independently of the net22 platform. We encourage you to review the privacy policies of any third-party service before providing personal data to them.

net22's privacy obligations extend only to data collected and processed directly by net22 or by contracted service providers acting on our instructions under data-processing agreements.

Policy Updates

net22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will update the effective date at the top of this page and, where appropriate, notify registered players via their registered email address or through an in-platform notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the net22 platform after a revised policy has been published constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and contact our support team to discuss account closure.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data security incident, please contact the net22 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the net22 platform — average response time under 5 minutes.
• Email: [email protected] — responses within 2–6 hours.
• Subject Line: Please use "Privacy Request" or "Data Rights" as the subject line for data-related enquiries to ensure your message is routed to the correct team.
• Operating Hours: 24/7, Bangladesh Standard Time (UTC+6).

net22 takes all privacy-related enquiries seriously and will acknowledge your request within 24 hours of receipt. Complex data rights requests will be fulfilled within 30 calendar days.