ct222 Privacy Policy

When you interact with the ct222 platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — ct222 collects certain categories of personal data. The nature of the data collected depends on the type of interaction and the service you are accessing. Below is a comprehensive account of every category of personal data that ct222 may collect from you.

Registration Data

When you create a ct222 account, you are required to provide the following information: your full legal name, date of birth, residential address (including city, district, and postal code), email address, and mobile phone number. This information is used to create and administer your account, to verify your identity, and to communicate with you regarding your account activity.

Identity Verification Data (KYC)

As part of ct222's Know Your Customer (KYC) programme, you may be asked to submit copies of the following documents: a government-issued national identity card (NID), a valid passport, a driving licence, a recent utility bill or bank statement confirming your residential address, and in certain cases a source-of-funds declaration. These documents are processed by the ct222 compliance team and, where applicable, by a third-party identity verification provider. KYC documents are stored securely and are not shared with any party except as required by law or as necessary to complete the verification process.

Financial Data

ct222 collects information related to the payment methods you use to deposit funds and receive withdrawals. This includes your bKash, Nagad, Rocket, or Upay mobile wallet number, bank account details where bank transfer is used, and the last four digits of any card used. ct222 does not store full card numbers; card transactions are processed by a PCI-DSS-compliant payment processor, and full card details are held only by that processor.

Transaction & Gaming Data

ct222 automatically records all financial transactions on your account (deposits, withdrawals, bonus credits, and adjustments) as well as all gaming activity (games played, wagers placed, outcomes, session duration, and bet history). This data is retained for financial reconciliation, responsible gaming monitoring, and the investigation of any disputes or fraud reports.

Technical & Device Data

When you visit the ct222 website, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), referring URL, and the pages you view during each session. This data is used for security monitoring, fraud detection, and platform performance analysis.

Communications Data

If you contact ct222 via email or live chat, we retain a record of that communication, including the content of the messages exchanged, the date and time of contact, and the resolution outcome. This data is used to maintain the quality of our customer support and to resolve any future disputes related to the same matter.

ct222 does not sell or rent your personal data to any third party. However, in order to operate the platform and comply with legal obligations, ct222 shares certain categories of personal data with a limited set of trusted third-party service providers and authorities. The categories of recipients and the basis for sharing are described below.

Payment Processing Partners

In order to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, ct222 shares the minimum necessary financial and identity information with those payment providers. Each payment partner operates under its own privacy policy and data-protection standards. ct222 selects payment partners that maintain industry-standard security practices.

Identity Verification Providers

ct222 may use a third-party identity verification service to assist in the processing of KYC documents. Such providers receive copies of the documents you submit and return a verification result to ct222. These providers are contractually bound to use your data solely for the purpose of performing the identity check and to delete the data upon completion of the check, subject to their own legal retention requirements.

Game Software Providers

Games on ct222 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Red Tiger. These providers may receive limited session data (such as player session tokens and wager amounts) for the purpose of delivering the game experience and reconciling game results. They do not receive your full personal profile. Each provider operates under its own data-protection framework and is contractually restricted from using your data for any purpose beyond game delivery and result reconciliation.

Analytics & Security Providers

ct222 may use third-party analytics and cybersecurity tools to monitor platform performance, detect fraudulent activity, and prevent unauthorised access. These providers process technical data (IP addresses, device fingerprints, session logs) in anonymised or pseudonymised form where possible. They do not receive personally identifiable registration data.

Legal & Regulatory Authorities

ct222 may disclose personal data to law-enforcement agencies, financial intelligence units, or other regulatory authorities in Bangladesh or internationally where required by applicable law, pursuant to a valid court order, or where disclosure is necessary to protect the rights or safety of ct222 or its players. ct222 will notify affected players of such disclosures where legally permitted to do so.

Corporate Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving ct222, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, ct222 will notify affected players and ensure that the successor entity is bound by terms that provide a level of data protection at least equivalent to this Privacy Policy.

ct222 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The specific retention periods applied to each category of data are described below. Upon the expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

Account Data

Personal data collected during account registration — including your name, date of birth, address, email, and phone number — is retained for the duration of your active account and for a period of five (5) years following the permanent closure of your account. This retention period reflects ct222's obligations under applicable anti-money-laundering regulations and the potential need to respond to disputes or legal claims arising after account closure.

KYC Documents

Identity documents submitted for KYC verification are retained for a minimum of five (5) years from the date of submission, in line with anti-money-laundering record-keeping requirements. After this period, documents are securely deleted unless an ongoing investigation or regulatory enquiry requires their continued retention.

Financial Transaction Records

Records of all deposits, withdrawals, bonus transactions, and adjustments are retained for a minimum of seven (7) years from the date of the transaction. This period reflects standard financial record-keeping requirements and the potential for late tax or regulatory enquiries.

Gaming Activity Records

Detailed bet history and gaming session records are retained for a period of two (2) years from the date of the relevant gaming session. Aggregated, anonymised gaming statistics that cannot be linked back to an individual player may be retained indefinitely for platform analytics purposes.

Support Communications

Records of customer support interactions — including email threads and live chat transcripts — are retained for two (2) years from the date of the interaction. Where a support interaction is linked to an ongoing dispute or investigation, the record is retained until the matter is fully resolved.

Technical & Device Data

Server logs, IP address records, and device fingerprint data are retained for a period of ninety (90) days for standard security monitoring purposes. Where a specific security incident is identified, the relevant logs may be preserved for a longer period pending investigation.

As a ct222 account holder, you hold a set of privacy rights in relation to your personal data. ct222 is committed to honouring these rights promptly and without unnecessary obstruction. The rights available to you, and the process for exercising them, are described below.

Right of Access

You have the right to request a copy of the personal data that ct222 holds about you. This is commonly referred to as a Subject Access Request (SAR). Upon receiving a valid SAR, ct222 will provide you with a structured summary of your personal data within thirty (30) calendar days. There is no fee for a standard SAR. If your request is complex or involves a large volume of data, ct222 may extend this period by a further thirty (30) days and will notify you of the extension.

Right to Rectification

If any personal data that ct222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number or email address) can be made directly from your ct222 account settings. For corrections to registered name, date of birth, or address, you will be required to submit supporting documentation as part of the KYC process.

Right to Erasure

You have the right to request the deletion of your personal data — sometimes called the "right to be forgotten" — where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that ct222 may be unable to fully comply with an erasure request where retention of the data is required by law (for example, anti-money-laundering record-keeping obligations). In such cases, ct222 will inform you of the specific legal basis for retaining the data and will delete all data that is not subject to a legal retention requirement.

Right to Restrict Processing

In certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed — you have the right to request that ct222 restrict the processing of your personal data. During a restriction period, ct222 will continue to store the data but will not process it for any other purpose without your consent or a valid legal basis.

Right to Data Portability

Where ct222 processes your personal data on the basis of your consent or in order to perform a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON). This right applies to data that you have actively provided to ct222, such as your registration details and account preferences.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on ct222's legitimate interests. Upon receiving an objection, ct222 will cease processing the data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. You may object to marketing processing at any time, without needing to provide a reason, and ct222 will cease marketing communications immediately upon receiving your objection.

How to Exercise Your Rights

To exercise any of the rights described above, please contact the ct222 data protection contact at [email protected] with the subject line "Privacy Rights Request". Please include your full registered name and the email address associated with your ct222 account so that we can verify your identity before processing your request. ct222 will respond to all privacy rights requests within thirty (30) calendar days of receiving a valid, verified request.