Privacy Policy
At aa222, your privacy is not an afterthought — it is a foundational principle. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and protect it, and what rights you have over your own information. We believe in full transparency, so please take the time to read this document in its entirety.
End-to-End Encryption
All data transmitted between your device and aa222 is protected using industry-standard SSL/TLS encryption. Your personal details, payment information, and account credentials are never transmitted in plaintext.
No Data Selling
aa222 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used solely to deliver, improve, and safeguard the aa222 platform and your account.
Transparent Data Use
We only collect the data that is strictly necessary for operating a secure and compliant gaming platform. Every category of data we hold is documented in this policy along with the specific purpose for which it is used.
Your Right to Control
You have the right to access, correct, and request deletion of your personal data at any time. aa222 provides straightforward mechanisms for exercising these rights through your account settings and our support team.
Secure Payment Data
Financial transaction data relating to bKash, Nagad, Rocket, Upay, and bank payments is handled with the highest level of security. aa222 does not store full payment credentials — only tokenised or masked identifiers.
Strict Age Verification
aa222 employs mandatory age verification for all withdrawals as part of our KYC process. We take the protection of minors seriously and will never knowingly hold an account for any individual under 18 years of age.
Section 1
Data We Collect
aa222 collects personal data from players through several distinct channels: the account registration form, the KYC verification process, payment transactions, your ongoing use of the platform, and your interactions with our customer support team. We apply the principle of data minimisation throughout — we only collect what is genuinely necessary to deliver a safe, secure, and compliant service to players in Bangladesh.
The following table sets out each category of personal data that aa222 may collect, the specific data points within that category, and the lawful basis on which we hold it.
| Data Category | Data Points Collected | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National Identity Card (NID) number | Account registration & KYC verification |
| Contact Data | Bangladeshi mobile number, email address, city or region (e.g., Dhaka, Chittagong, Sylhet) | Account registration |
| Verification Documents | Scanned copy or photograph of government-issued photo ID, selfie for liveness check | KYC process prior to first withdrawal |
| Financial Data | bKash/Nagad/Rocket mobile number (masked), bank account details (masked), transaction amounts in BDT, deposit and withdrawal history | Payment processing |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, time zone (BST/UTC+6) | Automatic — on site access |
| Usage Data | Pages visited, game sessions played, bet amounts, session durations, clickstream data, search queries within the platform | Automatic — during platform use |
| Communications Data | Support ticket content, live chat transcripts, email correspondence with aa222 | Customer support interactions |
| Responsible Gaming Data | Self-exclusion preferences, deposit limits set, session reminder settings, cooling-off period records | Responsible gaming feature usage |
Data You Provide Indirectly
In addition to data you supply directly, aa222 may receive information about you from third-party payment processors (such as bKash or Nagad) confirming the successful completion of a transaction. This information is limited to transaction reference numbers, timestamps, and masked account identifiers — aa222 does not receive your full mobile banking PIN, password, or full account balance from any payment provider.
Data We Do Not Collect
aa222 does not collect biometric data beyond the liveness photograph required for KYC. We do not collect data from your social media profiles unless you choose to contact us via a social channel. We do not access your device's contacts, camera, or microphone outside of the explicit KYC selfie capture process. We do not purchase third-party marketing lists.
Section 2
How We Use Your Data
aa222 processes your personal data for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The following list sets out our primary processing purposes along with the corresponding lawful basis for each.
Account Management & Service Delivery
We use your identity and contact data to create and maintain your aa222 account, authenticate your login sessions, deliver the games and betting services you have requested, and communicate important account-related information (such as withdrawal confirmations, password resets, and security alerts). This processing is necessary for the performance of the contract between you and aa222.
Identity Verification & KYC Compliance
aa222 is committed to maintaining a safe and compliant platform. We use identity documents and financial data to verify that you are who you say you are, that you are aged 18 or above, and that your payment methods are registered in your own name. This processing is required to fulfil our legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
Payment Processing
Financial data is used exclusively to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard). We maintain records of all transactions for accounting, fraud prevention, and dispute resolution purposes. aa222 does not store full payment credentials — only the masked identifiers and transaction references required for reconciliation.
Fraud Prevention & Security
Technical data and usage data are analysed continuously by aa222's risk management systems to detect unusual patterns that may indicate fraudulent activity, account takeover attempts, bonus abuse, or money laundering. Where suspicious activity is detected, your account may be temporarily suspended pending investigation. This processing is in our legitimate interest to protect the platform and its users.
Responsible Gaming
aa222 uses your gaming behaviour data (session lengths, bet frequency, deposit patterns) to identify players who may be showing signs of problem gambling. Where such indicators are detected, aa222 may proactively reach out with responsible gaming information or apply protective restrictions. This processing is carried out in the legitimate interest of player welfare and is consistent with our commitment to responsible gaming. You can review our full responsible gaming framework on the Responsible Gaming page.
Platform Improvement & Personalisation
Aggregated and anonymised usage data helps aa222 understand which games, sports markets, and features are most popular among Bangladeshi players, allowing us to improve the platform experience over time. Where you have given consent, we may also use usage data to surface personalised game recommendations or relevant promotions within your account interface. You may withdraw this consent at any time through your Account Settings.
Marketing Communications
aa222 may send you promotional communications about bonuses, seasonal offers (such as Eid or BPL promotions), and new game releases via email or SMS — but only if you have opted in to receive such communications during registration or subsequently through your account preferences. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by updating your notification preferences in Account Settings. Opting out of marketing does not affect the delivery of transactional or service communications.
Legal & Regulatory Obligations
aa222 may be required by law to retain certain categories of data (such as transaction records and identity documents) for a minimum statutory period. Where we receive a lawful request from a competent authority, aa222 may be required to disclose specific data. In such cases, aa222 will comply with the legal obligation while taking reasonable steps to notify you of the disclosure where permitted to do so.
Section 3
Data Sharing & Third Parties
In order to deliver a fully functioning and secure platform, aa222 works with a carefully selected group of trusted third-party service providers. Each provider is contractually required to process your data only in accordance with aa222's instructions and to maintain adequate technical and organisational security measures.
Payment Processors
When you make a deposit or withdrawal, your payment details are transmitted to the relevant payment processor (for example, bKash, Nagad, Rocket, Upay, or the applicable bank gateway). These providers operate under their own privacy policies and are independently regulated financial services entities. aa222 shares only the minimum data required to initiate or reconcile the transaction.
Identity Verification Partners
aa222 may use third-party KYC technology providers to assist with document verification and liveness checks. These partners process your identity documents on behalf of aa222 solely for the purpose of KYC completion. They do not retain your documents beyond the period required for verification.
Game Studio Providers
Games on the aa222 platform are supplied by independent studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, limited session data (such as game round ID, bet amount, and outcome) is transmitted to the studio's game servers to run the game. This data does not include your full name or contact details — it uses an anonymised player session token. Each studio is contractually bound to confidentiality and data protection obligations consistent with those set out in this policy.
Analytics & Security Providers
aa222 uses third-party tools for web analytics and fraud detection. These tools may collect technical data such as IP addresses, session durations, and device fingerprints. Where third-party analytics cookies are used, they are listed in the Cookies section below. Analytics data is processed in aggregated form wherever possible.
Legal & Regulatory Disclosure
aa222 may disclose your personal data to law enforcement agencies, financial regulators, or other competent authorities where required to do so by applicable law, court order, or other legal process. aa222 will notify you of any such disclosure where legally permitted to do so. We will always seek to limit the scope of any mandatory disclosure to the minimum data required to satisfy the legal obligation.
Business Transfers
In the event that aa222 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with reasonable advance notice.
Section 4
Cookies & Tracking Technologies
aa222 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow aa222 to recognise your browser on subsequent visits, maintain your login session, remember your preferences, and analyse how different areas of the platform are used.
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, load balancing | Session / up to 24 hours | No — required for platform to function |
| Functional | Remembering your language preference, game display settings, last visited lobby section | Up to 12 months | Yes — via browser settings |
| Analytics | Aggregated usage statistics — pages visited, session length, feature engagement — used to improve the platform | Up to 24 months | Yes — via browser settings or Account Settings |
| Fraud & Security | Device fingerprinting, IP risk scoring, bot detection — used to protect your account and the platform | Up to 12 months | No — required for security |
Managing Cookies
You may control cookies through your browser's privacy settings. Most modern browsers (Chrome, Firefox, Samsung Internet, Opera Mini) allow you to view, delete, and block cookies on a per-site or global basis. Please note that disabling strictly necessary or security cookies will impair the functionality of the aa222 platform — in particular, you will not be able to maintain a login session. Disabling analytics cookies will not affect your ability to use any feature of the platform.
aa222 does not use third-party advertising cookies or retargeting pixels. We do not participate in cross-site behavioural advertising networks. Your browsing activity on aa222 is not shared with advertising technology companies.
Section 5
Data Security & Retention
aa222 employs a layered approach to data security combining technical, organisational, and procedural safeguards. Our security programme is designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
Technical Safeguards
- All connections to aa222 use HTTPS with TLS 1.2 or TLS 1.3 encryption.
- Passwords are stored as salted cryptographic hashes — aa222 staff cannot read your password in plaintext.
- Two-factor authentication (2FA) is available for all player accounts and strongly recommended.
- Access to production databases containing player data is restricted to a small number of authorised personnel and is logged and audited.
- Payment credential data is tokenised — full card or mobile account numbers are never stored on aa222 servers.
- aa222's infrastructure is hosted in secure data centres with physical access controls, redundancy, and 24/7 monitoring.
Organisational Safeguards
- All aa222 staff and contractors who handle personal data are subject to confidentiality obligations.
- Access to personal data is granted on a strict need-to-know basis aligned with job function.
- aa222 maintains an incident response plan for data breach scenarios. In the event of a breach that poses a risk to your rights, you will be notified promptly.
Data Retention Periods
aa222 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, and for the minimum period required by applicable law. The following general retention periods apply:
- Account and identity data: Retained for the lifetime of your account, plus 5 years following account closure (for AML and audit purposes).
- Transaction records: Retained for 7 years from the date of the transaction in accordance with financial record-keeping obligations.
- KYC documents: Retained for 5 years following the completion of KYC, or 5 years following account closure, whichever is later.
- Support communications: Retained for 3 years from the date of the last communication in a given support thread.
- Analytics data: Retained in aggregated, anonymised form — no maximum retention period applies to fully anonymised data.
- Responsible gaming records: Self-exclusion records are retained indefinitely to prevent re-registration by excluded players.
When your data reaches the end of its applicable retention period, aa222 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.
Section 6
Your Privacy Rights
aa222 respects your right to control your own personal data. The following rights are available to all registered players. To exercise any of these rights, please contact aa222 support at [email protected] (plain text — not a clickable link). aa222 will respond to all valid requests within 30 days of receipt.
Right of Access
You have the right to request a copy of all personal data that aa222 holds about you. Upon receiving a verified access request, aa222 will provide you with a structured data export in a readable format. For security purposes, we will verify your identity before processing any access request.
Right to Rectification
If any personal data that aa222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data fields (such as email address) directly through your Account Settings. For corrections to identity data (such as your registered name or date of birth), please contact support and provide supporting documentation.
Right to Erasure
You have the right to request that aa222 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based. Please note that this right is subject to legal retention obligations: aa222 is required to retain transaction records and identity documents for minimum statutory periods regardless of an erasure request. Where erasure is not possible in full, aa222 will anonymise your data to the maximum extent possible.
Right to Restriction of Processing
You have the right to request that aa222 restrict the processing of your data in specific circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed. During a restriction period, aa222 will continue to store the data but will not actively process it except for storage purposes.
Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to request that it be transmitted to another controller where technically feasible.
Right to Object
You have the right to object to processing carried out on the basis of aa222's legitimate interests — including processing for direct marketing purposes, profiling for personalisation, and responsible gaming monitoring. Where you object to direct marketing, aa222 will cease that processing immediately. Where you object to other legitimate-interest processing, aa222 will assess the objection and respond within 30 days.
Right to Withdraw Consent
Where aa222 processes your data on the basis of your consent (for example, marketing communications or personalised recommendations), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawing consent will not affect your ability to use the core aa222 platform services.
Section 7
Minors & Age Verification
aa222 takes its obligations with respect to minors extremely seriously. As part of our KYC process, all players are required to verify their age prior to their first withdrawal by submitting a valid government-issued photo ID confirming their date of birth. We apply additional behavioural monitoring to detect patterns that may suggest a player's age has been misrepresented during registration.
If aa222 becomes aware, or has reasonable grounds to believe, that a player is under 18 years of age, we will immediately suspend the account, freeze all associated funds, and initiate an investigation. If the investigation confirms the player is a minor, all deposits will be returned to the originating payment method and any winnings accrued will be permanently forfeited. The account will be permanently closed with no possibility of reinstatement.
aa222 strongly encourages parents and guardians to use device-level parental controls — available in Android settings (Digital Wellbeing) and iOS (Screen Time) — to prevent minors from accessing online gaming platforms on shared or family devices. If you believe a minor may have registered an account on aa222 using false information, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
aa222 does not knowingly market to individuals under 18 years of age. Our promotional materials are designed for and directed exclusively at adults. Any marketing channel that aa222 uses is subject to age-screening protocols consistent with this commitment.
Section 8
Policy Updates & Contact
aa222 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, improvements to our security practices, or updates to applicable law. When material changes are made to this policy, aa222 will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this page. We encourage you to revisit this page periodically to stay informed about how aa222 protects your data.
Your continued use of aa222 following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revised version of this policy, you should stop using the platform and contact support to arrange account closure and data handling in accordance with your rights as described in Section 6 above.
Previous Versions
aa222 maintains an archive of previous versions of this Privacy Policy. If you wish to review a prior version, please contact the support team with the version date you require and we will provide it upon request.
Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way aa222 handles your personal data, please contact our dedicated privacy support team. All privacy-related enquiries will be acknowledged within 2 business days and fully responded to within 30 calendar days.
Your Privacy Is Protected at aa222
Now that you understand how aa222 safeguards your data, explore everything our platform has to offer. Enjoy 500+ casino games, live BPL and T20 cricket betting, and lightning-fast bKash and Nagad transactions — all on a platform built for Bangladeshi players. 18+ only. Please play responsibly.