Privacy Policy — cc222 Platform

Welcome to cc222, Bangladesh's premier online betting and casino platform. cc222 ("we", "us", "our") takes the privacy of its users ("you", "your", "Player") seriously. This Privacy Policy sets out the basis on which we collect, use, store, and disclose personal data obtained through your use of the cc222 platform at cc222.io ("Platform").

By creating an account, accessing the Platform, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you should not access or use the Platform.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are available on the cc222 Platform. In the event of any conflict between this Privacy Policy and our Terms & Conditions regarding the handling of personal data, this Privacy Policy shall prevail.

cc222 collects personal data through several channels, including the account registration process, KYC verification submissions, payment transactions, customer support interactions, and your general use of the Platform. The categories of personal data we collect include:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity photographs required for KYC), or health information unless specifically required for responsible gaming self-exclusion requests.

cc222 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your cc222 account, process login authentication, and manage account preferences and settings.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity in compliance with our KYC obligations.
• Payment Processing: To process deposits, withdrawals, and refunds via your chosen payment method, and to maintain accurate transaction records.
• Anti-Money Laundering (AML): To monitor transactions for suspicious activity, conduct source-of-funds checks where required, and comply with applicable AML obligations.
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, enforce deposit and loss limits you have set, and administer cooling-off periods and self-exclusion requests.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, account takeover attempts, multi-accounting, and abuse of promotional offers.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account and payment issues.
• Service Communications: To send you transactional notifications, security alerts, account verification emails, and essential service updates. You may not opt out of transactional communications while your account is active.
• Marketing Communications: To send you promotional offers, bonus notifications, and tournament announcements where you have opted in to receive such communications. You may unsubscribe from marketing communications at any time.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving the cc222 user experience, game offering, and technical performance.

cc222 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide you with access to the cc222 Platform, process your bets and transactions, and manage your account.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC/AML requirements, age verification mandates, and record-keeping obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, responsible gaming enforcement, and platform optimisation, provided such interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

cc222 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your personal data with carefully selected third-party service providers who assist us in operating the Platform, subject to strict data processing agreements that prohibit those providers from using your data for any purpose other than the specific services they provide to us. Categories of third-party recipients include:

• Game Providers: Licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their game content and ensure fair play certification.
• Payment Processors: bKash, Nagad, Rocket, Upay, USDT network operators, Visa, and Mastercard receive the financial data necessary to process your transactions.
• Identity Verification Services: Third-party KYC and AML service providers receive identity document data and biometric photographs to conduct verification checks on our behalf.
• Fraud Prevention Services: Specialist fraud detection providers may receive technical and usage data to help identify and prevent fraudulent account activity.
• IT Infrastructure Providers: Cloud hosting and server infrastructure providers who store Platform data under strict security and confidentiality obligations.
• Legal & Regulatory Authorities: Where required by law or court order, cc222 may disclose personal data to relevant law enforcement agencies, regulatory bodies, or judicial authorities. We will notify you of such disclosures where we are legally permitted to do so.

All third-party service providers engaged by cc222 are contractually required to implement appropriate technical and organisational security measures to protect your personal data and to process it solely for the purposes specified by cc222.

cc222 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session authentication, and collect aggregated analytics data. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting core functionality.
• Functional Cookies: Store your preferences such as language settings, preferred payment methods, and last-played games to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and error rates — to help us improve the service.
• Security Cookies: Help detect and prevent fraudulent login attempts, account takeovers, and bot activity on the Platform.

Most web browsers allow you to manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including the ability to log in to your account.

cc222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and cc222 servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised cc222 personnel can access personal data, limited to what is necessary for their specific job function.
• Regular penetration testing and vulnerability scanning of the Platform infrastructure.
• Intrusion detection systems and 24/7 security monitoring of server environments.
• Multi-factor authentication requirements for all internal staff access to systems holding personal data.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cc222 will notify affected users without undue delay.

You are responsible for maintaining the confidentiality of your account password and for ensuring that your device is adequately protected. cc222 strongly recommends using a unique, strong password for your cc222 account and enabling two-factor authentication where available.

cc222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to provide you with our services, and to comply with applicable legal and compliance obligations. Our general retention schedule is as follows:

• Active Account Data: Retained for the duration of your account's active status plus a minimum post-closure retention period as required by applicable AML and financial record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five years following the date of each transaction, in compliance with anti-money laundering requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five years following account closure or the completion of the relevant transaction, whichever is later.
• Support Communications: Customer support correspondence is retained for a minimum of two years from the date of the last interaction, for dispute resolution and training purposes.
• Technical & Usage Logs: Server logs and session data are retained for up to 12 months for security and fraud prevention purposes, after which they are anonymised or deleted.
• Inactive Accounts: Accounts with no login activity for 24 consecutive months are flagged for review. cc222 will contact the registered email address before initiating any data deletion process.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

As a registered user of the cc222 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we temporarily stop processing your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as the legal basis, or where data is being used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

cc222 aims to respond to all privacy rights requests within 14 calendar days. In complex cases, we may extend this period by an additional 14 days, in which case we will notify you of the extension and the reason for it.

The cc222 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately close the associated account, delete the personal data, and retain only the minimum information required to prevent future registration by that individual.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the cc222 Platform, please contact us immediately at [email protected] so that we can take prompt action.

The cc222 Platform does not contain links to third-party websites for general browsing purposes. However, in the course of payment processing, you may be redirected to the secure interfaces of payment providers such as bKash, Nagad, or Rocket to complete a transaction. These providers operate their own privacy policies, which govern the data they collect during the payment process.

cc222 is not responsible for the privacy practices or content of any third-party service to which you are redirected as part of the payment process. We recommend reviewing the privacy policy of any payment provider before completing a transaction.

In order to operate the Platform and deliver our services, some of your personal data may be processed in countries other than Bangladesh. This may occur when data is processed by our game providers, payment processors, or cloud infrastructure providers, whose servers may be located outside Bangladesh.

Where personal data is transferred internationally, cc222 takes appropriate measures to ensure that the transfer is carried out in compliance with applicable data protection requirements and that your data receives an adequate level of protection. These measures include contractual data processing agreements with all international service providers, incorporating standard data protection clauses requiring them to implement appropriate security measures.

cc222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will display a prominent notice on the Platform and, where practicable, notify registered users via their registered email address. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent amendment.

Your continued use of the cc222 Platform following publication of any amendment to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment to this Privacy Policy, you should cease using the Platform and request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which cc222 handles your personal data, please contact our Data Protection team using the details below. All enquiries are handled in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Rights Request"
• Subject Line for Data Breach Reports: "URGENT — Data Security"
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Platform: cc222.io

cc222 aims to acknowledge all privacy-related enquiries within 24 hours of receipt and to provide a substantive response within 14 calendar days. For complex requests that require additional time, we will notify you of the extended timeline and the reason for it.