be22 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") sets out in full detail how be22 ("be22", "we", "us", "our") collects, receives, stores, uses, discloses, and otherwise processes personal data relating to individuals ("you", "your", "Player", "User") who access or use the be22 platform at https://be22.io, including all associated services such as sports betting, live casino, slot games, promotional offers, and customer support communications.

be22 is committed to handling your personal data lawfully, fairly, and transparently. We recognise that privacy is a fundamental right, and we have designed our data practices to reflect that commitment. This Policy is intended to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the be22 platform.

By creating a be22 account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the be22 platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which together form the full agreement governing your relationship with be22.

2. Data Controller

be22 acts as the data controller in respect of all personal data collected from players who use the be22 platform. As data controller, be22 determines the purposes for which personal data is collected and the means by which it is processed. All data-related enquiries, access requests, correction requests, and deletion requests should be directed to be22's support team at the contact details provided in Section 15 of this Policy.

Where be22 engages third-party service providers — including payment processors, KYC verification partners, and game providers — those parties act as data processors on be22's behalf and are contractually required to process personal data only in accordance with be22's instructions and this Policy.

3. Personal Data We Collect

Depending on how you interact with the be22 platform, we may collect the following categories of personal data:

3.1 Identity Data

Full legal name, date of birth, gender, nationality, and a copy of your government-issued identification document (such as your Bangladesh National Identity Card, passport, or driving licence) where required for KYC verification.

3.2 Contact Data

Mobile phone number, email address (if provided), and city or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).

3.3 Account Data

Username, hashed password, account registration date, account status, login history, and any preferences or settings you configure within your be22 account.

3.4 Financial Data

Payment method details sufficient to process deposits and withdrawals — including bKash mobile wallet number, Nagad account reference, Rocket account reference, Upay reference, or bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank. be22 does not store full card numbers or banking credentials — payment data is handled directly by the respective payment provider under their own security protocols.

3.5 Transaction Data

Records of all deposits, withdrawals, bets placed, casino game rounds played, bonuses claimed, and promotional credits applied to your account. Transaction records include amounts in BDT (৳), timestamps, and payment method references.

3.6 Technical Data

IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and session duration data collected automatically when you access the be22 platform.

3.7 Behavioural Data

Clickstream data, pages visited, games played, bet types selected, search queries within the platform, and feature usage data that helps be22 understand how players use the platform and identify areas for improvement.

3.8 Communications Data

Records of any communications you send to or receive from be22's support team, including support tickets, live chat transcripts (where applicable), and email correspondence.

3.9 Responsible Gaming Data

Records of any deposit limits, session time reminders, self-exclusion requests, or reality check settings you have configured, maintained separately to ensure your responsible gaming preferences are consistently respected across all sessions.

The table below summarises the data categories, examples, and their primary use:

4. How We Collect Your Data

be22 collects personal data through the following methods:

• Direct Submission: Information you voluntarily provide during account registration, KYC verification, payment setup, or when contacting support.
• Automated Technical Collection: Data collected automatically when you visit or use the be22 platform, including IP address, device identifiers, and session behaviour, via server logs and analytics tools.
• Cookies and Similar Technologies: First-party cookies and session tokens that allow the platform to function correctly, maintain your login session, and remember your preferences. See Section 9 for full cookie details.
• Payment Providers: Limited transaction confirmation data shared by payment processors (bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners) to verify that a deposit or withdrawal has been successfully processed.
• KYC Partners: Identity verification data returned from third-party KYC service providers when you submit identity documents for account verification.
• Game Providers: Round-level game data (bet amount, win/loss outcome, RTP data) provided by our game partners — Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — to maintain complete transaction records in your account history.

5. Purpose and Legal Basis for Processing

be22 processes your personal data only where a lawful basis exists for doing so. The purposes for which we process data, and the corresponding legal basis for each, are as follows:

• Account Registration and Platform Access: Processing is necessary for the performance of the contract between you and be22 (i.e., providing the betting and casino services you have registered to use).
• Payment Processing: Processing is necessary for the performance of a contract, specifically to facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, and banking partners.
• Identity Verification (KYC): Processing is necessary for compliance with legal obligations, including anti-money laundering (AML) requirements and age verification to enforce the 21+ minimum age policy.
• Fraud Detection and Security: Processing is carried out on the basis of be22's legitimate interest in protecting the platform, its players, and the integrity of financial transactions from fraud, money laundering, and unauthorised access.
• Responsible Gaming Monitoring: Processing is carried out on the basis of be22's legitimate interest in identifying patterns of behaviour that may indicate problem gambling, and in complying with responsible gaming obligations.
• Customer Support: Processing is necessary for the performance of the contract and on the basis of legitimate interest in maintaining accurate records of support interactions for quality assurance and dispute resolution.
• Platform Improvement and Analytics: Processing is carried out on the basis of be22's legitimate interest in understanding how the platform is used in order to improve services, fix technical issues, and optimise the user experience for Bangladeshi players.
• Marketing Communications: Where you have given explicit consent, be22 may send you promotional communications about offers, bonuses, and new features. You may withdraw consent at any time by contacting [email protected].

6. Data Sharing and Disclosure

be22 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

6.1 Payment Processors

bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners receive only the minimum data required to process your deposit or withdrawal transaction (typically your registered account reference and the transaction amount in BDT).

6.2 KYC and Identity Verification Providers

Third-party identity verification services receive copies of the documents you submit during KYC verification. These providers are contractually bound to process this data solely for identity verification purposes and to maintain appropriate security standards.

6.3 Game Providers

When you launch a casino game or slot title supplied by Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, or Spribe, a session token and player account reference are shared with the relevant provider to load the game and record the round outcome. No additional personal data (such as your full name or phone number) is shared with game providers.

6.4 Legal and Regulatory Authorities

be22 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, or where disclosure is necessary to prevent or detect criminal activity, including fraud and money laundering.

6.5 Professional Advisers

be22 may share personal data with external legal counsel, auditors, or other professional advisers under strict confidentiality obligations where necessary to obtain professional advice or to establish, exercise, or defend legal claims.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of be22's business assets, personal data held by be22 may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to how your data will be processed as a result.

7. Data Retention

be22 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and thereafter for as long as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply as a general guide:

• Account Data and Transaction Records: Retained for a minimum of 5 years from the date of the last transaction on your account, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents (Identity Verification): Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Communications Data (Support Tickets): Retained for 3 years from the date of the most recent communication in a thread.
• Technical and Behavioural Data (Logs): Retained for 12 months from the date of collection, unless extended due to an ongoing investigation or security incident.
• Responsible Gaming Records: Retained for the full duration of a self-exclusion period and for 5 years thereafter, to ensure exclusion preferences are honoured if you attempt to re-register.
• Marketing Consent Records: Retained until you withdraw consent, plus 2 years thereafter as evidence of the consent record.

Upon expiry of the applicable retention period, personal data is securely deleted from be22's systems or, where deletion is not technically feasible (for example, in backup archives), anonymised so that it can no longer be associated with you as an individual.

8. Security Measures

be22 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and be22's servers is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored in hashed form using a robust cryptographic algorithm. be22 staff cannot view your plaintext password at any time.
• Access Controls: Access to personal data within be22's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations.
• Secure Payment Routing: Payment transactions via bKash, Nagad, Rocket, and banking partners are processed through encrypted, tokenised payment channels. be22 does not store raw payment credentials on its servers.
• Intrusion Detection: be22's infrastructure is monitored for unusual access patterns, potential intrusion attempts, and suspicious activity around the clock.
• Regular Security Reviews: be22 conducts periodic reviews of its data security practices and updates them as necessary to address evolving threats.

Despite these measures, no data transmission over the internet is entirely free from risk. be22 cannot guarantee the absolute security of data transmitted to or from the platform. You transmit data at your own risk, and be22 asks that you also take steps to protect your account by using a strong, unique password and by keeping your login credentials confidential.

9. Cookies and Tracking Technologies

be22 uses first-party cookies and similar session technologies to operate the platform correctly and to provide a personalised and secure experience for players in Bangladesh. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the be22 platform to function. They enable core features such as maintaining your login session, keeping your account balance up to date, and ensuring that security tokens are validated on each page load. The platform cannot operate without these cookies and they do not require your consent.

9.2 Functional Cookies

These cookies remember preferences you have set within your account — such as your preferred language (English), preferred currency display (BDT), and any responsible gaming settings you have configured. They improve your experience by reducing the need to reconfigure preferences each time you visit.

9.3 Analytics Cookies

be22 uses anonymised analytics data to understand how players navigate the platform, which game categories are most popular, and where technical issues may be occurring. Analytics data is aggregated and cannot be used to identify you as an individual. You may opt out of analytics cookies by contacting [email protected].

9.4 Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to block, delete, or receive alerts about cookies. However, blocking strictly necessary cookies will prevent the be22 platform from functioning correctly — you will not be able to log in or place bets if strictly necessary cookies are disabled. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10. Your Data Rights

be22 respects your rights over your personal data. You may exercise any of the following rights at any time by submitting a written request to [email protected]. be22 will respond to all valid requests within 30 days of receipt, and will notify you if additional time is required for complex requests.

• Right of Access: You have the right to request a copy of all personal data be22 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data be22 holds about you. You may also update certain account details directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that be22 may be required to retain certain data for legal or compliance reasons notwithstanding an erasure request — we will inform you of any such exceptions at the time of your request.
• Right to Restriction of Processing: You have the right to request that be22 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering whether our legitimate interests override your objection.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to be22 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where be22 relies on legitimate interests as its legal basis, and where you believe your individual rights and interests override those legitimate interests. You have an absolute right to object to processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where be22 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact be22 at [email protected]. You will be asked to verify your identity before we process your request, to ensure that we do not disclose or modify data in response to a request from an unauthorised individual.

11. Minors and Age Restriction

The be22 platform is strictly for adults aged 21 years and above. be22 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not access or use the be22 platform, create an account, or submit any personal data to be22.

If be22 becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated data will be securely deleted, and any funds deposited may be refunded to the original payment method following investigation, less any bonuses or promotional credits.

If you believe that a minor may have created an account on be22, please notify us immediately at [email protected] so that we can take swift action to close the account and protect the minor's data.

12. Third-Party Links and Services

The be22 platform may contain references to or integrations with third-party services — including game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — whose own privacy policies govern how they handle any data collected within their game environments. be22 is not responsible for the privacy practices of these third-party providers, and we encourage you to review their respective privacy policies before submitting any personal information within a third-party game environment.

be22 does not include outbound links to external websites from its platform. All navigation within be22 remains within the be22.io domain. If you navigate away from be22.io independently, the privacy practices of any third-party site you visit are entirely outside be22's control and responsibility.

13. International Data Transfers

be22 is operated as an international online gaming platform. As a result, your personal data may be processed and stored on servers or systems located outside Bangladesh. Where personal data is transferred to a jurisdiction that does not offer the same level of data protection as Bangladesh, be22 ensures that appropriate safeguards are in place — including contractual data processing agreements with third-party processors — to protect your data to a standard equivalent to the protections described in this Policy.

be22's game provider partners — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — operate globally, and the session data associated with your game play may be processed on servers in their respective operating jurisdictions. be22 maintains data processing agreements with each game provider that restrict their use of player data to the purposes described in this Policy.

14. Changes to This Privacy Policy

be22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes — such as changes to the categories of data we collect, new sharing arrangements with third parties, or changes to your rights — will be communicated to registered players via the phone number or email address on file, or by a prominent notice on the be22 platform, at least 7 days before the change takes effect.

Minor clarifications, typographical corrections, and non-material updates may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the be22 platform after an updated Policy has taken effect constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how be22 is protecting your data. The current version of this Policy is always available at https://be22.io/privacy-policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to be22's handling of your personal data, please contact our support team. All privacy-related enquiries are treated confidentially and with priority.

Email: [email protected]
Support Hours: 24 hours a day, 7 days a week
Response Time: Within 24 hours (Bangladesh Standard Time, UTC+6)
Language: English

When submitting a data rights request (access, rectification, erasure, portability, objection), please include your registered phone number and a brief description of your request so that we can verify your identity and process your request as efficiently as possible.

For responsible gaming assistance, please also visit our dedicated Responsible Gaming page, where you will find self-exclusion tools, deposit limits, and guidance for players who may be experiencing difficulties with gambling.