Privacy Policy — eg22
Your Data, Protected

1Introduction

eg22 is committed to protecting the privacy and security of every player who uses our platform. This Policy applies to all personal data collected through the eg22 website, mobile interface, customer support channels, and any other interaction you have with eg22 as a registered or prospective player in Bangladesh.

We operate the eg22 Platform as an online betting and casino service targeting players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All personal data is processed in connection with the provision of sports betting, live casino, slots, and associated payment services denominated in Bangladeshi Taka (৳).

This Policy should be read alongside the eg22 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If any provision of this Policy conflicts with any provision of the Terms and Conditions, the Terms and Conditions shall prevail to the extent of the inconsistency.

2Data We Collect

eg22 collects the following categories of personal data from players and prospective players:

• Identity Data: Full legal name, date of birth, gender, nationality, and national identification number or passport number provided during registration or KYC verification.
• Contact Data: Residential address in Bangladesh, mobile phone number, and email address registered to your account.
• Financial Data: bKash account number, Nagad account number, Rocket wallet number, Upay details, Dutch-Bangla Bank or other bank account details used for deposits and withdrawals. We do not store full card numbers for any Visa or Mastercard transactions.
• Account Data: Username, encrypted password, account preferences, self-exclusion status, deposit limit settings, session time settings, and communication preferences.
• Transaction Data: Details of all deposits, withdrawals, bonuses claimed, wagers placed, games played, and winnings received on the eg22 Platform.
• Technical Data: IP address, browser type and version, device type, operating system, time zone, and cookies or similar identifiers associated with your device and sessions.
• Usage Data: Pages visited, games accessed, betting markets viewed, session duration, click paths, and search queries made within the Platform.
• Communications Data: Records of any communications you send to eg22 customer support, including live chat transcripts, email correspondence, and support ticket content.
• Verification Documents: Scans or photographs of identity documents submitted for KYC purposes, including national IDs, passports, and proof of address documents.

3How We Collect Your Data

eg22 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical data and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and session tracking scripts. See Section 7 for our full Cookies policy.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment processing partners when you initiate a financial transaction on the Platform.
• Identity verification providers: Results and data outputs received from third-party KYC and age verification service providers when your identity documents are checked.
• Fraud prevention services: Device fingerprinting and behavioural signals received from fraud detection partners used to identify and prevent account abuse, multi-accounting, and bonus exploitation.
• Game studios: Game session data and round outcomes provided by game studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used for dispute resolution and fair play auditing purposes.

4How We Use Your Data

eg22 uses your personal data for the following purposes. We process data only where a valid legal basis exists, as described in Section 5:

• Account management: Creating and maintaining your player account, authenticating your identity at login, and managing account settings and preferences.
• Service delivery: Enabling you to place bets, access casino games, claim bonuses, make deposits and withdrawals, and use all features of the eg22 Platform.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other approved payment methods, and maintaining transaction records in BDT.
• Identity and age verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity as part of our KYC obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming: Monitoring for signs of problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and reaching out proactively where our responsible gaming tools indicate a player may need support.
• Customer support: Responding to your queries, resolving disputes, processing account closure requests, and maintaining records of communications for quality assurance.
• Legal compliance: Meeting our obligations under applicable anti-money laundering regulations, responding to lawful requests from regulatory authorities, and maintaining required financial records.
• Platform improvement: Analysing aggregated usage data to improve the user experience, fix technical issues, and develop new features and game offerings.
• Marketing (with consent): Sending promotional offers, bonus notifications, and seasonal promotions related to BPL, IPL, T20 World Cup, Eid, and Pohela Boishakh where you have opted in to receive such communications.

5Legal Basis for Processing

eg22 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration, including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering checks, age verification, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of eg22's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics, where those interests are not overridden by your data protection rights.
• Consent: Processing for marketing and promotional communications, and any other processing activity for which we have obtained your explicit, freely given, and revocable consent at the time of collection.

6Data Sharing & Disclosure

eg22 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients strictly to the extent necessary to deliver services, meet legal obligations, or protect the integrity of the Platform:

• Payment processors: bKash, Nagad, Rocket, Upay, and other approved payment partners receive the minimum data necessary to process your deposit or withdrawal transactions. These partners operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC and age verification service providers receive your identity document data solely for the purpose of confirming your eligibility to use the Platform.
• Game studio partners: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers receive session identifiers and game-round data necessary to deliver game content and resolve technical disputes.
• Fraud prevention and security partners: Third-party fraud detection and device intelligence providers receive technical data to help identify and prevent prohibited conduct on the Platform.
• Legal authorities: eg22 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of law where required to do so by a valid legal order, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
• Business successors: In the event of a merger, acquisition, or sale of all or part of eg22's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

7Cookies & Tracking Technologies

eg22 uses cookies and similar tracking technologies to provide, maintain, and improve the Platform. A cookie is a small text file placed on your device by a website. The following categories of cookies are used on the eg22 Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impairing core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, account display preferences, and the last game category you visited. Disabling these may affect your user experience but will not prevent you from using the Platform.
• Analytics cookies: Collect aggregated and anonymised information about how players navigate and interact with the Platform. This data is used internally to improve page layouts, game discovery, and support workflows.
• Marketing and retargeting cookies: Used only where you have consented to receive personalised promotional content. These cookies help us deliver relevant bonus offers and seasonal promotions based on your activity patterns.

You may manage your cookie preferences through your browser settings. Blocking all cookies will prevent you from logging in to your eg22 account, as session cookies are strictly necessary for account authentication. eg22 does not currently support a cookie preference centre within the Platform itself; browser-level controls are the primary mechanism available to you.

8Data Security

eg22 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the eg22 Platform.
• Encrypted storage of account passwords using industry-standard hashing algorithms. eg22 staff cannot view your password in plain text.
• Access controls that restrict employee access to personal data on a strict need-to-know basis, with audit logging of all access events.
• Regular security assessments and vulnerability testing of the Platform infrastructure.
• Segregated storage of financial data, identity documents, and gameplay records to minimise the impact of any potential security incident.
• Incident response procedures for detecting, containing, and notifying players of any data breach that poses a risk to their rights and freedoms.

While eg22 takes all reasonable precautions to secure your personal data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for using a secure, private device and network connection when accessing the eg22 Platform. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

9Data Retention

eg22 retains personal data for the following periods, subject to any overriding legal obligation to retain data for longer:

• Active account data: Retained for the full duration that your account remains open and active on the Platform.
• Transaction and financial records: Retained for a minimum of 7 years following the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the date the document was verified, whichever is later.
• Customer support records: Retained for 3 years from the date the support interaction was closed, to allow for follow-up and dispute resolution.
• Marketing consent records: Retained for the duration of your account plus 2 years following account closure, to evidence consent and process any opt-out requests.
• Responsible gaming records: Self-exclusion records are retained indefinitely to prevent re-registration in violation of a self-exclusion commitment. Other responsible gaming interaction records are retained for 5 years.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10Your Data Rights

As a player on the eg22 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 14 business days.

• Right of access: You may request a copy of all personal data we hold about you, together with information about how it is used and with whom it is shared.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held in your account. Minor corrections (e.g., phone number updates) can be made directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal obligation requiring us to retain the data for a defined period.
• Right to restrict processing: You may request that we temporarily suspend processing of your personal data while a correction or deletion request is under review.
• Right to data portability: You may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud prevention or personalised marketing, where you have grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time with immediate effect for future processing, without prejudice to processing already carried out.

11Children & Minors

The eg22 Platform is strictly for adults aged 21 years and above. eg22 does not knowingly collect personal data from any person under the age of 21. Age verification checks are performed at account registration and may be repeated at any point during a player's use of the Platform.

If eg22 becomes aware or has reasonable grounds to believe that an account has been registered or used by a person under the age of 21, we will immediately suspend the account, conduct an investigation, and close the account permanently if the minimum age requirement is not met. All funds deposited by or on behalf of a minor will be returned to the verified payment method and no winnings from wagers placed during the period of underage use will be paid out.

If you are a parent or guardian and believe that a minor in your care has registered or used the eg22 Platform, please contact us immediately at [email protected]. We will investigate and act on all such reports promptly and in strict confidence.

12Marketing Communications

eg22 may send you promotional communications about bonuses, new games, seasonal offers, and platform updates where you have provided your explicit consent to receive such communications at the time of registration or subsequently through your account settings.

Marketing communications from eg22 may be delivered by email and SMS to the contact details registered to your account. We may personalise these communications based on your gameplay history, preferred sports markets (such as BPL cricket, IPL, or T20 World Cup betting), and deposit behaviour, in order to ensure that the offers we send you are relevant to your interests.

• You may opt out of all marketing communications at any time by updating your preferences in your account settings or by contacting [email protected].
• Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, password reset emails, or responsible gaming alerts, which are sent regardless of marketing preference.
• eg22 does not share your contact details with third parties for their own direct marketing purposes.
• Seasonal marketing communications may be sent around Eid, Pohela Boishakh, BPL season, IPL season, and T20 World Cup where you have not opted out. These are considered promotional communications and subject to the same opt-out mechanism.

13Third-Party Links

The eg22 Platform does not include links to external third-party websites. All content, games, and features accessible via eg22.io are either operated directly by eg22 or delivered through embedded integrations with licensed game studio partners. This Privacy Policy applies solely to the eg22 Platform and does not cover any third-party websites, payment provider portals, or services that you may access independently outside of the eg22 Platform.

When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or another payment partner, you may be redirected to or interact with that provider's own interface, which is subject to the provider's own privacy policy. eg22 accepts no responsibility for the data practices of third-party payment providers in respect of interactions that occur outside the eg22 Platform environment.

14Updates to This Policy

eg22 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make a material change to this Policy, we will publish the updated version on the eg22 Platform with a revised effective date. For significant changes, we will also notify registered players by email to the address on their account.

Your continued use of the eg22 Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update, you have the right to close your account and request deletion of your data by contacting [email protected]. The version of this Policy in force at the time of any dispute shall govern that dispute.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way eg22 handles your personal data, please contact our dedicated data support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 3 business days.

Data enquiries email: [email protected] — please copy this address into your email client. Email addresses on this page are displayed as plain text and are not clickable links.

When submitting a data rights request, please include your registered username, the mobile number associated with your account, and a clear description of your request. This will allow us to locate your account and verify your identity as quickly as possible.

Live chat support is also available within the Platform when you are logged in to your eg22 account. For privacy or data-related matters, we recommend using email so that you retain a written record of the request and our response.