Cd22's Privacy Policy
— Your data, our responsibility

Cd22 (cd22.bar) is a licensed online gaming platform fully committed to protecting the privacy of its users. This Privacy Policy explains what personal information cd22 collects, how it is used, who it is shared with, and what rights you have over your data.

This Privacy Policy applies to the cd22 website, mobile app, and all digital services. By creating an account on cd22 or continuing to use the platform, you are considered to have accepted this Privacy Policy. Please read it carefully before using the platform for the first time.

Cd22 complies with international data protection standards and handles information in accordance with the principles of the GDPR (General Data Protection Regulation). We also adhere to the local Digital Security Act applicable to users in Bangladesh.

Cd22 collects several types of information — some you provide directly, and some is collected automatically. A full breakdown is listed below:

Cd22 never stores your full card number, CVV, or PIN. Payment information is handled directly through PCI-DSS certified payment processors.

Cd22 collects information through various methods. Each method is transparent and based on your consent:

• Provided Directly: Information you provide during registration, KYC verification, or when contacting support.
• Automatically Collected: While using the platform — via log files, cookies, session data, and similar means.
• From Third Parties: Verification information from identity verification services or payment providers.
• Public Sources: Review of public records to meet legal compliance requirements.

Cd22 uses your information only for specific, legitimate purposes. We never use your data for anything unnecessary. The primary purposes are:

• Account management: Registration, login, password reset, and profile updates.
• Identity Verification (KYC): Age and identity verification to comply with online gaming regulations.
• Financial Transactions: Processing deposits and withdrawals, and maintaining transaction records.
• Customer Support: Resolving your complaints, questions, and issues.
• Security: Detecting fraud, preventing account hacking, and stopping money laundering.
• Platform Development: Analyzing user experience to improve our services.
• Legal compliance: Meeting regulatory requirements and complying with tax obligations.
• Marketing (Optional): To keep you informed about cd22 promotions and offers, with your consent.

Cd22 never uses your data beyond its original purpose. If we ever need to use it for a new purpose in the future, we will notify you in advance and obtain fresh consent where required.

Cd22 does not sell your personal information to third parties. However, limited data may be shared in specific circumstances:

• Payment Provider: bKash, Nagad, Rocket, and other payment gateways — only the information necessary to complete transactions.
• KYC service provider: Licensed third-party agencies for identity verification.
• Legal authorities: Upon a valid court order or lawful request from a government authority.
• Game Providers: Limited data required to operate specific games.
• Security Partners: Trusted security partners for fraud prevention and cyber attack protection.

All third parties that cd22 works with are contractually bound to uphold cd22's strict privacy standards. Under no circumstances may they use your data for their own marketing or any other purpose.

Cd22 uses cookies and similar technologies on its website and app. Cookies are small text files stored on your device. cd22 uses the following types of cookies:

• Essential cookies: To maintain login sessions and ensure security. These cannot be disabled.
• Functional Cookies: To remember your language, theme, and preferences.
• Analytics Cookies: To understand which pages users are visiting and to improve the platform.
• Security Cookies: To detect fraud and unauthorized access.

You can disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some cd22 features. cd22 does not use tracking cookies from third-party advertising networks.

Cd22 does not retain your data longer than necessary. Specific retention periods are defined for each category of information:

• Account information: For the duration of the active account and 5 years after closure (legal obligation).
• Financial Transaction Records: 7 years (tax and legal requirements).
• KYC documents: 5 years after account closure.
• Gaming History: For the duration of the active account and 2 years after closure.
• Log Files & Technical Data: Up to 12 months.
• Marketing Preferences: Until you withdraw your consent.

Once the retention period has passed, cd22 securely deletes or anonymizes your data so that it can no longer be used to identify you.

As a cd22 user, you have important rights over your own data. These are outlined in full below:

Cd22 applies industry-leading security measures to keep your data safe. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and cd22 servers is fully encrypted.
• Password Hashing: Your password is stored as a bcrypt hash — it cannot be read by anyone in plain text.
• Two-Factor Authentication (2FA): You can enable 2FA to add an extra layer of security to your account.
• Firewall & DDoS Protection: Advanced server-level firewall and intrusion prevention systems.
• 24/7 Security Monitoring: To detect and block suspicious activity in real time.
• Regular Security Audits: Regular audits conducted by external security experts.
• Data Backup: Regular backups are maintained on encrypted, secure servers.

However, no system on the internet can guarantee 100% security. In the event of a data breach, cd22 will notify affected users as quickly as possible and take the necessary steps. To keep your account secure, use a strong password and never share it with anyone.

Cd22 is an adult gaming platform. No one under the age of 18 is permitted to use cd22. We do not knowingly collect any information from minors.

Age is verified at registration and confirmed through identity documents during the KYC process. If we become aware that a minor has created an account, that account will be closed immediately and all associated data will be deleted.

Cd22 may update this Privacy Policy from time to time. Changes may be driven by new legal requirements, the introduction of new services, or updates to our operations.

Before any significant changes, cd22 will notify you by email or via an on-platform notification. The effective date of any update will always be shown at the top of this page.

• Minor changes (spelling, formatting): will take effect without separate notification.
• Minor changes: a notice will be posted on the platform.
• Major changes (new data usage): you will be notified in advance by email, and fresh consent will be obtained where required.

Continued use of cd22 after any changes to this policy will be considered acceptance of the updated terms. If you do not agree with the changes, you may request to close your account at any time.

For any questions, complaints, or requests regarding this Privacy Policy, please contact the cd22 data protection team:

We typically respond within 24–48 hours. Complex requests may take up to 30 days.