ct222 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "ct222", "we", "us", "our" — the ct222 online casino and sports betting platform operated at ct222.io and all associated services.
• "Player", "you", "your" — any individual who accesses the ct222 platform, whether as a registered account holder or as a visitor browsing without an account.
• "Personal Data" — any information that identifies or could identify a living individual, including name, mobile number, email address, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. ct222 is the data controller for all player data collected through the platform.
• "Third Party" — any natural or legal person other than you, ct222, or ct222's directly engaged service providers acting under ct222's written instructions.

2. Data Controller Identity

ct222 is the data controller responsible for personal data collected through the ct222 platform at ct222.io. ct222 determines the purposes for which personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

All data-related enquiries, subject access requests, rectification requests, erasure requests, and objections to processing should be directed to the ct222 support team using the contact details provided in Section 16 of this policy. ct222 will acknowledge all privacy-related correspondence within five business days.

3. Categories of Personal Data We Collect

ct222 collects the following categories of personal data from players:

3.1 Identity Data

• Full legal name as it appears on official identification documents
• Date of birth (collected to verify the 21+ age requirement)
• National ID card number, passport number, or other government-issued identifier (collected during KYC verification)
• Photograph or scanned copy of identity documents where submitted for verification

3.2 Contact Data

• Registered mobile phone number (including bKash, Nagad, or Rocket account numbers where these serve as both payment and contact identifiers)
• Email address, where provided during registration or account updates
• City or district of residence within Bangladesh (collected as part of account setup)

3.3 Financial Data

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) used to deposit or withdraw funds
• Bank card details (partial card number, card type, and expiry date) where Visa or Mastercard is used — ct222 does not store full card numbers
• Transaction history, including deposit amounts, withdrawal amounts, dates, and reference numbers

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation path through the ct222 platform
• Game play data including games accessed, bet amounts, wager outcomes, and session timestamps

3.5 Communications Data

• Content of live chat conversations with ct222 support agents
• Content of email correspondence sent to or received from ct222
• Complaint records and their resolution outcomes

4. How We Collect Your Data

ct222 collects personal data through the following means:

• Direct submission: Data you actively provide during account registration, KYC verification, deposit or withdrawal requests, support interactions, or promotional opt-ins.
• Automated technical collection: Data gathered automatically when you access the platform, including IP addresses, device data, session logs, and cookie data. See Section 8 for full details on cookies.
• Payment processors: Limited transaction confirmation data shared by bKash, Nagad, Rocket, Upay, or card payment processors to confirm deposit receipt or withdrawal completion.
• Identity verification providers: Confirmation data from third-party KYC verification services engaged to validate identity documents submitted by players.

5. Legal Bases for Processing

ct222 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
Age verification (21+ requirement)	Legal obligation and legitimate interests
KYC identity verification	Legal obligation (compliance)
Fraud prevention and security monitoring	Legitimate interests of ct222
Responsible gaming monitoring	Legitimate interests and legal obligation
Sending promotional communications	Consent (opt-in only)
Platform analytics and improvements	Legitimate interests of ct222
Compliance with legal and regulatory requests	Legal obligation

6. How We Use Your Personal Data

ct222 uses the personal data collected from players for the following specific purposes:

• Creating, verifying, and maintaining your ct222 player account
• Processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard
• Verifying your age and identity to comply with the 21+ requirement and KYC obligations
• Detecting and preventing fraud, collusion, money laundering, and other prohibited activities
• Monitoring gameplay patterns to identify problem gambling indicators and delivering responsible gaming interventions where appropriate
• Providing customer support via live chat and email, and maintaining records of support interactions
• Sending account-related notifications such as deposit confirmations, withdrawal updates, and security alerts
• Sending promotional communications where you have opted in to receive them
• Improving the ct222 platform through aggregated, anonymised usage analytics
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities

7. Sharing Your Data with Third Parties

ct222 does not sell personal data. Data is shared with third parties only in the following limited circumstances:

7.1 Payment Processors

Transaction data is shared with bKash, Nagad, Rocket, Upay, and card payment networks solely to initiate, confirm, and record deposit and withdrawal transactions. These providers act under contractual obligations to handle your data securely and to use it only for payment processing purposes.

7.2 Identity Verification Providers

Where ct222 engages a third-party identity verification service to conduct KYC checks, identity document data is shared with that provider under a strict data processing agreement. The provider is permitted to use the data solely for the purpose of performing the verification check requested by ct222.

7.3 Legal and Regulatory Disclosure

ct222 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where required to do so by law, by court order, or where ct222 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to any person.

7.4 Business Continuity

In the event of a merger, acquisition, or sale of all or substantially all of ct222's assets, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance of any such transfer and advised of any changes to this Privacy Policy that result from it.

8. Cookies and Tracking Technologies

The ct222 platform uses cookies and similar tracking technologies to provide core platform functionality, maintain your login session, remember your preferences, and generate anonymised analytics that help us improve the player experience.

8.1 Essential Cookies

These cookies are required for the ct222 platform to function correctly. They enable session management, login authentication, and security features. Essential cookies cannot be disabled without impairing platform functionality.

8.2 Analytics Cookies

ct222 uses aggregated, anonymised analytics data to understand how players navigate the platform, which games are most popular, and where technical issues may be occurring. Analytics data does not identify individual players and is used solely for platform improvement purposes.

8.3 Preference Cookies

Preference cookies remember your selected language, display settings, and other user preferences so that you do not need to reconfigure them each time you visit the ct222 platform.

8.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please be aware that disabling essential cookies will impair your ability to log in and use the ct222 platform. Disabling analytics or preference cookies will not affect your ability to place bets or access games.

9. Data Retention

ct222 retains personal data for the periods set out below. Once a retention period expires, data is securely and permanently deleted from ct222's systems unless a specific legal obligation requires further retention.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	Legal obligation / dispute resolution
KYC / identity verification documents	Duration of account + 5 years post-closure	Legal obligation
Transaction records	7 years from transaction date	Legal obligation (financial records)
Support interaction records	3 years from date of interaction	Legitimate interests / dispute resolution
Technical / session logs	12 months from date of collection	Legitimate interests (security / analytics)
Marketing consent records	Duration of consent + 3 years	Legal obligation (consent evidence)

10. Data Security

ct222 implements a layered security architecture to protect player data against unauthorised access, accidental loss, disclosure, or destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and the ct222 platform
• Encrypted storage of sensitive data fields including payment details and identity document references
• Role-based access controls ensuring that ct222 staff can access only the data necessary for their specific job function
• Regular internal security audits and vulnerability assessments
• Multi-factor authentication requirements for ct222 administrative systems
• Incident response procedures for identifying, containing, and reporting any data security breaches

In the event of a data security incident that materially affects your personal data, ct222 will notify affected players without undue delay and provide clear guidance on any steps you should take to protect yourself.

11. Children's Privacy and the 21+ Requirement

The ct222 platform is strictly for individuals aged 21 years or older. ct222 does not knowingly collect personal data from any person under the age of 21. If ct222 becomes aware that personal data has been submitted by or on behalf of a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

Parents or guardians who believe that a minor may have accessed the ct222 platform or submitted personal data are encouraged to contact the ct222 support team immediately so that appropriate action can be taken without delay.

12. Exercising Your Data Rights

To exercise any of the data rights described in the feature section above — including access, rectification, erasure, restriction, portability, or objection — please contact the ct222 support team using the details in Section 16. To protect your privacy, ct222 will verify your identity before processing any data subject request. Requests are processed within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

There is no charge for exercising your data rights. Where requests are clearly unfounded or excessive — particularly where they are repetitive in nature — ct222 reserves the right to charge a reasonable administrative fee or decline to act on the request, and will explain the reason for doing so.

13. Marketing Communications

ct222 sends promotional communications — including bonus offers, game notifications, and seasonal promotions — only to players who have expressly opted in to receive them during registration or via their account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings panel or by contacting the support team directly.

Account-related communications — such as deposit confirmations, withdrawal updates, KYC requests, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

14. International Data Transfers

ct222 primarily processes and stores player data within server infrastructure serving the Bangladesh market. Where technical service providers engaged by ct222 — such as identity verification or payment processing partners — operate systems outside Bangladesh, ct222 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.

ct222 will not transfer personal data to any jurisdiction that does not offer an adequate level of data protection without first implementing appropriate protective measures and, where required, obtaining your prior consent.

15. Changes to This Privacy Policy

ct222 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, technology, legal requirements, or service offerings. Material changes will be communicated to registered players via SMS or email to the contact details on file at least seven days before the revised policy takes effect.

The effective date displayed at the top of this document reflects the date of the most recent revision. Continued use of the ct222 platform after a policy update constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account and withdraw your remaining balance before the change takes effect by contacting support.

16. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to how ct222 handles your personal data, please contact the ct222 privacy and data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700-000222 (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Response Target for Privacy Requests: 5 business days for acknowledgement; 30 days for full response