Privacy Policy — tdb222

This Privacy Policy ("Policy") sets out the basis on which tdb222 ("tdb222", "we", "us", "our") processes the personal data of individuals ("you", "the Player", "User") who register for or otherwise use the services available at https://tdb222.app (the "Platform").

tdb222 is committed to handling personal data responsibly, in accordance with applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. The tdb222 Privacy Policy applies to all registered players, visitors browsing the Platform without an account, and individuals who contact tdb222's support team.

This Policy should be read alongside tdb222's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how your account and activity data may be used. In the event of any conflict between this Policy and those documents, this Privacy Policy prevails with respect to personal data matters.

The effective date of this Policy is stated in the Hero section above. When this Policy is updated, the effective date will be revised and players will be notified as described in Section 13 below.

tdb222 operates the online casino and sports betting Platform accessible at https://tdb222.app, serving players primarily based in Bangladesh. tdb222 acts as the data controller in respect of personal data collected through the Platform — meaning that tdb222 determines the purposes for which, and the manner in which, personal data is processed.

Where tdb222 engages third-party service providers to process personal data on its behalf (for example, payment processors and identity verification providers), those providers act as data processors operating strictly under tdb222's instructions and under contractual data protection obligations that are no less protective than those described in this Policy.

If you have any question about how tdb222 processes your personal data, or if you wish to exercise any of the rights described in Section 10, please contact us at the details provided in Section 14.

tdb222 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically as you use the Platform, and in limited circumstances from third parties such as payment processors and identity verification agencies. The categories of data collected are as follows:

3.1 — Registration & Identity Data

When you create a tdb222 account, we collect: your full legal name, date of birth, residential address in Bangladesh (including division, district, and upazila where provided), email address, and a valid Bangladeshi mobile number. This data is collected to create and maintain your account and to verify your identity in compliance with our Know Your Customer (KYC) obligations.

3.2 — Identity Verification Documents

As part of the KYC process, tdb222 may request copies of identity documents including a National Identity Card (NID), passport, or driver's licence, and may request a recent utility bill or bank statement as proof of address. These documents are processed by our identity verification partner under strict data processing agreements.

3.3 — Financial & Transaction Data

tdb222 records all deposit, withdrawal, and wagering transactions associated with your account. This includes the amounts, timestamps, payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and relevant transaction reference numbers. Full payment card or mobile money account credentials are processed directly by our payment processor partners — tdb222 does not store complete card numbers or mobile banking PINs on its own servers.

3.4 — Gaming & Betting Activity Data

tdb222 records your game play history, betting history, wager amounts, game outcomes, bonus eligibility and usage, session durations, and responsible gaming tool activations. This data is used to manage your account, calculate bonus eligibility, detect prohibited conduct, and monitor responsible gaming indicators.

3.5 — Technical & Device Data

When you access the Platform, our systems automatically collect: your IP address, device type, operating system and version, browser type and version, screen resolution, referring URL, pages visited within the Platform, session start and end times, and device identifiers (such as browser fingerprints). This data is used for security monitoring, fraud prevention, and analytics.

3.6 — Communications Data

If you contact tdb222's support team by email or live chat, we retain records of those communications including the content of messages exchanged, timestamps, and any attachments provided. This enables us to follow up on open issues and to maintain a full support history for your account.

3.7 — Marketing Preference Data

Where you have opted in to receive promotional communications from tdb222, we record your marketing consent and channel preferences (email, SMS, on-platform notification). This data is used solely to send you relevant bonus offers, tournament announcements, and seasonal promotions. You may withdraw consent at any time as described in Section 10.

tdb222 uses the personal data described in Section 3 for the following specific purposes. Each purpose is linked to the legal basis set out in Section 5.

tdb222 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a fresh lawful basis for the new purpose.

tdb222 processes personal data only where a valid legal basis exists. The bases applicable to tdb222's processing activities are as follows:

• Contract Performance: Processing necessary to perform the contract between tdb222 and the Player, including account management, payment processing, and delivery of gaming services. If you do not provide the data required for contract performance, tdb222 may be unable to open or maintain your account.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering (AML) record-keeping, responsible gaming obligations, and responses to lawful requests from competent authorities.
• Legitimate Interest: Processing that is in tdb222's legitimate business interests and does not override your privacy rights, including fraud prevention, security monitoring, platform analytics, and ensuring the integrity of the gaming environment. Where tdb222 relies on legitimate interest, it has conducted an assessment to confirm that its interests are not overridden by your fundamental rights.
• Consent: Where tdb222 relies on your consent — principally for marketing communications — that consent is freely given, specific, and informed. You may withdraw consent at any time without detriment to your account. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

tdb222 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the Platform to recognise your device on subsequent visits and to remember your preferences and session state.

6.1 — Essential Cookies

These cookies are strictly necessary for the Platform to function. They include session management cookies that keep you logged in while you navigate between pages, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. You cannot opt out of essential cookies without losing core Platform functionality.

6.2 — Analytical Cookies

tdb222 uses analytical cookies to understand how players interact with the Platform — which pages are visited most frequently, where players encounter errors, and how navigation flows can be improved. The data collected by analytical cookies is aggregated and does not identify individual players. tdb222 uses this data exclusively to improve the Platform experience.

6.3 — Functional Cookies

Functional cookies remember your stated preferences such as language, display settings, and responsible gaming tool configurations so that you do not need to re-enter them on every visit.

6.4 — Third-Party Cookies

Where tdb222 embeds third-party game content from providers such as Pragmatic Play, Evolution Gaming, and Spribe, those providers may set their own session cookies required for game delivery. tdb222 does not control the cookie policies of these providers. tdb222 does not permit third-party advertising or behavioural-tracking cookies to be set on the Platform.

6.5 — Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that blocking essential cookies will prevent you from logging in and using the Platform. Instructions for managing cookies vary by browser; consult your browser's help documentation for guidance.

tdb222 does not sell, rent, or trade personal data. Data is shared with third parties only in the limited circumstances described below.

• Payment Processors: To process deposits and withdrawals, tdb222 shares necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers process data as independent data controllers under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: tdb222 engages KYC and AML compliance partners to verify player identity documents. These providers act as data processors under contractual obligations and may not use your data for their own purposes.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive minimal technical session data (such as a player session token) necessary to launch and manage their games within the tdb222 environment. No financial or full identity data is passed to game providers.
• Fraud Prevention & Security Services: tdb222 uses specialist fraud detection services that process technical and behavioural data to identify suspicious activity. These services are bound by strict data processing agreements.
• Legal & Regulatory Authorities: tdb222 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or legitimate legal process. tdb222 will notify you of any such disclosure unless legally prohibited from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of tdb222's business assets, personal data held by tdb222 may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Policy that results from it.

tdb222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and reporting obligations. The following retention schedule applies:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identified or identifiable individual. Anonymised or aggregated statistical data derived from personal data may be retained indefinitely for analytics and business planning purposes.

tdb222 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and tdb222's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Connections downgraded below TLS 1.2 are rejected at the server level.
• Encryption at Rest: Sensitive personal data fields (including identity document images and financial data) stored in tdb222's databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within tdb222's internal systems is restricted on a strict need-to-know basis. All internal staff with data access privileges undergo background screening and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): Internal administrative access to systems containing personal data requires multi-factor authentication. tdb222 strongly encourages all players to enable 2FA on their player accounts via the account security settings.
• Penetration Testing & Vulnerability Management: tdb222's Platform is subject to periodic security assessments and penetration tests conducted by independent security specialists. Identified vulnerabilities are remediated within defined SLAs based on severity.
• Incident Response: tdb222 maintains a documented data breach response procedure. In the event of a confirmed breach involving personal data, affected players will be notified without undue delay and in accordance with applicable notification obligations.

Whilst tdb222 implements robust technical safeguards, no online platform can guarantee absolute security. You are responsible for keeping your account password confidential and for notifying tdb222 immediately if you suspect unauthorised access to your account.

As a data subject, you hold the following rights in relation to the personal data tdb222 holds about you. These rights may be exercised by contacting tdb222 at the details in Section 14. tdb222 will respond to all rights requests within thirty (30) calendar days of receipt. For complex requests, this period may be extended by a further two months, in which case you will be notified of the extension and the reason for it.

• Right of Access: You may request a copy of the personal data tdb222 holds about you, together with information about the purposes for which it is being processed and the recipients to whom it has been disclosed.
• Right to Rectification: If personal data tdb222 holds about you is inaccurate or incomplete, you may request that it be corrected or completed. You may also update certain account details directly via the account settings dashboard without needing to submit a formal request.
• Right to Erasure ("Right to Be Forgotten"): You may request that tdb222 delete your personal data. This right is not absolute — tdb222 may retain data where it is required to comply with a legal obligation, to defend a legal claim, or for other purposes permitted by applicable law. Where erasure is not possible in full, tdb222 will inform you of the data that must be retained and the reason.
• Right to Restriction of Processing: You may request that tdb222 restrict its processing of your personal data — for example, while the accuracy of data is being contested or a legitimate interest assessment is being reviewed.
• Right to Data Portability: Where tdb222 processes your data on the basis of contract performance or consent, and the processing is carried out by automated means, you may request a copy of your data in a structured, commonly-used, and machine-readable format.
• Right to Object: You may object at any time to processing based on tdb222's legitimate interest, including profiling for fraud detection purposes. tdb222 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time via the communication preferences section of your account dashboard or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The tdb222 Platform is intended exclusively for adults aged 18 years and above. tdb222 does not knowingly collect, process, or store personal data relating to individuals under the age of 18. If tdb222 discovers that personal data has been submitted by or on behalf of a minor, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and you believe that a person under your care has registered on the tdb222 Platform or provided their personal data to tdb222, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

tdb222 employs age verification checks at the point of registration and may request documentary proof of age at any subsequent point during the account lifecycle. Providing false information about your age in order to register a tdb222 account is a violation of the Terms & Conditions and may constitute a criminal offence.

The tdb222 Platform may, in certain contexts, contain references to third-party game providers and payment services. Where the user is redirected to or interacts with a third-party interface — for example, a payment gateway operated by bKash or Nagad — that interface is governed by the privacy policy of the relevant third party, not by this tdb222 Privacy Policy.

tdb222 has no control over, and accepts no responsibility for, the privacy practices of third-party services. tdb222 recommends that you review the privacy policy of any third-party service you interact with before providing your personal data to that service.

tdb222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or tdb222's data processing practices. When a material change is made to this Policy, tdb222 will notify registered players by posting a prominent notice on the Platform and, where the change is significant, by sending a direct notification to the email address associated with your account.

The updated Policy will take effect on the date stated as the effective date in the Hero section at the top of this page. Your continued use of the Platform after that date constitutes acceptance of the updated Policy. If you do not agree with the changes, you must cease using the Platform and may request closure of your account by contacting support.

tdb222 encourages you to review this Policy periodically so that you remain informed about how your personal data is being protected. Archived versions of previous Privacy Policies are available upon request by contacting [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or tdb222's data processing practices, or if you wish to exercise any of the rights described in Section 10, please contact tdb222's Data Protection team using the details below.

tdb222 takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with tdb222's response, you retain the right to escalate the matter to the relevant data protection authority or competent court in your jurisdiction.

For urgent concerns — including suspected unauthorised account access or a potential data breach involving your personal information — please contact support immediately using the email address above and mark your message as urgent. tdb222's security team operates around the clock and will prioritise time-sensitive reports.