dk22 Privacy Policy
Your privacy matters to us. This Privacy Policy explains in plain, formal English exactly what personal data dk22 collects from players in Bangladesh, how that data is used, how it is protected, and what rights you hold over your own information. We are committed to full transparency in every data practice we operate.
Our Privacy Commitments
These six principles underpin every data decision dk22 makes. They apply equally whether you are registering a new account, making a bKash deposit, or placing a BPL cricket wager.
Data Minimisation
dk22 collects only the personal information that is strictly necessary to deliver the Service, comply with legal obligations, and verify your identity. We do not gather data speculatively or beyond the scope of what a legitimate online gaming operator requires. If we do not need it to serve you, we do not ask for it.
Secure Storage and Transit
All personal data stored by dk22 is protected using AES-256 encryption at rest. All data transmitted between your browser or device and the dk22 platform is secured with TLS 1.3 (256-bit SSL). Our infrastructure undergoes regular third-party penetration testing and security audits. Payment card data is never stored on dk22 servers — it is handled exclusively by PCI-DSS compliant payment processors.
Purpose Limitation
Personal data collected for one purpose — for example, identity verification — will not be repurposed for an unrelated use without your explicit consent. dk22 maintains strict internal access controls ensuring that data is accessed only by staff whose role requires it, and only to fulfil the purpose for which it was originally collected.
No Unauthorised Third-Party Sale
dk22 does not sell, rent, or lease your personal data to unaffiliated third parties for their own marketing or commercial purposes. Data may be shared with trusted service providers who assist in operating the platform — such as KYC verification partners and payment processors — but always under strict contractual data protection obligations.
Data Accuracy and Updates
You have the right to access, review, and update your personal information at any time through your account dashboard or by contacting our support team. dk22 takes reasonable steps to keep data accurate and up to date. If you believe that information held about you is incorrect, you may request a correction and we will act promptly.
Defined Retention Periods
dk22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following account closure to satisfy anti-money laundering obligations. Data that is no longer required is securely deleted or anonymised.
Contents
- 01Introduction
- 02Data Controller
- 03Data We Collect
- 04How We Collect Data
- 05Legal Basis for Processing
- 06How We Use Your Data
- 07Data Sharing
- 08Cookies and Tracking
- 09Data Security
- 10Data Retention
- 11Your Rights
- 12Children and Minors
- 13Third-Party Links
- 14Policy Changes
- 15Contact Us
Version: 2.4
Please Read Carefully
This Privacy Policy describes how dk22 collects and handles personal data relating to players based primarily in Bangladesh. By registering an account or using any part of the dk22 platform, you acknowledge that you have read and understood this policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the Service.
01 Introduction
This Privacy Policy sets out the basis on which dk22 ("we", "us", "our", or "the Company") collects, processes, stores, and discloses personal data obtained from individuals ("you", "the user", "the player") who access or use the dk22 website at dk22.io and all associated services, mobile-optimised interfaces, games, betting markets, promotional tools, and account features (collectively, the "Service").
dk22 is committed to protecting the privacy of every player and to handling personal data responsibly, transparently, and in accordance with sound data protection principles. This policy has been drafted in plain, accessible English to ensure that players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, and Rangpur — can fully understand how their information is managed.
This Privacy Policy should be read alongside the dk22 Terms and Conditions and Responsible Gaming Policy, all of which together constitute the full agreement between you and dk22 concerning your use of the Service.
02 Data Controller
For the purposes of this Privacy Policy, dk22 is the data controller responsible for the personal data of players using the Service. As data controller, dk22 determines the purposes and means by which personal data is processed. All data protection enquiries, access requests, and complaints should be directed to the dk22 data protection contact at [email protected].
Where dk22 engages third-party service providers — such as KYC/AML verification specialists, payment gateway operators, and game software studios — those providers act as data processors on behalf of dk22, bound by contractual obligations that meet or exceed the data protection standards set out in this policy.
03 Data We Collect
dk22 collects personal data across several categories, as set out below. The collection of each category of data is tied to a specific operational or legal purpose.
| Category | Data Items | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID number, passport or driving licence details, photograph | Account registration, age verification (21+), KYC compliance |
| Contact Data | Mobile number, email address, residential address (city, district) | Account communication, transaction notifications, support |
| Financial Data | bKash/Nagad/Rocket/Upay account numbers, Visa/Mastercard last four digits, transaction history | Processing deposits and withdrawals, fraud prevention |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Platform security, fraud detection, service improvement |
| Usage Data | Games played, bets placed, wagering amounts, bet outcomes, session duration, feature usage | Responsible gaming monitoring, personalisation, product analytics |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Dispute resolution, service quality assurance, staff training |
Where dk22 is required by applicable regulations to collect specific categories of data as part of its anti-money laundering (AML) or Know Your Customer (KYC) obligations, the collection of that data is mandatory. Failure to provide mandatory information may result in restrictions on your account or the inability to access certain features of the Service.
04 How We Collect Data
4.1 Directly From You
The majority of personal data dk22 holds is provided directly by you. This includes information you submit when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting customer support, or participating in a promotion. You are in control of the primary data you share with us.
4.2 Automatically During Platform Use
When you access the dk22 platform, certain technical and usage data is collected automatically via server logs, cookies, and similar tracking technologies. This includes your IP address, the pages you visit, the games you open, the duration of your sessions, and your device and browser configuration. This automated collection is a standard feature of all modern web-based services and is necessary for the platform to function securely and efficiently.
4.3 From Third-Party Service Providers
dk22 may receive data about you from third-party sources in certain circumstances. For example, our KYC verification partner may confirm the validity of your identity documents; our payment processors may communicate transaction status updates; and our fraud prevention systems may flag activity patterns associated with known risk indicators. Any data received from third parties is handled in accordance with this Privacy Policy.
05 Legal Basis for Processing
dk22 processes personal data on one or more of the following legal grounds depending on the nature of the processing activity:
- Contractual Necessity: Processing that is necessary to perform the contract we have with you — for example, processing your deposit to fund your betting account or verifying your identity before approving a withdrawal.
- Legal Obligation: Processing that dk22 is legally required to carry out — for example, retaining transaction records under anti-money laundering regulations, or verifying player age as required under responsible gaming standards.
- Legitimate Interests: Processing carried out to pursue dk22's legitimate business interests, provided those interests do not override your fundamental rights. Examples include fraud detection, platform security, service improvement, and responsible gaming risk monitoring.
- Consent: Where processing is based on your consent — for example, sending you promotional communications about dk22 bonuses, upcoming BPL cricket markets, or seasonal offers — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact [email protected] or use the unsubscribe option in any email we send.
06 How We Use Your Data
The personal data dk22 collects is used strictly for the purposes set out below. We do not use personal data for any purpose that is incompatible with the original reason it was collected without first obtaining your consent or being compelled by a legal obligation.
- To create, maintain, and administer your dk22 player account.
- To verify your identity and confirm that you meet the 21+ age requirement before granting access to real-money gaming features.
- To process deposits from bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to fulfil verified withdrawal requests to your registered payment method.
- To detect and prevent fraud, account abuse, money laundering, match-fixing, and any other prohibited conduct as defined in the dk22 Terms and Conditions.
- To communicate with you about your account status, transaction confirmations, security alerts, and support requests.
- To deliver personalised promotional communications about bonuses, cricket betting markets, live casino offers, slot promotions, and seasonal events — where you have provided consent for such communications.
- To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling, and to enforce self-imposed limits or exclusions you have activated on your account.
- To analyse aggregated, anonymised usage data to improve the dk22 platform, optimise game performance, and enhance the overall user experience.
- To comply with legal, regulatory, and audit obligations applicable to dk22's operation as an online gaming platform serving the Bangladesh market.
07 Data Sharing and Disclosure
7.1 Trusted Service Providers
dk22 shares personal data with a defined set of trusted third-party service providers who assist in operating the platform. These include identity verification (KYC/AML) providers, payment gateway operators, fraud prevention systems, customer support software providers, and data hosting and cloud infrastructure services. All third-party processors are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the service for which they were engaged.
7.2 Game Software Studios
Game studios whose products are available on the dk22 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical data (such as session identifiers and game round records) required to render and audit game outcomes. These studios do not receive personally identifiable information such as your name, address, or payment details.
7.3 Legal and Regulatory Disclosure
dk22 may be required to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where compelled to do so by applicable law, a valid court order, or a legitimate regulatory investigation. In such cases, dk22 will disclose only the data specifically required by the relevant authority and will, where legally permitted, notify the affected account holder of the disclosure.
7.4 Business Transfers
In the event that dk22 undergoes a merger, acquisition, asset sale, or corporate restructuring, personal data held about players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it, in advance of the transfer taking effect where reasonably practicable.
7.5 No Sale of Data
dk22 does not sell, rent, or trade personal data to unaffiliated third parties for their own marketing, advertising, or commercial purposes. This prohibition applies without exception and regardless of the commercial value of the data in question.
08 Cookies and Tracking Technologies
8.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information. dk22 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform effectively.
8.2 Types of Cookies We Use
- Strictly Necessary Cookies: These are essential for the platform to function. They include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing the Service.
- Functional Cookies: These remember your preferences, such as your preferred language or display settings, to provide a more personalised experience. Disabling these cookies may reduce the functionality of certain platform features.
- Analytical Cookies: These collect anonymised data about how players use the platform — for example, which pages are visited most frequently and how long sessions last. This information is used to improve the Service. dk22 uses privacy-respecting analytics tools that do not share this data with advertising networks.
- Security Cookies: These help dk22 detect and prevent fraudulent login attempts, unusual account activity, and automated bot traffic.
8.3 Managing Cookies
You may adjust your browser settings to block or delete cookies at any time. However, please be aware that disabling strictly necessary cookies will prevent you from logging in to your dk22 account and using core platform features. Instructions for managing cookies are available in the help documentation of all major browsers.
09 Data Security
dk22 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- TLS 1.3 Encryption: All data transmitted between your browser or mobile device and the dk22 platform is encrypted in transit using Transport Layer Security version 1.3 (256-bit SSL certificate). Look for the padlock icon in your browser's address bar to confirm the secure connection.
- AES-256 Encryption at Rest: All personal data stored in dk22 databases is encrypted at rest using AES-256, ensuring that even in the event of an infrastructure breach, stored data cannot be read without the corresponding decryption keys.
- Access Controls: Personal data is accessible only to authorised dk22 personnel whose job function requires it. Role-based access controls are enforced across all internal systems. All staff with access to personal data are subject to confidentiality obligations.
- Regular Security Audits: dk22's infrastructure undergoes regular independent penetration testing and security audits. Identified vulnerabilities are remediated according to a prioritised patching schedule.
- Two-Factor Authentication: dk22 strongly recommends that all players enable two-factor authentication (2FA) on their accounts. 2FA significantly reduces the risk of unauthorised account access even if login credentials are compromised.
- Fraud Detection Systems: Automated systems monitor account activity in real time for patterns consistent with fraud, unauthorised access, or money laundering. Suspicious activity triggers immediate account review and, where appropriate, temporary account restrictions pending investigation.
Despite these measures, no system connected to the internet can be guaranteed to be completely invulnerable to attack. In the event of a data breach that poses a significant risk to your rights, dk22 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.
10 Data Retention
dk22 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC documents | Minimum 5 years post account closure | AML/KYC legal obligation |
| Financial transaction records | Minimum 5 years post transaction | Financial record-keeping obligation |
| Account activity and betting history | Duration of account + 5 years | Legitimate interests / legal obligation |
| Customer support communications | 3 years post closure of support ticket | Legitimate interests (dispute resolution) |
| Technical and usage logs | 12 months rolling | Security and fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent compliance |
When data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where anonymised data is retained for statistical or analytical purposes, it no longer constitutes personal data and is therefore not subject to this Privacy Policy.
11 Your Rights
As a dk22 player, you hold a number of rights in relation to the personal data we hold about you. dk22 is committed to facilitating the exercise of these rights promptly and without undue obstruction. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.
Right of Access
You may request a copy of all personal data dk22 holds about you. We will respond within 30 days of receiving a valid request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations.
Right to Restriction
You may request that we restrict the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
Right to Portability
You may request a structured, machine-readable copy of the personal data you have provided to dk22, to transfer to another service provider of your choice.
Right to Object
You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring, where you have grounds to do so.
dk22 will respond to all rights requests within 30 calendar days of receipt. In cases involving complex or high-volume requests, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. dk22 will not charge a fee for the exercise of these rights in standard circumstances.
12 Children and Minors
The dk22 platform is strictly intended for individuals aged 21 years and above. dk22 does not knowingly collect personal data from any person under the age of 21. If we become aware that a minor has registered an account or provided personal data, that account will be immediately suspended, all data associated with it will be permanently deleted, and any funds held in the account will be returned to the depositing payment method minus any processing costs.
If you believe that a minor may have created a dk22 account, please notify us immediately at [email protected] so that the appropriate action can be taken without delay. dk22 treats the protection of minors from access to gambling services as a matter of the highest priority and enforces its 21+ policy vigorously through age verification at registration and during the KYC process.
13 Third-Party Links
The dk22 website does not contain links to third-party websites or external services. All navigation within the platform remains within the dk22 domain. However, game studio interfaces embedded within the platform may have their own privacy notices that govern the limited technical data those studios receive as described in Section 7.2. dk22 is not responsible for the privacy practices of those studios and encourages you to review their respective privacy documentation if you have concerns about how they handle game session data.
14 Changes to This Policy
dk22 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, evolving data protection standards, new platform features, or changes to our service provider relationships. Material changes — those that meaningfully affect your rights or how your data is used — will be communicated to you via a prominent notice on the dk22 website and, where appropriate, via email to your registered address at least 14 days before the change takes effect.
The effective date at the top of this page will be updated with each revision. Your continued use of the Service after a revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree with any changes, you should discontinue use of the Service and contact support to close your account. All data processing carried out under a previous version of this policy prior to the effective date of the revision remains lawful under that prior version.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way dk22 handles your personal data, please contact the dk22 data protection team using the details below. All privacy-related communications are treated with strict confidentiality and handled by designated staff.
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
- Live Chat: Available 24/7 from your account dashboard
- WhatsApp: +880 1700 000000 (plain text — not a link)
- Response Time: 2–5 minutes via live chat; 2–6 hours via email
When submitting a privacy enquiry, please provide your registered username and a clear description of your request so that we can locate the relevant data and respond accurately. dk22 will acknowledge all privacy enquiries within 24 hours and aim to resolve them fully within 30 calendar days.
Our Commitment to You
dk22 treats every privacy enquiry with the same level of care and urgency as a financial support request. We are committed to being transparent, responsive, and accountable in all matters relating to your personal data. Your trust is foundational to the dk22 platform, and we will always act to protect it.
Ready to Play Responsibly at dk22?
Now that you understand how dk22 protects your personal data, explore our full range of cricket betting markets, live casino tables, and slot games — all secured with 256-bit SSL encryption and built for players across Bangladesh.