22bed Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data collected by 22bed in connection with the operation of https://22bed.app. It applies regardless of how you access the platform — whether via a desktop browser, mobile browser, or any other compatible device — and regardless of your location, provided you are accessing the 22bed platform.

This policy should be read alongside the 22bed Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data-related matters, this Privacy Policy shall take precedence.

The data controller responsible for your personal data is 22bed. For all data-related enquiries, including subject access requests, correction requests, and deletion requests, please contact our support team at [email protected] with the subject line "Data Privacy Request".

2. Data We Collect

22bed collects personal data from you through several channels: directly from you when you register and use your account, automatically through your use of the platform, and from third-party verification and payment providers. The specific categories of data we collect are described below.

2.1 Registration & Account Data

• Full name as it appears on your government-issued identity document
• Date of birth (used to verify you are aged 18 or above)
• Email address (used as your primary account identifier and for communications)
• Mobile phone number (used for account verification and security notifications)
• Residential address, including city and postcode (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• In certain circumstances, selfie photographs or video verification for liveness checks
• Source of funds documentation where required by our compliance procedures

2.3 Financial Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method details (e.g., bKash account reference, Nagad account reference, Rocket number, bank account details, Visa or Mastercard last-four digits)
• Transaction reference numbers and processing timestamps
• Currency and exchange information where applicable

2.4 Gameplay & Betting Activity Data

• Game session logs including start time, end time, game title, stake amount, and outcome
• Sports betting records including market, selection, odds, stake, and settlement
• Bonus claims, wagering progress, and promotion participation records
• Responsible gaming settings and self-exclusion records where applicable

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Session duration, pages visited, and navigation path within 22bed
• Cookie identifiers and similar tracking technology data (see Section 6)

2.6 Communications Data

• Live chat transcripts between you and 22bed support agents
• Email correspondence submitted to [email protected]
• Records of promotional emails opened, clicked, or unsubscribed from

3. How We Use Your Data

22bed uses the personal data described above for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.

• Account creation and management: To set up and maintain your 22bed player account, authenticate your identity at login, and manage your account preferences and settings.
• Age and identity verification: To confirm that you meet the minimum age requirement of 18 years and to verify that the identity you have provided is genuine, in compliance with our Know Your Customer (KYC) obligations.
• Payment processing: To process deposits to and withdrawals from your 22bed account via bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard, and other accepted payment methods.
• Providing gaming and betting services: To deliver the games, sports markets, live casino tables, and other platform features you access as a registered 22bed player.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multiple account operation, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gaming compliance: To monitor player activity for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to provide responsible gaming interventions where appropriate.
• Customer support: To respond to your support enquiries, process complaints, and provide assistance via live chat and email.
• Marketing communications: Where you have opted in to receive promotional communications, to send you information about 22bed bonuses, promotions, and new features. You may opt out of marketing emails at any time.
• Platform improvement: To analyse aggregate usage patterns and improve the performance, design, and content of the 22bed platform. Analytical data used for this purpose is anonymised wherever possible.
• Legal and regulatory compliance: To meet any legal obligations applicable to 22bed, including responding to lawful requests from authorised law enforcement or regulatory bodies.

4. Legal Basis for Processing

22bed processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

22bed does not sell your personal data. We share your data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: When you make a deposit or withdrawal, your transaction data is shared with the relevant payment provider (for example, bKash, Nagad, Rocket, Upay, or your bank) to the extent necessary to process the transaction. These providers process your data under their own privacy policies.
• KYC and identity verification providers: To comply with age verification and anti-money laundering requirements, 22bed may use third-party identity verification services. These providers receive only the minimum data necessary to perform verification and are contractually bound to protect it.
• Game software providers: 22bed licenses games from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. Game session data may be processed by these providers as part of delivering the game to you. Game providers act as data processors on 22bed's behalf under data processing agreements.
• Analytics and platform performance providers: 22bed may use third-party analytics tools that process anonymised or pseudonymised usage data to help us understand platform performance and improve the user experience.
• Law enforcement and regulatory authorities: 22bed will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory obligation, or where disclosure is necessary to prevent or report suspected criminal activity such as fraud or money laundering.
• Business transfers: In the event that 22bed undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects the handling of your personal data.

6. Cookies & Tracking Technologies

22bed uses cookies and similar tracking technologies on https://22bed.app to ensure the platform functions correctly, to remember your preferences, to maintain your session security, and to understand how players use the site so we can improve it. The following categories of cookies are used:

Cookies set by 22bed are first-party cookies hosted on the 22bed.app domain. Where third-party analytics or performance tools are in use, any cookies set by those tools collect only anonymised or pseudonymised data and do not identify you personally.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling functional or analytics cookies will not prevent you from using the core 22bed platform, but may affect your personalised experience. Disabling strictly necessary or security cookies may prevent the platform from operating correctly and is not recommended.

7. Data Retention

22bed retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your active account relationship with 22bed, plus a period of up to 5 years following account closure to meet financial record-keeping, anti-money laundering, and dispute resolution obligations.
• KYC verification documents: Retained for a minimum of 5 years following the end of the customer relationship, in line with standard financial services compliance requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, to support audit, fraud investigation, and regulatory reporting needs.
• Customer support communications: Live chat transcripts and email correspondence are retained for up to 2 years from the date of the interaction, unless the communication is relevant to an ongoing dispute or legal matter, in which case it is retained until that matter is resolved.
• Marketing consent records: Retained for the duration of your account plus 2 years, to evidence the lawfulness of any marketing communications sent.
• Technical and device data (logs): Retained for up to 12 months from collection, after which logs are aggregated and anonymised for statistical purposes.

When your data reaches the end of its applicable retention period, 22bed will securely delete or anonymise it using industry-standard data destruction methods. Anonymised data — data from which you can no longer be identified — may be retained indefinitely for statistical and analytical purposes.

8. Data Security Measures

22bed implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our key security practices include:

• SSL/TLS encryption: All data transmitted between your browser or device and 22bed servers is encrypted using SSL/TLS protocols. Look for the padlock icon and "https" prefix in your browser's address bar when using 22bed.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. 22bed never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access controls: Access to personal data within 22bed is restricted on a need-to-know basis. Only staff members who require access to your data to perform their job functions are authorised to view it, and all access is logged.
• Infrastructure security: 22bed's platform infrastructure is hosted in secure data centres with physical access controls, redundant power systems, and regular security audits.
• Fraud monitoring: 22bed operates automated and manual fraud monitoring systems that detect unusual account activity, suspicious login patterns, and potentially compromised sessions, triggering alerts and protective measures.
• Staff training: All 22bed staff members who handle personal data receive privacy and data security training as part of their onboarding and on an ongoing basis.

While 22bed takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. If you believe your 22bed account has been compromised, contact support immediately via live chat or at [email protected].

9. Your Privacy Rights

As a player on the 22bed platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Privacy Request".

• Right of access: You have the right to request a copy of the personal data 22bed holds about you. We will provide this information within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details (such as your contact email) directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request that 22bed delete your personal data. We will action this request where we are not required by law or legitimate interest to retain the data. Note that financial transaction records and KYC data are subject to mandatory retention periods and cannot be deleted on request during those periods.
• Right to restriction of processing: You may ask 22bed to pause the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you provided to 22bed in a structured, commonly used, machine-readable format (such as CSV), and to request that this data be transferred to another service provider where technically feasible.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You may also opt out of direct marketing communications at any time using the unsubscribe link in any marketing email or by contacting support.
• Right to withdraw consent: Where we process your data based on your consent (for example, for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

22bed will respond to all verified data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for submitting a data rights request.

10. Children's Privacy

The 22bed platform is strictly intended for adults aged 18 years and above. 22bed does not knowingly collect personal data from any individual under the age of 18. If you are under 18, you must not attempt to register an account or use any feature of the 22bed platform.

If 22bed becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any deposits or winnings related to that account will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under your care has registered a 22bed account or provided personal data to 22bed, please contact us immediately at [email protected] so we can take appropriate action without delay.

11. Updates to This Policy

22bed reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When we make material changes to this policy, we will take reasonable steps to notify registered players, which may include displaying a notice on the 22bed platform or sending a notification to your registered email address.

Updated versions of this Privacy Policy will be published at https://22bed.app/privacy-policy with a revised "Last Updated" date at the top of the document. We encourage you to review this policy periodically so that you remain informed about how 22bed protects your personal data.

Your continued use of the 22bed platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated version. If you do not agree with any material change to this policy, you should stop using the platform and may request account closure by contacting support at [email protected].

12. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 22bed handles your personal data, please get in touch using the following channels:

• Live chat: Available 24 hours a day, 7 days a week, directly on the 22bed platform. This is the fastest way to reach the support team.
• Email: [email protected] — please use the subject line "Data Privacy Request" for all data-related enquiries to ensure prompt routing to the appropriate team.
• Response time: Typically within 2 hours for general support queries. Formal data rights requests are responded to within 30 days as described in Section 9.
• Hours: Our support team operates on Bangladesh Standard Time (BST, UTC+6) but is available around the clock for live chat support.

22bed is committed to resolving all privacy-related concerns promptly and transparently. If you feel that your concern has not been adequately addressed after contacting us, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.