Your Privacy Matters
to md222

1. Introduction

This Privacy Policy ("Policy") describes how md222 ("md222", "we", "us", "our") collects, processes, stores, shares, and protects personal information relating to you ("Player", "User", "you") when you access or use the md222 online gaming platform available at https://md222.io, including any associated web or mobile interfaces (collectively, the "Platform").

md222 is committed to protecting the privacy and security of all players who use our Platform. We process personal data responsibly and only to the extent necessary to deliver our services, comply with applicable legal obligations, and maintain the integrity of the gaming environment for players across Bangladesh.

By registering an account, logging in, or otherwise using the md222 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

2. Data Controller

md222 acts as the data controller in respect of the personal data it collects from players who use the Platform. As the data controller, md222 determines the purposes and means by which your personal data is processed. Where personal data is processed on behalf of md222 by third-party service providers (such as game studios, payment processors, or identity verification services), those parties act as data processors under written agreements with md222 that require them to handle your data securely and only for the purposes specified by md222.

md222 does not sell, rent, or trade personal data to third parties for their own independent marketing or advertising purposes. Any sharing of personal data with third parties is strictly limited to the circumstances described in Section 7 of this Policy.

3. Data We Collect

md222 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ minimum age requirement).
• Residential address, including city, district, and postal code within Bangladesh.
• Email address registered to your md222 account.
• Mobile phone number associated with your account.
• Copies of identity documents submitted during KYC verification (e.g., National ID card, passport).

3.2 Financial Data

• Mobile wallet account details for bKash, Nagad, Rocket, and Upay transactions (account number and registered name only — md222 does not store full wallet PINs or passwords).
• Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other supported banking partners used for deposits or withdrawals.
• Partial card details (last four digits, card type, expiry date) for Visa and Mastercard transactions — full card numbers are never stored by md222.
• Transaction history, including deposit amounts, withdrawal requests, and bonus claims.

3.3 Technical & Usage Data

• IP address and approximate geographic location at the time of login or registration.
• Device type, operating system version, browser type and version.
• Session timestamps, login history, and session duration records.
• Game activity logs, betting history, wagering patterns, and game session data.
• Pages visited on the Platform, click-through patterns, and feature interaction data.

3.4 Communications Data

• Records of communications between you and the md222 support team, including the content of emails and live chat transcripts.
• Feedback, complaints, and dispute records submitted through the Platform or via email.
• Responses to surveys or promotional participation forms if you choose to participate.

4. How We Collect Your Data

md222 collects your personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, claiming a bonus, contacting support, or participating in a promotion.
• Automated technical collection: Data collected automatically when you access the Platform, including server logs, cookies, and session tracking technologies. See Section 10 for details on cookies.
• Third-party sources: Identity and address verification data may be supplemented by information received from licensed identity verification service providers, fraud prevention agencies, or payment processors where this is necessary to complete KYC checks or investigate suspicious activity.
• Game providers: Aggregated game session and outcome data provided by md222's game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) in connection with games played on the Platform.

5. How We Use Your Data

md222 uses the personal data we collect for the following specific purposes:

• To create and manage your player account, including verifying your identity and age in compliance with the 21+ requirement.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels available to players in Bangladesh.
• To deliver and improve the gaming services available on the Platform, including personalising your experience based on your game preferences and activity history.
• To communicate with you regarding your account, including account security alerts, transaction confirmations, bonus notifications, and responses to support enquiries.
• To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other conduct that violates our Terms & Conditions.
• To carry out responsible gaming monitoring, including identifying patterns of play that may indicate problem gambling behaviour, and to facilitate access to responsible gaming tools where appropriate.
• To comply with applicable legal and regulatory obligations, including record-keeping and anti-money laundering requirements.
• To analyse Platform usage patterns in aggregate (anonymised) form to improve our products, game offerings, and player experience.
• To send you promotional communications about md222 offers, new games, and seasonal promotions — where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].

6. Legal Basis for Processing

md222 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and manage your account, process payments, and deliver gaming services as agreed under our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering obligations, and record-keeping requirements.
• Legitimate interests: Processing undertaken in md222's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookie placements, which is carried out only where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Third Parties

md222 does not sell or rent your personal data to any third party. We share personal data with external parties only in the following limited and controlled circumstances:

• Payment processors: Personal and financial data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners solely to the extent necessary to process your deposits and withdrawals.
• Identity verification providers: Name, date of birth, address, and document images may be shared with licensed KYC and identity verification service providers to complete age and identity checks.
• Game studio providers: A pseudonymised player identifier and relevant session data are shared with game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate gameplay and settle game outcomes.
• Fraud and AML agencies: Where md222 has a legitimate interest or legal obligation to do so, player data may be shared with fraud prevention agencies or financial intelligence services in connection with suspected money laundering or fraudulent activity.
• Legal and regulatory authorities: md222 will disclose personal data to law enforcement authorities, courts, or regulatory bodies when required to do so by applicable law or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of md222's business assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third-party data processors engaged by md222 are subject to written data processing agreements that require them to maintain appropriate technical and organisational security measures and to process your data only on md222's documented instructions.

8. Data Retention

md222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes, as anonymised data no longer constitutes personal data.

9. Security Measures

md222 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the md222 Platform.
• Encryption of sensitive data at rest within md222's secure database infrastructure.
• Role-based access controls ensuring that internal staff can access personal data only to the extent required for their specific role and responsibilities.
• Multi-factor authentication requirements for administrative access to systems that store or process player data.
• Regular penetration testing and security audits conducted by qualified independent security professionals.
• Automated monitoring and alerting systems to detect unusual access patterns or potential data breach indicators in real time.
• Staff training on data protection obligations and information security best practices.

While md222 takes all reasonable precautions to protect your data, no system connected to the internet can guarantee absolute security. In the event that md222 becomes aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take all appropriate steps to mitigate the impact of the breach.

10. Cookies & Tracking Technologies

md222 uses cookies and similar tracking technologies to operate the Platform, recognise returning players, maintain session state, and analyse usage patterns. The following types of cookies may be placed on your device when you access the md222 Platform:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing cookies, and security tokens. These cookies cannot be disabled without rendering the Platform inoperable.
• Functional cookies: Used to remember your preferences, such as your preferred language, last visited game category, and responsible gaming settings. These improve your experience on subsequent visits.
• Analytics cookies: Used in anonymised or pseudonymised form to analyse how players navigate and interact with the Platform, helping md222 identify areas for improvement. These cookies do not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and credential stuffing attempts.

Most web browsers allow you to control cookie settings through the browser's privacy preferences. Disabling strictly necessary cookies may affect your ability to log in or use core Platform features. Disabling analytics or functional cookies will not prevent you from using the Platform but may result in a reduced experience. md222 does not place third-party advertising or behavioural tracking cookies on the Platform.

11. Your Data Rights

As a player whose personal data is processed by md222, you have the following rights in relation to that data. You may exercise any of these rights at any time by contacting the md222 support team at [email protected]:

• Right of access: You have the right to request a copy of the personal data that md222 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by md222 be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that md222 delete your personal data. This right is subject to md222's legal obligations to retain certain data for specified periods (see Section 8).
• Right to restriction of processing: You have the right to request that md222 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract with you, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where md222 relies on legitimate interests as the legal basis for processing. md222 will cease processing unless it can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

md222 will respond to all data rights requests within thirty (30) calendar days of receipt. In cases where the request is complex or a high volume of requests has been received, md222 may extend this period by a further sixty (60) days, and will notify you of the extension within the initial thirty-day period.

12. Minors & Age Restriction

The md222 Platform is strictly intended for adults aged 21 years and above. md222 does not knowingly collect personal data from individuals under the age of 21. If md222 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. Any deposits made by an underage player may be returned at md222's discretion, and any winnings accumulated will be forfeited.

If you are a parent or guardian and believe that a minor in your care has registered an account on the md222 Platform, please contact our support team at [email protected] immediately so that the account can be investigated and closed without delay.

13. Changes to This Privacy Policy

md222 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made to this Policy, md222 will notify registered players by email to the address associated with their account and will update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how md222 is protecting your information. Your continued use of the Platform following notification of any changes constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should cease using the Platform and contact [email protected] to request account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way md222 handles your personal data, please contact our support team using the details below. Our support agents are available 24 hours a day, 7 days a week, in English, and are trained to handle data privacy enquiries promptly and confidentially.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: "Privacy Policy Enquiry" or "Data Rights Request"
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)
• Target response time: Within 30 calendar days for formal data rights requests

md222 treats all privacy-related communications with strict confidentiality. Your enquiry will be handled by a member of our support team and escalated to a data protection specialist where the nature of the request requires it.