md222 Privacy Policy

Privacy at md222 — The Short Version

md222 is committed to protecting the privacy of all players who use our platform. This Privacy Policy applies to all personal data processed by md222 in connection with your use of the md222 website, mobile interface, games, promotions, payment services and customer support. By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy.

We collect personal data only to the extent necessary to provide you with a safe, compliant and enjoyable gaming experience. We do not sell your personal data to third parties. We use industry-standard SSL encryption to protect data in transit, and we retain data only for as long as is legally required or operationally necessary.

1. Personal Data We Collect

md222 collects personal data that you provide directly when registering or using the platform, as well as data that is generated automatically through your interaction with our services. The following table summarises the main categories of personal data we process.

2. How We Use Your Personal Data

md222 uses the personal data we collect for the following purposes. Each purpose is tied to a legitimate business, legal or contractual basis. We do not use your data for any purpose incompatible with those described below.

• Account Management: To create and manage your player account, verify your identity, process deposits and withdrawals, and provide access to games and promotions.
• Legal Compliance: To comply with applicable anti-money laundering (AML) obligations, KYC verification requirements, age verification rules and any other regulatory or legal obligations that apply to the operation of an online gaming platform.
• Fraud Prevention: To detect, investigate and prevent fraudulent activity, bonus abuse, money laundering, collusion, underage gambling and other prohibited conduct on the platform.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints and provide technical support relating to your account or gaming activity.
• Responsible Gaming: To monitor player activity for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and fulfil our responsible gaming obligations.

3. Legal Basis for Processing Personal Data

md222 processes personal data only where a valid legal basis exists. The following legal bases apply to the processing activities described in this Privacy Policy.

• Contractual Necessity: Processing is necessary to perform the contract between you and md222 — specifically to operate your player account, process transactions and provide access to games and services.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations including AML legislation, KYC requirements and age verification obligations that apply to online gaming operators.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring and service improvement is carried out on the basis of md222's legitimate business interests, where those interests are not overridden by your rights and freedoms.
• Consent: Where md222 relies on your consent as the legal basis for processing (for example, for direct marketing communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. How We Share Your Personal Data

md222 does not sell your personal data. We share personal data only in the limited circumstances described below. Any third party that receives personal data from md222 is required to handle that data securely and in accordance with applicable law.

• Payment Processors: Payment method details are shared with the relevant payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank and other supported banks) solely to process deposit and withdrawal transactions. These providers operate under their own privacy policies and security frameworks.
• Game Providers: Technical identifiers (such as anonymised player IDs) may be shared with game providers including Pragmatic Play, Evolution Gaming, Spribe and Ezugi to enable gameplay functionality and game audit trails. Full identity or financial data is not shared with game providers.
• Regulatory Authorities: md222 may disclose personal data to relevant regulatory, law enforcement or government authorities where required to do so by applicable law, court order or legitimate regulatory request. Such disclosures are made only to the extent necessary and in compliance with applicable legal procedures.
• Service Providers: md222 may use trusted third-party service providers for IT infrastructure, fraud detection, customer support software and analytics. These providers act as data processors under contractual agreements that require them to protect personal data to the same standard as md222 and prohibit use of the data for their own purposes.

5. Cookies and Tracking Technologies

md222 uses cookies and similar technologies to operate the platform, remember your preferences and gather analytics data that helps us improve the user experience. The following types of cookies are used on the md222 platform.

• Essential Cookies: These cookies are strictly necessary for the platform to function. They enable core features such as login session management, security token validation and payment flow continuity. Essential cookies cannot be disabled without breaking platform functionality.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — including pages visited, time spent on each page, and features used. This data helps md222 identify usability issues and improve the platform experience. Analytics cookies do not identify you personally.
• Managing Cookies: You can manage or disable non-essential cookies through your device's browser settings. Please note that disabling certain cookies may affect the functionality of the platform. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

6. Data Retention

md222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting obligations. The following general retention periods apply: account data and KYC documents are retained for a minimum of five years following account closure, in line with applicable AML and financial record-keeping obligations; transaction records are retained for a minimum of five years from the date of the transaction; technical and log data is retained for up to 12 months from collection unless required for longer by an ongoing investigation or legal proceeding.

When personal data is no longer required, md222 will securely delete or anonymise it in a manner that prevents reconstruction of the original data. Players who have requested account closure may contact md222 support to enquire about the status of their data following closure.

7. Your Privacy Rights

As a player using the md222 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact md222 support using the email address published on the official site. We will respond to all valid requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data md222 holds about you, along with information about how it is processed. We will provide this in a commonly used electronic format.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data that md222 holds about you. Please note that corrections to KYC-verified identity data may require re-submission of supporting documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to limitations where retention is required by law (for example, AML record-keeping obligations mean certain transaction data cannot be deleted on request).
• Right to Restriction: You may request that md222 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Object: You have the right to object to processing of your personal data where md222 relies on legitimate interests as the legal basis. md222 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

8. Data Security

md222 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include SSL encryption for all data transmitted between your device and the md222 platform, access controls that restrict internal access to personal data on a need-to-know basis, regular security assessments of our platform infrastructure, and secure data storage with restricted physical and digital access.

Despite these safeguards, no method of transmission over the internet or method of electronic storage is completely secure. md222 cannot guarantee the absolute security of your personal data. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, md222 will notify affected players as required by applicable law.

9. Children and Minors

The md222 platform is strictly for adults aged 21 and above. md222 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor — whether through a misrepresentation of age at registration or any other means — we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on md222, please contact our support team immediately via the email address published on the official site.

10. Changes to This Privacy Policy

md222 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform functionality. When material changes are made, we will notify registered players via the contact details held on file and post the revised policy on this page with an updated effective date. We recommend reviewing this page periodically. Your continued use of the md222 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact the md222 support team via the email address published on the official site.