22 Win Privacy Policy — How Your Information Is Kept Safe

Introduction & Scope

Welcome to 22 Win. This Privacy Policy explains how 22 Win collects your personal information, how it is used, and how it is kept secure. By using the 22 Win website or app, you are considered to have agreed to this Policy.

22 Win believes privacy is a fundamental right. Your data will never be used without your consent — that is a firm commitment. Protecting the information of every user in Bangladesh is a responsibility 22 Win places above business.

This policy applies to all 22 Win services — including the website, mobile app, live chat, and email communications. If you have any questions, feel free to reach out to our support team directly.

What Types of Information Are Collected

22 Win only collects information that is strictly necessary to provide its services. No unnecessary or excessive data is requested.

22 Win never collects or stores your bKash PIN, Nagad password, or bank password under any circumstances. Only your mobile number and transaction reference are needed to process payments.

How Your Information Is Used

22 Win uses your data only for specific, limited purposes. Information collected for one purpose is never used for another.

• To enable account creation, identity verification, and secure login.
• To process deposits and withdrawals.
• To provide bonuses, promotions, and personalized offers.
• To detect fraud, money laundering, and duplicate accounts.
• To troubleshoot technical issues and improve the platform.
• For customer support and complaint resolution.
• To meet legal obligations and satisfy regulatory requirements.

22 Win never shares your data with third parties for advertising purposes. If that ever changes, you'll be informed in advance and given the opportunity to consent.

Data Sharing Policy

22 Win may share information with third parties only in the following limited circumstances — and in each case, only the minimum necessary information is disclosed:

• Payment Processing Providers: Solely to process transactions with MFS providers such as bKash, Nagad, or Rocket.
• KYC Verification Services: Trusted third-party providers may be used for identity verification.
• Legal Authorities: When required by a court order or a valid request from a regulatory authority — only where legally mandated.
• Security Researcher: With specialist fraud detection and prevention agencies — using anonymised data only.

22 Win ensures that all third-party agreements include data protection clauses, so that partners cannot use your information beyond the purposes 22 Win has authorised.

Security Measures

22 Win uses industry-leading technology to protect your data. Beyond the technology itself, each employee's access to data is strictly controlled.

• TLS 1.3 / 256-bit SSL encryption is applied to all data transmissions.
• Stored data is encrypted using the AES-256 algorithm.
• Two-factor authentication (2FA) is available for login.
• Accounts are automatically locked if a suspicious login attempt is detected.
• Regular security audits and penetration testing are conducted.
• Server data is stored in a secure, cloud-based environment with physical security measures in place.
• Only authorized personnel have access to specific data within our team.

In the event of a security breach — though 22 Win takes every precaution to prevent one — affected members will be notified as quickly as possible and appropriate action will be taken.

Cookie Policy

22 Win uses cookies on its website and app. Cookies are small text files stored on your device — they help keep the platform running smoothly and improve your experience.

Optional cookies can be turned off at any time from your 22 Win account settings. You can also manage cookies through your browser settings.

Your Data Rights

As a 22 Win member, you have the following rights over your personal data. Contact our support team to exercise any of these rights.

Data Retention Period

22 Win does not retain data longer than necessary. How long information is kept depends on its type and applicable legal requirements.

• Active Account Information: For as long as your account remains active.
• Transaction Records: Typically 5–7 years, as required by law.
• KYC Documents: For regulatory requirements during a set period even after account closure.
• Support Chat History: Up to 6 months after a complaint is resolved.
• Inactive Accounts: Retention is reviewed after 12 months of inactivity.

Once the retention period expires, your data is securely deleted or anonymised so that you can never be identified from it in the future.

Protection of Minors

22 Win strictly prohibits registration by anyone under 18. Age is verified at the time of registration and confirmed through identity verification.

If a minor is found to have opened an account, 22 Win will close it immediately. Any balance in that account will be returned through the appropriate legal process.

22 Win never knowingly collects or stores data from minors. If you suspect a minor is using the platform, please notify our support team.

Policy Update Process

22 Win may update this Privacy Policy from time to time — due to technical changes, legal requirements, or service improvements. Members will be notified in advance of any significant changes.

After any update, the new version will be published on the site with a revised date shown at the top of the page. Members may also receive email notifications for significant changes.

Continuing to use 22 Win after any changes have been made will be considered acceptance of the updated policy. We therefore recommend checking this page from time to time.