Your Privacy at dhk22

This Privacy Policy ("Policy") is published by dhk22 ("we", "us", "the Platform") and applies to all individuals ("you", "the Player", "the User") who visit, register on, or interact with the dhk22 website located at https://dhk22.io and any associated mobile-optimised interfaces, game products, and support channels operated under the dhk22 brand.

This Policy explains in plain English what personal data dhk22 collects from you, the legal bases on which we process that data, how it is stored, how long it is retained, the circumstances under which it may be shared with third parties, and the rights you hold in relation to your own data. Reading this Policy alongside our Terms & Conditions will give you a complete picture of how dhk22 operates and what obligations we have toward you.

By creating a dhk22 account or continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform and contact our support team to close your account.

This Policy is effective as of 1 January 2026. Any material amendments will be communicated to registered Players via the email address associated with their account and by updating the effective date at the top of this document.

dhk22 collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the types of data we may hold about you:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information. If you voluntarily disclose such information during a support interaction, it will be treated with the highest level of confidentiality and used only to assist your specific enquiry.

dhk22 collects personal data through the following mechanisms:

3.1 Direct Interactions. When you complete the dhk22 registration form, submit identity documents for KYC verification, make a deposit or withdrawal request, update your account profile, or contact the support team via live chat or email, you are directly providing personal data to dhk22. We collect only the information necessary to fulfil the specific action you are taking.

3.2 Automated Technologies. When you visit and navigate the dhk22 platform, our servers automatically record technical data including your IP address, device identifiers, browser type and version, referring URL, pages accessed, and the time and date of each request. This data is collected via server logs, session management tools, and first-party cookies (see Section 6 for full cookie details).

3.3 Payment Processors. When you deposit or withdraw funds via bKash, Nagad, Rocket, Upay, or a bank card, the payment processor provides dhk22 with a transaction confirmation reference and the masked identifier of your payment method (e.g., the last four digits of a mobile wallet number). dhk22 does not receive or store full payment credentials — these remain with the payment processor.

3.4 Identity Verification Partners. Where dhk22 engages a third-party KYC verification service to authenticate identity documents, that service processes your document images on our behalf and returns a verified/unverified outcome. The identity data shared with such partners is subject to strict data processing agreements that prohibit secondary use.

3.5 Game Providers. Certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated or anonymised gameplay performance data with dhk22 for platform analytics purposes. No personally identifiable information is shared by game providers back to dhk22 beyond what is necessary for dispute resolution.

dhk22 processes your personal data only where a lawful basis for doing so exists. The following table maps each processing purpose to its legal basis:

Where processing is based on your consent (for example, receiving marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, visit your account notification settings or contact support.

5.1 BDT Payment Methods. dhk22 supports a range of Bangladeshi Taka payment channels including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. When you initiate a transaction through any of these methods, the payment data you enter is submitted directly to the respective payment processor using an encrypted connection. dhk22 receives only a tokenised or masked reference to confirm the transaction.

5.2 What dhk22 Stores. In relation to each financial transaction, dhk22 retains: the transaction reference number, the payment method type (e.g., bKash), a masked identifier (e.g., the last four digits of the mobile wallet number), the transaction amount in BDT (৳), the transaction timestamp (Bangladesh Standard Time, UTC+6), and the transaction status. This information is necessary for account management, dispute resolution, and regulatory record-keeping.

5.3 What dhk22 Does Not Store. dhk22 does not store full mobile wallet PINs, full bank account numbers, card CVV codes, or any other authentication credential associated with your payment method. Such credentials are handled exclusively by the payment processor and are never transmitted to or stored on dhk22 servers.

5.4 Source of Funds. As part of our responsible gaming and anti-money-laundering obligations, dhk22 may request documentation to verify the source of funds used to make deposits — particularly for high-value or unusual transactions. Information collected for this purpose is used solely for compliance and fraud prevention and is not used for marketing.

dhk22 uses cookies and similar technologies to operate the platform, maintain your session, understand how the site is used, and improve your experience. We do not use third-party advertising cookies or cross-site tracking technologies.

6.1 Types of Cookies We Use.

6.2 Managing Cookies. Strictly necessary cookies cannot be disabled as they are required for the platform to function. Functional and analytical cookies can be managed through your browser's cookie settings. Please note that disabling functional cookies may affect the quality of your experience on the dhk22 platform.

6.3 No Third-Party Ad Tracking. dhk22 does not permit third-party advertising networks to place tracking cookies on the platform. We do not use pixels, beacons, or fingerprinting technologies for cross-site user profiling.

dhk22 does not sell, rent, or trade your personal data to any third party. We may share your data in the following limited and controlled circumstances only:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment processors receive the minimum data necessary to process your transaction. Each processor is bound by their own security and privacy obligations.
• KYC / Identity Verification Providers: Where we use a third-party service to verify identity documents, that provider processes your data under a strict data processing agreement as a data processor on our behalf.
• Game Technology Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive session tokens and anonymised player identifiers required to run game software within the dhk22 environment. They do not receive your full personal profile.
• Platform Infrastructure Providers: Cloud hosting, content delivery, and database infrastructure providers may process data on our behalf as part of running the platform. All such providers are selected on the basis of their security certifications and are subject to contractual data protection obligations.
• Legal and Regulatory Authorities: dhk22 may disclose personal data to law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of dhk22's assets, Player data may be transferred to the acquiring entity. You will be notified of any such transfer via the email address on your account.

dhk22 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention schedule applies:

After the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and platform analytics purposes.

As a dhk22 Player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected] (plain text — not a clickable link). We will respond to all verified requests within 30 days.

• Right of Access: You may request a copy of the personal data dhk22 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic profile updates, you can make changes directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that dhk22 delete your personal data. This right is subject to certain exceptions — for example, we are required by law to retain financial transaction records for a specified period even after account closure.
• Right to Restriction: You may request that dhk22 restrict the processing of your data in certain circumstances, such as while you contest its accuracy or object to its processing.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to dhk22 in structured, commonly used format.
• Right to Object: Where processing is based on legitimate interests, you have the right to object. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

dhk22 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction.

10.1 Encryption. All data in transit between your device and the dhk22 platform is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.

10.2 Access Controls. Access to personal data within dhk22's internal systems is restricted on a strict need-to-know basis. Employees and contractors who access personal data are subject to confidentiality obligations and regular security training. Access rights are reviewed periodically and revoked promptly upon role change or termination.

10.3 Two-Factor Authentication. dhk22 offers two-factor authentication (2FA) for all Player accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access. 2FA is applied by default to all withdrawal requests above certain thresholds.

10.4 Penetration Testing & Auditing. The dhk22 platform undergoes periodic security assessments, including vulnerability scanning and penetration testing conducted by independent security professionals. Identified vulnerabilities are remediated according to a risk-based prioritisation framework.

10.5 Incident Response. In the event of a data security incident that poses a risk to your personal data, dhk22 will notify affected Players as promptly as practicable via the email address registered on their account, describing the nature of the incident, the data affected, and the steps we are taking to address it.

The dhk22 platform is strictly for individuals aged 21 years and above. dhk22 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If you are under 21 years of age, you must not use the dhk22 platform, create an account, or provide any personal information to us.

Age verification is a mandatory step of the dhk22 KYC process. Where dhk22 discovers or has reasonable grounds to believe that a registered account is held by a person under the age of 21, that account will be immediately suspended, all pending transactions will be frozen, and any funds held in the account will be subject to review in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has provided personal data to dhk22 or has gained unauthorised access to the platform, please contact our support team immediately at [email protected] (plain text — not a clickable link) and we will take prompt action to close the account and securely delete any associated data.

dhk22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will:

• Update the effective date displayed at the top of this document and in the Table of Contents sidebar.
• Send a notification to the email address registered on your dhk22 account summarising the key changes.
• Display an in-platform notification for a period of at least 14 days following the change.

Your continued use of the dhk22 platform after any amendment to this Policy constitutes your acceptance of the updated version. If you do not agree with the revised Policy, you should cease using the platform and request account closure via our support team. We will always keep the most current version of this Policy accessible via the footer of the dhk22 website.

For non-material changes — such as corrections of typographical errors, clarifications of existing language, or formatting improvements that do not alter the substance of the Policy — dhk22 may update the document without sending a direct notification, though the effective date will always be updated to reflect the revision.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how dhk22 has handled your personal information, please reach out to our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the dhk22 platform. Our English-language support agents are available to assist players across all regions of Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and beyond. Response times are typically under five minutes during peak hours (BST, UTC+6).
• Email: [email protected] (plain text — not a clickable link). Privacy-related enquiries are handled by our dedicated data team and responses are typically provided within 72 hours of receipt.

When submitting a data rights request, please include your registered email address, the nature of your request, and any relevant account reference numbers to allow us to process your request as efficiently as possible. We may need to verify your identity before acting on any request to protect the security of your account and personal data.