ha222 Privacy Policy

This Privacy Policy ("Policy") describes how ha222 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by users ("you", "your", "the Player") when accessing or using the ha222 website and any associated mobile-optimised pages. This Policy applies to all players accessing ha222 from Bangladesh and all other territories where the platform operates.

By creating an account on ha222 or by continuing to use our platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy. This Policy is incorporated by reference into the ha222 Terms and Conditions. If you do not agree with any part of this Policy, please do not use the ha222 platform.

How ha222 Respects Your Privacy

Information We Collect

ha222 collects personal information through a number of channels, including account registration, deposit and withdrawal transactions, gameplay activity, customer support interactions, and technical data generated by your device and browser. The categories of personal data we collect are described below:

How We Use Your Information

ha222 uses the personal data it collects for specific, documented purposes only. We do not use personal data for any purpose incompatible with the original purpose for which it was collected without first obtaining your explicit consent. The following are the purposes for which ha222 processes your personal data:

• To create, manage, and maintain your ha222 account, including processing your registration, verifying your identity through KYC procedures, and keeping your account details accurate and up to date.
• To process your deposits, withdrawals, and other financial transactions through the payment methods you have registered on your ha222 account, and to maintain accurate financial records.
• To deliver the core gaming service, including calculating bet outcomes, awarding winnings, applying bonus offers to eligible accounts, and maintaining game history records.
• To provide customer support services, including responding to your enquiries, resolving disputes, and acting on account-related requests such as password resets, self-exclusion requests, and deposit limit adjustments.
• To monitor platform activity for fraud detection, anti-money-laundering compliance, and security purposes, and to investigate any suspected breach of our Terms and Conditions.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement or regulatory authorities, filing mandatory reports, and maintaining records as required by law.
• To send you service-related communications such as account notifications, transaction confirmations, security alerts, and updates to our Terms or this Policy. We may also send you promotional offers and bonus notifications where you have opted in to marketing communications, or where permitted under applicable law. You may opt out of marketing communications at any time.

Legal Basis for Processing

ha222 relies on the following legal bases to process your personal data. At least one legal basis applies to every processing activity described in this Policy:

Sharing of Personal Data

ha222 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

• Payment processors and mobile money providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and relevant Bangladeshi banks): we share the transaction data necessary to process your deposits and withdrawals. These providers process your payment data under their own privacy policies and applicable financial regulations.
• Game studio providers (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Habanero): game outcomes and session data are processed by the game provider's systems. Providers receive only the technical data required to deliver the specific game session.
• Identity verification and KYC service providers: where ha222 uses a third-party identity verification service to process your KYC documents, that provider receives only the data required to perform the verification. All such providers are bound by strict confidentiality and data-processing agreements.
• Law enforcement and regulatory authorities: ha222 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or when disclosure is necessary to protect the rights, property, or safety of ha222, its players, or the public.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of ha222's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

Outside of the circumstances listed above, ha222 will not share your personal data with any third party without your prior explicit consent. All third-party data processors engaged by ha222 are required to process personal data only on ha222's documented instructions and are bound by contractual data-protection obligations at least as stringent as those described in this Policy.

Cookies and Tracking Technologies

ha222 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the service is used. A cookie is a small text file that is placed on your device when you visit a website. The following categories of cookies are used on ha222:

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only certain types, or notify you when a cookie is being set. Please note that restricting cookies may affect the functionality of the ha222 platform. For mobile browsers on Android and iOS devices, cookie preferences can be managed through your device's browser settings menu.

Data Retention

ha222 retains your personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply: account registration and identity data is retained for the duration of your account plus a minimum of five (5) years following account closure, as required for anti-money-laundering compliance; financial transaction records are retained for a minimum of five (5) years from the date of the transaction; gameplay and activity data is retained for three (3) years from the date it was generated; technical and device data is retained for twelve (12) months from the date it was collected unless a security investigation requires longer retention.

When personal data is no longer required for any lawful retention purpose, ha222 will securely delete or anonymise it in accordance with industry-standard data destruction practices. Anonymised data — where all identifying information has been irreversibly removed — may be retained indefinitely for statistical and research purposes. You may request information about the specific retention period applicable to your data by contacting [email protected].

Data Security

ha222 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. While no system can guarantee absolute security, ha222 applies industry-leading technical and organisational measures to minimise risk. The primary security controls in place include:

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, ha222 will notify affected players without undue delay and will take all reasonable steps to mitigate the effects of the breach. ha222 will also fulfill any mandatory breach notification obligations under applicable law.

Your Data Protection Rights

As a player on ha222, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verifiable data rights requests within thirty (30) days of receipt:

• Right of access: you have the right to request a copy of all personal data ha222 holds about you, together with a description of the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to rectification: you have the right to request correction of any inaccurate or incomplete personal data ha222 holds about you. Where a correction request is reasonable and verifiable, ha222 will update the data without undue delay.
• Right to erasure: subject to applicable legal retention obligations, you have the right to request deletion of personal data ha222 holds about you. ha222 will comply with erasure requests where no overriding legal basis for continued retention exists.
• Right to restrict processing: you have the right to request that ha222 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed, or where you contest the legal basis for processing.
• Right to data portability: where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to withdraw consent: where ha222 processes your data on the basis of consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

ha222 will not charge a fee for responding to data rights requests unless they are manifestly unfounded or excessive. In cases where a request is refused, ha222 will provide a written explanation of the reasons for refusal and will inform you of your right to escalate the matter to the relevant authority.

Children's Privacy

ha222 is strictly an adults-only platform. We do not knowingly collect, store, or process personal data of individuals under the age of 21. Access to ha222 is prohibited for anyone under 21 years of age. If you believe that ha222 has inadvertently collected personal data of a person under 21, please contact us immediately at [email protected] and we will take prompt action to delete that data from our systems.

Third-Party Links and Services

The ha222 platform integrates third-party game content provided by licensed game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and Habanero. These game providers operate their own data processing systems and are subject to their own privacy policies. ha222 is not responsible for the data practices of third-party game studios. When you play a game on ha222, limited technical session data is shared with the relevant game studio as described in Section 4. ha222 does not link to external websites, and we encourage players not to share personal data through any channel other than the official ha222 platform.

Changes to This Privacy Policy

ha222 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will make reasonable efforts to notify registered players via the contact details on file. It is your responsibility to review this Policy periodically. Your continued use of ha222 following the posting of any update constitutes your acceptance of the revised Policy.

The current version of this Privacy Policy is always available on this page and supersedes all previous versions. If you have any concerns about how a change to this Policy affects your rights, please contact our support team before continuing to use the platform.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ha222 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within five (5) business days. Support is available in both English and Bengali.