2288's Privacy Policy — Your data, our responsibility

2288 (https://2288.click) is a trusted online betting and gaming platform in Bangladesh. We believe your personal data belongs to you — which is why our Privacy Policy is built on full transparency and accountability.

This Privacy Policy applies to 2288's website, mobile app, and all other digital platforms through which our services are provided. It is in effect whenever you create an account, use our services, or contact us.

This policy details what information we collect, why we collect it, how it is used, and what rights you have. We always follow international data protection regulations (including GDPR) and treat your privacy with the utmost respect.

This policy is written in English to ensure every user in Bangladesh can easily understand it. If anything is unclear, our support team is always ready to help.

2288 only collects information that is necessary to operate our services properly. We never request excessive or irrelevant data. A detailed breakdown by data type is provided below:

Please note that we never store your full bank card number or CVV. Payment details are handled directly by the relevant payment gateway and card information never reaches 2288's servers.

2288 uses your data only for specific, legitimate purposes. It is never used for anything irrelevant or unauthorized. The primary purposes are outlined below:

• Account Management: To complete registration, login verification, password reset, and KYC processes.
• Payment Processing: To process deposit and withdrawal transactions quickly and securely.
• Fraud Prevention: To detect suspicious activity and keep your account secure.
• Support Services: To resolve your complaints and inquiries promptly and effectively.
• Legal Obligations: To comply with applicable laws and AML (Anti-Money Laundering) regulations.
• Service Improvement: To improve platform performance and enhance the user experience.
• Personalized Experience: To suggest bonuses and promotions tailored to your preferences (only with your consent).

The legal bases for processing your data are: your consent, contractual necessity, legal obligations, and our legitimate business interests. In no case do our interests take precedence over your rights.

2288 never sells your personal information to third parties. This is a fundamental principle that does not change under any circumstances. Data sharing occurs only in the following limited situations:

• Payment Partners: Only the information necessary to process transactions is shared with payment providers such as Mobile Pay, Nagad, Rocket, or banks.
• Technology Service Providers: With contracted companies providing hosting, security, and analytics services — all of whom adhere to the same privacy standards.
• Legal Authorities: When required to comply with a court order or a lawful request from a government authority.
• Anti-Fraud Agencies: With money laundering and financial fraud detection agencies, where legally required.

Whenever data is shared with third parties, a strict Data Processing Agreement (DPA) is in place. This ensures they use your data only for the specified purpose and uphold the same security standards.

2288 uses cookies and similar technologies on its website and app to enhance your browsing experience, ensure site security, and evaluate the quality of our services.

You can manage cookies at any time through your browser settings. However, disabling essential cookies may affect certain site functions, particularly login and payment-related services.

2288 does not retain your data longer than necessary. Specific retention periods are defined for each data type, based on legal and business requirements.

• Account Information: Retained while your account is active. After closure, kept for up to 5 years as required by law.
• Transaction Records: Must be retained for a minimum of 5 years under AML regulations.
• Support Conversations: Deleted 2 years after the issue is resolved.
• Login Logs & Security Data: Retained for up to 1 year.
• Cookie Data: As per each cookie's designated expiry period.

Once the retention period ends, data is securely and permanently deleted or fully anonymized. Our data management team regularly oversees the removal of outdated records.

2288 employs industry-leading technology and processes to protect your data. Our security framework is built in multiple layers so that if one layer is compromised, the others continue to provide protection.

• 256-bit SSL/TLS Encryption: All data transfers are carried out through encrypted channels, the same way banking sites operate.
• Two-Factor Authentication (2FA): OTP verification at login prevents unauthorized access to your account.
• Firewall & DDoS Protection: To protect our servers and databases from cyber attacks.
• Regular Security Audits: An independent team of third-party experts regularly tests our systems for vulnerabilities.
• Employee Training: Anyone with access to your data is bound by strict confidentiality training and NDA agreements.
• Data Masking: Sensitive information on support screens (such as phone numbers and account details) is partially masked.

Please note that no one can guarantee 100% security on the internet. To protect your account, always use a strong password and never share it with anyone.

Every 2288 user has full ownership of their personal data. We uphold the following rights in accordance with international privacy laws:

2288 is an 18+ platform. We do not collect, process, or provide services to minors (under 18). Age verification is in place during the registration process.

If we are informed that a minor has created an account, that account will be immediately closed and all associated data will be deleted. Providing false information about your age is a direct violation of our terms and conditions.

We are strong advocates of responsible gaming. To learn more about minor protection and responsible play, visit our Responsible Gaming View the page.

2288 reserves the right to update this Privacy Policy as needed. Revisions may occur due to technological changes, new legal requirements, or updates to our services.

• For significant changes, you will be notified by email or SMS at least 30 days before they take effect.
• Minor changes (such as language corrections) will be updated on this page only.
• The "Last Updated" date at the top of the page will always reflect the most recent version.
• Continued use of our services after any changes takes effect constitutes acceptance of the updated policy.

For any questions, requests, or complaints regarding our Privacy Policy, please contact us:

We aim to resolve all privacy requests within 30 days. If a request requires more time due to complexity, we will keep you informed.