2agame Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how 2agame ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who register for or use the 2agame online casino and sports betting platform, accessible at https://2agame.bio. This Policy applies to all personal data collected through the website, mobile interface, account registration forms, customer support interactions, and payment processing channels.

By registering an account with 2agame or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood the practices described herein. If you do not agree with how 2agame processes personal data, you should discontinue use of the platform and may request account closure by contacting our support team.

This Policy should be read together with the 2agame Terms & Conditions, which set out the broader contractual relationship between 2agame and its registered players. In the event of any inconsistency between this Policy and the Terms & Conditions, this Policy governs matters relating specifically to personal data.

02 Data We Collect

2agame collects personal data through several channels, including account registration, payment transactions, customer support communications, and your ongoing use of the platform. The categories of personal data we collect are described in the table below.

2agame does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion request, in which case it is handled with the highest degree of confidentiality.

03 How We Use Your Data

2agame uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your 2agame account, verify your identity, maintain your profile, and manage your login credentials securely.
• Payment processing: To facilitate deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and local bank cards, and to maintain transaction records.
• Platform security and fraud prevention: To detect and prevent fraudulent activity, money laundering, bonus abuse, account takeovers, and other forms of prohibited conduct that could harm the platform or its players.
• Regulatory compliance and AML obligations: To fulfil anti-money-laundering (AML) and know-your-customer (KYC) obligations, including identity verification and source-of-funds checks where required.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of assistance we provide to players across Bangladesh.
• Responsible gaming: To monitor for behavioural patterns that may indicate problem gambling and to action responsible gaming tool requests such as deposit limits and self-exclusion.
• Platform improvement: To analyse aggregate, anonymised usage data to improve game performance, navigation, payment flows, and the overall player experience.
• Direct communications: To send account-related notifications, security alerts, and — where you have opted in — promotional communications regarding 2agame offers and events.

2agame does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except in the context of fraud-detection systems where automated flags are always reviewed by a human member of the security team before any account action is taken.

04 Legal Basis for Processing

2agame processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and 2agame — including account registration, payment processing, and customer support — is carried out on the basis that it is necessary to fulfil our obligations to you as a registered player.
• Legal obligation: Certain processing activities, including identity verification, transaction record-keeping, and AML checks, are carried out to comply with applicable legal and regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is conducted on the basis of 2agame's legitimate interest in operating a safe, fair, and sustainable platform. We balance this interest against your rights and freedoms in each case.
• Consent: Where 2agame relies on your consent — for example, for marketing communications or for processing voluntarily provided health-related information in a responsible gaming context — you may withdraw that consent at any time by contacting the support team or adjusting your account notification settings.

05 Data Sharing & Disclosure

2agame does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where strictly necessary and under appropriate data protection obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners receive only the transactional data necessary to process your deposits and withdrawals. These providers are contractually bound to process your data only for the stated purpose.
• Identity verification services: Third-party KYC and identity verification partners may receive a copy of your identity documents for the purpose of account verification. These partners operate under strict data processing agreements.
• Game providers: Platform game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and wager data necessary to deliver their games and calculate outcomes. Personal identity data is not shared with game providers.
• Legal and regulatory authorities: 2agame may disclose personal data to relevant authorities where required by law, court order, or to protect the rights, safety, or property of 2agame, its players, or the public.
• Platform infrastructure providers: Cloud hosting, security, and analytics infrastructure providers who process data strictly on 2agame's behalf under data processing agreements that prohibit independent use of the data.

06 Cookies & Tracking

The 2agame platform uses cookies — small text files stored on your device — to enable essential platform functionality, maintain your session state, and collect anonymised performance data. The cookies we use fall into the following categories:

2agame does not use third-party advertising cookies, retargeting pixels, or cross-site behavioural tracking technologies. You may manage or disable non-essential cookies at any time through your browser's cookie settings. Note that disabling essential cookies will prevent you from logging in to your 2agame account.

07 Data Retention

2agame retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any applicable legal obligations requiring longer retention periods.

• Active account data: Retained for the full duration of your account's active status on the platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with standard AML record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Customer support records: Retained for three (3) years from the date of the relevant support interaction.
• Marketing consent records: Retained until you withdraw consent, after which we retain only a record of the withdrawal for audit purposes.
• Self-exclusion records: Retained for the duration of the exclusion period and for five (5) years thereafter to prevent re-registration in circumvention of the exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

08 Security Measures

2agame implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 2agame platform.
• Encrypted storage for sensitive data fields including passwords (hashed), payment credentials, and identity documents.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with all staff access logged and audited.
• Two-factor authentication (2FA) available for player accounts and mandatory for all internal staff accounts with access to player data.
• Regular security audits and vulnerability assessments of platform infrastructure and application code.
• Intrusion detection systems monitoring for unusual login patterns, automated bot activity, and potential data exfiltration attempts.

While 2agame takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 2agame will notify affected players without undue delay and will take immediate remedial action to contain the breach.

09 Your Rights

As a player whose personal data is processed by 2agame, you hold the following rights in relation to that data. To exercise any of these rights, please contact the 2agame support team using the details in Section 13.

• Right of Access: You may request a copy of the personal data 2agame holds about you, along with information about how it is processed and the purposes for which it is used.
• Right to Rectification: You may request the correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to Erasure: Subject to legal retention obligations, you may request the deletion of your personal data from 2agame's systems. We will fulfil valid erasure requests within 30 days.
• Right to Restriction: You may request that 2agame restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: Where processing is based on legitimate interests, you may object to that processing. 2agame will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Third-Party Services

The 2agame platform integrates with a number of third-party service providers to deliver its full range of features. While 2agame selects all third-party partners carefully and requires them to operate under data protection agreements consistent with this Policy, we are not responsible for the independent privacy practices of those third parties.

Key third-party integrations on the 2agame platform include game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard banking partners), KYC verification services, and cloud hosting infrastructure providers. Each of these providers has been assessed for data protection compliance prior to integration.

The 2agame platform does not contain links to external third-party websites. If you independently navigate to any external website, its privacy policy — not this one — will govern how your data is handled there.

11 Children's Privacy

If 2agame discovers or is notified that personal data belonging to a person under the age of 18 has been collected — whether through a fraudulent registration or any other means — that account will be immediately suspended, all associated data will be permanently deleted, and any funds deposited will be returned to the originating payment method where technically possible.

If you are a parent or guardian and have reason to believe that a minor has registered an account with 2agame, please contact our support team immediately at [email protected] so that we can investigate and act without delay.

12 Policy Updates

2agame reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players via the platform's in-account notification system and, where practical, by email to the address registered on the player's account. The effective date at the top of this Policy will be updated to reflect the date on which the revised Policy takes effect.

Continued use of the 2agame platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

We encourage all players to review this Policy periodically to remain informed of how 2agame handles personal data. Previous versions of this Policy are available upon request by contacting the support team.

13 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 2agame, please contact our support team using the details below. All privacy-related enquiries are handled with strict confidentiality.

For questions about responsible gaming or to activate account protection tools, please visit the Responsible Gaming page. For general platform questions, visit our FAQ page.