2up Privacy Policy — Your data is fully protected

Welcome to the 2up Privacy Policy. This policy applies to all users worldwide, including those in Bangladesh, who have registered or wish to register on the 2up platform (website or mobile app).

We believe you should have full control over your personal information. That is why 2up's Privacy Policy is built so that every piece of data collected has a clear, understandable reason behind it — with no hidden agendas or opaque processes.

This Privacy Policy is aligned with international data protection regulations, including GDPR (General Data Protection Regulation). It is recommended to read this alongside 2up's Terms and Conditions and Responsible Gaming Policy.

The following types of information are collected to provide you with services on 2up:

2up uses your information only for specific purposes, each of which is clearly outlined below:

• Account Management: For registration, login, KYC verification, and account security.
• Payment Processing: For storing deposit, withdrawal, and transaction history.
• Service Improvement: To analyze user experience and further improve the platform.
• Fraud Prevention: To detect suspicious activity and keep your account secure.
• Responsible Gaming: Gaming behavior is monitored to identify problematic patterns and provide appropriate support.
• Legal Obligations: To meet regulatory requirements and prevent financial crime.
• Marketing Communications: To send you relevant offers and promotions with your consent. You may unsubscribe at any time.

2up may share your personal information with third parties only in limited, specific circumstances:

• Payment Processors: Mobile Banking, Nagad, Rocket, bank, and crypto gateways receive only the information necessary to complete the transaction.
• KYC Verification Partner: Licensed verification service providers used for identity verification.
• Game Software Providers: Only your account ID is shared to facilitate gameplay; no personal information is disclosed.
• Legal Obligations: Information may be disclosed pursuant to a court order or at the request of a regulatory authority.
• Anti-Money Laundering: Cooperation with relevant authorities to prevent financial crime.

2up uses cookies and similar technologies on its website to enhance your experience. Cookies are small text files stored in your browser.

• Essential Cookies: These are required for login sessions and site security — they cannot be disabled.
• Functional Cookies: Used to remember language preferences, game settings, and user preferences.
• Analytics Cookies: Collects anonymous data to understand site performance and usage patterns.
• Marketing Cookies: To show you relevant ads based on your preferences; only with your consent.

2up follows industry-leading technical and organisational measures to keep your data secure:

• Across all data transfers TLS 1.3 / SSL 256-Bit Encryption Is used.
• In stored data AES-256 Encryption is applied.
• Two-Factor Authentication (2FA) Provides an extra layer of account security.
• Regular Security Audits and penetration testing is conducted.
• Firewall & DDoS Protection Always active.
• Strict for staff Data Access Policy — Only those who need access can view specific data.
• You will be notified within 72 hours in the event of a security breach.

2up does not retain your data beyond what is necessary. Below are the retention periods for each category of information:

• Account Information: For the duration of the active account and 5 years after closure.
• Financial Transaction Records: A minimum of 7 years as required by law.
• KYC Documents: 5 years from the date of verification.
• Gaming Logs & History: 3 years.
• Support Contact: 2 years.
• Marketing Consent Record: 3 years from the date of consent withdrawal.

Under the 2up Privacy Policy, you have the following rights. To exercise any of them, please contact our support team:

• Right to Access: You may request a copy of all information we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete information.
• Right to Erasure: In certain circumstances, you may request that your data be erased.
• Right to Restrict Processing: You can request that data processing be put on hold in certain circumstances.
• Right to Data Portability: You may request a copy of your information in a structured, portable format.
• Right to Object: You can object to your data being used for marketing or profiling purposes.
• Right to Withdraw Consent: Where data has been collected on the basis of consent, that consent may be withdrawn at any time.

2up is strictly prohibited for anyone under the age of 18. Age is verified at registration and may be re-verified at any time through the KYC process.

We do not knowingly collect data from minors. If we become aware that a minor's information has been collected inadvertently, the account will be closed and the data deleted immediately.

2up may update this Privacy Policy from time to time. Prior to any significant changes, a notice will be sent to your registered email address and a notification will be posted on the platform.

Continued use of the platform after any changes takes effect will be considered acceptance of the updated policy. If you do not agree to the new policy, you may request that your account be closed.