d222 Privacy Policy

1. Overview

d222 ("we", "us", "our") operates the online gaming and sports betting platform available at d222.today and any associated mobile applications. This Privacy Policy describes how d222 collects, processes, stores, and protects the personal data of players and visitors based in Pakistan and internationally.

By registering for a d222 account, making a deposit, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This policy should be read alongside d222's Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with d222.

2. Personal Data We Collect

d222 collects personal data that is necessary for the operation of your account, the processing of transactions, and compliance with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations. The categories of data we collect include:

d222 does not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health information, except where explicitly required by applicable law or regulation.

3. How We Collect Your Data

d222 collects personal data through the following means:

• Direct Registration: When you create a d222 account, you provide your name, date of birth, CNIC, mobile number, and email address directly through our registration form.
• KYC Verification: When you submit identity documents (CNIC front and back, proof of address) to complete account verification prior to your first withdrawal.
• Transactions: When you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, relevant payment identifiers and transaction records are captured automatically.
• Platform Usage: Automatically, as you navigate and use d222 — including games played, bets placed, session times, and device and browser information collected via cookies and server logs.
• Customer Support: When you contact our support team via live chat or email, the content of those communications is recorded and stored for quality assurance and dispute resolution purposes.
• Responsible Gaming Tools: When you interact with deposit limits, cooling-off periods, or self-exclusion features, the settings and timestamps associated with those actions are recorded as part of your account record.

4. Why We Use Your Data

d222 processes your personal data for the following specific purposes:

1. Account Management: To create, maintain, and administer your d222 account, including login authentication, password recovery, and account settings management.
2. Age & Identity Verification: To verify that you meet the minimum age requirement of 21 years and that your identity is genuine, in accordance with our KYC obligations.
3. Transaction Processing: To process PKR deposits and withdrawals via approved payment channels (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) accurately and securely.
4. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
5. Regulatory Compliance: To comply with applicable anti-money laundering (AML) regulations, record-keeping obligations, and any lawful requests from regulatory or law enforcement authorities.
6. Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce player-set limits, administer self-exclusion requests, and send responsible gaming communications where relevant.
7. Customer Support: To respond to your support queries, resolve disputes, and improve the quality of our customer service operations.
8. Platform Improvement: To analyse aggregated usage patterns, identify technical issues, and enhance the overall performance and user experience of the d222 platform.
9. Marketing Communications: Where you have opted in, to send you promotional offers, bonus notifications, and platform updates relevant to your account. You may opt out at any time via your account settings.

5. Legal Basis for Processing

d222 processes your personal data on the following legal bases:

6. Data Sharing & Disclosure

d222 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following limited and controlled circumstances:

• Payment Processors: We share relevant payment and identity data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank to process your deposit and withdrawal transactions. These providers act as independent data controllers subject to their own privacy policies and regulatory obligations.
• KYC & Identity Verification Partners: We may use third-party identity verification services to assist with CNIC verification and fraud screening. These partners process data solely on our behalf and under our instruction.
• Technology Service Providers: We use third-party cloud infrastructure, database management, and cybersecurity service providers to operate the d222 platform. These providers are bound by contractual data processing agreements and may not use your data for their own purposes.
• Game Providers: Where you play games supplied by third-party studios on the d222 platform, limited technical data (such as session tokens and game result data) may be shared with those providers for the purpose of game delivery and fairness verification.
• Regulatory & Law Enforcement Authorities: d222 will disclose personal data to competent authorities where required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of d222's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to this Privacy Policy.

7. Data Retention

d222 retains personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law and regulation. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, d222 will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

8. Security Measures

d222 takes the security of your personal data seriously. We implement a combination of technical and organisational measures to protect your data against unauthorised access, loss, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your device and d222 servers is encrypted using TLS 1.3. We do not support legacy protocols such as TLS 1.0 or SSL.
• Encryption at Rest: Sensitive data — including CNIC documents, payment details, and passwords — is encrypted at rest using AES-256 encryption.
• Password Storage: d222 never stores your password in plaintext. Passwords are hashed using a modern, salted hashing algorithm. Our staff cannot view your password — only reset it.
• Two-Factor Authentication (2FA): d222 offers optional 2FA via SMS OTP to your registered Pakistani mobile number. We strongly recommend enabling this feature for additional account security.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Fraud Monitoring: d222 employs automated and manual monitoring systems to detect unusual account activity, login anomalies, and suspicious transaction patterns in real time.
• Incident Response: In the event of a confirmed data breach that poses a risk to your personal data, d222 will notify affected users and relevant authorities within the timeframe required by applicable law.

9. Cookies & Tracking Technologies

d222 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse usage patterns. The following categories of cookies are used:

d222 does not use cookies for cross-site tracking, third-party behavioural advertising, or social media profiling. You can manage or delete cookies via your browser settings at any time. Note that disabling strictly necessary cookies will prevent the d222 platform from functioning correctly.

10. Your Data Rights

As a d222 user, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address provided in Section 13:

• Right of Access: You may request a copy of the personal data d222 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. For identity data changes, re-verification via CNIC may be required.
• Right to Erasure: You may request the deletion of your personal data. This right is subject to our legal retention obligations — data we are required to retain by law (e.g., AML records) cannot be deleted before the mandatory retention period expires.
• Right to Restrict Processing: You may request that d222 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to d222, to the extent technically feasible.
• Right to Object: You may object to the processing of your personal data where d222 relies on legitimate interest as its legal basis. Where you object to marketing communications, we will honour your request immediately.
• Right to Withdraw Consent: Where d222 processes your data based on consent (e.g., marketing emails), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of prior processing.

d222 will respond to all data rights requests within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case we will notify you of the extension and the reason for the delay.

11. Minors & Age Verification

d222 is strictly an adult platform. We do not knowingly collect or process personal data from individuals under the age of 21. CNIC-based age verification is a mandatory step in the d222 account verification process.

If d222 discovers or is notified that an account has been registered by or is being used by a person under the age of 21, we will immediately:

• Suspend the account and prevent any further access to the platform.
• Reverse any pending transactions associated with the account.
• Securely delete all personal data associated with the account, to the extent not required to be retained for legal or AML purposes.
• Notify relevant authorities where required by applicable law.

12. Changes to This Privacy Policy

d222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will provide at least 7 days' advance notice via:

• An email notification to your registered d222 email address, and/or
• A prominent notice displayed on the d222 platform upon your next login.

The updated policy will always be available at d222.today/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of d222 following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

If you do not agree with a revised Privacy Policy, you should cease using the d222 platform and may request account closure in accordance with our Terms & Conditions.

13. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the personal data d222 holds about you, please contact our Data & Privacy team through the following channels:

• Live Chat: Available 24/7 directly from the d222 platform. For data rights requests, please state "Privacy Request" at the start of your chat.
• Email: [email protected] — for formal data rights requests, use the subject line "Data Rights Request" and include your registered email address and CNIC number (last 4 digits only) for identification.

d222 takes all privacy enquiries seriously. We will acknowledge your request within 48 hours and respond in full within 30 calendar days. If your concern relates to a potential data breach or security incident, please mark your communication as urgent and our security team will prioritise it accordingly.