222game Privacy Policy —
Your Data, Handled With Care

This Privacy Policy ("Policy") describes how 222game ("we," "us," "our," or "the Platform") collects, uses, discloses, stores, and protects personal data relating to individuals ("you," "your," or "Player") who visit, register on, or use the 222game platform accessible at 222game.app, including all associated subdomains, mobile interfaces, and progressive web application experiences.

222game takes the privacy of its players seriously. This Policy is written in plain English and is intended to be genuinely readable — not merely a formality. We encourage all Pakistani players to read it carefully before creating a 222game account or depositing funds on the Platform.

This Policy applies to all personal data 222game processes about registered players, prospective players who visit the Platform without registering, and individuals who contact our support team. It does not apply to third-party websites, payment providers, or game studios that may be accessible through or in connection with the 222game Platform — each such third party operates under its own privacy practices.

For the purposes of applicable data protection law, 222game is the data controller in respect of personal data processed about players using the Platform. As data controller, 222game determines the purposes for which personal data is collected and the means by which it is processed.

Where 222game engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and cloud hosting services — those third parties act as data processors, operating under written data processing agreements that impose obligations consistent with this Policy and applicable data protection standards.

222game collects personal data through several channels: directly from you when you register or interact with the Platform; automatically through your use of the Platform; and from third-party sources where permitted and necessary for verification or fraud prevention purposes.

3.1 Registration & Account Data

• Full legal name as it appears on your Pakistani CNIC or passport;
• Date of birth (for age verification — all players must be 21+);
• Pakistani mobile number (used for account communication and JazzCash OTP authentication);
• Email address;
• Username and encrypted password;
• City of residence (Karachi, Lahore, Islamabad, Faisalabad, or other).

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (CNIC, passport, driver's licence);
• Proof of address documentation;
• Selfie photographs or liveness check images where enhanced verification is required;
• Source of funds declarations for high-value accounts.

3.3 Financial Transaction Data

• JazzCash account reference tokens (tokenised — raw account numbers are not stored);
• EasyPaisa account reference tokens;
• HBL, UBL, and Meezan Bank transfer references;
• Deposit amounts, withdrawal amounts, and full transaction history in PKR;
• Bonus credits, wagering activity, and balance history.

3.4 Gaming Activity Data

• Game sessions, bet placements, bet amounts, and game outcomes;
• Cricket betting history including markets, selections, and results;
• Slot spin history, RNG game results, and live casino session records;
• Responsible gaming settings, limit configurations, and self-exclusion records.

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type;
• Session start and end timestamps;
• Pages visited within the Platform and click-through patterns;
• Error logs and technical diagnostic data.

3.6 Support & Communication Data

• Records of all live chat conversations with the 222game support team;
• Email correspondence and formal complaint records;
• Satisfaction survey responses (where provided voluntarily).

222game uses personal data for the following purposes, each of which is underpinned by a specific legal basis as described in Section 5 of this Policy:

222game relies on the following legal bases for processing personal data:

• Contract Performance: Processing necessary to provide the gaming services you have contracted to receive as a registered 222game player — including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with our obligations under applicable licensing conditions, anti-money laundering regulations, age verification mandates, and other statutory requirements.
• Legitimate Interests: Processing for purposes that are in 222game's legitimate business interests and not overridden by your privacy rights — including Platform security, fraud prevention, responsible gaming monitoring, and service improvement through anonymised analytics.
• Consent: Processing based on your freely given, specific, informed consent — principally for direct marketing communications. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting our support team.

222game uses cookies and similar technologies on the Platform to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored by your browser that allows the Platform to recognise your device across sessions.

6.1 Types of Cookies We Use

• Essential Cookies: Required for basic Platform functionality — session management, login authentication, and security. These cannot be disabled without impairing your ability to use 222game.
• Functional Cookies: Remember your preferences such as language settings, game lobby display options, and responsible gaming configuration choices.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which game categories are most visited, average session durations, and common technical errors. This data is used solely to improve the 222game experience.
• Security Cookies: Assist in detecting and preventing fraudulent login attempts, bot activity, and other security threats. These operate in the background and do not affect your gaming experience.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to log in and use core 222game features. 222game does not use third-party advertising cookies or cross-site tracking cookies for external marketing purposes.

222game does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment Processors: JazzCash, EasyPaisa, and partner banking institutions (HBL, UBL, Meezan Bank) receive the minimum transactional data necessary to process your deposits and withdrawals. All payment partners operate under their own privacy frameworks and applicable financial regulations.
• Identity Verification Providers: Third-party KYC and AML screening services that assist 222game in verifying player identities and assessing financial risk. These providers are contractually bound to use your data solely for verification purposes.
• Game Studio Providers: Live casino and RNG game providers including Evolution Gaming, Pragmatic Play, and Ezugi may receive pseudonymised session identifiers to facilitate game delivery. These providers do not receive your personally identifiable registration details.
• Cloud Infrastructure Providers: Hosting and database providers that store Platform data under strict data processing agreements and industry-standard security requirements.
• Regulatory and Law Enforcement Authorities: 222game will disclose personal data to competent authorities where required by law, court order, or our licensing obligations. We do not make such disclosures voluntarily and will seek to notify affected players where legally permitted to do so.

222game may store and process personal data on servers located outside Pakistan, in countries where our hosting infrastructure and certain service providers are based. Where personal data is transferred outside Pakistan, 222game ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan.

Such safeguards may include contractual protections in the form of standard data protection clauses, requiring recipient organisations to maintain security standards consistent with international best practice, and selecting hosting providers operating in jurisdictions with recognised data protection frameworks. If you have questions about the safeguards applicable to any specific international transfer of your data, you may contact us using the details in Section 14 of this Policy.

222game retains personal data for only as long as is necessary for the purpose for which it was collected, subject to mandatory minimum retention periods imposed by our licensing obligations, anti-money laundering regulations, and other applicable legal requirements.

Upon expiry of the applicable retention period, personal data is either permanently deleted from 222game's systems or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data may be retained indefinitely for statistical and operational planning purposes.

222game implements a layered security architecture designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. The following technical and organisational security measures are applied to all personal data processed by 222game:

• Transmission Security: TLS 1.3 encryption on all data transmitted between player devices and 222game servers. All API communications between 222game and third-party service providers use encrypted channels.
• Password Security: Player passwords are stored exclusively in bcrypt-hashed form with individual salt values. Plaintext passwords are never stored, logged, or transmitted.
• Payment Tokenisation: JazzCash, EasyPaisa, and banking account references are stored in tokenised form. No raw payment account numbers are held in 222game's database systems.
• Access Controls: Access to personal data within 222game is restricted to personnel with a demonstrated operational need. Role-based access controls and authentication requirements apply to all staff with data access.
• Intrusion Detection: Automated monitoring systems scan for anomalous access patterns, unusual login behaviour, and potential data breach indicators on a continuous basis.
• Data Breach Response: 222game maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected players without undue delay and take immediate remedial action.

As a player on the 222game Platform, you have the following rights in relation to your personal data. All rights requests should be submitted to the 222game support team using the contact details in Section 14. We will respond to all valid rights requests within thirty (30) calendar days of receipt.

11.1 Right of Access

You have the right to request a copy of all personal data that 222game holds about you, together with information about the purposes for which it is processed, the categories of data held, the recipients with whom it has been shared, and the applicable retention period.

11.2 Right to Rectification

You have the right to request the correction of any inaccurate personal data that 222game holds about you. Where data is incomplete, you may request that it be completed. Certain data — such as CNIC-verified identity information — may require documentary evidence before correction can be applied.

11.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for continued processing. This right is subject to overriding legal obligations that may require 222game to retain certain data for defined periods, as described in Section 9.

11.4 Right to Restriction

You may request that 222game restricts its processing of your personal data — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing and we are considering whether our legitimate interests override your rights.

11.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.

11.6 Right to Object

You have the right to object to the processing of your personal data where 222game relies on legitimate interests as the legal basis for processing. 222game will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.

11.7 Right to Withdraw Consent

Where processing is based on your consent — principally for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent can be effected through your account communication preferences settings or by contacting the 222game support team.

Age verification is a mandatory step in the 222game registration process, and KYC documentation is used to confirm that all players meet the minimum age requirement. Where 222game becomes aware that an account has been registered by a person under 21 years of age, that account will be immediately suspended, all gaming activity will be declared void, all deposits will be returned, and all personal data associated with the underage account will be deleted from our systems within thirty (30) days, subject only to retention obligations imposed by law.

If you believe that a person under 21 may have registered a 222game account — whether using your details or otherwise — please contact our support team immediately so that we can investigate and take appropriate action.

222game reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. Material changes will be communicated to registered players via email to the registered address no fewer than fourteen (14) days before the amended Policy takes effect, except where immediate changes are required by law or regulatory direction.

The date of the most recent revision to this Policy is displayed prominently in the Hero section at the top of this page and in the header of the Policy document. Continued use of the 222game Platform following publication of an amended Privacy Policy constitutes your acknowledgement of and agreement to the amended terms. We encourage players to review this Policy periodically to remain informed about how 222game handles personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how 222game has handled your personal data, please contact us through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week, via the 222game Platform

When submitting a data rights request, please include your registered 222game username and the email address associated with your account. This allows us to verify your identity before processing the request — a necessary step to protect your data from third-party access.

222game endeavours to resolve all privacy complaints and data rights requests promptly and fairly. If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or the dispute resolution body applicable under our licensing framework.