At cd222, your personal data is handled with the same level of care we apply to your finances. This Privacy Policy explains precisely what information we collect, why we collect it, how it is stored, who we share it with, and what rights you hold as a cd222 account holder. Reading it in full before registering is strongly recommended.
These cards summarise the foundational privacy commitments that cd222 makes to every account holder. The full legal detail for each commitment is contained in the policy sections that follow. These summaries do not constitute legal advice.
Every data exchange between your device and the cd222 platform is encrypted using TLS 1.3. Sensitive stored data — including payment details and identification documents — is encrypted at rest using AES-256. Your data is never transmitted over unencrypted channels.
cd222 does not sell, rent, or trade personal data to unaffiliated commercial third parties for their marketing purposes. Data sharing with third parties is limited to service providers who operate under strict contractual data processing agreements and regulatory disclosure obligations only.
cd222 collects only the personal data necessary to provide the gaming service, verify identity, process payments, prevent fraud, and comply with regulatory obligations. Data is not collected speculatively or retained beyond the periods required for its stated purpose.
As a cd222 account holder, you hold the rights to access, correct, port, restrict processing of, and in applicable circumstances request deletion of your personal data. These rights can be exercised by contacting the cd222 data team — no legal representation is required.
cd222 sends promotional communications — bonus offers, PSL betting highlights, new game announcements — only to players who have explicitly opted in. You can withdraw marketing consent at any time from your account notification settings or by contacting support directly.
cd222 retains personal data only for as long as it is required for its stated purpose or as mandated by regulatory retention obligations. Account data is typically retained for five years following account closure, after which it is securely deleted or anonymised.
Request a copy of all personal data cd222 holds about you.
Correct inaccurate or incomplete personal data in your account.
Request deletion of personal data where no overriding legal basis applies.
Temporarily restrict processing of your data while a dispute is resolved.
Receive your data in a structured, machine-readable format for transfer.
Object to processing of your data for direct marketing at any time.
cd222 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Policy sets out in clear legal-style language what personal data we collect from cd222 players and site visitors, the purposes for which that data is processed, the legal basis on which processing occurs, the third parties with whom data may be shared, how long data is retained, and the rights available to individuals in respect of their personal data.
cd222 operates as an online gaming platform servicing players primarily in Pakistan. Our platform supports PKR-denominated accounts, JazzCash and EasyPaisa payment integrations, and Urdu-English customer service. The data we collect is shaped by these operational characteristics and by the regulatory obligations that apply to licensed online gaming operators.
This Policy is written in plain language wherever possible to ensure that Pakistani players can understand their rights and our obligations without specialist legal knowledge. Where legal terminology is unavoidable, we have provided explanatory context alongside it.
For the purposes of applicable data protection law, the data controller responsible for the personal data collected through the cd222 platform is the licensed operating entity of cd222.biz. References to "cd222," "we," "us," or "our" throughout this Policy refer to that entity in its capacity as data controller.
All data subject rights requests, privacy-related inquiries, and complaints should be directed to the cd222 data protection contact detailed in Section 15 of this Policy. cd222 will respond to data subject rights requests within the timeframes required by applicable law — in most cases within 30 calendar days of receipt.
cd222 collects the following categories of personal data, depending on the nature of your interaction with the platform:
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number, nationality | Registration; KYC verification |
| Contact Data | Registered mobile number (Pakistani), email address, city/province | Registration; account updates |
| Financial Data | JazzCash/EasyPaisa account number, bank account details, transaction history, PKR balances | Cashier; deposit/withdrawal forms |
| Identity Documents | CNIC scan, passport scan, utility bill, selfie for liveness check | KYC verification process |
| Technical Data | IP address, device type, operating system, browser, session timestamps | Automatic — on platform access |
| Usage Data | Games played, bet amounts, session duration, game history, login frequency | Automatic — during gameplay |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for email, SMS, and in-platform notifications | Registration; account settings |
cd222 does not collect special category data (as defined under applicable data protection frameworks, including data revealing racial or ethnic origin, political opinions, religious beliefs, or biometric data used for identification beyond CNIC verification) unless specifically required by a regulatory obligation and with your explicit consent where legally required.
The majority of personal data cd222 holds is provided directly by you through:
When you access and interact with cd222.biz, certain technical and usage data is collected automatically through standard web technologies including cookies, web beacons, and server logs. This data includes your IP address, device characteristics, browser type, pages visited, time on page, games played, and session timestamps. This automatic collection is necessary for the platform to function securely and for cd222 to detect fraud, technical errors, and unusual account activity.
cd222 may receive limited personal data from contracted third-party service providers, including: KYC verification partners who conduct identity document checks; payment processors including JazzCash, EasyPaisa, and banking partners; fraud detection service providers; and geolocation data providers used to verify that you are accessing the platform from a permitted jurisdiction. Data received from these sources is processed only for the purposes disclosed in this Policy.
cd222 processes your personal data on one or more of the following legal grounds:
cd222 uses the personal data described in Section 3 for the following purposes:
cd222 shares personal data with third-party service providers who process data on our behalf under written data processing agreements that restrict use of the data to the contracted service purpose only. These providers include KYC verification services, payment processors (JazzCash, EasyPaisa, HBL, and other banking partners), fraud detection technology providers, cloud hosting infrastructure providers, and customer support platform providers.
cd222 will disclose personal data to its gaming licence regulatory authority as required by the terms of that licence. cd222 will also disclose personal data to law enforcement agencies, financial intelligence units, and other governmental bodies where legally required to do so — including in response to court orders, legally binding regulatory notices, or AML/counter-terrorism financing reporting obligations. Where permissible, cd222 will attempt to notify the affected player before making such a disclosure.
cd222 does not sell, rent, or trade personal data to unaffiliated commercial third parties for the purpose of those third parties conducting their own marketing or profiling activities. This prohibition is absolute and does not contain exceptions for anonymised or aggregated data where such data could reasonably be re-identified.
cd222 uses the following categories of cookies and similar tracking technologies on the cd222.biz platform:
You can manage cookie preferences through the cd222 cookie settings panel accessible from the footer of cd222.biz. You may also configure your browser to block or delete cookies; however, blocking strictly necessary cookies will impair your ability to log in and use the cd222 platform. cd222 does not use cookies to track your browsing activity on third-party websites.
cd222 retains personal data for the periods set out below, after which data is securely deleted or anonymised so that it can no longer be attributed to an individual player:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and contact data | 5 years after account closure | Gaming licence regulatory requirement; AML obligations |
| Financial transaction records | 7 years after the transaction date | AML and financial record-keeping obligations |
| KYC identity documents | 5 years after account closure | Gaming regulatory mandate |
| Game play and betting history | 5 years after account closure | Dispute resolution; regulatory audit requirements |
| Customer support communications | 3 years from the date of the communication | Dispute resolution; regulatory compliance |
| Marketing consent records | Duration of consent plus 2 years following withdrawal | Legal obligation to demonstrate lawful marketing basis |
| Analytics data (anonymised) | Retained indefinitely in anonymised form | Legitimate interest in platform improvement |
Where a legal dispute, regulatory investigation, or law enforcement inquiry requires retention of data beyond the periods stated above, cd222 will retain the relevant data until the matter is formally resolved.
cd222 implements a layered data security framework designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures in this framework include:
While cd222 implements industry-standard security measures, no online system is completely immune to security risk. Players are advised to use strong, unique passwords for their cd222 account and to never share their credentials with any third party, including cd222 customer support staff — who will never ask for your password.
Subject to applicable law and certain regulatory exceptions — particularly those related to AML record-keeping and gaming licence compliance — cd222 account holders hold the following rights in respect of their personal data:
To exercise any of the rights above, contact cd222 using the contact details in Section 15. cd222 will respond within 30 calendar days of receiving a valid request. cd222 may request identity verification before processing a data rights request to prevent unauthorised disclosure of another individual's personal data.
cd222 is a strictly adults-only platform. The minimum age requirement for any cd222 account is 21 years. cd222 does not knowingly collect or process personal data from individuals under the age of 21, and the platform is not designed or marketed toward minors.
Where cd222 identifies or has reasonable grounds to suspect that an account is held by a person under 21, the account will be suspended immediately, KYC verification documents will be requested, and any winnings accumulated on the account will be voided pending investigation. Any deposited funds may be returned to the depositing payment method at cd222's discretion, subject to applicable regulatory requirements.
cd222 operates infrastructure and engages service providers in multiple countries. As a result, personal data collected from Pakistani players may be transferred to, stored in, or processed in countries outside Pakistan. Where such transfers occur, cd222 ensures that appropriate safeguards are in place to protect the transferred data, including contractual data processing agreements that impose data protection standards equivalent to those applied within the platform generally.
For payments processed via JazzCash, EasyPaisa, and Pakistani bank transfer partners, data processing is conducted within Pakistan's domestic financial infrastructure. KYC verification and fraud detection services may involve data processing by providers based in other jurisdictions, subject to the safeguards described above.
cd222 reserves the right to update or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where material changes are made, cd222 will notify active account holders via the registered email address or via a prominent on-platform notification prior to the effective date of the change.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the cd222 platform after the effective date of any revised Policy constitutes acceptance of the revised terms. Players who do not agree with a revised Policy should cease using the platform and contact support to arrange account closure and withdrawal of any Real Money balance.
All privacy-related inquiries, data subject rights requests, and privacy complaints should be directed to cd222 using the following contact information:
If you are not satisfied with cd222's response to a privacy complaint, you may escalate the matter to the relevant data protection supervisory authority applicable in the jurisdiction governing cd222's gaming licence, or to your applicable local consumer protection authority. cd222 is committed to resolving privacy complaints fairly and will cooperate fully with any supervisory authority investigation.
Confident that your privacy is protected? Login to cd222 and enjoy live casino, PSL cricket betting, slots, and jackpots — all in PKR with JazzCash and EasyPaisa support. Play responsibly. 21+ only.