cd222 Privacy Policy – How We Handle Your Data

1. About This Policy

This Privacy Policy ("Policy") is issued by cd222 ("the Company", "we", "us", "our") and applies to all personal data processed in connection with your use of the cd222 website, mobile browser interface, account services, cashier, games and customer support channels (collectively, "the Platform").

By registering an account on cd222 or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood how cd222 processes your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact support to request account closure.

This Policy should be read in conjunction with the cd222 Terms & Conditions and our Responsible Gaming policy, both of which are accessible via the footer of every page on the Platform.

2. Data We Collect

cd222 collects personal data in the following categories depending on the nature of your interaction with the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, CNIC number, scanned identity document	KYC verification process
Contact Data	Email address, Pakistani mobile number	Account registration
Financial Data	JazzCash account reference, Easypaisa number, bank account details (last four digits), transaction history	Deposits and withdrawals
Technical Data	IP address, device type, browser version, operating system, session duration	Automatic collection via platform access
Usage Data	Games played, bets placed, wagering history, bonus usage, login timestamps	During active platform use
Support Data	Live chat transcripts, support ticket content, email correspondence	When you contact cd222 support

cd222 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where voluntarily disclosed by a user in the context of a responsible gaming self-exclusion request, in which case such data is processed solely for the purpose of giving effect to that request.

3. How We Use Your Data

cd222 uses your personal data for the following purposes:

• Account administration: Creating and managing your cd222 account, verifying your identity and processing login authentication.
• Payment processing: Facilitating PKR deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, card networks and USDT TRC20, as well as processing withdrawal requests to verified payment methods.
• Regulatory compliance: Fulfilling anti-money-laundering ("AML"), Know Your Customer ("KYC") and counter-terrorism financing obligations applicable to the Platform.
• Fraud prevention and security: Detecting and investigating suspicious activity, protecting against account takeover, and monitoring for prohibited conduct as defined in our Terms & Conditions.
• Game and service provision: Delivering casino games, sports betting markets, fishing titles and all other Platform services to your account.
• Customer support: Responding to enquiries, resolving disputes and processing responsible gaming requests including deposit limits and self-exclusion.
• Platform improvement: Analysing anonymised aggregated usage data to improve Platform performance, game selection and user experience.
• Marketing communications: Sending promotional emails or notifications about bonuses and new games, where you have not opted out of such communications. You may unsubscribe at any time via your account settings or by contacting support.

4. Legal Basis for Processing

cd222 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the agreement between you and cd222 — principally account creation, game access and payment processing.
• Legal obligation: Processing required to comply with AML, KYC and other applicable regulatory obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics and responsible gaming compliance, where such interests are not overridden by your fundamental rights.
• Consent: Marketing communications, where applicable. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

cd222 uses cookies and similar tracking technologies to operate the Platform effectively. These include:

• Essential cookies: Required for login session management, security tokens and basic Platform functionality. These cannot be disabled without impairing Platform operation.
• Analytical cookies: Anonymised data used to understand how users navigate the Platform, which pages are visited most frequently, and where technical issues arise. This data is aggregated and does not identify individual users.
• Preference cookies: Store user settings such as language preference and display options to improve the browsing experience on return visits.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent certain Platform features from functioning correctly, including the cd222 login process.

6. Sharing Your Personal Data

cd222 does not sell, rent or trade your personal data to third parties. We may share your data with the following categories of recipients for the limited purposes described:

• Payment processors: JazzCash, Easypaisa, banking partners and card networks, solely to process your deposit and withdrawal transactions.
• Game software providers: Game studios may receive anonymised session identifiers necessary to deliver their games on the cd222 platform. They do not receive your name, CNIC or financial details.
• KYC verification services: Third-party identity verification providers used to authenticate CNIC documents submitted during the KYC process.
• Regulatory and law enforcement authorities: Where cd222 is required by law, court order or regulatory direction to disclose personal data, we will comply with such obligations. We will notify the affected user where legally permitted to do so.
• Fraud prevention networks: cd222 may share transactional and behavioural data with industry fraud prevention bodies to protect the Platform and its users against financial crime.

All third-party service providers engaged by cd222 are required to process personal data in accordance with applicable data protection standards and only for the purposes for which it was shared.

7. Data Retention

cd222 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five years following account closure, in accordance with standard AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction.
• Support correspondence: Retained for two years from the date of the last interaction.
• Technical and usage logs: Retained for a maximum of 12 months on a rolling basis, except where retention is required for ongoing compliance or fraud investigations.

Upon expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

8. Security Measures

cd222 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and cd222 servers
• Encrypted storage of sensitive fields including passwords and financial identifiers
• Access controls limiting internal staff access to personal data on a need-to-know basis
• Session timeout and two-factor authentication options for account login
• Regular security assessments and penetration testing of Platform infrastructure

While cd222 takes all reasonable precautions, no internet-based system is entirely immune from risk. In the event of a personal data breach that poses a material risk to affected users, cd222 will notify relevant authorities and affected users in accordance with applicable legal requirements.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by cd222:

• Right of access: You may request a copy of the personal data cd222 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to cd222's legal retention obligations — data required for AML compliance cannot be deleted on request.
• Right to restrict processing: In certain circumstances, you may request that cd222 restricts the processing of your data while a query is under investigation.
• Right to data portability: Where processing is based on your consent or on a contract, you may request your data in a commonly used machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.

To exercise any of these rights, contact cd222 support via live chat or at the support email address provided in Section 13. Requests will be responded to within a reasonable timeframe and, in any event, within 30 days. cd222 may require proof of identity before processing a data rights request.

10. Children's Privacy

cd222 is strictly an 18+ platform. The collection and processing of personal data from persons under the age of 18 is not permitted under any circumstances. If cd222 becomes aware that personal data has been submitted by a person under 18, that data will be deleted immediately and the associated account closed. Parents or guardians who believe a minor has submitted personal data to cd222 should contact support immediately at the address in Section 13.

11. Cross-Border Data Transfers

cd222's platform infrastructure and some of its third-party service providers are located outside Pakistan. By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions that may have different data protection standards than your home jurisdiction. In all cases, cd222 ensures that appropriate safeguards are in place — such as contractual data protection clauses with service providers — to protect your data when it is transferred internationally.

12. Changes to This Privacy Policy

cd222 reserves the right to amend this Privacy Policy at any time. Material amendments will be communicated to registered users by email or via an in-platform notification. The "Last Updated" date at the top of this page will reflect the most recent revision. Your continued use of the Platform following notification of an amendment constitutes acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data at cd222, please contact our support team:

• Live Chat: Available 24/7 from within your cd222 account panel
• Email: [email protected] (plain text — not a clickable link)
• Ticket Support: Accessible via the account support panel after login

For information about your account rights and platform rules, please review our Terms & Conditions. For responsible gaming support resources, visit our Responsible Gaming page.