222win Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by 222win ("we", "us", "our", "the Platform"), the operator of the online betting and casino platform accessible at https://222win.lat. This Policy applies to all personal data collected from or about registered players, visitors to the 222win website, and any person who contacts 222win through any communication channel.

By registering a player account on 222win, completing the KYC verification process, making a deposit, placing a bet, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, storage, and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and 222win.

2. Data Controller

222win is the data controller responsible for personal data processed in connection with the Platform and its services. 222win operates under an international gaming license, and the data controller's registered address is that of the licensing jurisdiction entity responsible for operating 222win.lat.

For all data protection enquiries, access requests, rectification requests, and deletion requests, players should contact 222win directly through the channels listed in Section 14 (Contact Us) of this Policy.

3. Data We Collect

222win collects personal data through several channels: directly from you during registration and KYC; automatically through your use of the Platform; and in limited circumstances from third-party verification or fraud-prevention services. The categories of data collected are set out in the table below:

4. How We Use Your Data

222win processes personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we use player data are:

• Account creation and management: To register your 222win account, verify your identity, and maintain your account in good standing throughout the player relationship.
• KYC and age verification: To fulfil our obligations under our international gaming license, which requires us to verify that every real-money player is at least 21 years of age and to confirm identity to prevent fraud and money laundering.
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other supported PKR payment channels; to detect and prevent unauthorised transactions.
• Service delivery: To operate the betting, live casino, slots, and crash game products you use; to resolve disputes; to settle winning bets and process withdrawal requests.
• Customer support: To respond to your queries, resolve complaints, and maintain records of interactions for quality assurance and training purposes.
• Responsible gaming compliance: To monitor betting patterns for signs of problem gambling and to enforce deposit limits, loss limits, and self-exclusion requests in accordance with our Responsible Gaming Policy.
• Fraud and security: To detect, prevent, and investigate fraud, collusion, bonus abuse, money laundering, and other prohibited activities as defined in our Terms and Conditions.
• Legal and regulatory compliance: To comply with record-keeping and reporting obligations imposed by our international gaming license and applicable law.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the Platform's features, game selection, payment method performance, and overall user experience.
• Marketing communications: Where you have given explicit consent, to send you personalised promotional offers, bonus notifications, PSL betting alerts, and 222win news via email, SMS, or push notification.

5. Legal Basis for Processing

222win processes personal data on the following legal bases, which are recognised under international data protection frameworks and the requirements of our gaming license:

• Contractual necessity: Processing required to perform our contractual obligations to you under the Terms and Conditions — including account operation, payment processing, bet settlement, and KYC verification.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification mandates, and record-keeping requirements imposed by our gaming license and applicable law.
• Legitimate interests: Processing for fraud detection, security monitoring, responsible gaming enforcement, and platform analytics, where such interests are balanced against and do not override your privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained and can be withdrawn at any time.

6. Data Sharing & Third Parties

222win does not sell your personal data to third parties. We may share your data with trusted third-party service providers and, where legally required, with regulatory authorities. All third-party data processors engaged by 222win are bound by data processing agreements that require them to protect your information in accordance with applicable standards.

Categories of third parties with whom your data may be shared include:

• Payment processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank, Raast, 1LINK) receive the payment account details necessary to process your deposit or withdrawal transaction. These parties are independent data controllers for their own services and are subject to their own privacy policies.
• KYC and identity verification services: Third-party identity verification providers may process your CNIC, selfie, and address documentation on behalf of 222win to fulfil age and identity verification requirements.
• Game software providers: Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and others receive the minimum technical data necessary to operate their games when you play them on the 222win platform. These providers are certified under the same international gaming license framework and are contractually bound to handle this data appropriately.
• Fraud prevention and security services: Specialised fraud detection platforms may analyse technical and behavioural data to identify suspicious account activity, bonus abuse, or potential money laundering patterns.
• Regulatory and law enforcement authorities: Where required by applicable law or our gaming license, 222win may disclose player data to regulatory bodies, law enforcement agencies, or financial intelligence units. Such disclosures are made only to the extent required by law.
• Customer support software providers: Live chat and ticketing platforms used to deliver 24/7 support may process communication data. These providers are engaged under strict data processing agreements.

7. Data Retention

222win retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to legal retention obligations. Specific retention periods applicable to different categories of data are as follows:

• Account and identity data: Retained for the duration of the active player relationship, plus a minimum of 5 years following account closure, as required by our gaming license's anti-money laundering compliance obligations.
• KYC documentation (CNIC scans, selfies, address proof): Retained for a minimum of 5 years following the completion of the verification process, or 5 years after account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years following each transaction, in compliance with financial record-keeping requirements under international gaming regulations.
• Betting and game session history: Retained for a minimum of 3 years for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for 2 years from the date of each interaction for quality assurance and complaint resolution reference.
• Marketing consent records: Retained for the duration of the active consent plus 1 year following withdrawal of consent, to evidence that consent was lawfully obtained.
• Technical and log data (IP addresses, session logs): Retained for 12 months for security monitoring and fraud investigation purposes.

At the end of each applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

8. Security Measures

222win employs a multi-layered security architecture to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 128-bit SSL/TLS encryption applied to all data transmitted between your device and 222win's servers.
• Encryption at rest for all sensitive personal data stored on 222win's servers, including KYC documentation and financial records.
• Role-based access controls ensuring that only authorised 222win personnel with a specific operational need can access player personal data.
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of protection beyond the password.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Automated anomaly detection systems that flag unusual account activity, login attempts from unrecognised devices or locations, and suspicious transaction patterns.
• Segregated storage of KYC documentation, financial records, and general account data on separate systems with independent access controls.

Despite these measures, no internet-based system can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and are advised to use a strong, unique password and to enable 2FA on their 222win account.

9. Cookies & Tracking Technologies

222win uses cookies — small text files stored on your device — and similar tracking technologies (such as browser local storage and session storage) to operate the Platform, maintain your session, and understand aggregate usage patterns. The categories of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function. These cookies manage your login session, maintain your PKR wallet state, preserve your betting slip between pages, and ensure security features operate correctly. These cookies cannot be disabled without disrupting Platform functionality.
• Functional cookies: Remember your preferences, such as your selected language, display settings, and responsible gaming limit configurations. Disabling these cookies may reduce your user experience.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate the Platform — which pages are most visited, where users drop off, and how the game lobby is browsed. This data is used exclusively for Platform improvement and is never linked back to individual identities. These cookies require your consent.
• Marketing cookies: Used to deliver personalised promotions and track whether you have engaged with 222win marketing communications. These cookies are only placed with your explicit consent and can be disabled at any time via your browser settings or the cookie preference panel on the Platform.

You can manage or delete cookies at any time through your browser settings. Instructions for the most common browsers are available through your browser's help documentation. Please note that disabling strictly necessary cookies will prevent you from logging in or using the Platform.

10. Your Data Rights

As a 222win player, you hold the following rights in relation to your personal data. All requests should be submitted in writing to our support team (see Section 14). 222win will respond to all rights requests within 30 calendar days of receipt.

• Right of Access: You may request a copy of all personal data 222win holds about you. We will provide this in a structured, commonly used, machine-readable format (e.g., PDF or CSV) upon verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account details such as mobile number and email address can be updated directly from your account settings; CNIC-linked identity data requires a formal rectification request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to our legal retention obligations. Note that we are required to retain certain categories of data (KYC, financial records) for a minimum of 5 years under our gaming license, during which erasure requests for those categories cannot be fulfilled.
• Right to Restriction of Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that your personal data be provided to you in a portable format so that it can be transferred to another service provider, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. If you object to marketing communications, we will honour your request within 5 business days.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

11. Protection of Minors

222win does not knowingly collect, process, or store personal data relating to any individual under the age of 21 years. Age verification via CNIC is mandatory for all real-money players, and the Platform is not directed at, marketed to, or designed for minors.

If 222win becomes aware that personal data has been collected from a person under 21 years of age, all data associated with that individual will be immediately and permanently deleted, the account will be closed, and any real-money balance will be forfeited in accordance with our Terms and Conditions and responsible gaming obligations.

If you are a parent or guardian and believe that a minor under your care has registered on 222win, please contact our support team immediately. We will investigate and act within 24 hours of receiving the report.

12. International Data Transfers

As 222win operates under an international gaming license and engages third-party service providers located in multiple countries, your personal data may be transferred to and processed in countries outside Pakistan. Such transfers may include countries where data protection laws differ from those you may be accustomed to.

Where personal data is transferred internationally, 222win ensures that appropriate safeguards are in place, including:

• Data processing agreements with all third-party processors that impose data protection obligations equivalent to those described in this Policy.
• Transfer to countries that have been assessed as providing an adequate level of data protection for the purposes of our gaming license compliance framework.
• Standard contractual clauses or equivalent transfer mechanisms where required to govern data transfers to game software providers and KYC partners.

13. Changes to This Privacy Policy

222win reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our gaming license requirements, data processing practices, or Platform services. When changes are made, the updated Policy will be published at https://222win.lat/privacy-policy with a revised "Last Updated" date.

For material changes that affect your privacy rights or the purposes for which your data is processed, 222win will notify registered players via email or in-platform notification at least 7 days before the changes take effect. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by 222win, please contact our dedicated support team. All privacy-related correspondence will be handled by our data protection team with appropriate confidentiality.

Alternatively, you may raise data-related concerns directly with your 222win account manager if you are a VIP or Gold-tier player. All formal complaints regarding data processing that are not resolved through our internal process may be escalated to the dispute resolution body referenced in our international gaming license.