cd222 Privacy Policy — Pakistan Player Data Protection Commitment

This Privacy Policy describes how cd222 ("cd222," "we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "your," "the player") who access or use the cd222 platform at cd222.im and its associated services.

cd222 is committed to protecting the privacy of every Pakistani player who registers and plays on our platform. We handle your personal data responsibly, collect only what is genuinely necessary to operate our services, and are transparent about how that data is used. This policy applies to all cd222 products and services, including our website, mobile browser experience, and Android app.

By registering an account on cd222 or by using any of our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described herein. If you have any questions after reading this policy, you can contact us at any time at support@cd222.im.

cd222 collects personal data through several channels — information you give us directly, information generated automatically when you use the platform, and in some cases, information received from third-party service providers such as payment processors or identity verification services. Below is a summary of the categories of data we collect.

cd222 does not collect sensitive personal data such as biometric information, religious beliefs, or political opinions. We only collect data that is directly relevant to operating a gaming and payments platform for Pakistani players.

cd222 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose beyond what is set out in this policy without notifying you and, where required, obtaining your fresh consent.

• Account creation and management: Your identity and contact information is used to create and maintain your cd222 account, verify your identity, and allow you to log in securely.
• Processing transactions: Financial data and payment account details are used to process your PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, and bank IBFT, and to send your withdrawals to your verified payment method.
• Identity verification (KYC): We use the identity documents you provide to verify your age, confirm your identity, and comply with anti-money laundering obligations before processing your first withdrawal.
• Fraud prevention and security: Technical and usage data helps cd222 detect unusual activity, prevent multiple account abuse, identify suspicious betting patterns, and protect the security of all players on the platform.
• Improving the platform: Aggregated, anonymised usage data helps our technical team understand how players navigate cd222, which games are most popular, and where improvements to the platform experience should be focused.
• Customer support: Communication data from support interactions is used to resolve your issues and improve our support quality. Records are retained so that repeat or escalated issues have full context.
• Responsible gaming: Usage data including session duration, deposit frequency, and wagering patterns is monitored as part of cd222's responsible gaming programme to identify players who may need support or intervention tools.
• Regulatory compliance: cd222 is required to maintain records of transactions, identity verification, and certain gameplay data to comply with applicable laws and to respond to lawful requests from authorities.
• Marketing communications: With your consent, cd222 uses your contact information to send you information about promotions, tournaments, and bonuses relevant to Pakistani players. You can opt out at any time.

cd222 processes your personal data based on the following lawful grounds, depending on the specific type of data and processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you as a cd222 account holder — including account management, transaction processing, and identity verification. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

cd222 does not sell, rent, or trade your personal data with any third party for commercial or marketing purposes. We may share your data with the following categories of third party, but only to the extent necessary to deliver the cd222 service to you:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum necessary financial data to process your PKR deposits and withdrawals. These parties are bound by their own data protection obligations.
• Identity verification providers: When you complete the KYC process at cd222, a specialist third-party verification service may process your CNIC or other identity documents to confirm your identity. All such providers are vetted by cd222 and operate under data processing agreements.
• Fraud prevention and security services: cd222 may share technical data (IP address, device fingerprint, transaction patterns) with fraud detection services to protect all players on the platform from financial crime and account abuse.
• Technology and infrastructure providers: Our platform runs on third-party cloud infrastructure. These providers do not have access to your data for any purpose other than maintaining the technical environment they supply to cd222.
• Law enforcement and regulatory bodies: cd222 will disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities when required to do so by a valid legal process, court order, or applicable law.

Any third party with whom cd222 shares personal data is required to keep it confidential, to use it only for the purpose for which it was shared, and to maintain security standards equivalent to those applied by cd222. We do not allow our service providers to use your data for their own purposes.

cd222 uses cookies and similar tracking technologies on our website and mobile interface. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the platform. The following table summarises the types of cookies we use:

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Doing so may affect the functionality of certain features on the cd222 platform — for example, you may need to log in again on each visit if session cookies are cleared. Essential security cookies cannot be disabled as they are required to keep your account safe.

cd222 retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by law. The following general retention principles apply:

• Active accounts: While your cd222 account is active, we retain all data necessary to operate the account, process transactions, and fulfil our regulatory obligations.
• Closed accounts: After an account is closed, cd222 retains identity verification records, transaction history, and account activity logs for a minimum period to comply with anti-money laundering and fraud prevention legal requirements. This period is typically five years from account closure.
• Support communications: Customer support records are retained for up to three years from the date of the last interaction to ensure continuity of service for returning queries.
• Marketing consent records: Records of your marketing consent or opt-out are retained indefinitely to ensure we honour your preferences even after account closure.
• Technical logs: Server logs and technical access records are retained for up to 12 months for security auditing purposes and then deleted.

When personal data is no longer required, cd222 either deletes it securely or anonymises it so that it can no longer be linked to any individual.

cd222 takes the security of your personal data seriously and applies appropriate technical and organisational measures to protect it against unauthorised access, loss, disclosure, alteration, or destruction. The security measures in place at cd222 include:

• SSL/TLS encryption: All data transmitted between your device and the cd222 platform is encrypted using Transport Layer Security (TLS). Connections without encryption are refused.
• Encrypted data storage: Sensitive data — including identity documents, financial details, and passwords — is stored in encrypted form. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Access controls: Access to player data within cd222 is restricted to staff members who require it for their specific role. Access logs are maintained and reviewed.
• Two-factor authentication: Players can enable two-factor authentication on their cd222 accounts for additional login security. We recommend all players do so.
• Regular security audits: cd222 conducts periodic reviews of its security practices, including vulnerability assessments of the platform's technical infrastructure.
• Incident response: In the event of a data breach affecting player information, cd222 has a response protocol to contain the breach, assess its scope, notify affected players, and report to relevant authorities as required by law.

As a cd222 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@cd222.im with your request. We will respond within 30 days.

The cd222 platform is strictly for adults aged 18 and above. cd222 does not knowingly collect, store, or process personal data from individuals under the age of 18. We implement age verification as part of the registration and withdrawal process to enforce this requirement.

If you are a parent or guardian and believe that your child has registered on cd222 without your knowledge, please contact us immediately at support@cd222.im. Upon verification, we will close the account, delete all associated data, and return any deposited funds to their source.

cd222 may send you promotional communications about bonuses, tournaments, new games, and special events relevant to Pakistani players — but only if you have given your consent to receive such communications. We typically send these via SMS to your registered mobile number or by email.

You can opt out of marketing communications at any time by:

• Updating your notification preferences in your cd222 account settings under "Communication Preferences."
• Replying STOP to any SMS message from cd222.
• Clicking the unsubscribe link in any promotional email.
• Contacting support at support@cd222.im with an opt-out request.

Opting out of marketing will not affect your ability to receive transactional messages that are essential to operating your account — such as deposit confirmations, withdrawal notifications, or security alerts. These are sent regardless of marketing preference as they are necessary for the safety and operation of your account.

cd222 may update this Privacy Policy from time to time to reflect changes to our data practices, new services, regulatory requirements, or improvements in how we explain our policies. When changes are made, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect how we process your data or your rights, cd222 will notify active players via the mobile number or email registered on their account, giving you the opportunity to review the changes before they take effect.

We encourage you to review this Privacy Policy periodically. The most current version will always be available at cd222.im/privacy-policy. Your continued use of the cd222 platform after any update constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, how cd222 handles your personal data, or if you wish to exercise any of your data rights, please contact our team. We are available 24 hours a day, seven days a week and aim to respond to all written privacy requests within 30 days.

• Email: support@cd222.im
• Subject line for privacy requests: "Privacy Request — [your registered mobile number]"
• Live Chat: Available from within your logged-in cd222 account, 24/7.

If you are not satisfied with the way cd222 has handled a privacy concern or request, you have the right to raise a complaint. cd222 takes all privacy complaints seriously and will investigate promptly. If after that process you remain dissatisfied, you may escalate your complaint to the relevant data protection authority in your jurisdiction.