Privacy Policy – cd2222 Pakistan Online Gaming Platform

1 Introduction

cd2222 is an online gaming entertainment platform designed for players in Pakistan. We understand that when you register an account and make transactions in PKR using services like JazzCash, Easypaisa or Raast, you are sharing personal information with us. We take that responsibility seriously.

This Privacy Policy sets out in plain language exactly what information cd2222 collects, why we collect it, who we share it with, how long we keep it, and what rights you have in relation to it. We have written this document to be straightforward and easy to understand — not full of legal jargon that requires a lawyer to interpret.

This policy should be read alongside the cd2222 Terms and Conditions, which govern the overall relationship between you and the platform. If you are unsure about anything in this policy, the support team is available 24/7 through live chat and can clarify any point in detail.

2 Data We Collect

The personal data cd2222 collects falls into three broad categories: information you provide directly, information generated by your use of the platform, and information received from third-party service providers.

We do not collect your JazzCash PIN, Easypaisa MPIN or any banking passwords. These remain entirely within your own wallet app or banking app and are never transmitted to or stored by cd2222.

3 How We Use Your Data

cd2222 uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain and secure your cd2222 account, and to verify your identity when required.
• Payment processing: To process deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer or card payment. Transaction records are maintained for financial accountability.
• Platform personalisation: To remember your game preferences, display your account balance accurately, and tailor promotional offers to your activity on the platform where you have opted in to receive them.
• Security and fraud prevention: To detect, investigate and prevent suspicious activity, account takeover attempts, bonus abuse, money laundering and other fraudulent behaviour that could harm you or the platform.
• Customer support: To respond to your queries, resolve disputes and provide assistance through live chat or email.
• Responsible gaming compliance: To monitor for signs of problematic gaming behaviour and to apply deposit limits, session tools or self-exclusion where requested or where the platform determines intervention may be appropriate.
• Legal and regulatory obligations: To maintain records required for financial compliance, to respond to lawful requests from authorities, and to enforce the cd2222 Terms and Conditions.
• Platform improvement: To analyse aggregated, anonymised usage data to identify bugs, improve game performance and enhance the overall user experience for Pakistan players.

We do not use your personal data for automated decision-making that produces significant legal or similar effects on you without human review. If a decision is made to restrict or close your account, a member of the cd2222 team reviews the relevant data before action is taken.

4 Legal Basis for Processing

cd2222 processes your personal data on the following legal bases:

• Contract performance: Processing your registration data, payment information and account history is necessary to provide the services described in the cd2222 Terms and Conditions.
• Legitimate interests: Fraud prevention, security monitoring and platform analytics are carried out on the basis of legitimate business interests, provided these interests do not override your privacy rights.
• Legal obligation: Retaining certain financial records and responding to lawful authority requests are required by applicable law and are carried out on that basis.
• Consent: Sending you promotional communications and placing non-essential cookies on your device is done only with your explicit consent, which you can withdraw at any time.

5 Data Sharing

cd2222 does not sell your personal data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: When you make a deposit or request a withdrawal, your payment reference and transaction amount are shared with the relevant payment provider — JazzCash, Easypaisa, Raast or your bank — solely to process that transaction.
• Identity verification services: When account verification is required, your identity document and verification photo may be processed by a third-party identity verification provider. These providers are contractually bound to handle your data securely and not use it for any other purpose.
• Game providers: Third-party game suppliers whose games are hosted on cd2222 may receive your account identifier and session data to initialise and record game sessions. They do not receive your full name, payment details or identity documents.
• Analytics providers: Aggregated and anonymised usage data may be shared with analytics services to help us understand platform performance. This data cannot be used to identify individual players.
• Legal authorities: cd2222 will disclose personal data to law enforcement, courts or regulatory bodies where required to do so by a lawful request. We will notify you of any such disclosure where permitted by law.

All third parties with whom cd2222 shares personal data are required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared. cd2222 does not authorise any third party to sell, rent or otherwise exploit your personal data.

6 Cookies and Tracking

cd2222 uses cookies and similar tracking technologies on the website and within the platform to make the experience work properly and to help us understand how the platform is used. Here is a breakdown of the types of cookies in use:

• Essential cookies: These are required for the platform to function. They keep you logged in during your session, remember your language and currency preferences, and ensure the platform loads correctly. These cannot be disabled without breaking core functionality.
• Analytics cookies: These collect anonymised information about which pages and games are visited most frequently, how long sessions last and where players navigate within the platform. This data helps cd2222 identify areas for improvement. Analytics cookies are only placed with your consent.
• Preference cookies: These remember settings you have chosen — such as game display preferences or responsible gaming tool configurations — so you do not need to re-enter them each visit.
• Security cookies: These help detect unusual login patterns and protect against cross-site request forgery and similar security threats.

You can manage your cookie preferences at any time through the cookie settings option available in the platform footer or through your browser settings. Disabling non-essential cookies will not prevent you from using cd2222, but some personalisation features may not work as expected.

The cd2222 mobile app for Android uses similar technical identifiers (such as advertising IDs) to deliver the same functionality as cookies do on the web platform. You can reset or limit these identifiers through your device settings.

7 Data Retention

cd2222 does not hold on to your personal data for longer than necessary. The following retention periods apply:

• Active account data: Kept for the duration of your account being open and active on the platform.
• Transaction records: Financial records including deposit and withdrawal history are retained for a minimum of five years from the date of the transaction to meet financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five years after account closure.
• Support communications: Chat and email records are retained for up to three years from the date of the interaction, unless the matter is subject to ongoing investigation or dispute in which case they are retained until resolution.
• Closed account data: When an account is closed voluntarily, most personal data is deleted or anonymised within 90 days. Data subject to the longer retention periods listed above is held for those respective periods before deletion.
• Self-excluded account data: Where a self-exclusion has been applied, your account data is retained for the duration of the exclusion period and for five years thereafter to prevent re-registration during an active exclusion.

Once a retention period expires, your personal data is securely deleted or rendered permanently anonymous so that it can no longer be associated with you as an individual.

8 Data Security

cd2222 takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. Key security measures include:

• SSL/TLS encryption for all data transmitted between your device and the cd2222 platform.
• Encrypted storage for sensitive data including identity documents and payment references.
• Access controls that restrict which members of the cd2222 team can view personal data, based on their job function and the principle of least privilege.
• Regular security reviews of platform infrastructure and third-party service providers.
• Two-factor authentication options available to account holders to add an extra layer of login security.
• Monitoring systems designed to detect and flag unusual account activity in real time.

While cd2222 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure — use a strong, unique password for your cd2222 account, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been accessed without your permission.

9 Your Rights

As a cd2222 account holder, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting the support team through live chat or the support email address shown in the footer.

cd2222 will respond to all data rights requests within 30 days. In complex cases this may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your data rights unless a request is clearly unfounded or repetitive.

10 Children's Privacy

cd2222 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification checks are applied during the registration process and may be repeated during account operation to confirm that all account holders are adults.

If cd2222 becomes aware that an account has been registered by or on behalf of a person under 18, the account will be immediately suspended, any balance will be handled in accordance with our Terms and Conditions, and all personal data associated with the account will be deleted as soon as is practically possible.

If you believe a minor may have registered an account on cd2222, please contact the support team immediately through live chat so that appropriate action can be taken without delay.

11 Changes to This Policy

cd2222 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable law, or updates to the third-party services we use. When changes are made, the revised policy will be published on this page with an updated "Last Updated" date.

For changes that materially affect how we use your personal data — for example, introducing a new category of data collection or a new sharing arrangement — cd2222 will make reasonable efforts to notify registered players through an in-platform notification or email before the change takes effect. For minor or administrative updates, publishing the revised policy on this page is considered sufficient notice.

Continuing to use cd2222 after an updated Privacy Policy has been published constitutes acceptance of the revised terms. If you do not agree with a change, you should stop using the platform and contact support to request account closure and data deletion.

12 Contact and Queries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, the cd2222 support team is available to help 24 hours a day, 7 days a week.

The fastest way to get a response is through the live chat feature within the platform or app. For formal data rights requests or privacy concerns that you wish to put in writing, you can contact us by email — the support email address is displayed as plain text in the footer of this page.

When submitting a data rights request, please include your registered username and a brief description of the request so we can locate your account and respond accurately. We may need to verify your identity before processing certain types of requests, particularly data access or deletion requests, to ensure we are speaking with the legitimate account holder.