222win Privacy Policy

01Who We Are

222win is the operator of the online casino and sports betting platform accessible at 222win.biz (the "Platform"). References to "222win", "we", "us", or "our" in this Privacy Policy refer to the operator and its appointed data processing agents responsible for managing player data in connection with Platform operations.

222win operates under an international gaming licence and is committed to handling personal data responsibly, lawfully, and transparently. This Policy applies to all individuals who access, register on, or use the 222win Platform, including visitors who browse without registering ("Users" and "Players" collectively).

02Data We Collect

222win collects the following categories of personal data in connection with Platform use:

222win does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond CNIC facial photograph matching required for identity verification. We do not collect full payment card numbers — payment processing is handled by third-party payment providers who hold their own data controller responsibilities.

03How We Collect Your Data

222win collects personal data through the following methods:

• Direct provision: Information you provide when registering an Account, completing KYC, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automatic collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session data, collected via server logs and cookies.
• Third-party sources: Identity verification data may be cross-referenced with third-party identity verification services. Payment transaction confirmations are received from payment providers (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah). Fraud prevention and anti-money laundering checks may involve third-party screening services.
• Cookies and tracking technologies: As described in Section 7 of this Policy.

04Legal Basis for Processing

222win processes personal data under the following legal bases:

• Contractual necessity: Processing required to provide you with Platform services under our Terms & Conditions, including account management, bet processing, deposits, and withdrawals.
• Legal obligation: Processing required to comply with our gaming licence obligations, anti-money laundering (AML) requirements, and fraud prevention duties, including KYC identity verification and transaction monitoring.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit consent. You may withdraw marketing consent at any time via account settings or by contacting support.

05How We Use Your Data

222win uses collected personal data for the following purposes:

5.1 Platform Operations

• Creating and managing your 222win Account.
• Processing deposits and withdrawal requests in PKR via JazzCash, Easypaisa, and bank transfers.
• Verifying your identity and age (18+) through the KYC process.
• Processing bets, game sessions, and calculating winnings.
• Applying bonus credits, managing wagering requirements, and administering promotions.

5.2 Compliance & Security

• Conducting anti-money laundering (AML) checks and transaction monitoring as required by our gaming licence.
• Detecting and preventing fraud, bonus abuse, multi-accounting, and other prohibited conduct.
• Verifying that players are not subject to self-exclusion or on prohibited player lists.
• Maintaining records required by applicable regulatory and licensing obligations.

5.3 Responsible Gaming

• Monitoring player activity for indicators of problem gambling behaviour.
• Enforcing deposit limits, session limits, and self-exclusion settings configured by players.
• Proactively contacting players whose activity suggests they may benefit from responsible gaming support.

5.4 Customer Support

• Responding to support queries, complaints, and dispute resolution requests.
• Maintaining records of support interactions for quality assurance and dispute evidence purposes.

5.5 Marketing (Consent-Based Only)

• Sending promotional offers, bonus notifications, and Platform updates to Players who have opted in to marketing communications.
• 222win does not send unsolicited marketing communications. All marketing is opt-in and can be withdrawn at any time.

06Data Sharing & Disclosure

222win does not sell, rent, or trade your personal data to third parties for commercial purposes. We share data only in the following limited circumstances:

• Game providers: Game session data is shared with licensed game software providers (e.g., Pragmatic Play, Evolution Gaming, JILI) to the extent necessary to facilitate game delivery and resolve disputes.
• Payment processors: Transaction data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency processing services to facilitate deposits and withdrawals. These providers act as independent data controllers for their own payment operations.
• Identity verification services: KYC data including CNIC information may be shared with third-party identity verification providers engaged by 222win to conduct age and identity checks.
• Regulatory authorities: We may disclose personal data to our licensing authority, law enforcement agencies, financial intelligence units, or courts where required by applicable law or regulatory direction.
• Fraud prevention services: Technical and identity data may be shared with fraud detection and AML screening services.
• Service providers: Data may be shared with IT infrastructure, hosting, and customer support service providers engaged by 222win under contractual data processing agreements that bind them to handle data securely and only as instructed.

07Cookies & Tracking Technologies

The 222win Platform uses cookies and similar technologies to operate core Platform functions, analyse usage, and improve user experience. Cookies are small text files placed on your device when you visit the Platform.

• Essential cookies: Required for Platform functionality including session management, login authentication, and security. These cannot be disabled without disrupting Platform use.
• Analytics cookies: Used to understand how players navigate the Platform — which pages are visited, session duration, device type. This data is aggregated and anonymised. 222win uses this to improve Platform performance and user experience.
• Preference cookies: Store your Platform preferences such as language settings and display options between sessions.
• Security cookies: Support fraud detection and account security functions including session validation and bot detection.

You may manage cookie preferences via your browser settings. Disabling essential cookies will impair Platform functionality including login. 222win does not use third-party advertising cookies or retargeting pixels from external advertising networks on the Platform.

08Data Retention

222win retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our gaming licence and applicable regulatory obligations:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure. This retention is required by AML regulations and gaming licence obligations.
• Transactional and betting records: Retained for a minimum of 5 years from the date of each transaction, as required for regulatory audit and dispute resolution purposes.
• Support interaction records: Retained for 3 years from the date of the interaction unless the subject matter involves an ongoing dispute, regulatory investigation, or legal proceeding.
• Self-exclusion records: Retained permanently to prevent re-registration by self-excluded individuals. This is a responsible gaming and regulatory requirement.
• Marketing consent records: Retained for the duration of your marketing opt-in status plus 2 years following withdrawal of consent.

Where retention is no longer necessary, data is securely deleted or anonymised in accordance with 222win's data destruction procedures.

09Data Security

222win implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Passwords stored using industry-standard cryptographic hashing with salting — plain-text passwords are never stored.
• Access to personal data restricted to authorised 222win personnel with a legitimate operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication for internal administrative access to player data systems.
• Contractual security obligations imposed on all third-party service providers who process player data on 222win's behalf.

No data transmission over the internet is entirely risk-free. While 222win applies all reasonable security measures, we cannot guarantee absolute security. In the event of a data breach materially affecting your personal data, 222win will notify affected players in accordance with applicable notification obligations.

10Your Data Rights

Subject to applicable law, you may have the following rights regarding your personal data held by 222win:

• Right of access: You may request a copy of the personal data 222win holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML and gaming licence requirements).
• Right to restrict processing: You may request restriction of processing in certain circumstances, such as while the accuracy of data is disputed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests.

To exercise any of these rights, contact the 222win data team at [email protected]. We will respond within 30 days. Note that certain rights are subject to limitations where data must be retained to fulfil regulatory obligations — particularly AML, KYC, and gaming licence record-keeping requirements.

11Minors

The 222win Platform is strictly for individuals aged 18 years and above. 222win does not knowingly collect personal data from individuals under 18. Age is verified through the KYC process at registration. If 222win discovers that an Account has been created by a person under 18, the Account will be immediately closed, all associated data will be handled in accordance with applicable child data protection requirements, and the matter may be referred to relevant authorities.

If you believe a minor has created an Account on the 222win Platform, please contact us immediately at [email protected].

12International Data Transfers

As an internationally licensed online gaming platform serving Pakistani players, 222win may process and store personal data on servers located outside Pakistan. Where data is transferred internationally, 222win ensures appropriate safeguards are in place to protect data to a standard equivalent to applicable data protection requirements, including contractual data processing agreements with service providers and game providers that impose equivalent security and privacy obligations.

13Third-Party Links

The 222win Platform may contain references to third-party services such as game providers. 222win is not responsible for the privacy practices of third-party services. This Privacy Policy applies solely to data collected and processed by 222win in connection with Platform operations. We encourage you to review the privacy policies of any third-party services you interact with.

14Changes to This Privacy Policy

222win may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes will be notified to registered Players via their registered mobile number or email address, or by a prominent notice on the Platform, at least 7 days before the revised Policy takes effect. The effective date at the top of this Policy will be updated with each revision.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with changes to this Policy, you should close your Account before the revised Policy takes effect.

15Contact & Data Enquiries

For any questions, concerns, or requests regarding this Privacy Policy or 222win's handling of your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the 222win Platform. State "PRIVACY REQUEST" at the start of your message for prompt routing to the data team.

We will acknowledge data requests within 5 business days and provide a substantive response within 30 days.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions.