At d222, your privacy is not an afterthought — it is a foundational commitment. This Privacy Policy explains in plain, direct terms exactly what personal data d222 collects from Pakistani players, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own information. We operate under an international gaming license that imposes strict data-handling obligations, and we take those obligations seriously.
Six core principles that define how d222 handles your personal data — built around transparency, security, and your rights as a player
d222 only collects personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or for purposes we cannot clearly justify. Every data field in the d222 registration form exists for a specific, documented reason.
All personal data stored by d222 is protected using AES-256 encryption at rest. All data transmitted between your device and the d222 platform is protected by TLS 1.3 (256-bit SSL). Our servers are hosted in secure, access-controlled data centres with 24/7 physical and network security monitoring.
d222 recognises and honours your data subject rights — including the right to access, correct, delete, or restrict processing of your personal data. These are not token gestures. Submit a request to our support team and we will respond within 30 days. Your rights exist regardless of where in Pakistan you are located.
d222 does not sell, rent, or auction your personal data to third-party advertisers, data brokers, or marketing agencies under any circumstances. Your data is shared only with service providers strictly necessary to operate the d222 platform, and only under binding data processing agreements that require those providers to protect your information to the same standard as d222.
d222 does not hold your personal data indefinitely. Retention periods are defined based on the purpose of processing and applicable regulatory requirements. KYC and AML records are retained for a minimum of five years as required by gaming license obligations. Marketing preferences are reset if you close your account. Full retention schedules are published in Section 8 of this Policy.
In the unlikely event of a data security breach that poses a risk to your personal data, d222 will notify affected players within 72 hours of confirming the breach — including a description of the nature of the breach, the categories of data involved, and the steps we have taken to mitigate any harm. We maintain an internal incident response team specifically for this purpose.
d222 ("d222", "we", "us", "our") is an internationally licensed online casino and sports betting operator. The d222 platform is accessible at d222.vu and all associated mobile interfaces, subdomains, and applications (collectively, the "Platform"). d222 is the data controller responsible for the personal data of all registered players, prospective players, and visitors to the Platform.
This Privacy Policy applies to all personal data collected, processed, and stored by d222 in connection with your use of the Platform — whether you are a registered d222 account holder, a visitor browsing the site without an account, or a person who has made an enquiry to our support team. It applies to Pakistani players and all other users of the Platform regardless of their location.
Your Acceptance: By registering a d222 account, making a deposit, or continuing to use the Platform after the effective date of this Policy, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform and contact our support team to close your account.
This Privacy Policy should be read alongside d222's Terms and Conditions and Responsible Gaming Policy, both of which are published on the Platform. Where any conflict exists between this Policy and those documents with respect to data handling, this Privacy Policy takes precedence.
d222 collects only the categories of personal data necessary for the specific purposes outlined in this Policy. The following table summarises the categories of personal data we collect and the source of that data:
| Data Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, CNIC number, copy of CNIC or passport | Provided by you at registration or KYC verification |
| Contact Data | Email address, mobile number (JazzCash / EasyPaisa registered), residential address, city (Karachi, Lahore, Islamabad, Faisalabad, etc.) | Provided by you at registration or account update |
| Financial Data | JazzCash wallet number, EasyPaisa wallet number, HBL / UBL / Meezan / Alfalah bank account details, USDT wallet address, deposit and withdrawal transaction history | Provided by you during payment operations |
| Gaming Data | Bet history, game session data, win/loss records, wagering activity, live casino session logs, PSL and cricket betting history | Generated automatically by your Platform activity |
| Technical Data | IP address, device type, operating system, browser type and version, time zone, screen resolution, session duration | Collected automatically via cookies and server logs |
| Usage Data | Pages visited, features used, navigation paths, click patterns, search queries on the Platform | Collected automatically via analytics tools |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, feedback submissions | Generated through your interactions with d222 support |
| Marketing Data | Communication preferences, promotional opt-in status, bonus claim history | Provided by you or inferred from account activity |
Special Category Data: d222 does not intentionally collect special category data (such as health information, racial or ethnic origin, or religious beliefs) unless specifically required for responsible gaming assessments conducted with your explicit consent. If we identify that special category data has been inadvertently collected, it will be deleted immediately unless a specific lawful basis for retention exists.
d222 collects your personal data through the following channels and mechanisms:
You provide data directly to d222 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or participate in promotions. This is the primary source of identity, contact, and financial data that d222 holds about you.
When you access or use the Platform, d222's technical infrastructure automatically collects technical and usage data including your IP address, device information, session timestamps, and navigation behaviour. This data is collected via server logs, first-party cookies, and platform analytics tools operated by d222 or its authorised service providers.
In certain circumstances, d222 may receive personal data about you from authorised third-party sources including:
d222 processes your personal data only where a valid legal basis exists. The following table maps each primary processing activity to its legal basis:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract — necessary to open and maintain your d222 account |
| KYC identity verification | Legal obligation — required under d222's international gaming license and AML/CTF regulations |
| Processing deposits and withdrawals | Performance of contract — necessary to process your financial transactions |
| AML and fraud screening | Legal obligation and legitimate interests — required by license regulations and necessary to protect the platform from financial crime |
| Customer support communications | Performance of contract and legitimate interests — necessary to respond to your queries |
| Responsible gaming monitoring | Legal obligation and legitimate interests — required under gaming license responsible gaming obligations |
| Platform analytics and improvement | Legitimate interests — to understand how the Platform is used and improve the player experience |
| Marketing communications (opt-in) | Consent — you have actively opted in to receive promotional communications from d222 |
| Legal compliance and regulatory reporting | Legal obligation — to comply with gaming license, AML, and other applicable legal requirements |
Withdrawing Consent: Where d222 processes your data based on consent (principally for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent does not affect your ability to maintain and use your d222 account.
d222 uses your personal data for the following specific purposes. We do not use your data for any purpose that has not been disclosed to you in this Policy:
d222 does not sell your personal data. We share your data only in the following limited circumstances, and only with parties who are contractually bound to protect it to the same standard as d222:
d222 engages third-party service providers who process personal data on our behalf as data processors. These include KYC and identity verification platforms, payment gateway processors (including JazzCash and EasyPaisa integrations), fraud detection services, cloud hosting and data storage providers, customer support platform providers, and platform analytics services. All service providers operate under binding data processing agreements that prohibit use of your data for any purpose other than the specific service provided to d222.
Casino game and sports betting software providers whose products are offered on the d222 Platform may receive technical session data (such as player session tokens and game round data) that is necessary to operate the game interface. These providers do not receive your name, CNIC, financial data, or contact information unless it is specifically necessary for a game feature and you have been notified.
d222 will disclose personal data to gaming regulators, tax authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or binding regulatory direction. d222 will notify you of such disclosure where legally permitted to do so.
In the event of a merger, acquisition, or sale of d222 or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. d222 will notify you before your personal data is transferred and becomes subject to a different privacy policy.
No Advertising Data Sales: d222 does not participate in data brokerage, behavioural advertising networks, or third-party marketing data pools. Your personal data is never shared with third-party advertisers for the purpose of targeting you with advertising outside the d222 Platform.
d222 operates under an international gaming license and, as a result, some of your personal data may be transferred to and processed in countries outside Pakistan. This includes data processing by our cloud hosting providers, KYC verification partners, and gaming software providers, who may operate data centres in various jurisdictions.
Where personal data is transferred internationally, d222 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the governing data protection framework applicable to d222's license jurisdiction. These safeguards include:
You may request information about the specific safeguards in place for international data transfers affecting your personal data by contacting [email protected].
d222 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or license obligations. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| KYC & identity documents | 5 years from account closure | Gaming license AML/CTF regulatory obligation |
| Financial transaction records | 5 years from transaction date | Gaming license and financial records regulatory obligation |
| Account registration data | Duration of account + 5 years post-closure | Regulatory obligation and dispute resolution |
| Gaming and bet history | Duration of account + 5 years post-closure | Regulatory obligation, dispute resolution, responsible gaming |
| Customer support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing preferences | Until opt-out or account closure | Consent management |
| Technical and usage data (logs) | 13 months from collection | Platform security and analytics |
| Cookie data | Per cookie-specific expiry (see Section 9) | Platform functionality and analytics |
At the end of each retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data (e.g., statistical reports on platform usage patterns) may be retained indefinitely as it no longer constitutes personal data.
d222 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences, and understand how the Platform is used. The following categories of cookies are used on the d222 Platform:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in to your d222 account, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable Platform performance. These cookies do not require your consent as they are necessary for the service you have requested.
Functional cookies remember your preferences — such as your preferred language, display settings, and last visited page — to provide a more personalised experience. These cookies are set by d222 and expire within 12 months.
d222 uses first-party analytics cookies to understand how players navigate the Platform, which features are most used, and where technical issues may arise. This data is aggregated and anonymised and is used solely to improve the d222 player experience. Analytics cookies expire within 13 months of being set. d222 does not use third-party advertising networks or behavioural tracking cookies.
Cookie Consent & Control: When you first visit the d222 Platform, you will be presented with a cookie consent notice. You may accept or decline non-essential cookies at that point. You can also manage or withdraw your cookie consent at any time via your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.
As a player whose personal data is processed by d222, you hold the following rights. d222 will respond to all data rights requests within 30 calendar days of receipt:
How to Exercise Your Rights: To submit a data rights request, contact d222 at [email protected] with the subject line "Data Rights Request". Please include your registered account username and a clear description of the right you wish to exercise. d222 may need to verify your identity before processing the request. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.
d222 strictly enforces a minimum age requirement of 21 years for all registered players. The d222 Platform is not directed at, intended for, or accessible to persons under the age of 21. d222 does not knowingly collect or process personal data from any person under 21 years of age.
d222 employs automated age-verification checks at the point of registration and requires KYC documentation that includes date-of-birth confirmation before any withdrawal is permitted. Where d222 identifies or has reasonable suspicion that an account belongs to a person under 21, that account will be immediately suspended pending investigation, and will be permanently closed if the suspicion is confirmed. Any balance held in an underage account will be handled in accordance with d222's gaming license regulations.
If You Suspect Underage Access: If you believe a person under 21 in your household has registered or is accessing a d222 account, please contact [email protected] immediately. d222 takes underage gambling extremely seriously and will act on all reports without delay. We also recommend using parental control software to restrict access to gambling websites on shared or family devices.
d222 will only send you marketing communications — including promotional offers, PSL betting market alerts, bonus notifications, new game launch announcements, and cricket season campaigns — where you have provided your explicit consent to receive them. Consent is collected at the point of account registration and can be updated at any time in your account settings or by contacting our support team.
d222 communicates with registered players via email and SMS to the mobile number registered on your account. You will never receive marketing calls from d222. All marketing emails and SMS messages include a clear and functional opt-out mechanism. Processing your opt-out request takes effect within 48 hours of receipt, after which no further marketing communications will be sent.
d222 does not engage in cold marketing, purchasing marketing lists, or sending unsolicited communications to persons who have not registered an account and provided consent. If you receive a communication claiming to be from d222 that you believe is unsolicited or fraudulent, please report it to [email protected] immediately.
d222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following measures:
Your Role in Security: While d222 takes extensive measures to protect your data, you also play an important role. Use a strong, unique password for your d222 account. Enable 2FA. Do not share your login credentials with anyone. Log out of your account when using shared devices. If you suspect your account has been compromised, contact d222 support immediately.
d222 reviews this Privacy Policy regularly and reserves the right to update or amend it at any time. Changes may be made to reflect updates to d222's data processing practices, changes in applicable law or regulatory requirements, new Platform features, or clarifications to existing provisions.
Where changes to this Policy are material — meaning they significantly affect the way d222 processes your personal data or your rights as a data subject — d222 will notify you by email to your registered account address and by a prominent notice on the Platform at least 14 days before the changes take effect. Non-material changes (such as formatting corrections, clarifications, or administrative updates) may take effect immediately upon publication.
The "Last Updated" date at the top of this Policy reflects the date on which the most recent version was published. You are encouraged to review this Policy periodically. Continued use of the d222 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.
Version History: d222 maintains an internal version history of all Privacy Policy revisions. If you wish to review a previous version of this Policy or understand what changed between versions, please contact [email protected] with the subject line "Privacy Policy Version Request".
d222 is committed to handling all privacy-related queries and complaints promptly and transparently. If you have a question about this Privacy Policy, wish to exercise a data right, or have a concern about how d222 has handled your personal data, please contact us using the following channels:
If you are not satisfied with d222's response to your privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction under which d222's gaming license is issued. d222 will provide you with the relevant authority's contact details upon request.
d222 takes all privacy complaints seriously. We will not penalise, disadvantage, or discriminate against any player who raises a legitimate privacy concern or exercises their data rights in good faith.
You've read the Policy. You know exactly how d222 protects your data. Now it's time to enjoy the Platform — PSL markets, live casino, thousands of slots, all in PKR with JazzCash and EasyPaisa. Trusted by players from Karachi to Peshawar.