cd222 Privacy Policy

Last Updated: June 2026  |  Effective Date: June 2026

1. Introduction

cd222 ("we", "us", "our", "the Platform") operates the online casino and sports betting website at cd222.one. We are committed to protecting the privacy and personal data of all users ("you", "User") who register for or access our platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, how we store and protect it, the conditions under which we may disclose it to third parties, and your rights in relation to that information.

This Policy should be read alongside the cd222 Terms & Conditions. By registering an account or using any part of the cd222 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not access or use the cd222 platform.

This Policy applies to all users of the cd222 platform, including Pakistani users accessing the service from cities including Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad.

2. Data We Collect

cd222 collects personal data in the following categories:

• Registration Data: Your full name, date of birth, email address, and any other information provided when creating your cd222 account.
• Identity Verification (KYC) Data: Copies of government-issued identity documents (such as CNIC for Pakistani users), proof of address, and payment method ownership documents submitted to satisfy our KYC obligations.
• Financial Data: Details of deposits, withdrawals, and transaction history on the cd222 platform. We do not store full payment card numbers; card data is handled directly by our certified payment processors including those supporting JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and Visa/Mastercard.
• Gaming & Betting Activity: Records of your gameplay, betting history, game preferences, bonus usage, and responsible gaming limit settings on cd222.
• Technical & Usage Data: IP address, device type, browser type and version, operating system, pages visited on cd222, time and date of access, referring URLs, and session duration.
• Communications Data: Records of correspondence with the cd222 support team via live chat or email, including the content and timing of those communications.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications from cd222.

3. How We Use Your Data

cd222 uses the personal data we collect for the following purposes:

• To create, manage, and administer your cd222 account and provide access to our services;
• To verify your identity and age (18+) in accordance with our KYC obligations and responsible gaming policy;
• To process deposits, withdrawals, and other financial transactions;
• To detect and prevent fraud, money laundering, and other prohibited activities on the cd222 platform;
• To comply with applicable legal and regulatory obligations, including reporting requirements;
• To provide customer support and respond to your queries and complaints;
• To personalise your cd222 experience and recommend games or promotions relevant to your interests, where you have consented;
• To send transactional communications regarding your account, including deposit confirmations, withdrawal updates, and security alerts;
• To send promotional and marketing communications about cd222 offers, new games, PSL betting promotions, and bonuses, where you have opted in;
• To monitor and improve the cd222 platform's performance, security, and user experience;
• To enforce the cd222 Terms & Conditions and take action against prohibited conduct.

4. Legal Basis for Processing

cd222 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and cd222, including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering, and responsible gaming obligations;
• Legitimate Interests: Processing carried out for cd222's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights;
• Consent: Processing based on your explicit consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

cd222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients:

• Game Providers: Certified providers including Evolution Gaming, Pragmatic Play, PG Soft, JILI, and Spribe may receive limited technical data necessary to deliver games to you;
• Payment Processors: Third-party payment service providers (including those operating JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card networks) receive transaction data necessary to process payments;
• Identity Verification Services: Third-party KYC and identity verification providers used to validate your documents and confirm your eligibility to use cd222;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory obligation, cd222 may disclose personal data to competent authorities;
• Service Providers: Trusted third-party vendors providing IT infrastructure, security, analytics, and customer support services to cd222, operating under data processing agreements that restrict their use of your data;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of cd222's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent protections.

6. Data Retention

cd222 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. In practice, this means:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering and responsible gaming record-keeping obligations;
• Transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Support communications are retained for two (2) years from the date of the interaction;
• Marketing preference records are retained until you withdraw consent or close your account.

Where retention beyond these periods is required by applicable law, cd222 will retain data accordingly. Upon expiry of the applicable retention period, data will be securely deleted or anonymised.

7. Cookies & Tracking Technologies

The cd222 platform uses cookies and similar tracking technologies to enhance your experience and support the platform's operation. Cookies used by cd222 fall into the following categories:

• Essential Cookies: Required for the platform to function, including maintaining your login session and security tokens. These cannot be disabled without preventing use of cd222.
• Preference Cookies: Remember your settings and preferences, such as language and display options, to personalise your cd222 experience.
• Analytics Cookies: Collect anonymised data on how users interact with cd222 — pages visited, session duration, error events — to help us improve the platform. No personally identifiable information is collected through analytics cookies.

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will impair your ability to use the cd222 platform.

8. Security Measures

cd222 implements technical and organisational security measures proportionate to the risks associated with the processing of your personal data. These measures include:

• HTTPS encryption for all data transmitted between your device and the cd222 platform;
• Hashed storage of account passwords — cd222 does not store passwords in plain text and cannot retrieve your password;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security reviews and vulnerability assessments of platform infrastructure;
• Two-factor authentication (2FA) available to all users as an additional account security measure.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is completely secure. cd222 cannot guarantee absolute security and will not be liable for breaches resulting from circumstances beyond our reasonable control. In the event of a data breach affecting your rights, cd222 will notify affected users and relevant authorities as required by applicable law.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by cd222:

• Right of Access: Request a copy of the personal data cd222 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements;
• Right to Restriction: Request that cd222 restrict processing of your data in certain circumstances;
• Right to Object: Object to processing based on legitimate interests, including profiling for direct marketing purposes;
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time without affecting prior processing.

To exercise any of these rights, contact the cd222 support team via live chat or email. We will respond to verified requests within a reasonable timeframe. Note that some requests may be subject to identity verification before we can act on them.

10. Children & Minors

The cd222 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is a mandatory step in the cd222 registration and KYC process. If we become aware that we have collected personal data from a minor, we will immediately suspend the relevant account, void all associated activity, and delete the personal data in question. If you believe a minor has registered on cd222, please contact our support team immediately.

11. Third-Party Services

The cd222 platform integrates third-party services including game providers, payment processors, and analytics tools. These third parties operate under their own privacy policies and cd222 is not responsible for their data practices. By using cd222, you acknowledge that your interaction with third-party game engines and payment systems is also subject to the relevant provider's terms and privacy practices.

12. International Data Transfers

cd222 operates internationally and your personal data may be processed in jurisdictions outside Pakistan. Where data is transferred internationally, cd222 takes steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards. By using the cd222 platform, you consent to such transfers where they are necessary to provide the services described in the Terms & Conditions.

13. Changes to this Privacy Policy

cd222 reserves the right to update this Privacy Policy at any time. Any changes will be published on this page with a revised "Last Updated" date. Your continued use of the cd222 platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically. Material changes will be notified to registered users via the email address associated with your cd222 account where practicable.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cd222, please contact our support team. Our team is available 24 hours a day, 7 days a week via live chat on the cd222 platform. For written privacy requests, email us at: [email protected]. Please include "Privacy Request" in the subject line and provide sufficient information to verify your identity. We will acknowledge all written privacy requests within 5 business days.