222rs Privacy Policy

1. Who We Are

1.1 222rs is an internationally licensed online gaming platform operating at 222rs.asia. References to "222rs", "we", "us", or "our" in this Privacy Policy refer to the 222rs operating entity and its licensed platform.

1.2 222rs acts as the data controller in respect of personal data collected from players and site visitors through the 222rs platform. As data controller, 222rs determines the purposes and means by which your personal data is processed.

1.3 For all privacy-related enquiries, data subject access requests, or complaints regarding our data handling practices, please contact our Data Protection team at [email protected] with the subject line "Privacy Enquiry".

2. Data We Collect

2.1 222rs collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the primary categories of personal data we collect:

2.2 Where you choose not to provide certain personal data, we may be unable to provide you with specific services — for example, we cannot process a withdrawal without completing KYC identity verification.

3. How We Collect Your Data

3.1 Directly from you: The majority of personal data 222rs holds is provided directly by you during account registration, KYC document submission, deposit and withdrawal requests, completion of responsible gaming questionnaires, or when you contact our customer support team.

3.2 Automatically: When you access the 222rs platform, certain technical data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device fingerprint, session duration, pages visited, and game interactions.

3.3 From third-party service providers: 222rs may receive personal data about you from third-party identity verification providers (for KYC purposes), payment processors (transaction confirmation and fraud screening data), and fraud detection services. All such third-party data sources are contractually bound to process data lawfully and to share it with 222rs only for specified legitimate purposes.

3.4 From publicly available sources: In limited circumstances — primarily for enhanced due diligence on high-value accounts or where fraud is suspected — 222rs may supplement account records with data obtained from publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media screening tools.

4. Legal Basis for Processing

4.1 222rs processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, game provision, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, KYC verification mandates, and regulatory reporting duties imposed by our licensing authority.
• Legitimate interests: Processing necessary for 222rs's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gaming monitoring, and general platform analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications (email, SMS, push notifications). You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

4.2 Where processing is based on legitimate interests, 222rs conducts a balancing test to ensure those interests do not unfairly override your fundamental privacy rights. You may request details of any legitimate interests assessment by contacting us at [email protected].

5. How We Use Your Data

5.1 222rs uses the personal data collected for the following purposes:

• Creating, managing, and maintaining your 222rs player account
• Verifying your identity and age (21+) in compliance with our licensing obligations
• Processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels
• Providing and improving the games, betting markets, and other platform features available on 222rs
• Detecting, investigating, and preventing fraud, cheating, collusion, money laundering, and other prohibited activities
• Fulfilling responsible gaming obligations — including monitoring for problem gambling indicators and enforcing self-exclusion requests
• Complying with anti-money-laundering, counter-terrorism financing, and other regulatory reporting requirements
• Providing customer support and resolving disputes or complaints
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts)
• Sending promotional and marketing communications where you have provided consent to receive them
• Conducting internal analytics to improve platform performance and user experience

5.2 222rs does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where such processing is necessary for fraud prevention or AML compliance, in which case you have the right to request human review of any automated decision that adversely affects you.

6. Sharing Your Personal Data

6.1 222rs does not sell or rent personal data to any third party under any circumstances. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing providers receive financial transaction data solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services receive identity document images and personal data to perform age and identity checks as required under our licensing obligations.
• Fraud prevention and AML screening services: Transaction monitoring providers and sanctions screening services receive relevant data to identify and prevent financial crime.
• Gaming software and content providers: Game studios whose titles are available on 222rs may receive session-level gaming data for the purpose of game performance monitoring and RNG certification. No directly identifying personal data is shared with game studios without your knowledge.
• Regulatory and law enforcement authorities: 222rs will disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where legally required to do so, without prior notice to you where permitted by applicable law.
• Professional advisers: Legal counsel, accountants, and auditors may access personal data where necessary for the provision of professional services to 222rs, subject to professional confidentiality obligations.

6.2 All third-party recipients of personal data are required by contract to implement appropriate technical and organisational security measures and to process personal data only for the specified purpose(s) for which it was shared.

6.3 In the event that 222rs undergoes a business restructuring, merger, acquisition, or sale of assets, personal data held by 222rs may be transferred to the successor entity, subject to equivalent data protection commitments being maintained.

7. Cookies & Tracking Technologies

7.1 The 222rs platform uses cookies and similar tracking technologies to operate correctly, to improve user experience, and to support our security and fraud prevention systems. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a 222rs session, security tokens, and load-balancing cookies. These cannot be disabled without preventing platform access.
• Functional cookies: Store your preferences such as language, display settings, and responsible gaming limits so they are applied consistently across sessions.
• Analytics cookies: Collect aggregate, anonymised data about how players navigate and interact with the 222rs platform. This data is used internally to improve platform design and game placement. No individual player is identified through analytics data.
• Fraud prevention cookies: Support our fraud detection systems by collecting device fingerprint data and session behaviour patterns to identify suspicious activity.

7.2 222rs does not deploy third-party advertising cookies or permit external advertising networks to place tracking cookies on the 222rs platform.

7.3 You may manage cookie preferences through your browser settings. Please be aware that disabling essential cookies will prevent you from accessing your 222rs account and using platform features.

8. Data Security

8.1 222rs implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Multi-factor authentication (MFA) requirements for all administrative access to production systems
• Role-based access controls limiting data access to personnel whose job function requires it
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• 24/7 intrusion detection and security monitoring systems
• Secure, geographically redundant data centre infrastructure
• Annual staff data security training and awareness programmes

8.2 In the event of a personal data breach that poses a risk to player rights or interests, 222rs will notify affected players and relevant regulatory authorities within the timeframes required under applicable law.

8.3 While 222rs takes all reasonable precautions to secure your data, no internet-based system is entirely immune from risk. Players are strongly encouraged to use a strong, unique password for their 222rs account and to enable two-factor authentication where available.

9. Data Retention

9.1 222rs retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure or the last transaction, as required by anti-money-laundering regulations applicable to licensed gaming operators.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction for regulatory compliance and audit purposes.
• Gaming activity records: Retained for a minimum of three (3) years from the date of activity for dispute resolution, responsible gaming monitoring, and licensing audit purposes.
• Support and communications records: Retained for two (2) years from the date of the most recent communication, except where records are relevant to an ongoing dispute or regulatory investigation.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus five (5) years thereafter, to prevent inadvertent re-registration by excluded players.
• Marketing preference records: Retained until you withdraw consent or close your account, plus a reasonable period thereafter to evidence the consent that was given.

9.2 On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 222rs's data destruction procedures.

10. Your Data Rights

10.1 As a 222rs player, you have the following rights in respect of your personal data held by 222rs:

• Right of access: You may request a copy of the personal data 222rs holds about you (commonly known as a Data Subject Access Request or DSAR). We will respond within 30 days of receiving a valid request.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For basic account details, corrections can often be made directly in Account Settings following 222rs Login.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations.
• Right to restrict processing: You may request that 222rs restrict processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that 222rs provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling. You may also object at any time to processing for direct marketing purposes, which will be honoured without requiring justification.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

10.2 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing the request. 222rs will respond to all valid requests within 30 calendar days, and will notify you if an extension of this period is required for complex requests.

10.3 If you are dissatisfied with our response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your account.

11. Pakistani Players — Specific Notices

11.1 222rs serves a significant player base in Pakistan, including players in Karachi, Lahore, Islamabad, Faisalabad, and other cities across the country. This section addresses specific data privacy considerations relevant to Pakistani players.

11.2 Personal data provided by Pakistani players — including CNIC numbers, JazzCash and EasyPaisa account references, and HBL/UBL/Meezan Bank details — is processed primarily for identity verification, payment processing, and AML compliance. This data is never shared with Pakistani third parties for marketing or commercial purposes unrelated to the provision of 222rs services.

11.3 By registering a 222rs account, Pakistani players acknowledge that their personal data may be stored on and processed by servers located outside Pakistan. 222rs ensures that any cross-border data transfers are subject to appropriate safeguards, including contractual data protection clauses consistent with recognised international standards.

11.4 222rs respects the privacy expectations of players operating under Pakistani cultural and legal norms. We are committed to proportionate data collection — we do not collect personal data beyond what is necessary for our licensed operations and compliance obligations.

12. Minors & Age Restriction

12.1 The 222rs platform is strictly restricted to individuals aged 21 years and above. 222rs does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

12.2 Where 222rs becomes aware — through KYC verification, self-disclosure, or any other means — that an account holder is under 21 years of age, the account will be immediately suspended, all gaming activity voided, and any deposited Real Money Balance returned to the source payment method. The personal data associated with the minor's account will be processed only to the extent necessary to effect the account closure and comply with any applicable reporting obligations.

12.3 If you have reason to believe that a minor has registered on the 222rs platform, please contact us immediately at [email protected] so that we can take prompt action.

13. Changes to This Privacy Policy

13.1 222rs reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our licensing obligations. The "Effective date" at the top of this page indicates when the current version came into force.

13.2 Where changes to this Privacy Policy are material — that is, where they significantly affect how we use your personal data or your rights in relation to it — 222rs will notify registered players by email to their registered address at least 14 days before the changes take effect.

13.3 Your continued use of the 222rs platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated policy, you should discontinue use of the platform and contact our support team to close your account.

13.4 Previous versions of this Privacy Policy are available on request by contacting [email protected].

14. Contact & Data Enquiries

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data 222rs holds about you, please contact our Data Protection team using the details below:

14.2 For responsible gaming-related data requests — including self-exclusion, deposit limit adjustments, or requests to review your gaming activity history — please contact our support team directly or use the self-service tools available in Account Settings following 222rs Login. Further information is available on our Responsible Gaming page.

14.3 For general Terms & Conditions governing your use of the 222rs platform, please refer to our Terms & Conditions page.