p2222 Privacy Policy

p2222 operates as the data controller in respect of all personal data collected through the p2222 platform. As data controller, p2222 determines the purposes for which your personal data is processed and the manner in which that processing takes place. p2222 operates under an international online gaming licence and is subject to the data protection obligations prescribed by that licensing framework.

Where p2222 engages third-party service providers — such as payment processors, game content suppliers, or identity verification agencies — to process personal data on its behalf, those parties act as data processors under written agreements that obligate them to process data only in accordance with p2222's instructions and to maintain appropriate security standards.

All enquiries regarding the processing of your personal data, including requests to exercise your data subject rights, should be directed to the p2222 support team using the contact details provided in Section 14 of this Policy.

p2222 collects the following categories of personal data from registered players and, in limited circumstances, from persons who browse the platform without registering:

p2222 does not knowingly collect sensitive personal data such as biometric identifiers, racial or ethnic origin data, religious beliefs, or health information, except where expressly required by anti-money laundering regulations or problem gambling safeguarding obligations and only to the minimum extent necessary.

p2222 collects personal data through the following channels:

• Direct Submission: Information you provide when registering your p2222 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotional activities.
• Automated Technical Collection: Data gathered automatically when you access the p2222 platform, including IP address logs, device fingerprinting for fraud prevention, session activity data, and cookie-based analytics as described in Section 9.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processing networks when you initiate a deposit or withdrawal.
• Identity Verification Providers: Data returned by our third-party KYC and AML screening partners when verifying the identity and background of account holders in compliance with our licensing obligations.
• Publicly Available Sources: In limited circumstances relating to AML screening, p2222 may cross-reference data against publicly available watchlists, sanctions databases, or politically exposed persons (PEP) registries.

p2222 does not purchase personal data lists or obtain personal data from social media platforms without your explicit consent.

p2222 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. Withdrawal of consent for marketing communications can be managed through your p2222 account settings or by contacting our support team.

p2222 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processing partners receive the transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable financial services regulations.
• Identity Verification & AML Partners: Third-party KYC and anti-money laundering screening providers who verify your identity documents and perform sanctions and PEP screening as required by our licensing obligations.
• Game Content Providers: Licensed game studios and live dealer platform operators who supply games to the p2222 platform may receive limited session and transaction data necessary to operate game rounds, record outcomes, and calculate RTP statistics.
• Regulatory Authorities: p2222 is obligated to share player data with its licensing regulator, financial intelligence units, law enforcement agencies, and other governmental bodies when required by applicable law, court order, or regulatory directive. We cannot provide advance notice of such disclosures where prohibited by law.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by p2222 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Successor Entities: In the event of a merger, acquisition, or restructuring of the p2222 business, personal data may be transferred to the acquiring or successor entity, subject to equivalent privacy protections remaining in place.

All third-party data processors engaged by p2222 are bound by written data processing agreements that restrict their use of your data to the specific purposes for which it was shared and require them to maintain appropriate technical and organisational security measures.

p2222 operates as an internationally licensed gaming operator, and some of the third-party service providers we work with — including game studios, cloud infrastructure providers, and compliance screening partners — may be located outside of Pakistan. This means your personal data may be transferred to, stored in, or processed in jurisdictions outside your country of residence.

Where such transfers occur, p2222 takes reasonable steps to ensure that your personal data continues to receive a level of protection consistent with the principles set out in this Privacy Policy. This includes implementing appropriate contractual safeguards with recipient entities and selecting processors located in jurisdictions with adequate data protection frameworks.

By registering and using the p2222 platform, you acknowledge and consent to these international transfers of your personal data as described in this section.

p2222 retains personal data for different periods depending on the category of data and the purpose for which it was collected. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account relationship with p2222, plus a minimum of five (5) years following account closure, in compliance with standard AML record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC and Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant regulatory obligation.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, or longer where subject to an ongoing dispute or legal proceeding.
• Technical and Usage Data: Typically retained for thirteen (13) months for analytics purposes, after which it is aggregated and anonymised.
• Marketing Preferences: Retained until you withdraw consent or for the life of the account relationship, whichever is shorter.

Following the expiry of the applicable retention period, personal data will be securely deleted or rendered permanently anonymous in accordance with p2222's internal data destruction procedures.

p2222 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our technical and organisational security measures include:

• Transport Encryption: All data transmitted between your device and the p2222 platform is encrypted using TLS 1.2 or higher (SSL certificates). This applies to all account pages, payment flows, and support interactions.
• Data-at-Rest Encryption: Personal data stored on p2222's servers is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within p2222's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and receive regular data protection training.
• Two-Factor Authentication: p2222 supports and encourages the use of OTP-based two-factor authentication for all player accounts to reduce the risk of unauthorised access.
• Fraud Monitoring: Continuous automated monitoring systems detect unusual login patterns, suspicious transaction activity, and potential account takeover attempts in real time.
• Penetration Testing: p2222's platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a data breach that poses a material risk to affected individuals, p2222 will notify impacted account holders and the relevant regulatory authority in accordance with applicable breach notification requirements.

p2222 uses cookies and similar tracking technologies on its platform for the purposes described below. A cookie is a small text file placed on your device when you visit a website. p2222 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the platform. These enable core functions such as secure login sessions, account authentication, and fraud prevention. They cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the p2222 platform — including which pages are visited most frequently and how long sessions last. This data is used to improve the platform experience.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations so that you do not need to reset them on each visit.
• Marketing and Targeting Cookies: Used only where you have provided explicit consent to receive personalised promotional communications. These may track whether you have previously visited the p2222 platform in connection with a promotional campaign.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core functionality of the p2222 platform, though some preference-based features may not function as intended.

Depending on the applicable data protection framework, you may have some or all of the following rights in relation to your personal data held by p2222. To exercise any of these rights, contact our support team as detailed in Section 14:

p2222 will respond to all verified data subject requests within thirty (30) days of receipt. We may need to verify your identity before processing a request. Where requests are complex or numerous, we may extend this period by a further two months and will notify you accordingly. p2222 will not charge a fee for reasonable requests unless they are manifestly unfounded or excessive.

p2222 enforces a strict 21+ age restriction across all services. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the p2222 KYC process and must be completed before an account becomes fully active.

If p2222 discovers or has reasonable grounds to believe that personal data belonging to a person under the age of 21 has been collected — whether through fraudulent misrepresentation of age during registration or any other means — the relevant account will be immediately suspended, all funds and bonuses will be frozen pending investigation, and the data will be securely deleted once the investigation is complete.

Parents and guardians who believe that a minor in their care may have registered a p2222 account should contact our support team immediately at [email protected]. We take such reports seriously and will act promptly upon verified notification.

p2222 sends promotional communications — including bonus offers, tournament announcements, PSL and cricket betting promotions, and VIP programme updates — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

You may withdraw your consent to receive marketing communications at any time through the following methods:

• Updating your notification preferences in the p2222 account settings panel;
• Clicking the unsubscribe link included in any p2222 marketing email;
• Contacting the p2222 support team directly at [email protected] with an explicit opt-out request.

Withdrawal of marketing consent does not affect the sending of service-critical communications such as account security alerts, transaction confirmations, KYC verification requests, or regulatory notifications. These communications are sent on the basis of contractual necessity and legal obligation and cannot be opted out of while your account remains active.

p2222 does not engage in unsolicited SMS marketing. Any SMS messages sent by p2222 are limited to OTP codes, transaction notifications, and communications to players who have explicitly consented to SMS promotional messages.

p2222 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. The "Last Updated" date at the top of this page will be revised each time a change is made.

Where changes are material — meaning they significantly affect the way we process your personal data or the rights available to you — p2222 will notify registered account holders via their registered email address at least fourteen (14) days before the changes take effect, where practicable.

Minor amendments, such as clarifications of existing provisions or corrections of typographical errors, may be made without advance notification. We recommend that you review this Privacy Policy periodically to remain informed about how p2222 protects your data. Continued use of the p2222 platform following the publication of any updated Policy constitutes your acknowledgement of the revised version.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way p2222 processes your personal data, please contact our support and compliance team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.