pak222 Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by pak222 ("pak222", "we", "us", "our") and applies to all personal data collected from users ("User", "you", "your") who access or register on the pak222 online gaming platform, accessible at https://pak222.cam ("the Platform").

pak222 is an English-language online gaming platform built for users in Pakistan. The platform presents cricket betting markets, sports wagering, live casino games, slot titles, table games, esports and other gaming content, with balances displayed in Pakistani Rupee (PKR) and time references in Pakistan Standard Time (PST, UTC+5). Given our user base, we understand that the data you share with us — including identity documents and payment information — is sensitive, and we treat it with corresponding seriousness.

This Policy explains what personal data we collect, why we collect it, how it is processed and stored, who it may be shared with, how long it is retained, and what rights you have in relation to it. It should be read alongside the Terms & Conditions, which govern the overall contractual relationship between you and pak222.

By registering an account on pak222 or continuing to use the platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that consent is a required legal basis for such processing.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — that is, information which alone or in combination with other data could identify you.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion and any other form of handling.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. In relation to this Policy, the Data Controller is pak222.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawals may be processed.
• "AML" means Anti-Money Laundering — obligations relating to the prevention and detection of financial crime.
• "Cookies" means small data files stored on your browser or device that allow the platform to remember preferences and session information.
• "Legitimate Interests" means a legal basis for processing where processing is necessary for the purposes of a genuine, lawful business or operational interest that is not overridden by your rights and interests.

Data Controller

pak222 acts as the Data Controller in respect of personal data collected through the platform. As Data Controller, pak222 is responsible for determining how and why your personal data is processed and for ensuring that it is handled in accordance with applicable data protection principles.

pak222 does not hold or claim a gambling license issued by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any provincial authority within Pakistan. Accordingly, the data protection framework applicable to pak222's processing activities is determined by the jurisdiction in which the platform is incorporated and operated, not Pakistani law. Users in Pakistan are advised to seek independent legal advice if they have concerns about cross-border data processing affecting their personal information.

Data We Collect

pak222 collects personal data across several categories, depending on the nature of your interaction with the platform:

4.1 Registration Data

When you create a pak222 account, we collect:

• Full legal name;
• Date of birth (for age verification — users must be 18 or older, or the higher minimum required by the applicable operator or license jurisdiction);
• Email address;
• Residential address (city and country, including, where applicable, Pakistan cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Username and encrypted password credentials.

4.2 Identity Verification (KYC) Data

To comply with KYC requirements, we collect:

• Government-issued photo identification documents (e.g., National Identity Card (CNIC), passport or driver's licence);
• Proof of address documents (e.g., utility bills or bank statements dated within 3 months);
• Payment method verification documents (e.g., screenshots of mobile wallet accounts registered in your name, or bank statements confirming account ownership).

4.3 Financial & Transaction Data

In connection with deposits and withdrawals, we collect:

• Deposit and withdrawal amounts in PKR;
• Payment method references (such as mobile wallet identifiers associated with Easypaisa, JazzCash or Raast, or bank account references for HBL, UBL, Meezan Bank or Bank Alfalah transfers). References to these payment providers are informational only — none endorse or support this platform;
• Transaction timestamps and confirmation references;
• Source-of-funds documentation where requested under AML procedures.

4.4 Behavioural & Technical Data

When you use the platform, we automatically collect:

• IP address and approximate geolocation (country/city level);
• Browser type, operating system and device model;
• Pages visited, time on page and navigation patterns;
• Session duration and game or betting activity logs;
• Cookies and session tokens (see Section 7).

4.5 Support Interaction Data

When you contact pak222 support via live chat or email, we retain:

• The content of your communications;
• Support ticket reference numbers and resolution history;
• Any personal data you voluntarily provide during the interaction.

How We Use Your Data

pak222 processes your personal data for the following purposes:

1. Account Creation and Management: To register your account, authenticate your identity, manage your settings and maintain the contractual relationship between you and pak222.
2. Age and Identity Verification: To verify that you meet the minimum age requirement (18+, or higher where required) and that your identity matches the registration information provided.
3. Payment Processing: To facilitate deposits and withdrawals, verify that payment methods are registered in your name, and maintain accurate financial records.
4. AML and Fraud Prevention: To monitor transaction activity for patterns consistent with money laundering, fraud, or other financial crime, and to take appropriate action where risk indicators are identified.
5. Responsible Gambling: To administer deposit limits, loss limits, session time controls and self-exclusion requests. Activity data may be reviewed to identify patterns associated with problem gambling, in which case proactive support outreach may occur.
6. Platform Security: To detect and prevent unauthorised account access, technical attacks, bot activity and other security threats.
7. Customer Support: To respond to queries, resolve disputes, and maintain a record of support interactions.
8. Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
9. Legal Compliance: To meet obligations under applicable data protection, AML, and gaming regulatory frameworks relevant to the jurisdiction in which pak222 operates.

Data Sharing & Disclosure

pak222 does not sell personal data. Data may be shared with the following categories of third parties only as necessary for the stated purposes:

6.1 Payment Processing Partners

Where a payment transaction involves a third-party payment processor, the minimum necessary data to complete the transaction may be shared with that processor. Payment providers referenced on this platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are listed as familiar Pakistani payment-reference context only. Any data sharing with a payment processor occurs solely under the terms of that processor's own privacy framework and only to the extent required to process the specific transaction.

6.2 KYC and Identity Verification Providers

pak222 may engage specialist third-party KYC verification services to validate identity documents. Where used, these providers process document images and verification results under a strict data processing agreement and are prohibited from using the data for any purpose other than the specific verification task.

6.3 Legal and Regulatory Disclosure

pak222 may disclose personal data to law enforcement agencies, regulatory authorities or other governmental bodies where legally required to do so, including in response to lawful requests, court orders or where disclosure is necessary to prevent or detect crime.

6.4 Business Transfers

In the event of a business acquisition, merger, restructuring or asset sale involving pak222, personal data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such change of data controller where required by applicable law.

Cookies & Tracking Technologies

pak222 uses cookies and similar tracking technologies to operate the platform effectively. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens and load-balancing cookies. These cannot be disabled without preventing platform access.
• Performance Cookies: Used to collect anonymised data about how users navigate the platform, including page load times and error logs. This data is used solely to improve platform performance and is not linked to individual user identities.
• Preference Cookies: Used to remember user-specific settings such as language preference, display settings and responsible gambling tool configurations.

pak222 does not use third-party advertising cookies or deploy cross-site tracking technologies for external behavioural advertising. You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from accessing your account or certain platform features. For detailed cookie management instructions, refer to the help documentation for your specific browser (Chrome, Firefox, Safari or similar).

Data Retention

pak222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active Accounts: Personal data is retained for the duration of the account relationship and for a defined period thereafter to allow for the resolution of any outstanding disputes, chargebacks or legal claims.
• KYC Documents: Identity and address verification documents are retained for a minimum period following account closure, as required by applicable AML obligations in the platform's operating jurisdiction. This period is typically a minimum of five years from the closure date, though it may be extended where legally required.
• Financial Records: Transaction records are retained for the minimum period required by applicable financial record-keeping and AML obligations.
• Support Records: Support interaction data is retained for a reasonable period to enable quality review and dispute resolution.
• Closed and Banned Accounts: Where an account has been closed for voluntary reasons, data is retained for the applicable post-closure period. Where an account has been closed or banned due to fraud, AML concerns or terms violations, data may be retained for longer periods as required by legal or investigatory obligations.

When retention periods expire, personal data is deleted or anonymised in a manner that prevents re-identification, except where applicable law requires otherwise.

Data Security

pak222 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration and destruction:

• Encryption in Transit: All data transmitted between your browser or device and the pak222 platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages, including login, registration, cashier and account management sections.
• Encryption at Rest: Sensitive personal data including identity documents and payment information is stored in encrypted form in the platform's data infrastructure.
• Access Controls: Access to personal data held by pak222 is restricted to authorised personnel on a need-to-know basis. Administrative access is subject to multi-factor authentication and is logged and audited.
• Password Security: User passwords are stored using one-way cryptographic hashing and are never stored or transmitted in plaintext. pak222 support staff do not have access to your password and will never ask for it.
• Incident Response: pak222 maintains an internal process for responding to data security incidents. Where a breach affecting your personal data occurs and notification is required by applicable law, you will be informed within the timeframe required by that law.

Your Rights

Depending on the data protection laws applicable in your jurisdiction, you may have the following rights in relation to your personal data held by pak222. We will make reasonable efforts to honour valid requests in a timely manner regardless of jurisdiction-specific mandates.