t222 Privacy Policy
How We Collect, Use, Protect & Respect Your Personal Data

This Privacy Policy ("Policy") describes how t222 ("t222", "we", "us", or "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "your", or "Player") who access or use the t222 online gaming platform available at https://t222.cam, including all associated games, betting services, account management tools, customer support channels, and marketing communications.

This Policy forms part of t222's overall legal framework, which also includes the Terms & Conditions and the Responsible Gaming Policy. By registering an account on t222 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

t222 is committed to handling your personal data in accordance with applicable international data protection principles, including principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We take these obligations seriously and have implemented organisational and technical measures to fulfil them.

For the purposes of this Privacy Policy, t222 is the data controller in respect of personal data collected from Players through the t222 platform. As data controller, t222 determines the purposes and means by which your personal data is processed.

t222 operates under an international gaming licence. Regulatory oversight of t222's data handling practices — including compliance with applicable data protection requirements set out as conditions of the gaming licence — is subject to review by the relevant licensing authority.

Where t222 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or cloud infrastructure providers — those parties act as data processors and are bound by written data processing agreements that require them to handle your data solely according to t222's instructions and in compliance with applicable data protection standards.

t222 collects the following categories of personal data from Players, depending on how you interact with the platform:

t222 does not deliberately collect or process special categories of sensitive personal data — including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data used for identification purposes — except where strictly required by applicable law or gaming licence obligations (for example, biometric liveness checks during identity verification, which are processed solely for this purpose and not retained beyond verification completion).

t222 collects personal data through the following means:

• Direct submission by you: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, update your account settings, or respond to a marketing communication.
• Automated technical collection: When you access the t222 website or use any platform feature, technical data and usage data are automatically collected through server logs, cookies, and similar tracking technologies as described in Section 8.
• Payment service providers: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency channels, the payment provider may share transaction confirmation data with t222 necessary to credit or debit your account.
• Identity verification providers: During the KYC process, t222 uses third-party identity verification services to confirm the authenticity of documents you submit. These providers may return verification results and risk scores to t222, but do not share your raw documents with other parties.
• Fraud and security monitoring systems: t222's automated security systems analyse behavioural patterns, login data, and transaction metadata to detect potential fraud, account takeover attempts, and money laundering activity.

t222 processes your personal data only where there is a valid legal basis to do so. The legal bases t222 relies upon are as follows:

• Performance of a contract: Processing your identity, contact, financial, and gaming data is necessary to create and operate your t222 account, process your deposits and withdrawals, and deliver the gaming services you have contracted to receive.
• Compliance with a legal obligation: t222 is required by its gaming licence and applicable anti-money-laundering regulations to verify your identity, retain transaction records, and report certain activities to regulatory authorities. This processing is mandatory and cannot be opted out of.
• Legitimate interests: t222 processes technical data, usage data, and security-related data on the basis of its legitimate interest in preventing fraud, protecting the platform's integrity, improving platform performance, and ensuring account security. In each case, t222 has assessed that these interests are not overridden by your data protection rights.
• Consent: t222 processes your data for direct marketing purposes — including promotional emails and SMS notifications about bonuses, new games, and platform updates — only where you have given explicit consent during registration or subsequently through your account settings. You may withdraw this consent at any time.

t222 uses your personal data for the following specific purposes:

• Account creation and management: Creating your t222 account, verifying your eligibility (including age and identity), managing your PKR wallet, and maintaining accurate account records.
• Transaction processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency; processing withdrawal requests; and maintaining complete transaction records for your reference and for regulatory compliance.
• Game delivery and personalisation: Delivering the games and betting markets you access, recording your gaming history, applying your responsible gaming settings, and where you have consented, personalising your platform experience based on your play preferences.
• Identity and age verification (KYC): Verifying that you are who you say you are and that you meet the 21+ age requirement for participation on t222, as required by our gaming licence.
• Fraud prevention and security: Monitoring account activity for signs of fraud, money laundering, collusion, bonus abuse, or account takeover; investigating suspected breaches; and taking protective action where necessary.
• Regulatory compliance: Maintaining records required by our gaming licence, complying with anti-money-laundering obligations, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling any other legal obligations applicable to t222's operations.
• Customer support: Responding to your queries and complaints, verifying your identity when you contact support, and maintaining records of support interactions for quality assurance and audit purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with t222, identify areas for improvement, and test new features before full rollout.
• Marketing (with consent): Sending you promotional communications about t222 bonuses, new games, cricket betting promotions (including PSL-related offers), and platform updates — but only where you have consented to receive such communications.
• Responsible gaming: Monitoring play patterns to identify potential signs of problem gambling and, where appropriate, triggering responsible gaming interventions in the player's interest.

7.1 We Do Not Sell Your Data. t222 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. Full stop.

7.2 Service Providers. t222 shares personal data with the following categories of third-party service providers, solely to the extent necessary for the provision of t222's services:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners require transaction data to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial regulations.
• Identity verification providers: Third-party KYC service providers receive your identity documents and biometric data during the verification process. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification.
• Game suppliers: Third-party game studios whose titles are offered on t222 receive anonymised player session data (e.g., game stakes, round results) necessary to run the game and calculate RTP. Game suppliers do not receive your name, contact details, or financial information.
• Cloud and infrastructure providers: t222's platform is hosted on secure cloud infrastructure. Infrastructure providers have limited access to the data held on their servers and are contractually prohibited from processing it for their own purposes.
• Fraud and security services: Third-party fraud detection and security monitoring tools may process technical and behavioural data from your sessions to identify risk signals. This processing is conducted under t222's legitimate interest in platform security.
• Customer support platforms: t222's live chat and support ticketing infrastructure may process your communications data. Support platform providers are bound by data processing agreements.

7.3 Regulatory and Law Enforcement Disclosure. t222 may disclose your personal data to regulatory bodies, gaming authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, legal process, or court order. t222 will, where legally permissible, provide reasonable advance notice to affected players before making such disclosures.

7.4 Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of t222's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the applicable privacy terms governing your data following the transaction.

8.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They are widely used across the internet to make websites work efficiently, remember your preferences, and provide analytical information to site operators. t222 uses cookies and similar technologies (including local storage and session storage) on the t222 platform.

8.2 Types of Cookies Used. t222 uses the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the t222 platform. They include session management cookies that keep you logged in, security cookies that protect against cross-site request forgery (CSRF), and cookies that remember your cookie consent choice. These cannot be disabled without preventing core platform functionality.
• Functional cookies: These remember your preferences and settings — such as your chosen language, display settings, and responsible gaming tool configurations — to personalise your experience across sessions without requiring you to re-enter preferences each time.
• Analytical cookies: These collect anonymised data about how players use the t222 platform — which pages are most visited, where players encounter difficulties, and how the platform is navigated. This data is used to improve platform design and performance. t222 uses analytics tools that process this data in aggregated, non-identifiable form.
• Security and fraud detection cookies: These support t222's fraud detection and account security systems by identifying unusual or suspicious access patterns across sessions.

8.3 Managing Cookies. You can control cookies through your browser settings — most browsers allow you to view, delete, and block cookies from specific sites. Note that disabling strictly necessary cookies will impair t222's functionality and may prevent you from accessing your account. Disabling functional and analytical cookies will not prevent basic platform access but may reduce the quality of your experience.

9.1 Technical Measures. t222 implements the following technical security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and t222's servers.
• Encryption at rest for sensitive stored data, including identity documents, payment details, and authentication credentials.
• Password hashing using cryptographically strong one-way algorithms — t222 does not store plaintext passwords and cannot retrieve them.
• Multi-factor authentication (SMS-based 2FA) on all player accounts.
• Regular automated and manual penetration testing and vulnerability assessments of t222's infrastructure.
• Intrusion detection systems and real-time security monitoring of t222's server environment.
• Strict access controls limiting internal staff access to personal data on a need-to-know basis, with all access logged and audited.

9.2 Organisational Measures. Beyond technical controls, t222 maintains data protection through: staff training on data handling obligations; data protection impact assessments for high-risk processing activities; vendor due diligence for all third-party processors; and a documented incident response plan for security breaches.

9.3 Your Role in Security. The security of your t222 account also depends on your own actions. You are responsible for keeping your login credentials confidential, using a strong and unique password, not sharing your account with others, and ensuring your device and network are reasonably secured. t222 will never ask for your password through any communication channel.

t222 retains your personal data for the following periods, determined by the purpose of the data and applicable legal requirements:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, as required by anti-money-laundering regulations applicable to t222's gaming licence.
• Transaction and financial records: Retained for a minimum of five years following each transaction, as required by AML and gaming regulatory obligations. This applies to all deposit, withdrawal, and gaming transaction records.
• KYC and identity verification documents: Retained for the period required by applicable law and t222's gaming licence — typically five years following account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for three years following the resolution of each support interaction, for quality assurance, dispute resolution, and audit purposes.
• Marketing preference records: Retained for three years following your last interaction with t222, or until you withdraw consent for marketing communications, whichever is sooner.
• Technical and usage data (anonymised): Aggregated, anonymised analytics data does not contain personal identifiers and may be retained indefinitely for platform improvement purposes.

Following the expiry of the applicable retention period, personal data is securely deleted from t222's active systems and backups. Where complete deletion is not immediately technically feasible (for example, in encrypted database backups), data is rendered inaccessible and is deleted as part of the next scheduled backup purge cycle.

You have the following rights in relation to the personal data t222 holds about you. To exercise any of these rights, contact t222's support team as described in Section 16.

• Right of Access: You have the right to request a copy of the personal data t222 holds about you. t222 will provide this information within 30 days of receiving a verified request. The response will include the categories of data held, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to Rectification: If personal data t222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many data fields directly through your account settings without contacting support.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to t222's legal obligation to retain certain data under AML and gaming regulatory requirements — erasure requests will be fulfilled to the extent legally permissible.
• Right to Restriction of Processing: In certain circumstances — including where you contest the accuracy of data, or where processing is unlawful but you prefer restriction over erasure — you have the right to request that t222 limit its processing of your data to storage only.
• Right to Data Portability: Where t222 processes your data on the basis of consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests at any time, on grounds relating to your particular situation. You also have an unconditional right to object to direct marketing processing at any time, without needing to provide a reason.
• Right to Withdraw Consent: Where t222 processes your data on the basis of your consent (primarily for direct marketing), you may withdraw that consent at any time through your account's communication preferences settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12.1 Marketing Consent. t222 will only send you promotional communications — including emails and SMS messages about bonuses, new games, cricket betting promotions, PSL-related offers, and platform updates — where you have given explicit consent to receive them. Consent is requested during registration and can be updated at any time through your account's communication preferences settings.

12.2 What We May Send. Where you have opted in to marketing communications, t222 may contact you with information about: welcome bonuses and reload promotions; new game releases and featured slots; cricket betting market announcements including PSL and Pakistan international fixtures; seasonal campaigns and special events; and platform feature updates that may be relevant to your account.

12.3 Opting Out. You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link included in every marketing email; (b) updating your SMS preferences in your t222 account settings; or (c) contacting t222's support team with a written opt-out request. Opt-out requests are processed within 5 business days. Opting out of marketing does not affect transactional communications — t222 will continue to send account-related messages such as deposit confirmations, withdrawal notifications, and security alerts regardless of marketing preferences.

12.4 Service Communications. Certain communications are not marketing and cannot be opted out of. These include: account registration confirmation; deposit and withdrawal transaction confirmations; security alerts (such as new device login notifications); KYC verification status updates; responsible gaming tool confirmations; and any communications required by law or t222's gaming licence obligations.

13.1 Strict 21+ Platform. The t222 platform is strictly for individuals aged 21 years and above. t222 does not knowingly collect personal data from individuals under the age of 21. Registration by minors is prohibited under t222's Terms & Conditions and is a breach of the conditions of t222's gaming licence.

13.2 Age Verification Enforcement. t222 employs age verification technology and KYC document checks to enforce the 21+ age requirement. Where t222 has reasonable grounds to suspect that an account is held by, or being accessed by, a person under the age of 21, the account will be immediately suspended pending verification. Where a minor is confirmed to have accessed the platform, the account will be permanently closed, any real-money deposits will be returned via the original payment method, and any winnings generated will be forfeited.

13.3 Parental Controls. t222 encourages parents and guardians in Pakistan to make use of available parental control software on household devices to prevent underage access to online gaming and betting platforms. If you believe a minor in your household has accessed t222, please contact our support team immediately so the account can be investigated and closed.

13.4 Deletion of Underage Data. If t222 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, such data will be deleted as promptly as technically feasible, subject only to any retention obligations arising from regulatory reporting requirements triggered by the incident.

14.1 Cross-Border Processing. As an internationally licensed online gaming platform serving Pakistani players, t222's operations involve the transfer and processing of personal data across international borders. Your data may be processed in jurisdictions outside Pakistan — including the jurisdiction in which t222's gaming licence is issued and the locations of t222's cloud infrastructure providers, game suppliers, and KYC service providers.

14.2 Safeguards for International Transfers. Where t222 transfers personal data internationally, it ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include: contractual data protection clauses incorporated into agreements with third-party processors; transfer to jurisdictions that maintain adequate data protection frameworks; and technical measures including encryption that protect data regardless of where it is physically stored or processed.

14.3 Enquiries About Transfers. If you would like further information about the specific countries to which your personal data may be transferred and the safeguards in place, please contact t222's support team. t222 will provide this information upon verified request within a reasonable timeframe.

15.1 Right to Update. t222 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, t222's data processing practices, or the services offered on the platform. The "Last Updated" date at the top of this Policy reflects when the most recent changes were made.

15.2 Notification of Material Changes. Where t222 makes material changes to this Privacy Policy — changes that significantly affect how your personal data is used or your rights in relation to it — t222 will provide advance notice via email to your registered address and/or via a prominent on-screen notification upon your next login to the platform. Material changes will not take effect until at least 14 days after notification, giving you time to review the changes and, if necessary, exercise your right to close your account before the changes apply to your data.

15.3 Continued Use as Acceptance. Your continued use of the t222 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you may close your account as described in t222's Terms & Conditions, and t222 will return any real-money balance to your verified payment method.

15.4 Policy Archive. Previous versions of this Privacy Policy are available upon written request to t222's support team. t222 maintains an internal archive of all historical Privacy Policy versions for compliance and audit purposes.

16.1 Privacy Enquiries. For any questions, concerns, or requests relating to this Privacy Policy or the personal data t222 holds about you — including access requests, correction requests, erasure requests, or objections to processing — please contact t222's support team through any of the following channels:

• Email: [email protected] — Please use the subject line "Privacy Request" and include your registered account username for fastest processing. t222 aims to acknowledge privacy requests within 48 hours and respond substantively within 30 days.
• Live Chat: Available 24/7 on the t222 website. For complex privacy requests, the live chat team will escalate your query to the appropriate team and provide a reference number for follow-up.

16.2 Complaints Process. If you are dissatisfied with t222's handling of your personal data or the response to a privacy request, you may escalate your complaint through the following steps: (a) submit a formal written complaint to t222's support team, clearly marked as a formal privacy complaint; (b) t222 will investigate and respond within 14 business days; (c) if you remain dissatisfied with t222's response, you may escalate the matter to the relevant regulatory or supervisory authority in the jurisdiction of t222's gaming licence.

16.3 Response Timeframes. t222 is committed to responding to all privacy-related communications promptly. Standard privacy enquiries will receive an initial response within 48 hours. Formal data rights requests (access, erasure, portability, etc.) will receive a substantive response within 30 calendar days. Formal complaints will receive a full written response within 14 business days.