w222 Privacy Policy
Your Data, Your Rights

1 Introduction

This Privacy Policy ("Policy") is published by w222 ("w222", "the Company", "we", "us", "our"), the operator of the online gaming platform accessible at w222.im. This Policy describes how w222 collects, uses, stores, discloses, and protects personal data relating to users ("Player", "User", "you") who access or register on the w222 platform, including its casino, sportsbook, live dealer, virtual sports, and any associated services.

w222 is committed to handling your personal data with the highest standards of transparency, integrity, and security. We comply with the data protection obligations imposed by our international gaming licence and with applicable data protection principles recognised in the jurisdictions in which we operate.

This Policy should be read in conjunction with the w222 Terms & Conditions and the Responsible Gaming Policy, both of which are accessible on the w222 website. In the event of any conflict between this Policy and the Terms & Conditions in relation to data privacy matters, this Policy shall prevail.

2 Data We Collect

w222 collects personal data across several categories, depending on how you interact with the platform. The table below summarises the types of data we collect and the context in which each category is typically obtained:

w222 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless such data is voluntarily provided in the context of a responsible gaming self-declaration or a support request.

3 How We Collect Your Data

w222 collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automated technologies: Technical data such as IP addresses, browser fingerprints, cookie identifiers, and session logs collected automatically as you navigate the w222 platform.
• Third-party verification partners: Identity and age verification data received from third-party KYC service providers to whom you have submitted your identity documents.
• Payment processors: Transaction reference data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast in connection with deposit and withdrawal processing.
• Fraud and AML screening providers: Risk signals and watchlist match results provided by third-party anti-fraud and anti-money laundering screening tools used by w222 to fulfil its regulatory obligations.

4 How We Use Your Data

w222 uses personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the w222 platform.
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the w222 platform.
• Payment processing: To facilitate PKR deposits and withdrawals via your chosen payment method, including reconciliation and dispute resolution.
• Regulatory compliance: To fulfil obligations under our international gaming licence, including KYC verification, AML screening, responsible gaming checks, and reporting to licensing authorities where required by law.
• Responsible gaming: To monitor gaming behaviour and apply responsible gaming tools — such as deposit limits, loss limits, and self-exclusion — in accordance with your preferences and w222's duty of care obligations.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance through our live chat and email support channels.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, subject to your marketing preferences and applicable consent requirements. You may opt out at any time.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct on the w222 platform.
• Platform improvement: To analyse platform usage patterns, improve the user experience, and develop new features and services for Pakistani players.

5 Legal Basis for Processing

w222 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account registration, game access, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, responsible gaming obligations, and licence conditions under our international gaming licence.
• Legitimate interests: Processing carried out in the legitimate interests of w222 or a third party — such as fraud prevention, platform security, and service improvement — provided that such interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 Sharing Your Data

w222 does not sell, rent, or otherwise trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Identity and age verification providers: Third-party KYC service providers who verify your identity documents on w222's behalf. These providers are bound by confidentiality agreements and data processing agreements.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other payment service providers through whom your deposits and withdrawals are processed. Each provider handles data in accordance with its own privacy policy and applicable financial regulations.
• Anti-fraud and AML screening providers: Third-party risk assessment and screening services used to comply with our anti-money laundering obligations and to protect the integrity of the platform.
• Gaming software providers: Game studios and platform technology providers whose software powers casino, live dealer, and sportsbook products on w222. These providers receive only the minimum data necessary to deliver their services.
• Customer support platforms: Third-party software providers that host our live chat and ticket management systems. Support transcripts and account identifiers may be processed by these platforms under data processing agreements.
• Regulatory and law enforcement authorities: Government agencies, licensing authorities, financial intelligence units, and law enforcement bodies where disclosure is required by applicable law, court order, or regulatory direction. w222 will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and financial advisers engaged by w222, subject to professional confidentiality obligations.

7 Data Retention

w222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active w222 account is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements applicable to licensed gaming operators.
• KYC documents: Identity verification documents — including copies of CNIC, passport, and proof of address — are retained for a minimum of five (5) years following the completion of the verification process or the closure of the account, whichever is later.
• Financial transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction, in compliance with anti-money laundering record-keeping obligations.
• Customer support records: Communications between you and the w222 support team are retained for a period of three (3) years from the date of the interaction.
• Marketing data: Records of your marketing consent and preference history are retained for the duration of your account and for three (3) years following any opt-out, to demonstrate compliance with consent obligations.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with w222's internal data disposal procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8 Cookies & Tracking Technologies

w222 uses cookies and similar tracking technologies on its platform to provide a functional, personalised, and secure user experience. The following categories of cookies are in use:

• Strictly necessary cookies: Essential to the core operation of the w222 platform — for example, session management, authentication tokens, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as language selection, display settings, and previously entered information, to provide a more personalised experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the w222 platform — including page views, session duration, and navigation paths — to help us improve the platform experience for Pakistani players.
• Security cookies: Used to support fraud detection and account protection mechanisms, including the identification of unusual login patterns or suspicious session behaviour.

w222 does not use third-party advertising cookies or behavioural targeting technologies that profile your activity across external websites.

9 Security Measures

w222 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and w222 servers.
• AES-256 encryption for all personal and financial data stored at rest.
• Multi-factor authentication (MFA) requirements for administrative access to systems holding personal data.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms.
• Role-based access controls ensuring that w222 staff can access personal data only to the extent required for their specific job function.
• Formal data breach response procedures, including regulatory notification obligations where applicable.
• Ongoing staff training on data protection obligations and security best practices.

In the event of a data security incident that is likely to result in a risk to your rights and freedoms, w222 will notify affected players without undue delay, in accordance with our obligations under applicable data protection frameworks.

10 Your Rights

As a w222 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the w222 support team using the details in Section 14.

• Right of Access: You have the right to request a copy of the personal data that w222 holds about you, along with information about how it is being used. We will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. You may update most of your contact details directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations — particularly AML and gaming licence record-keeping requirements — that may require us to retain certain data.
• Right to Restriction: You may request that w222 restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on your consent or a contract with us.
• Right to Object: You have the right to object to processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11 Children's Privacy

The w222 platform is strictly intended for adults aged 21 years and older. w222 does not knowingly collect personal data from individuals under the age of 21. All new registrations are subject to mandatory age verification as part of the KYC process.

If w222 discovers that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any balance held in such an account will be handled in accordance with applicable regulatory guidance from our licensing authority.

w222 strongly supports parental controls and filtering tools that can restrict access to online gaming platforms. If you need guidance on available parental control solutions, please reach out to our support team.

12 International Data Transfers

w222 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to, stored, or processed in countries outside Pakistan where our service providers, technology partners, and data hosting infrastructure are located.

Where such international transfers occur, w222 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries that provide a recognised adequate level of data protection equivalent to applicable international standards.
• Contractual data protection clauses incorporated into agreements with all third-party recipients of personal data in jurisdictions without recognised adequacy decisions.
• Technical and organisational measures that apply consistently to personal data regardless of where it is processed or stored.

You may request details of the specific safeguards in place for any international transfer of your personal data by contacting the w222 support team.

13 Changes to This Privacy Policy

w222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable laws, or regulatory requirements. The date of the most recent revision is displayed at the top of this Policy.

Where changes are material — meaning they significantly affect your rights or how your data is used — w222 will provide advance notice of not less than 7 days via email to your registered address and/or a prominent notice on the w222 platform before the changes take effect.

Your continued use of the w222 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting our support team.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how w222 handles your personal data, please contact us using the following details:

• Support Email: support@w222.im (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the w222 platform

w222 will acknowledge all privacy-related enquiries within 5 business days and aim to provide a full response within 30 days. Our support team operates in English and Urdu and is available to assist players from Karachi, Lahore, Islamabad, Faisalabad, and all across Pakistan.