dd22 Privacy Policy — How We Handle Your Data

1 Introduction

dd22 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users who access or register on dd22.ws ("the Website"). This Privacy Policy sets out in clear, plain language exactly how dd22 collects, uses, stores, shares, and protects the personal information you provide to us when you create an account, make deposits, place bets, or otherwise interact with our platform.

dd22 is Pakistan's premier online casino and sports betting destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all major cities. Given the nature of our service — which involves handling financial transactions, identity verification, and real-money gaming activity — the responsible management of personal data is something we take extraordinarily seriously.

This policy applies to all personal data collected through the dd22 website, mobile-optimised platform, customer support interactions (including live chat), and any promotional communications you receive from dd22. It does not apply to third-party websites or services that may be linked to or from our platform — you should review the privacy policies of those services independently.

If you have questions about this policy or wish to exercise any of your data rights, you may contact our Data Protection team via the contact details provided in Section 14 of this document. We aim to respond to all privacy-related enquiries within 72 hours.

2 Data We Collect

dd22 collects personal data through several routes: directly from you when you register or use the platform, automatically through technical systems as you browse, and in limited cases from third-party verification services we are legally required to use. The categories of data we collect are as follows:

dd22 does not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs, or health information unless you voluntarily disclose such information in the context of a responsible gaming self-exclusion request or support conversation — in which case it is handled with strict confidentiality and used solely to provide you with appropriate support.

3 How We Use Your Data

dd22 uses the personal data we hold about you for clearly defined, legitimate purposes. We do not use your data for purposes beyond those described below without first obtaining your explicit consent or having a valid legal basis to do so.

• Account Creation & Management: To register your dd22 account, verify your identity, maintain your player profile, and ensure your account settings are correctly configured.
• Age & Identity Verification (KYC): To confirm you are at least 21 years of age and that your identity matches the details you provided at registration, as required under our licensing obligations.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT, and to resolve any payment disputes or discrepancies in your transaction history.
• Gaming Services: To make our casino games, sports betting markets, live dealer tables, and PSL cricket betting features available to your account and to record your gaming activity accurately.
• Fraud Prevention & AML Compliance: To monitor for suspicious account activity, prevent money laundering, detect bonus abuse, and comply with Anti-Money Laundering (AML) obligations under our gaming licence.
• Customer Support: To respond to your queries, resolve account issues, process complaints, and deliver an effective support experience via live chat and email.
• Responsible Gaming: To facilitate the use of responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests, and to identify accounts displaying signs of problematic gaming behaviour.
• Platform Improvement: To analyse aggregate usage data and technical performance metrics to improve the dd22 platform, fix bugs, and optimise the user experience for Pakistani players.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable gaming, financial, and data protection regulations, including responding to lawful requests from regulatory authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates — but only where you have opted in to receive such communications. You may opt out at any time.

4 Legal Basis for Processing

dd22 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered dd22 player — including account management, payment processing, and game delivery. Without this processing, we cannot provide you with the dd22 service.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC/AML obligations, age verification requirements, licensing conditions, and lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in dd22's legitimate business interests where those interests do not override your fundamental rights — including fraud prevention, platform security monitoring, technical performance analytics, and responsible gaming oversight.
• Consent: Processing carried out on the basis of your freely given, informed consent — specifically for the sending of optional marketing communications. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

dd22 does not sell, rent, or trade your personal data to third parties. We share your data only in the following strictly controlled circumstances:

• Payment Processors: Your financial data is shared with payment service providers including JazzCash, EasyPaisa, and Pakistani bank partners solely to process your deposits and withdrawals. These providers are contractually bound to process your data only for the specified payment purpose.
• KYC & Identity Verification Partners: Your identity data (including CNIC details) may be shared with regulated third-party KYC verification service providers to confirm your identity and age. These partners operate under strict data processing agreements.
• Game Software Providers: Certain technical gaming data (e.g., session identifiers, stake amounts) is shared with our licensed game software providers to deliver the games to your account. These providers do not receive your personal identity or financial information beyond what is technically necessary.
• Regulatory Authorities: dd22 may be required to disclose your personal data — including identity records and transaction history — to gaming regulators, financial intelligence units, or law enforcement agencies pursuant to a lawful request or mandatory reporting obligation.
• Fraud Prevention Services: Aggregated or pseudonymised risk data may be shared with industry fraud prevention networks to protect the platform and its players from fraudulent activity.
• Professional Advisers: In rare circumstances, your data may be disclosed to legal counsel, auditors, or compliance consultants acting on dd22's behalf, under strict confidentiality obligations.

6 Data Retention

dd22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following retention periods apply as general guidelines:

When personal data is no longer required and the applicable retention period has expired, dd22 deletes or anonymises the data in a secure manner. Data that is anonymised — meaning it can no longer be linked back to an identifiable individual — may be retained indefinitely for statistical and platform improvement purposes.

7 Cookies & Tracking Technologies

dd22 uses cookies and similar tracking technologies to provide a functional, secure, and optimised platform experience. A cookie is a small text file placed on your device when you visit dd22.ws. Cookies do not contain executable code and cannot access other files on your device.

The categories of cookies used by dd22 are as follows:

• Essential Cookies: Strictly necessary for the platform to function. These include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and load balancing cookies. Essential cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language selection, preferred betting view layout, and responsible gaming settings you have configured. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the dd22 platform — which pages are visited most, how long sessions typically last, and where technical errors occur. This data is used internally to improve the platform and is never shared with external advertising networks.
• Security Cookies: Used to detect and prevent fraudulent access attempts, unusual login patterns, and suspicious account activity. These are integral to dd22's fraud prevention infrastructure.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling cookies may limit certain platform features. Please refer to your browser's help documentation for instructions on managing cookie preferences.

8 Data Security

dd22 implements a comprehensive set of technical, physical, and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All personal and financial data stored in dd22 databases is encrypted using AES-256 at rest. All data transmitted between your device and our servers is encrypted using TLS 1.3, providing the strongest available protection against interception.
• Access Controls: Access to personal data within dd22's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access necessary to perform their job functions, and all access is logged and monitored.
• Infrastructure Security: dd22's platform infrastructure is hosted in secure, certified data centres with physical access controls, 24/7 monitoring, redundant power systems, and disaster recovery capabilities.
• Penetration Testing: dd22 conducts regular third-party security assessments and penetration testing to identify and remediate vulnerabilities in its systems before they can be exploited.
• Staff Training: All dd22 personnel who handle personal data receive regular data protection and information security training as a condition of their employment.
• Incident Response: dd22 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities in accordance with applicable legal requirements.

While dd22 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also play a role in keeping your account secure — please use a strong, unique password for your dd22 account and never share your login credentials with any third party.

9 Your Rights

As a dd22 player, you have meaningful rights over the personal data we hold about you. dd22 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. Your data rights include:

• Right of Access: You may request a copy of all personal data dd22 holds about you. We will provide this in a structured, readable format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most contact details directly from your account settings; for identity data corrections, please contact our support team.
• Right to Erasure: In certain circumstances, you may request that dd22 delete your personal data. Please note that this right is limited by our legal retention obligations — for example, we are required to retain KYC and financial transaction data for several years following account closure under AML regulations, and these records cannot be deleted on request during the mandatory retention period.
• Right to Restrict Processing: You may request that dd22 restrict the processing of your data in certain circumstances — for example, while a complaint you have raised about the accuracy of your data is being investigated.
• Right to Data Portability: You may request that dd22 provide your personal data to you in a commonly used machine-readable format, enabling you to transfer it to another service provider if you choose.
• Right to Object: You have the right to object to dd22's processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where dd22 processes your data on the basis of your consent — specifically for marketing communications — you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

10 Minors & Age Policy

dd22 operates a strict 21+ age policy. The dd22 platform is not intended for, and must not be used by, any person under the age of 21. dd22 does not knowingly collect personal data from individuals under 21 years of age.

As part of our KYC verification process, all new players are required to submit a valid Pakistani CNIC to confirm they meet the minimum age requirement before any deposit or withdrawal can be processed. Where dd22 identifies or reasonably suspects that a player is under 21, the account will be immediately suspended, all gaming activity will be voided, and any deposited funds will be returned to the original payment method after verification of the refund recipient's identity.

If you are a parent or guardian and you believe that a minor in your care has accessed or registered on the dd22 platform without your knowledge, please contact our support team immediately via live chat. We will investigate and take appropriate action, including permanent account closure and data deletion, as swiftly as possible.

11 International Data Transfers

dd22 operates as an internationally licensed online gaming platform. As a result, certain data processing activities — particularly those involving our gaming software providers, KYC verification partners, and infrastructure hosting — may involve the transfer of your personal data to servers or processors located outside of Pakistan.

When such transfers occur, dd22 takes steps to ensure that your personal data receives an equivalent level of protection to that described in this Privacy Policy. These steps include:

• Entering into contractual data processing agreements with all third-party processors that impose equivalent data protection obligations to those dd22 upholds internally.
• Assessing the data protection frameworks of recipient jurisdictions and applying supplementary safeguards where necessary.
• Limiting international data transfers to the minimum data sets required for the specific processing purpose — we do not transfer entire player profiles to third parties.

By registering a dd22 account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described above, where such transfers are necessary for the provision of the dd22 service.

12 Marketing Communications

dd22 may send you promotional communications about bonuses, new games, PSL cricket betting promotions, seasonal offers, and platform updates — but only where you have explicitly opted in to receive such communications at registration or through your account settings. We never send unsolicited marketing messages to players who have not opted in.

dd22 may use the following channels for marketing communications where you have opted in:

• Email: Sent to your registered email address. Each marketing email includes a clearly visible unsubscribe link that allows you to opt out instantly.
• SMS: Sent to your registered Pakistani mobile number. To opt out of SMS marketing, reply STOP to any dd22 marketing message or update your preferences in account settings.
• In-Platform Notifications: Displayed within your dd22 account dashboard when you are logged in. These can be managed from your notification preferences in account settings.

dd22 does not engage in cold-calling, WhatsApp mass messaging, or any other unsolicited outreach methods. All marketing activity by dd22 is consent-based. You may withdraw your marketing consent at any time without affecting your ability to use the platform — your account will remain fully active after opting out of marketing.

13 Changes to This Policy

dd22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, we will notify you through one or more of the following methods: a prominent notice displayed on the dd22.ws platform upon your next login, an email notification to your registered address, or an update to the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data. Your continued use of the dd22 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any changes made to this policy, you should stop using the platform and contact our support team to request account closure.

Minor clarifications or corrections that do not substantively affect your rights or dd22's data practices will be made without notification. Only changes that materially affect how your personal data is collected, used, or shared will trigger a formal notification.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how dd22 has handled your personal data, please contact us using the details below:

• Live Chat: Available 24/7 directly within the dd22 platform. This is the quickest way to reach our team for privacy-related questions and data rights requests.
• Email: [email protected] — use the subject line "Privacy Enquiry" for all data protection related correspondence. Include your registered username and a clear description of your request.

dd22's support team serves players from Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan around the clock. We aim to acknowledge all privacy-related enquiries within 24 hours and to resolve data rights requests within 30 calendar days of receipt.

If you are not satisfied with dd22's response to your privacy complaint, you have the right to escalate your concern to the relevant data protection authority or gaming regulator in the jurisdiction under which dd22 operates. Details of the applicable regulatory authority are available on request from our support team.