bd222 Privacy
Policy

This Privacy Policy ("Policy") is issued by bd222 and applies to all personal data processed in connection with your use of the bd222 platform, including the website at bd222.cam, any associated mobile-optimised pages, and all services offered thereunder including sports betting, live casino, slot games, and wallet management.

By registering an account with bd222, completing the bd222 Login process, making a deposit, placing a bet, or otherwise using any part of the bd222 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the bd222 Terms & Conditions, which govern the overall legal relationship between bd222 and the player. Terms not otherwise defined in this Policy carry the same meaning as set out in the Terms & Conditions.

2.1 Identity. For the purposes of applicable data protection law, bd222 is the data controller in respect of personal data collected from players through bd222.cam and all associated services. The data controller is responsible for determining the purposes and means by which personal data is processed.

2.2 Contact for Data Matters. All data protection queries, subject access requests, rectification requests, and erasure requests should be directed in writing to bd222's support team. Contact details are set out in Section 16 of this Policy.

2.3 Licensing Context. bd222 operates under international gaming license conditions. The data controller's obligations in relation to personal data are shaped both by general data protection principles and by the specific requirements of the gaming regulatory framework under which bd222 holds its license. Certain data processing activities — particularly KYC verification, AML monitoring, and responsible gaming compliance — are mandatory under that framework and cannot be opted out of by the player.

bd222 collects and processes the following categories of personal data. This table is indicative of the main data types collected; it does not constitute an exhaustive inventory of every data point processed in the ordinary course of platform operation.

bd222 collects personal data through the following mechanisms:

• Direct Submission: Data you provide when creating your bd222 account, completing the bd222 Login process, submitting KYC documents, making deposits or withdrawal requests, contacting support, or completing responsible gaming forms.
• Automated Collection: Technical data collected automatically when you access bd222.cam, including IP address, device identifiers, browser fingerprint, session cookies, and navigation event logs generated by standard web analytics infrastructure.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, Raast, SadaPay, HBL, UBL, Meezan Bank, and USDT TRC20 blockchain networks when you make deposits or withdrawals.
• Identity Verification Services: Results of identity and age verification checks conducted by bd222's KYC service providers using the documents and information you submit during the verification process.
• Gaming Systems: Bet placement records, game round outcomes, wallet transaction logs, and session data generated automatically by bd222's sports betting and casino gaming infrastructure as you use the platform.
• Third-Party Fraud and Risk Tools: Risk scores and behavioural signals produced by fraud detection systems that analyse transactional patterns for indicators of AML risk, bonus abuse, or match manipulation.

bd222 uses the personal data it collects for the following purposes:

5.1 Service Delivery. To create and manage your Account; to process deposits and withdrawals in PKR; to execute bet placements and game rounds; to maintain your Wallet balance; to provide access to cricket betting markets, bd222 Casino, and slot games; and to deliver customer support.

5.2 Identity and Age Verification. To verify that you are who you claim to be and that you are 21 years of age or older, as required by bd222's licensing framework and responsible gaming obligations. bd222 will not process withdrawal requests from accounts that have not completed satisfactory KYC verification.

5.3 Legal and Regulatory Compliance. To fulfil obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations; to maintain records required by bd222's gaming license; to respond to lawful requests from regulatory or law enforcement authorities; and to enforce the bd222 Terms & Conditions.

5.4 Security and Fraud Prevention. To detect, investigate, and prevent fraudulent activity, account compromise, bonus abuse, multi-accounting, and other prohibited conduct on the bd222 platform. Security monitoring involves automated processing of login patterns, transaction sequences, and device data.

5.5 Responsible Gaming Compliance. To monitor gaming activity for indicators of problem gambling; to apply deposit limits, session timers, and self-exclusion restrictions set by the player; to respond to responsible gaming requests; and to comply with obligations to prevent minors from accessing gaming services.

5.6 Platform Improvement. To analyse aggregate usage patterns, performance metrics, and player feedback to improve the reliability, speed, and features of the bd222 platform. This processing is conducted on anonymised or pseudonymised data wherever technically feasible.

5.7 Promotional Communications. To send you information about bd222 promotions, bonuses, and platform updates, subject to your communication preferences. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect the delivery of transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).

bd222 processes personal data on the following legal grounds, which vary depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between bd222 and the player — including account management, bet execution, payment processing, and wallet maintenance. Without this processing, bd222 cannot deliver the Services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, KYC regulatory mandates, and data retention requirements imposed by the gaming licensing framework.
• Legitimate Interests: Processing for purposes including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where those interests are not overridden by the fundamental rights and freedoms of the player.
• Consent: Processing for promotional communications and any other purpose where bd222 has specifically requested and obtained your consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.1 Service Providers. bd222 shares personal data with trusted third-party service providers who process data on bd222's behalf, strictly for the purposes of delivering the bd222 platform and its associated services. These providers include:

• Payment processors (JazzCash, EasyPaisa, Raast, SadaPay, HBL, UBL, Meezan Bank, and USDT network operators);
• KYC and identity verification service providers;
• Game content providers (slot developers, live casino studio operators);
• Cloud hosting and infrastructure providers;
• Fraud detection and AML monitoring tool providers;
• Customer support platform operators.

All third-party processors are subject to data processing agreements that require them to protect player data, process it only for the specified purpose, and adhere to security standards consistent with those applied by bd222.

7.2 Regulatory and Legal Disclosure. bd222 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required or permitted by law, or where disclosure is necessary to prevent serious harm. bd222 will notify affected players of such disclosures where legally permissible to do so.

7.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of bd222's business, personal data held by bd222 may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and the applicable privacy arrangements before it takes effect.

8.1 What Cookies Are. Cookies are small text files placed on your device by the bd222 platform when you access bd222.cam. They enable bd222 to recognise your device on return visits, maintain your session, and analyse how the platform is used. Similar technologies including pixel tags, local storage objects, and session identifiers serve equivalent functions.

8.2 Types of Cookies Used by bd222.

• Strictly Necessary Cookies: Required for the bd222 platform to function. These include session authentication cookies that keep you logged in during your bd222 Login session, and security tokens that prevent cross-site request forgery attacks. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Enable bd222 to remember your preferences such as language settings, preferred sport view, and display preferences. Disabling these cookies may affect your experience but will not prevent you from using the platform.
• Analytics Cookies: Used to collect aggregated information about how players navigate bd222.cam — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data informs platform improvements and is not used to identify individual players.
• Responsible Gaming Cookies: Store session timer data and display frequency controls for responsible gaming reminders set by the player. These serve a player-protective function and are retained for the duration of the platform session.

8.3 No Third-Party Advertising Trackers. bd222 does not embed third-party advertising or retargeting trackers on bd222.cam. No advertiser, social media platform, or ad network receives tracking data from bd222 about your gaming activity, betting history, or wallet usage.

9.1 General Retention Principle. bd222 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, licensing obligations, or regulatory direction. Where the purpose of data collection has been fulfilled and no legal retention obligation applies, data is deleted or irreversibly anonymised.

9.2 Active Account Data. Personal data associated with an active bd222 account is retained for the lifetime of the account plus a minimum of five (5) years following account closure, to meet financial record-keeping, AML, and regulatory reporting requirements standard under international gaming license conditions.

9.3 KYC and Identity Documents. Identity verification documents (CNIC copies, passport scans, proof of address) are retained for a minimum of five (5) years from the date of submission, or for the period mandated by the applicable AML regulatory framework, whichever is longer.

9.4 Transaction Records. Financial transaction records including deposit confirmations, withdrawal approvals, and wallet movement logs are retained for a minimum of seven (7) years to comply with financial record-keeping requirements applicable to gaming platform operators.

9.5 Support Communications. Customer support correspondence and formal complaint records are retained for three (3) years from the date of the last communication, or for the duration of any unresolved dispute, whichever is later.

bd222 implements a layered security architecture designed to protect player personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The security measures in place include, but are not limited to:

• Encryption in Transit: All data transmitted between the player's device and bd222's servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys. HTTPS is enforced across all bd222.cam pages without exception.
• Encryption at Rest: Personal data and financial records stored on bd222 infrastructure are encrypted at rest using AES-256 encryption. Encryption keys are managed under a secure key management policy with regular rotation.
• Access Controls: Access to personal data within bd222's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: 2FA is available to all bd222 account holders and is mandatory for High Roller tier members. Internal administrative access to player data systems requires multi-factor authentication.
• Penetration Testing: bd222's platform undergoes regular penetration testing and vulnerability assessments by qualified third-party security specialists.
• Incident Response: bd222 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to player rights, affected players will be notified within a reasonable timeframe consistent with applicable regulatory requirements.

Subject to applicable law and, in certain cases, to overriding legitimate interests of bd222 (such as legal retention obligations and fraud prevention), you have the following rights in respect of your personal data:

• Right of Access: You may request confirmation of whether bd222 holds personal data about you and, if so, a copy of that data and information about how it is processed.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data bd222 holds about you. Identity changes (e.g., legal name change) require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal retention obligations as described in Section 9.
• Right to Restriction: You may request that bd222 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of the personal data you provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests grounds, including direct marketing. Where you object to marketing, bd222 will stop processing your data for that purpose immediately.
• Rights Related to Automated Decision-Making: Where a decision affecting you is made solely by automated means, you have the right to request human review as described in Section 5.7.

To exercise any of the above rights, submit a written request to [email protected], including your registered mobile number and a description of the right you wish to exercise. bd222 will acknowledge all rights requests within three (3) business days and provide a substantive response within thirty (30) days.

If you believe that a person under 21 has registered with or is using bd222, please report this to [email protected] immediately. bd222 takes all such reports seriously and will investigate promptly. Protecting minors from access to online gaming is a core responsibility of bd222 as a licensed operator.

13.1 Cross-Border Processing. As an online platform serving Pakistani players through internationally operated infrastructure, bd222 processes some player data on servers and through service providers located outside of Pakistan. This includes game servers, KYC verification infrastructure, and cloud hosting facilities.

13.2 Transfer Safeguards. Where personal data is transferred to a country that does not provide a level of data protection equivalent to that afforded under bd222's licensing framework, bd222 implements appropriate safeguards including data processing agreements containing standard contractual clauses, encryption requirements, and access control obligations binding on the recipient.

13.3 Payment Data. Transaction data processed through JazzCash, EasyPaisa, and Raast is handled within Pakistani financial infrastructure. Bank transfer data is processed in accordance with the standard practices of HBL, UBL, and Meezan Bank under Pakistani banking regulations. USDT TRC20 transactions are processed on a public blockchain network, and the immutable nature of blockchain records means that transaction data recorded on-chain cannot be deleted.

bd222.cam may contain references to third-party services such as payment gateways, game providers, or responsible gaming resources. This Privacy Policy applies only to the bd222 platform and its directly operated services. bd222 is not responsible for the privacy practices or content of any third-party website, platform, or service that is accessed independently of bd222.cam.

Players who navigate to third-party services — including payment processor portals, mobile wallet applications such as JazzCash or EasyPaisa, or banking apps — do so under the terms and privacy policies of those third parties. bd222 recommends that you review the privacy policy of any third-party service before submitting personal data to it.

15.1 Right to Amend. bd222 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, modifications to bd222's data processing activities, new product features, or changes to the licensing framework under which bd222 operates.

15.2 Notification of Material Changes. Where a proposed amendment materially affects the rights of players or significantly changes how personal data is processed, bd222 will provide at least seven (7) days' prior notice via an account notification or communication to the player's registered mobile number, before the amended Policy takes effect.

15.3 Continued Use as Acceptance. Continued use of any part of the bd222 platform — including the bd222 Login page, wallet, betting features, or casino — after the effective date of an amended Policy constitutes acceptance of the revised Privacy Policy. If you disagree with the changes, you must cease using bd222 and request account closure before the amendment becomes effective.

15.4 Version Record. The date on which this Policy was last reviewed and the date it became effective are stated at the top of this document. Previous versions of this Policy are available upon written request to [email protected].

For any questions, concerns, or formal requests relating to this Privacy Policy or bd222's data protection practices, please contact us using the details below. All privacy-related correspondence must be submitted in writing to allow bd222 to maintain an accurate record of requests and responses.

This Privacy Policy was last reviewed on 1 January 2026 and supersedes all previous versions of the bd222 Privacy Policy. The applicable version of this Policy at any given time is the version published at bd222.cam/privacy-policy.