w222 Privacy Policy

Introduction & Scope

w222 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all individuals who interact with our services. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by w222.

This Privacy Policy applies to:

• All registered w222 account holders, wherever located;
• All visitors to the w222 website at w222.lat, whether or not they hold a registered account;
• All individuals who contact w222 support, submit a complaint, or otherwise communicate with w222 in any capacity;
• All individuals whose data is provided to w222 as part of a third-party payment transaction or referral.

This Policy does not apply to third-party websites, payment processors, game providers, or other external services that may be linked to or integrated with the w222 platform. Those entities maintain their own privacy policies, and we encourage you to review them where relevant.

w222 operates within a regulated online gaming environment and is subject to specific data protection obligations imposed by our international gaming licence, including requirements relating to the retention of player identity and transaction records for anti-money-laundering compliance purposes. Some of these obligations may override your general data rights in specific circumstances, as detailed in Section 11 of this Policy.

Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the w222 operating company — the entity that holds the international gaming licence under which the w222 platform operates and which determines the purposes and means of processing your personal data.

All data protection enquiries, subject access requests, and complaints should be directed to the w222 Data Protection team using the contact details set out in Section 15 of this Policy. w222 has appointed a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection law.

Data We Collect

w222 collects personal data through a variety of means — directly from you when you register, make a deposit, or contact support, and automatically through your use of the platform. The categories of personal data we collect are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used for mandatory age verification — w222 is strictly 21+);
• National identity number or passport number, as applicable;
• Residential address, including city and postal code;
• Nationality and country of residence.

3.2 Contact Data

• Email address (used for account communications, security alerts, and — where consented — marketing);
• Mobile phone number (used for two-factor authentication OTP delivery, account recovery, and transactional SMS);
• Preferred language of communication.

3.3 Financial & Payment Data

• JazzCash and EasyPaisa mobile wallet numbers linked to your w222 account;
• Bank account details where bank transfer withdrawals are requested;
• Debit or credit card details (card number, expiry date, and cardholder name) where card payments are used — stored in tokenised form only, never in plain text;
• All deposit and withdrawal transaction records, including amounts in PKR, timestamps, and transaction reference numbers;
• Source of funds documentation provided for KYC compliance purposes.

3.4 KYC & Verification Documents

• Scanned or photographed copies of government-issued photo identification (CNIC, passport, or other accepted documents);
• Proof of address documents (utility bills, bank statements, or other accepted documents dated within three months);
• Source of wealth or source of funds documentation where required for enhanced due diligence;
• Selfie or liveness check images captured during automated identity verification.

3.5 Gaming Activity Data

• Complete record of all bets placed, games played, amounts wagered, and outcomes — across all w222 products including cricket betting, live casino, slot games, bingo adventure, and royal fishing;
• Session start and end times, duration of play, and device used per session;
• Bonus and promotion usage, including wagering progress against applicable requirements;
• VIP tier and loyalty points history.

3.6 Technical & Device Data

• IP address at time of registration and at each subsequent login;
• Device type, operating system, and browser version;
• Geolocation data (country and city level) derived from IP address;
• Session cookies and analytics identifiers as detailed in Section 10 of this Policy;
• Platform performance and error logs.

3.7 Communications Data

• Records of all live chat sessions with the w222 support team;
• Records of all email correspondence between you and w222;
• Records of any complaint, dispute, or responsible gaming intervention.

Legal Basis for Processing

w222 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which we rely are as follows:

How We Use Your Personal Data

w222 uses the personal data it collects for the following specific purposes:

5.1 Account Operation

To create, maintain, and administer your w222 account — including verifying your identity and age (21+), managing your balance, processing your PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and other accepted methods, and processing your withdrawal requests to your registered payment accounts.

5.2 Regulatory Compliance

To fulfil our obligations under our international gaming licence, including Know Your Customer (KYC) procedures, anti-money-laundering (AML) screening, politically exposed person (PEP) and sanctions list checks, and the filing of any reports required by our licensing authority or by applicable law. These obligations are non-negotiable — where our licensing conditions require us to retain or process certain data, we are obliged to do so regardless of your preference.

5.3 Fraud Prevention & Security

To detect, investigate, and prevent fraud, money laundering, account takeover, identity theft, bonus abuse, and other prohibited conduct on the w222 platform. This includes monitoring login patterns, device fingerprinting, and transaction behaviour analysis. These activities are conducted on the basis of w222's legitimate interest in maintaining a secure platform for all players.

5.4 Personalisation

To personalise your w222 gaming experience — including surfacing game recommendations based on your play history, tailoring promotional offers to your betting and gaming preferences, and delivering relevant content within your account dashboard. Personalisation is based on automated profiling of your gaming activity data, as further described in Section 11.6.

5.5 Responsible Gaming

To monitor your gaming behaviour for indicators of problem gambling — including rapid escalation of stakes, prolonged unbroken sessions, or patterns consistent with gambling addiction — and to fulfil our obligations under our gaming licence's player protection provisions. Where such indicators are detected, w222 may contact you with responsible gaming information, apply cooling-off measures, or initiate a welfare check in accordance with our Responsible Gaming Policy.

5.6 Communication

To communicate with you regarding your account — including security alerts, transaction confirmations, KYC requests, support responses, and important changes to the w222 platform, Terms, or this Privacy Policy. These communications are transactional and are sent regardless of your marketing consent status, as they are necessary for the operation of your account.

5.7 Marketing (Consent Required)

Where you have explicitly consented to receive marketing communications, to send you information about w222 promotions, bonuses, new game releases, PSL and cricket betting markets, and other offers relevant to Pakistani players. You may withdraw your marketing consent at any time as described in Section 13 of this Policy.

Sharing Your Personal Data

w222 does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

6.1 Payment Service Providers

w222 shares necessary payment data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast/1LINK, and Visa/Mastercard payment processing networks in order to process your deposits and withdrawals. The data shared is limited to what is required to authenticate and complete the transaction. Each payment provider is subject to its own data protection obligations.

6.2 Identity Verification Providers

To fulfil our KYC obligations, w222 shares your identity and document data with third-party identity verification service providers who perform automated and manual identity checks, document authentication, and liveness verification. These providers are contractually bound to process your data only as directed by w222 and for no other purpose.

6.3 Game Software Providers

The games available on the w222 platform are supplied by third-party software providers who may process limited player data (such as a pseudonymous player ID and session data) in order to operate the game correctly. These providers do not receive your name, contact details, or financial data as part of normal game operation.

6.4 Fraud Prevention & AML Services

w222 uses third-party fraud prevention, AML screening, and sanctions checking services that may process your personal data to perform risk assessments. Where a player is found to be listed on a sanctions list or flagged by an AML service, w222 is obliged to take action in accordance with our licensing conditions, which may include reporting to relevant authorities.

6.5 Regulatory Authorities

w222 may be required to disclose personal data to our licensing authority, to law enforcement agencies, or to financial intelligence units where required by law, by our licensing conditions, or by a valid court order or official request. In such cases, w222 will disclose only the minimum data necessary to comply with the relevant obligation.

6.6 Professional Advisers

w222 may share personal data with our legal advisers, auditors, and accountants where necessary for the provision of professional services. All such advisers are subject to confidentiality obligations.

International Data Transfers

As an internationally licensed online gaming platform, w222 may transfer your personal data to countries outside your country of residence in order to operate its services. This includes transfers to our licensing jurisdiction, to data centres hosting our platform infrastructure, and to the jurisdictions in which our service providers operate.

Where personal data is transferred internationally, w222 ensures that appropriate safeguards are in place to protect the data in accordance with applicable data protection standards. These safeguards include contractual data protection clauses binding the recipient to standards equivalent to those imposed by applicable law, transfers to countries recognised as providing an adequate level of data protection, and binding corporate rules where applicable.

If you have questions about the specific safeguards applied to international transfers of your personal data, please contact the w222 Data Protection team using the details in Section 15.

Data Security

w222 implements and maintains technical and organisational security measures appropriate to the risk presented by the processing of personal data on our platform. These measures include:

• Encryption in transit: All data exchanged between your device and w222's servers is encrypted using 256-bit SSL/TLS encryption. This includes login credentials, payment data, and all account management communications;
• Encryption at rest: Personal data and financial records stored in w222's databases are encrypted at rest using industry-standard encryption algorithms;
• Access controls: Access to systems containing personal data is restricted to authorised w222 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all staff;
• Security audits: w222 conducts regular security audits, penetration testing, and vulnerability assessments of our platform infrastructure, conducted by independent third-party security professionals;
• Incident response: w222 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, w222 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law;
• Staff training: All w222 personnel with access to personal data receive mandatory data protection and information security training upon joining and on an annual basis thereafter.

Notwithstanding these measures, no internet transmission or digital storage system can be guaranteed to be 100% secure. You are encouraged to protect your own account security by using a strong, unique password for your w222 account and enabling two-factor authentication.

Data Retention Periods

w222 retains your personal data for the periods specified below. These periods are determined by the purpose for which the data was collected, our legal and regulatory obligations, and legitimate business requirements:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with w222's data deletion procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

Cookies & Tracking Technologies

w222 uses cookies and similar tracking technologies on its website and platform to operate and improve its services. Cookies are small text files placed on your device by the website. The categories of cookies we use are as follows:

10.1 Essential Cookies

These cookies are strictly necessary for the w222 platform to function. They maintain your login session, store your security tokens, and enable core platform features. Essential cookies cannot be disabled — disabling them would prevent you from logging in or using the w222 platform. No consent is required for essential cookies as they are necessary for the contract between you and w222.

10.2 Analytics Cookies

w222 uses analytics cookies to understand how players use the platform — which games are most popular, how navigation flows work, where players encounter difficulty, and how different page designs perform. This data is used in aggregate and pseudonymous form to improve the w222 platform for all Pakistani players. Analytics cookies require your consent.

10.3 Functional Cookies

Functional cookies remember your preferences — such as your chosen language setting, preferred display options, and your most recently played games. They make the w222 platform more convenient to use. Functional cookies require your consent but do not affect core platform functionality if declined.

10.4 Marketing Cookies

Where you have consented to marketing communications, w222 may use marketing cookies to understand which promotions you have viewed or interacted with, and to avoid showing you the same promotional content repeatedly. Marketing cookies are always subject to your explicit opt-in consent and may be withdrawn at any time via your account settings.

You may manage your cookie preferences at any time through your w222 account settings or via your browser's built-in cookie management tools. Note that disabling non-essential cookies does not affect the personal data w222 holds about you under its contractual or legal obligations.

Your Data Rights

Subject to applicable law and the limitations described in this section, you have the following rights in respect of your personal data held by w222. To exercise any of these rights, please contact the w222 Data Protection team as described in Section 15.

• R1
  Right of Access: You have the right to request a copy of all personal data w222 holds about you, together with information about how it is being used. w222 will respond to a valid access request within 30 days of receipt.
• R2
  Right to Rectification: If any personal data w222 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain data directly in your account settings. For documents and KYC data, please contact our support team.
• R3
  Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that w222 delete your personal data. Note that this right is significantly limited by our regulatory obligations — w222 is required to retain identity, transaction, and KYC data for the periods specified in Section 9 regardless of any erasure request. We will advise you of any applicable limitations when processing your request.
• R4
  Right to Restriction of Processing: You may request that w222 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while you are exercising your right to object. Restricted data will continue to be stored but will not be used for any other purpose.
• R5
  Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that w222 transmit it directly to another data controller where technically feasible.
• R6
  Right to Object: You have the right to object to w222's processing of your personal data where it is based on legitimate interests. w222 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• R7
  Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect processing conducted on other legal bases such as contract performance or legal obligation.
• R8
  Right Regarding Automated Decision-Making: w222 uses automated profiling to personalise your platform experience and to assess responsible gaming risk. You have the right not to be subject to decisions based solely on automated processing that produce significant legal or similarly significant effects. Where such automated decisions are made, you have the right to request human review. Please contact our Data Protection team if you believe an automated decision has significantly affected you.

Minors & Age Verification

The w222 platform is strictly prohibited to individuals under the age of 21. w222 does not knowingly collect or process the personal data of individuals under 21 years of age. As part of our registration and KYC process, all players are required to verify their date of birth and provide government-issued identity documentation confirming their age.

If w222 discovers or has reason to believe that an account has been registered by or for an individual under the age of 21, the account will be immediately and permanently suspended. All personal data associated with the underage account will be retained only for the period necessary to process any related regulatory reporting obligations and will then be securely deleted.

If you believe that a person under the age of 21 has registered a w222 account, please contact our support team immediately via live chat or email at the address in Section 15. w222 takes underage gambling seriously and will act on any credible report with immediate effect.

Marketing Communications

w222 will send you marketing communications — including promotional offers, bonus announcements, new game alerts, PSL and cricket betting market updates, and other w222 news — only where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to marketing communications at any time by:

• Navigating to Account Settings → Notifications & Marketing in your logged-in w222 account and updating your preferences;
• Clicking the "unsubscribe" link included in the footer of any w222 marketing email;
• Contacting the w222 support team via live chat or email with a request to opt out of marketing communications.

Withdrawal of marketing consent will be processed within 5 business days. Please note that transactional communications — such as account security alerts, transaction confirmations, KYC requests, and important platform notices — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

Amendments to This Policy

w222 reserves the right to update this Privacy Policy at any time. Material changes to this Policy — including changes to the categories of data collected, the purposes for which data is used, or the rights available to you — will be communicated to all registered players via email to their registered address and/or via a prominent in-platform notification displayed upon login.

Where required by applicable law, material changes will require your affirmative consent before they take effect with respect to data already held by w222. Changes that apply to new data collected after the effective date of the updated Policy do not require separate consent where the updated Policy has been made available to you prior to the collection of that data.

The current version of this Privacy Policy is always available at w222.lat/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically.

Contact & Complaints

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by w222, you may contact us as follows:

• Data Protection Team Email: [email protected] — please include "Privacy / Data Rights" in the subject line;
• Live Chat Support: Available 24/7 within the w222 platform at w222.lat — available to all logged-in registered players;
• Response Times: Data rights requests — substantive response within 30 days; General privacy queries — response within 5 business days.

15.1 Complaints

If you are dissatisfied with w222's handling of your personal data or the response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. w222 encourages you to contact us directly in the first instance, as we will make every effort to resolve your concern promptly and to your satisfaction.