dd22 Privacy Policy

dd22 ("dd22", "we", "us", "our") operates the online casino and sports betting platform accessible at dd22.vu (the "Platform"). dd22 is an internationally licensed online gaming operator that provides casino games, live dealer tables, slot games, and sports betting markets — including PSL cricket betting — to registered players in Pakistan and other permitted jurisdictions.

dd22 recognises that the personal information you share with us is private and important to you. This Privacy Policy describes in detail how dd22 handles your personal data: what categories of data we collect, the purposes for which it is processed, the legal basis on which processing occurs, the parties with whom data may be shared, and the rights available to you as a data subject.

This Privacy Policy applies to all personal data collected through the dd22 Platform, our customer support channels, and any communications dd22 sends to registered players. By creating a dd22 account or using any dd22 service, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside dd22's Terms & Conditions, which govern your use of the Platform.

For the purposes of applicable data protection legislation, dd22 is the data controller in respect of the personal data of registered players and visitors to the dd22 Platform. As data controller, dd22 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is lawful, fair, and transparent.

dd22 operates under an international gaming license issued by a recognised gaming regulatory authority. The processing of player data by dd22 is subject to the data protection requirements embedded within that regulatory framework, which set minimum standards for data security, retention, access controls, and cross-border transfers.

If you have any questions about how dd22 processes your personal data, or if you wish to exercise any of your data subject rights as described in Section 10, you may contact dd22's data protection team via live chat on the Platform or by email at [email protected].

dd22 collects the following categories of personal data from registered players and Platform visitors:

dd22 does not collect special category data (such as health data, biometric data, or political opinions) unless specifically required by its KYC obligations and disclosed to you at the point of collection.

dd22 collects personal data through the following means:

Direct Collection

Data you provide directly to dd22 during the registration process, KYC verification, payment processing, account settings updates, and communications with dd22 customer support. This includes the registration form, KYC document upload portal, cashier screens, and live chat system.

Automated Collection

Data collected automatically when you access the dd22 Platform, including your IP address, device identifiers, browser information, session timestamps, and gameplay data. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 9.

Third-Party Sources

dd22 may receive data about you from third-party sources where necessary for compliance purposes, including:

• Identity verification service providers who assist with CNIC validation;
• Payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) in connection with the processing of your transactions;
• Fraud detection and AML screening services that provide risk signals associated with your identity or transaction patterns.

dd22 processes your personal data only where a lawful basis exists. The following table summarises the primary processing purposes and the corresponding legal basis for each:

dd22 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes. dd22 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• KYC and Identity Verification Providers: Third-party services that assist dd22 in verifying the authenticity of CNIC documents and confirming the identity of registered players;
• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT payment processors, solely to facilitate the processing of your deposits and withdrawals;
• Fraud Detection and AML Services: Providers that assist dd22 in identifying and preventing fraudulent activity, money laundering, and other financial crimes;
• Regulatory and Licensing Authorities: dd22's international gaming license authority and any other regulatory body with jurisdiction over dd22's operations, where disclosure is required by law or license condition;
• Game Software Providers: Casino game studios and sports data providers whose software and content is integrated into the dd22 Platform may receive limited technical data necessary to deliver their products, subject to data processing agreements with dd22;
• Professional Advisers: Legal advisers, auditors, and compliance consultants engaged by dd22, each subject to professional confidentiality obligations;
• Law Enforcement: Where dd22 is required by applicable law, court order, or regulatory direction to disclose personal data to law enforcement or other public authorities.

All third parties who receive personal data from dd22 are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than that for which it was disclosed.

dd22 is an internationally licensed operator, and your personal data may be transferred to and processed in countries outside Pakistan. This may include the jurisdiction in which dd22 holds its gaming license, the locations of dd22's data hosting infrastructure, and the operating locations of its third-party service providers.

Where personal data is transferred internationally, dd22 takes appropriate safeguards to ensure that such transfers comply with applicable data protection requirements. These safeguards may include:

• Contractual clauses requiring the recipient to handle data to a standard equivalent to that applicable to dd22 under its license obligations;
• Data processing agreements imposing security, confidentiality, and purpose limitation obligations on recipients;
• Technical security measures including encryption in transit and at rest.

By registering a dd22 account and using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section.

dd22 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by dd22's regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with your active dd22 account is retained for as long as your account remains open and for a period thereafter as required by dd22's licensing and AML obligations;
• KYC Documents: Identity verification documents, including CNIC copies, are retained for a minimum of five years from the date of your last transaction on dd22, in accordance with standard AML record-keeping requirements applicable to licensed gaming operators;
• Transaction Records: Records of deposits, withdrawals, and betting activity are retained for a minimum of five years as required by financial record-keeping obligations;
• Communications Data: Live chat transcripts and email correspondence are retained for a minimum of two years for dispute resolution and compliance purposes;
• Closed Account Data: Upon account closure, dd22 anonymises or deletes personal data that is no longer required for legal or regulatory purposes, subject to the minimum retention periods described above.

Where data is retained solely to meet legal or regulatory retention obligations, it is stored securely with access restricted to personnel with a specific need to access it.

dd22 uses cookies and similar tracking technologies on the Platform to support core functionality, improve performance, and analyse usage patterns. The following categories of cookies are used by dd22:

Strictly Necessary Cookies

These cookies are essential for the operation of the dd22 Platform. They include session management cookies that keep you logged in, security tokens that protect against cross-site request forgery, and load balancing cookies. These cookies cannot be disabled without affecting your ability to use core Platform features.

Functional Cookies

These cookies remember your preferences on dd22, such as your preferred language, last visited game category, and cashier settings. They are used to personalise your experience on the Platform and are not used for advertising purposes.

Analytics Cookies

dd22 uses analytics tools to understand how players use the Platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is used in aggregate form to improve Platform performance and user experience. Analytics data is not linked to your personal identity.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through the browser's privacy or security settings. Please be aware that disabling certain cookies may affect the functionality of the dd22 Platform. Strictly necessary cookies cannot be disabled through browser settings as they are required for the Platform to operate.

Subject to applicable data protection law and dd22's regulatory obligations, you have the following rights in respect of the personal data that dd22 holds about you:

• Right of Access: You have the right to request a copy of the personal data dd22 holds about you, along with information about how it is processed. dd22 will respond to access requests within 30 days;
• Right to Rectification: You have the right to request that dd22 correct any inaccurate or incomplete personal data held about you. You may update basic contact details directly through your dd22 account settings;
• Right to Erasure: You may request that dd22 delete your personal data. This right is subject to dd22's legal and regulatory data retention obligations — where dd22 is required by its gaming license to retain data, erasure requests will be applied only to data that is not subject to a mandatory retention period;
• Right to Restrict Processing: You have the right to request that dd22 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed;
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, machine-readable format;
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling used to personalise your dd22 experience. You may also withdraw consent for marketing communications at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact dd22 support via live chat or by email at [email protected]. dd22 will verify your identity before processing any data subject request to protect against unauthorised access to your personal data.

dd22 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the dd22 Platform is encrypted using industry-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data, including KYC documents and payment information, is encrypted when stored on dd22's servers;
• Access Controls: Access to personal data within dd22's systems is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive data protection training;
• Two-Factor Authentication: dd22 supports two-factor authentication (2FA) for player accounts to protect against unauthorised logins;
• Intrusion Detection: dd22 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents;
• Incident Response: dd22 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, dd22 will notify affected players and relevant authorities in accordance with applicable notification obligations.

While dd22 takes all reasonable measures to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own dd22 account credentials and for notifying dd22 immediately if you suspect any unauthorised access.

dd22 implements CNIC-based age verification as part of its KYC process to prevent underage gambling. The collection and processing of a player's date of birth at registration, and of CNIC documentation prior to withdrawal, serves the dual purpose of complying with dd22's international gaming license age verification requirements and protecting minors from accessing gambling services.

If you are a parent or guardian and believe that a minor in your care has registered a dd22 account using false information, please contact dd22 support immediately via live chat or at [email protected]. dd22 will investigate and take appropriate action, including account closure and deletion of data, as promptly as possible.

With your consent, dd22 may send you promotional communications about dd22 bonuses, new games, PSL cricket betting promotions, and special offers available to Pakistani players. Marketing communications from dd22 may be sent via email or SMS to your registered contact details.

You may withdraw your consent to receive marketing communications from dd22 at any time by:

• Clicking the "Unsubscribe" link included in any dd22 marketing email;
• Updating your communication preferences directly in your dd22 account settings;
• Contacting dd22 customer support via live chat and requesting removal from marketing lists.

Withdrawal of consent for marketing communications will not affect your ability to continue using the dd22 Platform, and you will continue to receive transactional communications necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

dd22 does not share your contact details with third parties for their own marketing purposes.

dd22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, dd22's regulatory obligations, or dd22's data processing practices. The date of the most recent revision is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how dd22 processes your personal data or the rights available to you — dd22 will notify registered players via their registered email address before the changes take effect, providing a reasonable period for review.

For minor or administrative changes, dd22 may update this Privacy Policy without advance notice. Your continued use of the dd22 Platform following any update to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you should cease using the Platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which dd22 processes your personal data, you may contact dd22's data protection team through any of the following channels:

• Live Chat: Available on the dd22 Platform, 24 hours a day, 7 days a week (PKT UTC+5). Live chat is the fastest channel, with an average response time under five minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for data subject rights requests.

dd22 will acknowledge all privacy-related enquiries promptly and will respond to formal data subject rights requests within 30 days of receipt. Where a request is complex or voluminous, dd22 may extend this period by a further 30 days, in which case you will be notified of the extension and the reasons for it.