Privacy Policy

td222 ("we", "us", "our") operates the online betting and casino platform accessible at td222.cam (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, including users accessing the Platform from Pakistan and other jurisdictions.

This Privacy Policy sets out how td222 collects, uses, stores, discloses and protects personal data obtained through your use of the Platform. It also explains the rights available to you as a data subject and how to exercise those rights.

This Privacy Policy applies to all data processing activities carried out by td222 in connection with the Platform, including registration, account management, transaction processing, KYC/AML verification, marketing communications and customer support.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By using the Platform, you confirm that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, CNIC number, IP address, device identifiers and financial data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, td222.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "User" / "You" means any individual who accesses or registers on the Platform.
• "KYC" means Know Your Customer — the identity and age verification procedures applied to Platform users.
• "AML" means Anti-Money Laundering — regulatory obligations that require td222 to monitor and report certain financial activities.
• "Cookies" means small data files placed on your device by the Platform to support functionality, analytics and preferences.

td222 acts as the Data Controller for the personal data collected and processed through the Platform. As Data Controller, td222 is responsible for ensuring that personal data is processed lawfully, fairly and transparently, and in accordance with this Privacy Policy and applicable data protection laws.

Where td222 engages third-party Data Processors (such as payment technology providers, KYC verification services or cloud infrastructure providers), those processors are subject to binding data processing agreements that require them to process data only on td222's documented instructions and to implement appropriate technical and organisational security measures.

td222 does not share or sell personal data with unaffiliated third parties for independent marketing or advertising purposes. Payment provider references on this Platform — including familiar Pakistani payment rails such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as contextual information only and do not imply any data-sharing arrangement with those entities.

td222 collects personal data across several categories depending on how you interact with the Platform.

• Full legal name
• Date of birth
• Email address
• Residential address (including city and country)
• Username and encrypted password
• Phone number (where provided)
• Currency and language preferences

• Government-issued photo ID (e.g., Pakistani CNIC or passport — document number, expiry, photo)
• Proof of address documents
• Selfie or liveness-check imagery
• Source of funds documentation (where required)

• Deposit and withdrawal amounts and timestamps
• Payment method type (not full card or account numbers, which are handled by payment processors)
• Betting and wagering history
• Bonus and promotional usage records

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser information
• Session logs and login timestamps
• Cookie and tracking data (see Section 9)

• Support ticket content and email correspondence
• Live chat transcripts
• Responses to surveys or feedback requests

• Deposit limit, session limit and loss limit settings
• Self-exclusion requests and cooling-off periods
• Responsible gambling tool usage history

td222 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gambling context), genetic data or biometric data for identification purposes beyond what is strictly required for KYC liveness checks.

td222 collects personal data through the following methods:

• Direct collection: Data you provide during registration, KYC verification, deposits, withdrawals, support requests or when updating your account settings;
• Automated collection: Data collected automatically when you use the Platform, including IP address, device information and cookies;
• Third-party sources: Data received from KYC verification providers, fraud prevention services and payment processors to assist with identity verification and compliance obligations;
• Communications: Data contained in emails, live chat messages and support tickets you send to td222.

td222 processes personal data on the following legal bases:

td222 uses personal data for the following purposes:

• To create, maintain and manage your Account on the Platform;
• To process deposits, withdrawals and other financial transactions;
• To verify your identity and age as part of the KYC process;
• To fulfil our AML and fraud prevention obligations;
• To administer responsible gambling tools and respond to self-exclusion requests;
• To provide customer support and respond to your enquiries;
• To communicate service updates, security alerts and policy changes;
• To personalise your Platform experience where applicable;
• To send marketing communications where you have provided consent;
• To analyse Platform usage patterns and improve our services;
• To enforce our Terms & Conditions and prevent prohibited conduct;
• To comply with applicable legal and regulatory obligations.

td222 will not use your personal data for purposes that are incompatible with the original purpose for which it was collected without first obtaining your consent or establishing a new legitimate basis for processing.

Know Your Customer (KYC) and Anti-Money Laundering (AML) data processing is an important component of td222's compliance obligations. By registering an Account, you acknowledge and consent to the following KYC and AML data practices.

KYC data is collected and processed to confirm your identity, verify that you meet the minimum age requirement (18+, or the higher minimum required by the operator/license jurisdiction), prevent identity fraud and fulfil AML monitoring obligations.

Identity documents submitted as part of KYC verification are stored securely with restricted access. Documents are processed only through td222's official HTTPS-secured verification portal. Users should never submit KYC documents via unsecured channels such as unencrypted email or third-party messaging applications.

td222 may engage specialist third-party KYC verification providers to assist with document validation and liveness checking. These providers process data as Data Processors under binding contractual obligations and are not permitted to use your data for their own purposes.

AML regulations typically require records of customer due diligence to be retained for a period of at least five years from the end of the business relationship. td222 retains KYC records in compliance with applicable AML requirements regardless of any data erasure requests received during this mandatory retention period.

td222 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform. Below is an overview of the cookie categories we use.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the Platform from functioning correctly. td222 does not use third-party advertising cookies to track your activity across unrelated websites.

td222 may share personal data with third parties only in the following circumstances:

• Payment Processors: To facilitate deposit and withdrawal transactions. Payment processors receive only the data necessary to process the transaction and are subject to their own privacy obligations. Familiar payment rail names referenced on this Platform (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) are cited as contextual references only and do not imply a data-sharing arrangement with any such entity.
• KYC & Identity Verification Providers: To assist in verifying user identity, age and the authenticity of submitted documents.
• Fraud Prevention Services: To detect and prevent fraudulent activity, money laundering and other prohibited conduct.
• Legal and Regulatory Authorities: Where td222 is required by law, court order or regulatory direction to disclose personal data, we will comply with such obligations. Where legally permissible, we will endeavour to notify affected users.
• IT and Cloud Infrastructure Providers: To host and maintain the Platform. These providers operate as Data Processors under binding data processing agreements.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of td222's business, personal data may be transferred as part of that transaction. Users will be notified of any material change to data controller status.

td222 does not sell, rent or trade personal data to unaffiliated third parties for their own marketing purposes.

td222 operates internationally and may transfer personal data to countries outside your country of residence, including countries that may have different data protection standards to those in your jurisdiction.

Where personal data is transferred internationally, td222 implements appropriate safeguards to protect your data, including contractual arrangements with data recipients that require them to maintain equivalent data protection standards. Transfers are made only to the extent necessary for the purposes described in this Policy.

Users in Pakistan should note that Pakistan's data protection legal framework is still developing. The Pakistan Personal Data Protection Bill and any implementing regulations will be considered in td222's data transfer practices as they come into effect. This Policy does not constitute legal advice on Pakistani data protection law.

td222 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Account data: Retained for the duration of the active account relationship and for a period after account closure as required by applicable legal and AML obligations;
• KYC documents: Retained for a minimum of five years from the end of the business relationship, in compliance with typical AML record-keeping requirements;
• Transaction records: Retained in accordance with applicable financial record-keeping requirements;
• Support communications: Retained for a period sufficient to resolve any disputes or complaints and comply with applicable limitation periods;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications;
• Analytics data: Retained in aggregated, anonymised form indefinitely after the personal element has been removed.

Where data is no longer required, td222 securely deletes or anonymises it in a manner that prevents reconstruction of the original personal data.

Subject to applicable law and certain exceptions (such as where processing is necessary for compliance with a legal obligation), you have the following rights in relation to your personal data held by td222:

You have the right to request a copy of the personal data we hold about you, together with information about how it is processed.

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update many account details directly through your account settings.

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other lawful basis), or where the data has been unlawfully processed. This right does not apply where td222 is required to retain data for legal obligations (such as AML record-keeping).

You have the right to request that we restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.

Where processing is based on consent or performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

You have the right to object to processing of your personal data based on our legitimate interests, including profiling. You also have an absolute right to object to direct marketing at any time.

To exercise any of the rights listed above, please contact our support team using the contact details in Section 18 of this Policy. We will respond to all valid requests within a reasonable timeframe. We may need to verify your identity before processing your request.

td222 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Security measures in place include:

• TLS/HTTPS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest;
• Access controls restricting personal data access to authorised personnel with a legitimate operational need;
• Two-factor authentication options for user accounts;
• Regular security assessments of Platform infrastructure;
• Staff training on data protection and security obligations.

Notwithstanding the above, no internet transmission is completely secure. While we take every reasonable precaution to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your own account credentials.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, td222 will notify affected users and relevant authorities as required by applicable law.

The td222 Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction or applicable local law. td222 does not knowingly collect personal data from minors.

If td222 becomes aware that personal data has been submitted by or on behalf of a minor, the relevant account will be immediately suspended, the data will be deleted and the registration will be considered void. Any deposits associated with a minor's account will be refunded to the payment source, subject to verification.

If you believe that a minor has registered on the Platform or submitted personal data, please contact our support team immediately so that we can take appropriate action.

td222 may send you marketing communications about promotions, new features, special offers and platform updates where you have given us your consent to do so during registration or at a later stage.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email;
• Updating your communication preferences in your account settings;
• Contacting our support team using the details in Section 18.

Withdrawing consent for marketing does not affect your receipt of service emails (such as deposit confirmations, security alerts and policy updates), which are sent on the basis of our contractual and legal obligations.

td222 will not send promotional marketing communications to users who have activated a self-exclusion or cooling-off period. Marketing suppression for self-excluded users is applied as promptly as technically possible following the activation of any exclusion measure.

td222 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or regulatory requirements. When material changes are made, we will:

• Update the "Last Updated" date at the top of this document;
• Where practicable, notify registered users by email or by a prominent notice on the Platform;
• Where changes are significant, provide a reasonable period before the new version takes effect.

Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we handle your personal data.

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which td222 processes your personal data, please contact our Data Protection team using the details below. Our support team is available 24 hours a day, 7 days a week. Urdu-language assistance is available on request.

Email: [email protected]
Email is displayed as plain text only — not a clickable link.

When submitting a data rights request, please include: your full registered name, your account username, a clear description of your request and a copy of a valid identity document to enable us to verify your identity before processing the request.

We aim to respond to all data subject requests within 30 calendar days. Where requests are complex or numerous, we reserve the right to extend this period by a further 60 days, with prior notification to you.