KD222 Privacy Policy

1. Introduction

This Privacy Policy (hereinafter "Policy") sets out the manner in which KD222 (hereinafter "KD222", "We", "Us" or "Our") collects, processes, uses, stores, shares and protects personal data provided by or obtained in connection with users (hereinafter "User", "You" or "Your") of the online platform accessible at https://kd222.cam (the "Platform").

KD222 recognizes that the privacy and security of personal data is of paramount importance, particularly for users based in Pakistan, where personal identification documents such as the Computerized National Identity Card (CNIC) may be required as part of identity verification. We are committed to handling all personal data with care, transparency and in accordance with the data-protection principles set out in this Policy.

By registering an account, depositing funds, placing a bet or otherwise using the Platform, You acknowledge that You have read, understood and accepted the terms of this Privacy Policy. This Policy is incorporated into and must be read together with KD222's Terms & Conditions.

2. Definitions

The following terms carry the meanings set out below throughout this Policy:

3. Data Controller

KD222 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, KD222 determines the purposes for which your personal data is processed and the means by which such processing occurs. All data-processing activities described in this Policy are conducted by KD222 or by authorized Data Processors acting on KD222's behalf under appropriate contractual safeguards.

Where KD222 engages third-party service providers as Data Processors — for instance, payment technology providers, identity verification services or customer support platforms — such providers are permitted to process personal data only for the specific purpose for which they were engaged and in accordance with KD222's written instructions. They are not permitted to use your data for their own independent purposes or to share it with unauthorized parties.

4. Personal Data We Collect

4.1 Data You Provide Directly

When you register, verify your identity or interact with the Platform, you may provide the following categories of personal data:

4.2 Data Collected Automatically

When you access the Platform, certain technical data is collected automatically through standard web technologies:

• Device and Technical Data: IP address, browser type and version, operating system, device model, screen resolution and device identifiers.
• Usage Data: Pages visited, features accessed, betting and gaming activity logs, session start and end times, in-play market interactions and search queries on the Platform.
• Location Data: Approximate geographic location derived from IP address, used for fraud prevention and access-control purposes. KD222 does not collect precise GPS location.
• Cookies and Tracking Technologies: Session cookies, persistent cookies and similar technologies as described in Section 10 of this Policy.

5. Lawful Basis for Processing

KD222 processes personal data on the following lawful bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account management, processing your bets, handling deposits and withdrawals, and resolving disputes — is conducted on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations, regulatory reporting and responses to lawful authority requests.
• Legitimate Interests: Processing conducted in pursuit of KD222's legitimate business interests — including fraud prevention, platform security, responsible gambling enforcement, and service improvement — where such interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on your consent for specific processing activities (such as optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

6. Purposes of Data Processing

KD222 processes your personal data for the following specific purposes:

• Account Registration and Management: Creating, maintaining and administering your KD222 player account, including authentication and session management.
• Identity Verification (KYC): Verifying your identity and age to ensure compliance with minimum age requirements (18+, or higher where the operator's license jurisdiction requires), to prevent fraudulent registration and to satisfy Anti-Money Laundering obligations.
• Service Delivery: Processing your bets and wagers across sports markets (including Pakistan cricket, PSL/T20, ICC tournaments, football and UFC), live casino and other Platform products; calculating and crediting winnings; managing bonus and loyalty programme participation.
• Payment Processing: Facilitating deposits and withdrawals through available payment methods and verifying that transaction details match your registered account information.
• Fraud Prevention and Platform Security: Detecting, investigating and preventing fraudulent activity, unauthorized access, money laundering, bonus abuse and other prohibited conduct.
• Responsible Gambling: Monitoring account activity to identify signs of problem gambling, enforcing self-exclusion and account limit requests, and fulfilling our duty of care obligations to users.
• Customer Support: Responding to your enquiries, complaints and support requests.
• Regulatory Compliance: Meeting our obligations to any applicable regulatory authority, including responding to lawful requests from public authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform features, performance and user experience.
• Marketing Communications (Consent-Based): Where you have opted in, sending you information about promotions, bonuses and Platform updates relevant to your account. You may opt out at any time.

7. Data Sharing & Disclosure

KD222 does not sell, rent or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual or legal protections:

• Identity Verification Providers: Third-party KYC and AML screening services engaged to assist with identity and age verification, document authentication and sanctions screening.
• Payment Technology Providers: Payment processors and gateway operators necessary to facilitate your deposit and withdrawal transactions. These providers have access only to the transaction data required to process your payment.
• Fraud Prevention and Security Services: Specialist providers engaged to detect and prevent fraudulent activity, account takeover and money laundering on the Platform.
• Customer Support Platforms: Live chat and ticketing software providers used to deliver customer support services.
• Legal and Regulatory Authorities: Where required by a lawful court order, regulatory directive, legal obligation or to protect the rights, property or safety of KD222, its users or the public.
• Corporate Transactions: In the event of a merger, acquisition, sale of assets or restructuring of KD222's business, personal data may be transferred to the acquiring or successor entity, subject to equivalent privacy protections.

8. Data Retention

KD222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with your account is retained for the duration of your account's active status and for a period thereafter as required by applicable regulations.
• KYC and AML Records: Identity verification documents and transaction records are retained for a minimum period as required under applicable anti-money laundering regulations, which may extend beyond account closure.
• Financial Records: Deposit, withdrawal and betting transaction records are retained for the period necessary to comply with financial record-keeping obligations.
• Support Communications: Customer support records are retained for a reasonable period to enable dispute resolution and to improve service quality.
• Marketing Data: Where you have consented to marketing communications, your preferences and contact details for this purpose are retained until you withdraw consent or request deletion, subject to our legal obligation to maintain suppression records.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

9. Data Security

KD222 implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction. Our security measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and the KD222 Platform is encrypted using industry-standard HTTPS/TLS protocols. You should verify that the padlock icon is present in your browser address bar when accessing the Platform.
• Data Storage Security: Personal data is stored on secured servers with access restricted to authorized personnel on a need-to-know basis. Access controls, audit logging and regular security reviews are applied.
• Payment Data: KD222 does not store full payment card numbers or complete bank account credentials. Financial transaction data is processed via PCI-DSS compliant payment service providers where applicable.
• Account Security: Users are required to maintain the confidentiality of their account credentials. KD222 recommends using a strong, unique password for your account. You are responsible for any activity conducted through your account credentials.
• Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, KD222 will take prompt action to contain the breach and will notify affected users in accordance with applicable requirements.

10. Cookies & Tracking Technologies

KD222 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session state, and gather analytical information to improve Platform performance. The following categories of cookies may be used:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality. For analytical cookies, you may opt out through your browser's cookie controls. Note that cookie preferences may need to be reset after clearing your browser data.

11. International Data Transfers

KD222's operations and the third-party service providers it engages may process your personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, KD222 takes appropriate steps to ensure that your data receives an equivalent level of protection to that which it would receive in the originating jurisdiction.

Such steps may include: entering into standard contractual clauses with recipient entities; ensuring recipients are located in jurisdictions with adequate data-protection frameworks; or applying other transfer mechanisms permissible under applicable law. If you have questions about the specific safeguards applied to international transfers of your personal data, please contact us at the details set out in Section 16.

12. Your Data Rights

Depending on the data-protection laws applicable to your jurisdiction, you may hold some or all of the following rights in relation to your personal data held by KD222. To exercise any of these rights, please contact us through the customer support channels listed in Section 16.

Requests to exercise any of the above rights will be assessed on a case-by-case basis. KD222 will respond within a reasonable timeframe — typically 30 days — and may request verification of your identity before processing your request. Some rights may be limited where legal retention obligations or legitimate security interests apply.

13. Minors

The KD222 Platform is strictly intended for adults aged 18 or above, or the higher minimum age required by the operator's license jurisdiction. KD222 does not knowingly collect or process personal data belonging to individuals under the applicable minimum age. If KD222 becomes aware that personal data has been collected from an underage individual, we will take prompt steps to delete that data and close the associated account.

Parents and guardians who believe that a minor in their care may have registered an account on KD222 are encouraged to contact our support team immediately so that appropriate action can be taken.

14. Third-Party Links & Services

The KD222 Platform may contain references to third-party payment services, game providers or other service integrations. Where the Platform involves interaction with a third-party service — for example, a payment provider's checkout interface — that third party's own privacy policy governs the collection and use of any data you provide to them directly.

KD222 is not responsible for the privacy practices of third-party services and encourages you to review their policies before submitting personal data to them. The inclusion of any third-party service reference on this Platform does not constitute an endorsement of their data-handling practices.

15. Amendments to This Policy

KD222 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing activities, applicable laws or platform features. Where material changes are made, KD222 will provide reasonable notice through in-platform notifications, account messages or — where required by applicable law — direct communication to affected users.

The date at which this Policy was most recently reviewed is stated at the top of this page. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept any material changes to this Policy, you must cease using the Platform and may request account closure.

16. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by KD222, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly through the KD222 Platform — this is the fastest method of reaching us.
• Email Support: [email protected] (plain text address — not a clickable link).
• Language: Support is available in English. Urdu-language assistance may be available on request.

We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 days. For complex requests, we may request additional information to verify your identity before proceeding. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction.