b222 Privacy Policy

1. Introduction

b222 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy sets out, in plain and clear English, everything you need to know about how b222 handles your personal information from the moment you land on our website through to account registration, ongoing play, and account closure.

We built b222 specifically for Pakistani players — from Karachi to Lahore, Islamabad to Faisalabad — and we understand that trust is everything in this market. Handling your data responsibly is not just a legal obligation for us; it is a core part of the promise we make to every b222 player.

This Privacy Policy should be read together with b222's Terms and Conditions and our Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with b222.

2. Who We Are

2.1 b222 is an internationally licensed online gaming and sports betting platform, accessible at b222.today. b222 operates under an international gaming licence and is subject to data protection and privacy requirements imposed by that licensing framework.

2.2 For the purposes of this Privacy Policy, b222 is the data controller in respect of personal data collected from Pakistani players through the b222 platform. This means b222 determines the purposes and means of processing your personal information.

2.3 If you have any questions about how b222 processes your data, or wish to exercise any of your data rights, you may contact us at any time — see Section 18 of this policy for contact details.

3. Data We Collect

3.1 b222 collects several categories of personal data from players. The table below summarises the main categories of data we collect and what each category includes:

3.2 b222 does not collect full payment card numbers or full bank account numbers. Financial data retained by b222 consists of transaction references and partial identifiers only. Full payment credentials are processed exclusively by our licensed payment processing partners.

4. How We Collect Your Data

4.1 b222 collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automated collection: Technical data such as IP addresses, device identifiers, and session logs are collected automatically each time you access the b222 platform, using server logs and similar technologies.
• Cookie and tracking technologies: b222 uses cookies and similar tracking tools on our website to understand how players use the platform and to improve the user experience. See Section 10 for full details of our cookie practices.
• Third-party payment processors: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, our payment partners share transaction confirmation details with b222 to allow us to credit or debit your b222 wallet.
• KYC and identity verification partners: Where b222 uses a third-party identity verification service to process CNIC checks or liveness verification, that partner shares verification results (pass/fail and matched data) with b222.

5. Why We Use Your Data

5.1 b222 uses personal data for the following purposes:

• To create and manage your b222 account, including verifying your identity and age;
• To process deposits, withdrawals, and all PKR wallet transactions on the b222 platform;
• To provide access to b222's gaming and sports betting services, including cricket betting, live casino, and slots;
• To fulfil our legal obligations under our international gaming licence, including anti-money laundering (AML) checks, Know Your Customer (KYC) requirements, and responsible gaming obligations;
• To detect and prevent fraud, collusion, bonus abuse, money laundering, and other prohibited activities on the b222 platform;
• To provide customer support through live chat and email;
• To send you transactional communications about your account — including deposit confirmations, withdrawal updates, and security alerts;
• To send you marketing communications about b222 bonuses, promotions, and new features, where you have consented to receiving such communications or where we have a legitimate interest in doing so;
• To monitor and improve the performance, security, and user experience of the b222 platform;
• To comply with any applicable legal, regulatory, or court order obligations.

6. Legal Basis for Processing

6.1 b222 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to register your account, process transactions, and provide gaming services — without which b222 cannot fulfil its obligations to you as a player.
• Legal obligation: Processing required to comply with AML/KYC regulations, responsible gaming mandates, and other requirements of b222's gaming licence and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, product improvement, and direct marketing to existing players where the legitimate interest is not overridden by your right to privacy.
• Consent: Where you have expressly opted in to receive marketing communications, or where required by law to obtain consent before processing a specific category of data.

7. Sharing Your Data

7.1 b222 does not sell, rent, or transfer your personal data to any third party for their own commercial purposes. We share data only where necessary to operate the b222 platform or comply with legal requirements, and only with the following categories of recipient:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network providers — to process your deposits and withdrawals. These parties receive only the minimum data required to process the relevant transaction.
• Identity verification providers: Third-party KYC service providers engaged by b222 to verify CNIC documents and perform liveness checks. These providers are bound by strict data processing agreements.
• Gaming content providers: Live casino studio operators and slot game developers whose games are offered on the b222 platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your personal identity data.
• Regulatory and licensing authorities: b222's gaming licensing authority and any relevant regulatory body that has legal authority to request player data.
• Law enforcement: Police, financial intelligence units, or other authorities with a legal basis to request disclosure of player data for the purposes of criminal investigation or court proceedings.
• Professional advisers: Legal, accounting, or audit firms who require access to data in connection with b222's professional and regulatory obligations, subject to appropriate confidentiality obligations.

7.2 Where b222 shares data with third parties, we ensure that appropriate contractual safeguards are in place — including data processing agreements that require recipients to handle your data in accordance with applicable data protection standards.

8. KYC & Identity Verification Data

8.1 As a licensed gaming operator, b222 is legally required to verify the identity and age of all Players before permitting real-money activity. This involves the collection and processing of sensitive identity documents, including Pakistani CNIC scans and selfie images.

8.2 b222 applies heightened security measures to KYC data, including:

• Storage in isolated, access-controlled secure environments separate from general account data;
• Strict access controls limiting access to authorised compliance personnel only;
• Encryption of KYC document files both in transit and at rest;
• Retention only for the minimum period required under b222's licensing obligations.

8.3 KYC data is never used for any purpose other than identity and age verification, AML compliance, and fraud prevention. It is never shared with advertisers, marketing partners, or any party outside the specific categories listed in Section 7.

9. Payment Data

9.1 b222 does not store full payment credentials. When you deposit via JazzCash or EasyPaisa, b222 receives and retains a transaction reference and your registered mobile wallet number (masked). When you deposit via bank transfer, b222 retains only the transaction reference and last four digits of the originating account number.

9.2 b222 retains transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — for a minimum of five (5) years from the date of the transaction, as required by AML regulations applicable under our gaming licence.

9.3 USDT cryptocurrency transactions are processed via blockchain networks. b222 retains your wallet address and transaction hash for compliance purposes. Cryptocurrency transaction data is inherently recorded on public blockchain ledgers outside b222's control.

10. Cookies & Tracking Technologies

10.1 b222 uses cookies and similar technologies on our platform. Cookies are small text files stored on your device by your browser when you visit b222. The following categories of cookies are used:

10.2 You can control cookie settings through your browser preferences. Note that disabling essential cookies will prevent you from logging into your b222 account and using platform features.

11. Data Retention

11.1 b222 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML and gaming licence requirements.
• KYC documents: Retained for the duration of your active account and for a minimum of five (5) years following account closure.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication in a support thread.
• Technical and session logs: Retained for up to twelve (12) months from the date of the relevant session.
• Marketing consent records: Retained for as long as you have an active b222 account or until you withdraw your marketing consent, whichever is earlier.

11.2 On expiry of the applicable retention period, b222 will securely delete or anonymise the relevant data in accordance with our internal data destruction procedures.

12. Data Security

12.1 b222 has implemented appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and b222 servers;
• AES-256 encryption for sensitive data stored on b222 systems;
• Role-based access controls ensuring that staff can only access data necessary for their specific job functions;
• Multi-factor authentication requirements for b222 internal system access;
• Regular penetration testing and security audits of the b222 platform;
• Isolated storage environments for KYC documentation and financial records;
• Incident response procedures for the detection, reporting, and containment of any data security incidents.

12.2 While b222 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own b222 account credentials. If you suspect unauthorised access to your account, contact b222 support immediately via live chat.

13. Your Data Rights

13.1 As a b222 player, you have the following rights in respect of your personal data. These rights are subject to applicable legal and regulatory limitations, including our obligations under AML and gaming licence requirements:

13.2 To exercise any of the above rights, contact b222 support via live chat or email as detailed in Section 18. b222 will respond to all valid data rights requests within 30 calendar days of receipt. Complex requests may require up to 60 days, in which case b222 will notify you of the extension within the initial 30-day period.

13.3 b222 may need to verify your identity before acting on a data rights request, to ensure we are not disclosing or modifying data in response to a fraudulent request.

14. Children & Minors

14 .1 If you believe b222 has inadvertently collected data from a person under 21 years of age, please contact us immediately at [email protected] so we can take appropriate action.

15. Marketing Communications

15.1 b222 may send you marketing communications about new bonuses, promotions, game launches, and platform features where you have consented to receiving such communications, or where we have a legitimate interest in doing so based on your existing customer relationship with b222.

15.2 Marketing communications may be sent via the following channels: email to your registered b222 email address, SMS to your registered mobile number, push notifications via the b222 platform or mobile app, and in-platform promotional banners visible when you are logged in.

15.3 Every marketing email and SMS sent by b222 includes a clear unsubscribe link or opt-out instruction. You can also update your marketing preferences at any time through your b222 account settings dashboard under "Communication Preferences".

15.4 Opting out of marketing communications does not affect transactional communications — b222 will continue to send you account security alerts, deposit confirmations, withdrawal updates, and other service-related messages that are necessary for the operation of your account.

16. International Data Transfers

16.1 As an internationally licensed gaming platform, b222 may transfer personal data to, and store personal data in, jurisdictions outside Pakistan. This includes transfers to the jurisdiction in which our gaming licence is issued, to cloud infrastructure providers, and to payment processing partners.

16.2 Where b222 transfers personal data outside Pakistan, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements that impose data protection obligations on recipients equivalent to those applicable to b222;
• Transfer only to recipients located in jurisdictions with adequate data protection frameworks recognised under international standards;
• Technical safeguards including encryption in transit and at rest for all internationally transferred data.

16.3 No personal data is transferred to any jurisdiction subject to international sanctions or recognised as presenting elevated data security risks.

17. Changes to This Privacy Policy

17.1 b222 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or changes in the services offered on the b222 platform.

17.2 Where changes to this Privacy Policy are material, b222 will notify registered Players via email to the email address registered on their account, and will display a prominent notice on the b222 platform for at least 30 days following the change.

17.3 The version of this Privacy Policy currently in force is the version published at b222.today/privacy-policy with the most recent "Last Updated" date shown at the top of this page. Continued use of the b222 platform following notification of changes constitutes acceptance of the updated Privacy Policy.

18. Contact & Data Protection Enquiries

18.1 If you have any questions, concerns, or complaints about how b222 processes your personal data, or wish to exercise any of your data rights set out in Section 13, you may contact b222 through the following channel:

18.2 b222 will respond to all privacy and data protection enquiries within 30 calendar days of receipt. Where your enquiry requires further investigation or consultation with our data protection compliance team, we will notify you of the expected response timeframe.

18.3 If you are not satisfied with b222's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which b222 holds its gaming licence, or to the relevant supervisory authority in your own country of residence where applicable.