Privacy Policy – do222 Pakistan Online Gaming Platform

1. Who We Are

do222 is the operator of the online gaming platform accessible at https://do222.biz and any associated mobile-optimised versions of the same service. Throughout this Privacy Policy, references to "do222", "we", "us" or "our" refer to the operator of the do222 platform. References to "you" or "your" refer to any individual who accesses, browses or registers on the do222 platform.

This Privacy Policy explains how do222 collects, stores, processes and protects personal data in connection with your use of our platform. It also sets out your rights as a data subject and how you can exercise those rights. This Policy should be read alongside the do222 Terms and Conditions and Responsible Gaming Policy, all of which are available on this website.

If you have any questions about how do222 handles your personal information before reading further, please email us at support@do222.biz. We are happy to answer questions directly rather than have you search through a long policy document for something specific.

2. Personal Data We Collect

do222 collects personal data across several categories, each serving a specific and necessary purpose. We do not collect data speculatively or for purposes beyond what is described in this Policy.

3. How We Collect Your Data

do222 collects personal data through the following channels:

• Direct registration: When you complete the do222 account registration form, you provide your name, date of birth, mobile number and email address directly.
• KYC document submission: When do222 requests identity verification, you submit documents directly via the secure document upload portal in your account.
• Deposit and withdrawal transactions: When you make a PKR deposit via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card, payment reference details are transmitted to do222 by the payment processor to confirm the transaction.
• Platform usage: do222's platform automatically records account activity including login events, game sessions and betting activity as part of standard platform operation.
• Device and browser data: Standard technical data including your IP address, device type and browser version is collected automatically when you access do222, as it is with every website you visit.
• Support communications: When you contact do222 support via live chat or email, your messages and our responses are stored as part of your account support record.
• Cookies and similar technologies: do222 uses cookies and local storage to maintain your login session and remember your preferences. Cookie use is explained further in Section 8.

4. How do222 Uses Your Personal Data

do222 uses personal data only for purposes that are directly connected to operating a safe, fair and compliant gaming platform for Pakistani players. The specific purposes are:

• Account creation and management: Processing your registration, maintaining your account profile, authenticating your identity on login.
• Processing PKR transactions: Crediting deposits to your do222 balance, processing withdrawal requests to your registered payment method, maintaining transaction records.
• Identity and age verification: Confirming that you are at least 18 years of age and that the identity information provided during registration is accurate.
• Fraud prevention and security: Detecting suspicious login activity, identifying unusual betting patterns that may indicate account compromise, preventing money laundering and multi-accounting.
• Responsible gaming: Monitoring account activity against the deposit limits, session time settings and responsible gaming thresholds you have configured, and intervening proactively where permitted patterns are exceeded.
• Customer support: Responding to queries, resolving complaints, maintaining records of support interactions for quality assurance.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve game loading performance and enhance the mobile user experience.
• Legal and regulatory compliance: Retaining records required under applicable financial regulations, anti-money laundering obligations and platform compliance requirements.
• Direct communications: Sending you account notifications, security alerts, and — where you have opted in — promotional offers and bonuses relevant to your activity on do222. You can opt out of marketing communications at any time.

5. Legal Basis for Processing

do222 processes your personal data on the following legal grounds, each applicable to different categories of processing activity:

• Contract performance: Processing necessary to fulfil the agreement between you and do222 — account operation, transaction processing and support — is carried out on the basis that it is required to deliver the service you have requested.
• Legal obligation: Identity verification, KYC procedures, transaction record retention and anti-money laundering monitoring are carried out to comply with applicable legal and regulatory obligations.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and aggregated analytics are carried out on the basis of do222's legitimate interest in operating a secure and compliant platform, balanced against your privacy interests.
• Consent: Marketing communications and certain non-essential cookies are processed on the basis of your freely given, specific and informed consent. You may withdraw consent at any time.

6. Who do222 Shares Your Data With

do222 shares personal data with third parties only where necessary for the specific purposes described in this Policy and only under contractual arrangements that require those parties to handle your data with equivalent care. The categories of third parties with whom do222 may share your data are:

• Payment processors: PKR transaction data is shared with payment processors (including Easypaisa, JazzCash payment gateways and card processing networks) to the extent necessary to complete your deposit or withdrawal.
• Identity verification services: In some cases, KYC documents may be processed by a specialist identity verification provider operating under a data processing agreement with do222.
• Game software providers: The software providers whose games run on do222 may receive game session data (bet amounts, game outcomes, session duration) for technical operation and audit purposes. These providers do not receive your personal identity data.
• IT and hosting infrastructure providers: do222's platform infrastructure involves trusted cloud service and hosting providers. These providers process data only on do222's instructions under binding contractual terms.
• Legal and regulatory bodies: Where required by law, court order or regulatory authority, do222 may be obligated to disclose personal data to the relevant body.

do222 does not share personal data with advertisers, data brokers, social media platforms or any party for commercial purposes beyond what is necessary to operate the platform.

7. Payment Data and PKR Transactions

do222 processes PKR financial transactions via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard card networks. The handling of payment data at do222 follows these specific rules:

• Full payment card numbers are never stored by do222. Only the first four and last four digits are retained for verification purposes.
• Easypaisa and JazzCash mobile wallet numbers associated with your account are stored in encrypted form and used only to process transactions you initiate.
• Bank account details provided for IBFT withdrawals are stored securely and used only for withdrawal processing to verified accounts.
• All payment data transmission between your device, do222's platform and payment processors occurs over encrypted TLS connections.
• do222 does not have access to your Easypaisa PIN, JazzCash PIN, mobile banking credentials or any other authentication credential associated with your payment methods.
• Transaction records are retained for a minimum of five years in accordance with standard financial record-keeping requirements applicable to online platforms.

8. Cookies and Tracking Technologies

do222 uses cookies and similar technologies (such as local storage) to make the platform function correctly and to provide a consistent experience across sessions. Here is a plain explanation of the cookies do222 uses:

• Essential session cookies: These keep you logged in to your do222 account during a browsing session. Without them, the platform cannot function. They expire when you close your browser or log out.
• Preference cookies: These remember settings you have chosen — such as your preferred language or game display options — so you do not need to set them again on your next visit.
• Security cookies: These help do222 detect suspicious activity such as account takeover attempts by identifying unusual device or location patterns compared to your normal access history.
• Analytics cookies (first-party only): do222 uses its own analytics tools to understand how players navigate the platform — which pages are visited most, where technical errors occur and how long pages take to load. This data is aggregated and anonymised. do222 does not use Google Analytics or other third-party analytics that send your behavioural data to external companies.

do222 does not use advertising or retargeting cookies of any kind. You will not see do222 advertisements following you around the internet as a result of visiting our platform.

You may disable non-essential cookies through your browser settings. Disabling essential session cookies will prevent you from logging in to do222. Most mobile browsers allow cookie management through the browser settings menu.

9. Data Security at do222

do222 implements a layered approach to data security designed to protect your personal information against unauthorised access, loss, alteration or disclosure. The key security measures in place include:

• Encryption in transit: All data transmitted between your device and do222's servers is encrypted using TLS 1.2 or higher. This applies to all platform pages, the betting interface, account settings and payment processing.
• Encryption at rest: Sensitive personal data stored in do222's databases — including identity documents, payment details and authentication credentials — is encrypted at rest using industry-standard symmetric encryption.
• Password security: Account passwords are never stored in plain text. do222 stores only a salted cryptographic hash of your password. This means that even do222 staff cannot retrieve your password — only reset it.
• Two-factor authentication: do222 offers two-factor authentication (2FA) via SMS or authenticator app for all player accounts. We strongly encourage all players to enable 2FA.
• Access controls: Access to player personal data within do222's organisation is restricted to staff members who require it for their specific role. All internal access is logged and audited.
• Regular security reviews: do222's platform and data handling practices are subject to periodic internal security reviews.

Despite these measures, no internet-based system can guarantee absolute security. If you become aware of any unauthorised access to your do222 account, please notify us immediately at support@do222.biz so we can take protective action.

10. How Long do222 Keeps Your Data

do222 retains personal data only for as long as necessary for the purposes described in this Policy and to comply with applicable record-keeping requirements. The general retention periods are:

• Active account data: Retained for the duration of your do222 account plus a minimum of five years following account closure.
• Transaction records: Minimum five years from the date of each transaction, in line with standard financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years following account closure.
• Support communications: Retained for three years from the date of the last communication in a given interaction.
• Technical log data: IP address logs and security event logs are retained for twelve months then automatically purged.
• Marketing preference data: Retained for the duration of your account. If you withdraw marketing consent, your preference is updated immediately and marketing communications cease, though the record of your opt-out is retained.

When retention periods expire, do222 securely deletes or anonymises the relevant data so it can no longer be linked to you as an individual.

11. Your Data Rights

As a do222 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting support@do222.biz:

12. Children and Minors

do222 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of eighteen. If during registration or KYC verification do222 determines that a player is under eighteen, the account will be immediately closed and any deposits returned to the originating payment method.

If you believe that a minor has registered at do222 or has accessed the platform using your account, please notify us immediately at support@do222.biz. We take such reports extremely seriously and will act on them without delay.

do222 uses date-of-birth verification at registration and reserves the right to request documentary proof of age at any time. Where requested proof is not provided, the account will be suspended pending verification.

13. Changes to This Privacy Policy

do222 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When material changes are made, do222 will notify registered players by email or via a platform notification before the updated Policy takes effect.

The "Last updated" date at the top of this Policy always reflects the date of the most recent revision. The version published on this page is always the current version. Your continued use of do222 following the effective date of any revision constitutes acceptance of the updated Policy.

If you disagree with any change to this Policy, you should close your do222 account before the revised Policy takes effect. Closing your account does not affect your right to request deletion of data already collected.

14. How to Contact do222 About Privacy

If you have any questions, concerns or requests related to this Privacy Policy or the way do222 handles your personal data, please get in touch. Our support team is available around the clock and takes privacy queries seriously — you will not receive an automated response that simply redirects you back to this page.

• Email: support@do222.biz
• Subject line for privacy queries: "Privacy Query — [your username]"
• Subject line for data rights requests: "Data Rights Request — [your username]"
• Response target: Acknowledgement within 48 hours; full response within 30 days

For concerns that relate to responsible gaming rather than data privacy, please visit the do222 Responsible Gaming page, which contains dedicated support contacts and resources. For all other account queries, the do222 FAQ page covers the most common questions.