x222 Privacy Policy — How We Collect, Use, and Protect Your Personal Data
At x222, we understand that your personal data belongs to you. This Privacy Policy explains in plain, legally precise English exactly what information x222 collects when you use Pakistan's leading online casino and sports betting platform, why we collect it, how it is stored and protected, who it is shared with, and what rights you have over it. We have written this policy to be readable, not deliberately obscure — because we believe you deserve to know exactly how your data is handled.
This Privacy Policy forms part of the x222 Terms & Conditions. By registering an account or continuing to use x222, you confirm that you have read and understood this policy. If you do not agree, please cease using the platform and contact support to close your account.
Six Privacy Principles at the Core of x222's Data Practices
Before the full legal text, here are the six fundamental principles that govern how x222 handles your personal data — written in plain language every Pakistani member can understand and verify.
Purpose Limitation
x222 collects personal data only for specific, clearly defined purposes — account registration, KYC verification, payment processing, fraud prevention, and regulatory compliance. Your mobile number, CNIC information, and EasyPaisa account data is never used for purposes beyond those disclosed in this policy without your explicit consent.
Data Minimisation
x222 requests only the personal data that is genuinely necessary for the stated purpose. We do not collect information for the sake of having it. During registration, we collect your name, Pakistani mobile number, and date of birth — nothing more until KYC verification is required for withdrawals, at which point CNIC or passport documentation is requested.
Data Accuracy
x222 takes reasonable steps to ensure personal data held in your account is accurate and kept up to date. You have the right to update incorrect personal information at any time via your account settings or by contacting support. Outdated or inaccurate personal data that could negatively affect you will be corrected or deleted promptly upon notification.
Security by Design
All personal and financial data on the x222 platform is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. x222's security infrastructure is subject to regular independent penetration testing and security audits. EasyPaisa and JazzCash transaction data is handled via payment provider APIs under strict contractual data protection obligations.
Storage Limitation
x222 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations (including anti-money laundering record-keeping requirements, which typically mandate retention of five years following account closure). Data no longer required is securely deleted in accordance with x222's data retention schedule.
Your Rights Are Real
Your rights over your personal data at x222 are genuine and enforceable — not marketing language. You can request access to your data, correction of inaccuracies, deletion of data no longer required, restriction of processing, or a portable export of your data. All such requests are acknowledged within five business days and processed within thirty days.
x222 Privacy Policy — Full Text
The following is the complete and legally operative Privacy Policy of x222, effective from 1 January 2026. This version supersedes all previous privacy policy documents published by x222. For questions about any section of this policy, contact support at [email protected].
1 Data Controller
The data controller responsible for the personal data collected through the x222 platform (accessible at x222.bid) is the operator of x222, a company incorporated and operating under the jurisdiction in which x222's international gaming license is held. For all data protection enquiries, the x222 data protection function can be reached at [email protected] with the subject line "Data Protection Enquiry".
As data controller, x222 determines the purposes and means by which personal data is processed. x222 processes personal data in accordance with applicable international data protection laws and the regulatory requirements of its gaming license jurisdiction, including obligations relating to anti-money laundering (AML) and Know Your Customer (KYC) procedures.
2 Personal Data We Collect
x222 collects the following categories of personal data from members and users of the x222 platform:
2.1 Identity and Contact Data
- Full legal name (as per CNIC or passport)
- Date of birth
- Pakistani mobile number (Telenor, Jazz, Ufone, Zong, or other networks)
- Username chosen during registration
- Residential address (required at KYC stage)
2.2 Identity Verification (KYC) Data
- National Identity Card (CNIC) number and image
- Passport number and image (where CNIC is not available)
- Selfie or facial image for liveness verification (where applicable)
- Proof of address documentation
2.3 Financial and Transaction Data
- EasyPaisa account number or linked mobile number
- JazzCash account number or linked mobile number
- Bank account details (HBL, UBL, Meezan Bank, or others) where used for deposits or withdrawals
- USDT TRC20 wallet address (where used)
- Deposit and withdrawal history, including amounts, timestamps, and payment method references
- Account balance information
2.4 Gaming and Betting Activity Data
- Game session history (games played, wagers placed, outcomes, duration)
- Sports betting selections, odds, stakes, and results
- Bonus claims, wagering progress, and reward history
- Responsible gaming tool settings (deposit limits, session limits, exclusion status)
2.5 Technical and Usage Data
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser information
- Session identifiers and login timestamps
- Pages visited and features used within the x222 platform
- Cookies and similar tracking data (see Section 8)
2.6 Communication Data
- Content of live chat conversations with x222 support
- Email correspondence with x222
- Records of SMS OTP delivery and verification
x222 does not collect or store full payment card numbers, CVV codes, or full banking PINs under any circumstances. EasyPaisa and JazzCash payment authorisations are processed through the respective payment provider APIs — x222 receives a transaction reference and status only.
3 How We Collect Your Data
x222 collects personal data through the following means:
- Direct provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or completing any form on the x222 platform.
- Automated collection: Technical data collected automatically when you access or use the x222 platform, including via cookies, server logs, and similar technologies (see Section 8).
- Payment providers: Transaction confirmation data received from EasyPaisa, JazzCash, Raast, and banking partners following payment authorisation.
- Identity verification services: Verification data returned by third-party KYC and document verification service providers.
- Fraud prevention services: Risk signals and device intelligence data from anti-fraud service providers used to protect x222 members from account compromise.
4 Legal Basis for Processing
x222 processes your personal data on the following legal bases under applicable data protection law:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Contract performance — necessary to provide the x222 service |
| Processing deposits and withdrawals | Contract performance — necessary to execute payment transactions |
| KYC identity verification | Legal obligation — AML/CTF regulatory requirements |
| Age verification (21+) | Legal obligation — gaming license regulatory requirement |
| Fraud detection and prevention | Legitimate interests — protecting x222 and its members |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Marketing communications (where opted in) | Consent — you may withdraw consent at any time |
| Analytics and platform improvement | Legitimate interests — improving service quality |
| Regulatory reporting and record-keeping | Legal obligation — gaming and financial regulation |
5 How We Use Your Personal Data
x222 uses collected personal data for the following specific purposes:
5.1 Platform Operation and Account Management
To create and maintain your x222 account, verify your identity, process login requests (including OTP authentication), manage your wallet balance, and enable you to use all features of the platform including cricket betting, slot games, Teen Patti, live casino, and responsible gaming tools.
5.2 Payment Processing
To facilitate EasyPaisa, JazzCash, bank transfer, Raast, and USDT TRC20 deposit and withdrawal transactions. This includes transmitting necessary transaction data to payment service providers and receiving confirmation of completed transactions.
5.3 Compliance and Regulatory Obligations
To fulfil x222's legal obligations under its gaming license — including age verification (21+), KYC identity verification, anti-money laundering (AML) screening, politically exposed persons (PEP) checks, sanctions screening, and mandatory reporting to regulatory authorities where required by applicable law.
5.4 Fraud Prevention and Security
To detect, investigate, and prevent fraud, account compromise, bonus abuse, collusion, money laundering, and other prohibited conduct — protecting both x222 and its members from financial harm.
5.5 Responsible Gaming
To monitor gaming patterns for indicators of problem gambling behaviour, to administer deposit limits, loss limits, session limits, cooling-off periods, and self-exclusion requests, and to contact members where x222 identifies potential responsible gaming concerns.
5.6 Customer Support
To provide customer support via live chat and email, to investigate and resolve complaints, to process dispute escalations, and to maintain records of support interactions for quality and compliance purposes.
5.7 Platform Improvement and Analytics
To analyse aggregated, anonymised usage data to understand how members use the x222 platform, identify technical issues, optimise game library curation, and improve the overall user experience for Pakistani players.
5.8 Marketing (Consent-Based Only)
Where you have explicitly opted in, to send you promotional communications about x222 bonuses, new game launches, PSL season offers, and platform updates via SMS or email. You may withdraw marketing consent at any time by contacting support or using the unsubscribe mechanism in any marketing message.
6 Data Sharing and Disclosure
x222 does not sell your personal data to any third party. x222 shares personal data with third parties only in the following strictly limited circumstances:
6.1 Service Providers and Data Processors
x222 engages third-party service providers who process personal data on x222's behalf, subject to binding data processing agreements that restrict their use of data to the services they provide to x222. These include:
- Payment processors: EasyPaisa (Telenor Microfinance Bank), JazzCash (Mobilink Microfinance Bank), Raast, and banking partners — for transaction processing only.
- KYC and identity verification providers: Document and facial verification services for age and identity confirmation.
- Fraud prevention services: Anti-fraud and device intelligence providers for account security.
- Cloud infrastructure providers: Secure hosting and data storage services subject to enterprise-level security agreements.
- Customer support platform providers: Live chat technology providers who process communication data on x222's behalf.
6.2 Regulatory and Legal Disclosure
x222 may disclose personal data to regulatory authorities, law enforcement agencies, gaming license regulators, or courts where required to do so by applicable law, regulatory instruction, court order, or where x222 reasonably believes disclosure is necessary to prevent or investigate illegal activity, including money laundering, fraud, or match-fixing in relation to sports betting markets.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of x222's business, personal data may be transferred to the acquiring or successor entity as part of the transaction, subject to the same data protection obligations as set out in this policy. x222 will notify registered members of any such transfer via their registered mobile number or email in advance.
No Data Sales — Ever. x222 has never sold and will never sell personal data belonging to its members to advertising networks, data brokers, or any other commercial third parties for their own marketing purposes. Your EasyPaisa number, CNIC information, and gaming history belong to you.
7 International Data Transfers
x222 operates infrastructure that may involve the transfer of personal data to servers located outside Pakistan. Where such transfers occur, x222 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this policy. These safeguards include standard contractual data protection clauses with receiving entities and, where applicable, reliance on adequacy decisions or equivalent frameworks.
Specifically, personal data transferred to third-party service providers (including KYC verification providers and cloud infrastructure providers) is governed by data processing agreements that require recipients to implement appropriate technical and organisational security measures consistent with applicable international data protection standards.
8 Cookies and Tracking Technologies
8.1 What Cookies x222 Uses
x222 uses cookies and similar tracking technologies on the x222.bid platform. The categories of cookies used are as follows:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session management, login authentication, CSRF protection, load balancing | Session / up to 30 days | No — required for platform to function |
| Functional | Remembering preferences (language, game settings, notification choices) | Up to 12 months | Yes — via cookie settings |
| Performance & Analytics | Anonymised usage statistics, page load performance, error tracking | Up to 24 months | Yes — via cookie settings |
| Security & Fraud Prevention | Device fingerprinting for fraud detection and account security | Up to 12 months | No — required for account protection |
8.2 Managing Cookies
You may manage non-essential cookie preferences through the cookie settings panel accessible from the x222 platform footer. You may also manage cookies through your browser settings; however, disabling certain cookies may impair the functionality of the x222 platform, including login persistence and game session continuity. Note that disabling strictly necessary or security cookies will prevent normal platform operation.
9 Data Retention
x222 retains personal data for the following minimum periods, after which data is securely deleted or anonymised unless extended retention is required by applicable law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML regulatory obligation |
| KYC identity documents | Duration of account + 5 years post-closure | AML/KYC regulatory obligation |
| Financial transaction records | Duration of account + 5 years post-closure | Financial regulatory obligation |
| Gaming activity history | Duration of account + 2 years post-closure | Responsible gaming and dispute resolution |
| Support communications | 3 years from last interaction | Quality, compliance, and dispute resolution |
| Marketing preferences and consent records | Until consent withdrawn + 3 years | Consent and legal obligation |
| Technical/usage logs | 13 months from collection | Security and fraud prevention |
Where extended retention is required beyond the periods above due to active legal proceedings, regulatory investigations, or unresolved disputes, x222 will retain relevant data until the matter is concluded.
10 Security Measures
x222 implements the following technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- Encryption in transit: All data transmitted between your device and x222 servers is protected by 256-bit SSL/TLS encryption. The padlock visible in your browser confirms this protection is active.
- Encryption at rest: Sensitive personal data stored on x222 servers is encrypted using AES-256 encryption.
- Access controls: Access to personal data within x222's systems is restricted on a need-to-know basis. Staff with access rights are subject to confidentiality obligations and regular security training.
- OTP authentication: Login and sensitive account changes are secured through one-time password (OTP) verification sent to your registered Pakistani mobile number.
- Penetration testing: x222's infrastructure undergoes regular third-party penetration testing to identify and remediate security vulnerabilities.
- Incident response: x222 maintains a documented security incident response process. In the event of a data breach affecting your personal data, x222 will notify you and applicable regulatory authorities in accordance with applicable notification obligations.
- Segregated funds: Player funds are held in accounts segregated from x222's operational funds — protecting your PKR balance from business-related risks.
If you believe your x222 account has been compromised or you have identified a security vulnerability on the platform, please contact [email protected] immediately. x222 takes all security reports seriously and will respond within 4 hours to security-related reports.
11 Your Data Protection Rights
As an x222 member, you have the following rights with respect to your personal data. These rights are genuine and exercisable — not aspirational statements. x222 will acknowledge all rights requests within five (5) business days and respond substantively within thirty (30) days, or notify you if a longer period is required.
Right of Access
Request a copy of all personal data x222 holds about you, along with information on how it is being used and with whom it has been shared.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your x222 account. Corrections are applied within 72 hours of verification.
Right to Erasure
Request deletion of personal data that x222 is no longer legally required to retain. Note that regulatory obligations (AML record-keeping) may prevent immediate erasure of certain data.
Right to Restriction
Request that x222 restricts processing of your personal data in specific circumstances — for example, while the accuracy of disputed data is being investigated.
Right to Portability
Request a structured, machine-readable export of personal data you provided to x222, to transfer to another service provider where technically feasible.
Right to Object
Object to processing of your personal data for legitimate interests purposes, including analytics and profiling. Marketing opt-out is always available and takes effect within 48 hours.
To exercise any of these rights, contact x222 at [email protected] with the subject line "Data Subject Request" and include your registered mobile number and account username to enable us to locate your records. x222 will verify your identity before processing any rights request.
12 Children's Privacy and the 21+ Requirement
x222 is strictly an adult platform. The x222 platform is not intended for, directed at, or designed to be used by individuals under the age of 21. x222 does not knowingly collect personal data from individuals under 21.
Where x222 identifies that an account has been created by or is being used by a person under 21, the account will be suspended immediately, all associated funds will be handled in accordance with applicable regulatory requirements, and relevant personal data will be retained only for the period required to comply with legal obligations before being securely deleted.
x222 enforces the 21+ age requirement through identity verification at the point of first significant withdrawal. Parents or guardians who believe a minor may be using x222 should contact [email protected] immediately. For guidance on protecting minors from online gambling, visit Responsible Gaming.
13 Third-Party Links
The x222 platform does not contain links to external third-party websites or services in its main content areas. Where any such links appear (for example, in regulatory references within legal documentation), x222 is not responsible for the privacy practices, data collection methods, or content of those external sites. This Privacy Policy applies solely to the x222 platform at x222.bid and x222's own data processing activities.
Third-party payment provider interfaces (EasyPaisa, JazzCash) accessed during deposit or withdrawal transactions are governed by the respective privacy policies of those providers. x222 recommends reviewing the privacy policies of EasyPaisa (Telenor Microfinance Bank) and JazzCash (Mobilink Microfinance Bank) independently if you have questions about how those providers handle your data.
14 Changes to This Privacy Policy
x222 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform operations. Where changes are material — meaning they substantially affect your rights or how your personal data is processed — x222 will notify registered members via SMS to their registered Pakistani mobile number and/or by a prominent notice on the x222 platform at least fourteen (14) days before the changes take effect.
For non-material amendments (typographical corrections, clarifications that do not alter the substance of the policy, or updates reflecting minor operational changes), the revised policy will be published with an updated effective date and members will be notified at their next login.
The "Effective Date" displayed at the top of this policy indicates when the current version came into force. Previous versions of the x222 Privacy Policy are retained by x222 and are available upon request from support.
15 How to Contact Us
For all privacy-related queries, data subject rights requests, or data protection concerns, please contact x222 through the following channels:
- Email: [email protected] — use subject line "Data Protection Enquiry" or "Data Subject Request"
- Live Chat: Available 24/7 within the x222 platform at x222.bid — identify your request as a privacy matter for routing to the appropriate team
- Response Time: All privacy-related enquiries acknowledged within 5 business days; substantive responses within 30 days
- Business Hours: 24 hours a day, 7 days a week, Pakistan Standard Time (PKT, UTC+5)
This Privacy Policy was last reviewed and updated by x222's data protection and legal team on 1 January 2026. If you have read this policy and still have questions about how x222 handles your personal data, please do not hesitate to contact us — we would rather answer a question than leave a member uncertain about their data.
Your Data is Safe at x222 — Ready to Play?
Now you know exactly how x222 protects your personal and financial data. Pakistan's most trusted online casino platform — EasyPaisa deposits, instant PKR withdrawals, cricket betting, and 500+ slots — secured by everything described in this policy.
Sign In to x222 Learn About x222