1Who We Are
x222 refers to the online gaming and betting platform operated at x222.im. For the purposes of this Privacy Policy, x222 is the data controller — meaning x222 is the entity responsible for deciding how your personal data is collected, used and stored.
x222 operates under an international gaming licence and is subject to the data protection requirements associated with that licence, as well as the terms of its agreements with payment processors and identity verification providers operating in Pakistan.
If you have questions about data control or processing at x222, contact the support team at support@x222.im and direct your query to the Data Privacy team.
2Data We Collect
x222 collects the following categories of personal data, depending on how you use the platform:
2.1 Registration Data
When you create a x222 account, we collect: full name, date of birth, email address, mobile phone number, country of residence and preferred username. This information is necessary to create and maintain your account.
2.2 Identity Verification Data
To comply with AML (Anti-Money Laundering) obligations and verify your age, x222 may request: a copy of your CNIC (Computerised National Identity Card), passport or driving licence, and in some cases a utility bill or bank statement as proof of address. This data is processed by x222's identity verification provider and is not stored in plain text on x222's primary servers.
2.3 Financial Data
x222 collects transaction data including: deposit amounts, deposit method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard), withdrawal requests and withdrawal amounts. x222 does not store your full card number, mobile wallet PIN or banking credentials. Payment processing is handled by secure third-party payment providers.
2.4 Usage & Behavioural Data
x222 collects data about how you use the platform, including: games played, bets placed, session duration, pages visited, click patterns, device type, operating system, browser type and IP address. This data is used to improve the platform, personalise your experience and meet responsible gaming obligations.
2.5 Communications Data
If you contact x222 via live chat, email or any other channel, x222 keeps a record of that communication. This includes chat logs, email threads and any documents shared with the support team during the course of a query or complaint.
| Data Category | Examples | Required? |
|---|
| Registration | Name, DOB, email, phone | Yes — account creation |
| Identity Verification | CNIC, passport scan | Yes — KYC compliance |
| Financial | Deposit/withdrawal records | Yes — AML compliance |
| Usage & Behavioural | Games played, session length | Yes — platform operation |
| Device & Technical | IP address, browser, OS | Yes — security |
| Communications | Support chat logs, emails | When you contact us |
| Marketing Preferences | Email opt-in status | Optional |
3How We Collect Your Data
x222 collects your data through several channels:
- Directly from you: When you register, complete identity verification, make deposits or withdrawals, contact support, or fill in any form on x222.im.
- Automatically during platform use: x222's servers log technical information each time you access the platform — including your IP address, device identifiers, session duration and pages visited. This is standard practice for all online platforms.
- From payment providers: When you make a transaction via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the payment provider shares transaction confirmation data with x222. Your wallet PIN and banking credentials are never shared with or visible to x222.
- From identity verification providers: When you submit verification documents, our KYC (Know Your Customer) provider processes those documents and returns a verification status to x222. The raw document data is handled by the KYC provider under their own data security standards.
- Through cookies and similar technologies: x222.im uses cookies and similar technologies to track sessions, remember preferences and gather analytical data. Full details are in Section 7.
4Why We Use Your Data — Purposes of Processing
Every piece of data x222 collects is used for a specific, defined purpose. Here is a complete breakdown:
- Account creation and management: To register your account, authenticate your logins and manage your profile settings.
- Payment processing: To process deposits and withdrawals via your chosen PKR payment method, and to maintain transaction records.
- Identity verification and AML compliance: To verify your age, confirm your identity and fulfil anti-money laundering obligations required by x222's gaming licence.
- Security: To detect and prevent fraud, account takeovers, bot activity and other security threats. This includes IP monitoring, device fingerprinting and anomaly detection.
- Responsible gaming: To monitor gameplay patterns and identify indicators of problem gambling. x222's responsible gaming tools — deposit limits, session reminders and self-exclusion — require usage data to function correctly.
- Customer support: To handle your queries, complaints and requests effectively. Support logs are retained to maintain consistency if you contact us multiple times about the same issue.
- Platform improvement: To understand how players use x222 and identify areas for improvement — which games are most popular, where players encounter difficulties, which features are underused.
- Marketing communications: To send you promotional offers, bonus notifications and platform updates — but only if you have opted in to receive marketing communications. You can opt out at any time.
- Legal and regulatory obligations: To comply with requirements from x222's licensing authority, payment regulators and law enforcement where legally required.
5Legal Basis for Processing Your Data
x222 processes your personal data on one or more of the following legal bases, depending on the specific purpose:
- Contractual necessity: Processing your registration data, payment data and usage data is necessary to provide the services you signed up for. Without this processing, x222 cannot operate your account.
- Legal obligation: Identity verification and transaction record-keeping are required by x222's gaming licence and applicable AML regulations. x222 cannot waive these requirements even if you request it.
- Legitimate interests: x222 processes technical and usage data for security, fraud prevention and platform improvement under its legitimate interest in operating a safe, functional platform. This processing is balanced against your right to privacy and does not override it.
- Consent: Marketing communications are sent only on the basis of your explicit consent. You can withdraw consent at any time via your account settings or by contacting support.
6Who We Share Your Data With
x222 does not sell your personal data. Data is shared with third parties only in the following circumstances:
6.1 Payment Processors
When you make a deposit or request a withdrawal, x222 shares the necessary transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks, or Visa/Mastercard networks. These providers process transaction data under their own privacy policies and are subject to their own regulatory obligations.
6.2 Identity Verification Providers
x222 uses a third-party KYC (Know Your Customer) service to verify identity documents. Document images and extracted data are processed by this provider under strict data handling agreements with x222. Verification results — pass or fail — are returned to x222.
6.3 Hosting and Infrastructure Providers
x222's platform runs on cloud infrastructure hosted by reputable providers operating under appropriate data processing agreements. These providers store and process x222's data as data processors acting under x222's instructions.
6.4 Regulatory Authorities
x222 may be required to share account or transaction data with its licensing authority, financial intelligence units or law enforcement agencies where legally required to do so. x222 will comply with lawful data requests and will notify affected players where permitted by law.
6.5 Legal Proceedings
If x222 is involved in legal proceedings or is required to enforce its Terms and Conditions, personal data may be disclosed to legal advisers or courts to the extent necessary and proportionate.
Never Sold: x222 does not share your personal data with advertising networks, data brokers or third-party marketers. Your data stays within the operational framework described above.
7Cookies & Tracking Technologies
x222.im uses cookies and similar browser-based technologies. A cookie is a small text file stored on your device when you visit a website. Cookies help x222 remember your session, maintain your login status and understand how the platform is used.
| Cookie Type | Purpose | Duration | Can be Disabled? |
|---|
| Essential | Session management, login authentication, security tokens | Session / 30 days | No — required for platform function |
| Functional | Remembering language and display preferences | 90 days | Yes — some features may be affected |
| Analytics | Aggregated usage statistics, page performance monitoring | Up to 13 months | Yes — opt out via account settings |
x222 does not use third-party advertising cookies or allow ad networks to place tracking cookies on x222.im. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your x222 account.
8How x222 Keeps Your Data Secure
Security is not an afterthought at x222 — it is a core part of how the platform is built and maintained. Here are the specific security measures in place:
- 256-bit SSL encryption: All data transmitted between your browser or mobile device and x222.im is encrypted using TLS 1.3 with 256-bit AES encryption. The padlock icon in your browser confirms this connection is active.
- Encryption at rest: Sensitive data stored in x222's databases — including identity verification records and financial data — is encrypted using AES-256 at rest. Plain-text storage of sensitive data is not permitted by x222's security policy.
- Two-factor authentication (2FA): x222 strongly recommends enabling 2FA on your account. This adds a second layer of protection by requiring a one-time code in addition to your password at each login.
- Access controls: Access to player data within x222's systems is restricted to staff who require it for their specific role. Data access is logged, audited and reviewed regularly.
- Regular security audits: x222's security infrastructure is reviewed by independent third-party security firms on a regular basis. Identified vulnerabilities are addressed according to a formal remediation process.
- Incident response: x222 has a documented data breach response plan. In the event of a breach that affects player data, x222 will notify affected players and relevant authorities as required by its licensing obligations.
Your Role in Security: x222's security measures protect data at the platform level. Your account's security also depends on you keeping your password private, enabling 2FA and logging out from shared devices. x222 will never ask for your password by email, chat or phone.
9Your Data Rights
As a x222 account holder, you have the following rights in relation to your personal data. These rights can be exercised by contacting x222 support at support@x222.im with the subject line "Data Rights Request".
Right of Access
You can request a copy of all personal data x222 holds about you. Requests are processed within 30 days.
Right to Rectification
If any personal data x222 holds about you is inaccurate or incomplete, you can request a correction.
Right to Erasure
You can request deletion of your personal data. This is subject to legal retention obligations — x222 must retain certain records for AML compliance even after account closure.
Right to Object
You can object to processing based on legitimate interests, including direct marketing (which will stop immediately upon request).
Right to Portability
You can request your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Restrict Processing
In certain circumstances, you can request that x222 pauses processing of your data while a dispute or review is ongoing.
10Data Retention
x222 retains your personal data for the following periods:
- Active accounts: Data is retained for the lifetime of your account plus the mandatory post-closure retention period.
- Post-closure retention: Following account closure, x222 retains identity verification records, transaction records and account history for a minimum of 5 years, as required by AML regulations applicable under x222's gaming licence.
- Support communications: Support chat logs and email correspondence are retained for 3 years from the date of the communication, or longer if related to an ongoing dispute or regulatory matter.
- Dormant account data: Data associated with dormant accounts (no login activity for 12+ months) is retained under the same schedule as active accounts. x222 will contact the registered email address before applying dormancy status.
- Marketing data: If you withdraw consent for marketing communications, your marketing preferences are updated immediately and marketing data is removed from active distribution lists. Your core account data is retained separately under the schedules above.
Once the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be linked to your identity.
11Children's Privacy
x222 is strictly for adults aged 18 and over. x222 does not knowingly collect personal data from anyone under the age of 18. If you believe a minor has registered on x222 or submitted personal data to x222, please contact support immediately at support@x222.im.
Upon receiving a report or discovering that a minor has created an account, x222 will immediately close the account, void any bets placed and return any deposited funds to the relevant payment method. All data associated with the minor's account will be deleted as promptly as legal obligations allow.
12Marketing Communications
x222 sends promotional emails, SMS notifications and on-platform messages to players who have opted in to receive marketing communications. You can opt in during registration or at any time via your account settings. You can opt out at any time by:
- Updating your communication preferences in your x222 account settings.
- Clicking the "Unsubscribe" link in any marketing email from x222.
- Contacting x222 support and requesting removal from marketing lists.
Opt-out requests are processed within 48 hours. After opting out, you will still receive essential transactional communications — deposit confirmations, withdrawal notifications, security alerts — as these are necessary for account operation and cannot be turned off.
13Third-Party Links and Services
x222.im may contain links to third-party content where relevant. x222 is not responsible for the privacy practices of third-party websites or services. This Privacy Policy applies only to x222.im and its related services. If you follow a link to a third-party site, that site's own privacy policy applies and you should review it before providing any personal information.
14Changes to This Privacy Policy
x222 reviews this Privacy Policy regularly and will update it when necessary — for example, when we introduce new data processing activities, when legal requirements change, or when we add new payment methods or services.
When material changes are made, x222 will notify registered players via the email address on their account at least 14 days before the changes take effect. The date of the most recent update is shown at the top of this page. Continuing to use x222 after the effective date of an update constitutes your acceptance of the revised policy.
For minor, non-material changes — such as correcting a typographical error or clarifying existing language without changing substance — x222 may update the policy without prior notification. The updated date will be revised to reflect the change.
15How to Contact x222 About Privacy
If you have questions, concerns or requests related to this Privacy Policy or your personal data, contact x222's support team:
- Email: support@x222.im (subject line: "Privacy / Data Request")
- Live Chat: Available 24/7 on x222.im — ask to speak with the data privacy team
- Response time: Privacy and data requests are handled within 5 business days
For access requests, erasure requests or complaints about how x222 has handled your data, please include your account username, registered email address and a clear description of your request. The more specific you are, the faster x222 can respond.
