Data Protection · Your Rights · Transparency

Privacy Policy – CD22 Pakistan Player Data Protection

CD22 takes your privacy seriously. This policy explains exactly what personal information we collect, why we need it, how we keep it secure, and what rights you have over your own data. It is written in plain English — no legal jargon designed to confuse you.

Last Updated: 2025 256-bit SSL Your Data, Your Rights Never Sold to Third Parties

CD22's Six Privacy Principles

The foundation of how CD22 handles every Pakistani player's personal information

Purpose Limited

We only collect data we actually need to run your CD22 account and process your PKR transactions.

Minimal Collection

CD22 collects the minimum information necessary — nothing extra, nothing unnecessary.

Accurate Data

You can update your personal details at any time. CD22 keeps records current and corrects errors promptly.

Secure Storage

All CD22 data is encrypted at rest and in transit. Access is restricted to authorised personnel only.

Time Limited

Personal data is not kept longer than legally required or operationally necessary.

Transparent

CD22 tells you exactly what data we hold, why we hold it, and how you can request changes or deletion.

cd22
Effective Date: 1 January 2025  ·  Version 2.0

This Privacy Policy applies to the CD22 platform, operated at cd22.life and all associated subdomains, mobile browser interfaces and related services. It explains in full how CD22 collects, processes, stores, protects and shares the personal information of players registered or interacting with the platform. By creating a CD22 account or continuing to use the platform, you confirm that you have read and accepted this policy. If any part of it is unclear, contact the CD22 support team — they are available 24/7 via live chat.

1. Overview – Why CD22 Has a Privacy Policy

CD22 is committed to handling the personal information of its Pakistani players with care, transparency and respect. Every time you interact with CD22 — whether you are registering, depositing, playing a game, contacting support or simply browsing the site — some form of data is generated. This policy tells you what that data is, what happens to it, and what rights you have in relation to it.

The core principle is straightforward: CD22 only collects information that is genuinely necessary to run a safe, functional and fair gaming platform. We do not collect information speculatively. We do not sell your data to advertisers. We do not share it with anyone who does not have a legitimate need to see it in order to process your transactions or maintain your account.

In plain terms: Your personal information is used to run your CD22 account, process your PKR payments, verify your identity when required, and keep the platform secure. That is it. No hidden uses, no background data profiling for sale to third parties.

2. What Personal Information CD22 Collects

The information CD22 collects depends on how you interact with the platform. The categories below cover the full range of data types that may be collected across your account lifecycle:

Data CategorySpecific ExamplesWhen Collected
Identity DataFull name, date of birth, CNIC or passport numberRegistration & identity verification
Contact DataMobile number, email addressRegistration
Account DataUsername, account ID, login history, session timestampsOngoing account use
Financial DataDeposit and withdrawal history, transaction IDs, payment method typeEach deposit/withdrawal
Gaming DataGame history, bet amounts, win/loss records, bonus usageEach game session
Technical DataIP address, device type, browser type, OS, network providerEach platform session
Support DataChat transcripts, complaint records, email correspondenceWhen you contact support
Verification DocumentsCNIC copy, utility bill (if address verification required)KYC verification process

CD22 does not collect sensitive categories of personal data such as health information, political views, racial or ethnic origin, or religious beliefs. The only partial exception is in the context of responsible gaming, where you may voluntarily share information about your gaming habits when using self-exclusion or limit-setting tools — this information is used solely to apply the tools you have requested.

3. How CD22 Collects Your Information

CD22 collects personal information through three main channels:

  • Directly from you: Information you provide when registering your CD22 account, completing identity verification, making deposits or withdrawals, claiming bonuses, filling in contact forms, or communicating with the support team.
  • Automatically through platform use: Technical data generated as you browse and use CD22 — including your IP address, device identifiers, session logs and cookie data. This happens in the background whenever you are logged into or browsing the CD22 platform.
  • From third-party service providers: Payment processors (such as Easypaisa, JazzCash and banking partners) share transaction confirmation data with CD22. Identity verification services may share verification results. These data flows are covered in Section 5.

⚠️ CD22 will never ask for your account password through email, live chat or any other channel. If you receive any communication claiming to be from CD22 that requests your password, treat it as fraudulent and report it to the support team immediately.

4. How CD22 Uses Your Personal Information

CD22 uses your personal information for specific, lawful purposes. Every use listed below is necessary to either provide the CD22 service, comply with legal obligations, or protect the legitimate interests of players and the platform:

  • Account management: Creating and maintaining your CD22 player account, processing login requests, managing account settings and preferences.
  • Transaction processing: Processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard; processing withdrawal requests to verified payment methods; maintaining transaction records.
  • Identity verification (KYC): Verifying that you are who you say you are and that you meet the 18+ age requirement before processing withdrawals. This is a legal obligation, not optional.
  • Platform security and fraud prevention: Detecting and investigating suspicious activity, preventing duplicate accounts, identifying unusual betting patterns, and protecting the platform from exploitation.
  • Customer support: Responding to your queries, complaints and requests; maintaining records of communications to ensure consistency and quality of service.
  • Responsible gaming: Applying deposit limits, loss limits, session alerts and self-exclusion settings that you have activated on your account.
  • Legal and regulatory compliance: Fulfilling CD22's obligations under applicable laws, including financial record-keeping requirements and responses to lawful requests from regulatory or law enforcement authorities.
  • Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use CD22 and to improve the platform experience. This analysis does not involve identifiable personal data.

What CD22 does NOT do with your data: We do not sell it, rent it, or share it with advertising networks. We do not use it to build marketing profiles about you. We do not share it with other gaming platforms. We do not use automated decision-making that produces significant effects on your account without human oversight.

5. Who CD22 Shares Your Data With

CD22 shares personal data only with third parties that have a legitimate and necessary role in delivering the CD22 service. Every third party we work with is subject to data processing agreements that restrict what they can do with your information.

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks (Visa/Mastercard) receive the minimum transaction data required to process your deposits and withdrawals in PKR. They operate under their own privacy policies and are subject to Pakistani financial regulations.
  • Identity verification providers: Third-party KYC services receive the identity documents you submit during the verification process. They return a verification result to CD22 and do not retain your documents beyond the period required by their own legal obligations.
  • Game software providers: When you play a game on CD22, the relevant game provider may log certain technical data (such as your session ID and bet/win records) for the purpose of delivering the game and maintaining its integrity. They do not receive your identity or contact information.
  • IT infrastructure providers: Cloud hosting and security services that maintain the technical infrastructure on which CD22 operates. These providers are contractually prohibited from using your data for any purpose other than providing the infrastructure service.
  • Legal and regulatory authorities: CD22 will disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, or where necessary to protect the rights and safety of CD22 players and staff.

CD22 does not transfer personal data outside of the jurisdictions where it is operationally necessary to do so for the purposes described above. Where any cross-border data transfer does occur, CD22 ensures appropriate safeguards are in place.

cd22
6. Payment Data & PKR Transactions

All financial transactions on CD22 are denominated in Pakistani Rupees (PKR). When you deposit or withdraw funds, CD22 records the transaction amount, the payment method type, the transaction reference number and the timestamp. CD22 does not store your full Easypaisa or JazzCash account credentials, full bank account numbers or full card numbers. Payment method details are tokenised by the relevant payment processor before reaching CD22's systems.

Transaction records are retained for a minimum of five years from the date of the transaction in order to comply with financial record-keeping requirements. These records are used for audit purposes, dispute resolution and legal compliance only — not for marketing or profiling.

Your PKR transaction security: CD22 uses SSL-encrypted connections for all payment flows. Every transaction is logged with a unique reference ID that allows the support team to investigate any discrepancies quickly and transparently. If you ever believe a transaction on your CD22 account was unauthorised, contact support immediately.

7. How CD22 Keeps Your Data Secure

CD22 takes the security of Pakistani player data seriously and implements multiple layers of protection. These include both technical measures and organisational policies:

  • Encryption in transit: All data transmitted between your device and the CD22 platform is protected by 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this connection is secure.
  • Encryption at rest: Personal data stored on CD22's servers is encrypted at rest. Database access requires authenticated credentials and is logged for audit purposes.
  • Access controls: CD22 staff access to personal data is restricted on a strict need-to-know basis. Support agents can see only the account information necessary to resolve your query. They cannot access payment method credentials.
  • Fraud monitoring: An automated system monitors all account activity in real time for patterns associated with fraud, account takeover or unusual behaviour. Suspicious activity triggers an immediate review.
  • Two-factor authentication: CD22 offers optional two-factor authentication for all player accounts. Activating it from your account settings adds a significant layer of protection against unauthorised access.
  • Regular security reviews: CD22's security infrastructure is subject to regular internal review and periodic external assessment to identify and address vulnerabilities.

Despite these measures, no online system can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, CD22 will notify affected players promptly and take immediate steps to contain and assess the situation.

8. How Long CD22 Keeps Your Data

CD22 does not keep personal data longer than necessary for the purpose for which it was collected, or longer than required by applicable legal obligations. The following retention periods apply:

  • Account data: Retained for the lifetime of your active CD22 account, plus a minimum of five years after account closure (to comply with financial and legal record-keeping requirements).
  • Transaction records: Retained for a minimum of five years from the date of each transaction.
  • Identity verification documents: Retained for the minimum period required by applicable legal obligations, typically five years from account closure.
  • Customer support communications: Retained for three years from the date of each interaction, to allow for complaint escalation and quality review.
  • Technical and log data: Typically retained for 12 months, after which it is anonymised or deleted.
  • Marketing preferences: Retained until you withdraw consent or request deletion — whichever comes first.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player.

9. Cookies and Similar Technologies

CD22 uses cookies and similar browser technologies to make the platform function correctly, to remember your preferences and to understand how the platform is being used. A cookie is a small file placed on your device when you visit a website. It does not give CD22 access to your device or to any data stored on it beyond what the cookie itself contains.

CD22 uses three categories of cookies:

Essential Cookies Functional Cookies Analytics Cookies
  • Essential cookies: Required for the CD22 platform to work at all. They manage your logged-in session, maintain security tokens and process your account actions. You cannot use CD22 without these cookies and they cannot be disabled.
  • Functional cookies: Remember your preferences — such as language settings, stake preferences and lobby filters — so you do not have to reset them every session. These improve your CD22 experience but are not strictly required for the platform to function.
  • Analytics cookies: Collect anonymised, aggregated data about how players navigate and use CD22, which helps the product team identify areas for improvement. This data cannot be linked to any individual player. CD22 does not use third-party advertising tracking cookies.

You can control functional and analytics cookies through your browser settings. Disabling essential cookies will prevent CD22 from functioning correctly. Most browsers allow you to view, block or delete cookies through the settings or preferences menu.

Quick Facts
  • No data sold to advertisers
  • 256-bit SSL encryption
  • PKR transactions only
  • Minimal data collection
  • 5-year retention max
  • Right to access & delete
  • 18+ identity verified
  • 24/7 support access

Want to know what data CD22 holds about you?

Visit FAQ

10. Your Data Rights as a CD22 Player

These are not theoretical rights — they are practical ones you can exercise at any time by contacting the CD22 support team

Right of Access

You can request a complete copy of all personal data CD22 holds about you. CD22 will provide this within 30 days of a verified request. There is no charge for a standard access request.

Right to Correct

If any information CD22 holds about you is inaccurate or out of date, you can request a correction at any time. Most contact and account details can be updated directly in your CD22 account settings.

Right to Erasure

You can request deletion of your personal data. CD22 will comply unless retention is required by law (for example, financial transaction records must be kept for five years). Deletion requests will be processed within 30 days.

Right to Restrict Processing

You can ask CD22 to pause processing of your personal data while a dispute or query is being resolved. During any restriction period, CD22 will continue to store your data but will not actively process it for other purposes.

Right to Data Portability

You can request a copy of your personal data in a structured, machine-readable format (such as CSV). This right applies to data you provided directly to CD22 and which is processed based on your consent.

Right to Withdraw Consent

Where CD22 processes your data based on your consent (such as for optional communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

How to exercise your rights: Contact the CD22 support team via live chat or by emailing support@cd22.life. Please provide your account username and a clear description of the request. CD22 may need to verify your identity before processing certain types of requests. All rights requests are acknowledged within 48 hours and resolved within 30 days.

cd22
11. Children and Minors

CD22 is strictly an 18+ platform. CD22 does not knowingly collect personal information from anyone under the age of 18. If you are under 18, you are not permitted to create a CD22 account, make deposits or participate in any gaming activity on the platform.

If CD22 becomes aware that personal data has been collected from a person under 18 — through account verification, a complaint from a third party, or any other means — that account will be immediately suspended, all funds will be returned to the depositing payment method, and all associated personal data will be deleted as quickly as possible.

Parents and guardians who have concerns that a minor may be using CD22 should contact the support team immediately via live chat. CD22 will respond promptly and take appropriate action.

12. Changes to This Privacy Policy

CD22 may update this Privacy Policy periodically to reflect changes in applicable law, changes to the platform's services or improvements in our data protection practices. The effective date at the top of this page will always show when the current version took effect.

When material changes are made to this policy, CD22 will notify registered players via email or via an in-platform notification at next login. Continuing to use CD22 after the effective date of a revised policy constitutes acceptance of the updated terms. If you do not agree with any change, you may close your account by contacting the support team before the revised version takes effect.

We encourage Pakistani players to check this page periodically — particularly if you have questions about how your data is being handled. The policy is always available via the link in the CD22 footer.

13. How to Contact CD22 About Privacy

If you have any question about this Privacy Policy, want to exercise any of your data rights, or need to raise a concern about how CD22 has handled your personal information, please get in touch using one of the options below. CD22's support team is available 24 hours a day, seven days a week.

Live Chat

Available 24/7 directly on the CD22 platform. Typical response time under 3 minutes. Best for urgent account or transaction queries.

Email

support@cd22.life — for formal data rights requests and written complaints. Acknowledged within 24 hours, fully resolved within 30 days.

Related policies: This Privacy Policy should be read alongside the CD22 Terms and Conditions and the Responsible Gaming page, which together form the complete framework governing your use of the CD22 platform.

Related Pages
Terms & Conditions Responsible Gaming About CD22 FAQ
Quick Rights Reference
  • Access your data anytime
  • Correct inaccurate info
  • Request full deletion
  • Withdraw consent
  • 30-day resolution SLA

How CD22 Protects Pakistani Player Privacy in Practice

Beyond this policy document — the real-world measures CD22 applies every single day

No Advertising Tracking on CD22

CD22 does not use third-party advertising tracking pixels, retargeting scripts or data management platforms that build profiles about you for advertising purposes. The cookies on CD22 are there to make the platform work and improve your experience — not to follow you around the internet after you log out.

Payment Data Stays Tokenised

When you deposit via Easypaisa, JazzCash or any card, CD22 never sees your full account number or card details. Payment processors tokenise this data before it reaches CD22. This means even in the very unlikely event of a security incident on CD22's side, your payment credentials are not exposed.

Staff Access Is Strictly Limited

Not every CD22 team member can access your personal data. Access rights are assigned based on what each role genuinely needs. A support agent helping you with a game query sees your gaming history but not your full identity documents. This compartmentalisation reduces the risk of internal data exposure significantly.

Comfortable With How CD22 Handles Your Data? Join Today

Register free in under two minutes. Deposit in PKR via Easypaisa or JazzCash. Your data is protected from day one.

Register Free

Questions About Your CD22 Privacy? We Are Here 24/7

Whether you want to exercise a data right, ask about a specific data use, or just want to understand something in this policy better — the CD22 support team responds in under three minutes.