b222 Privacy Policy

1. Introduction

This Privacy Policy (hereinafter "Policy") is issued by b222 (hereinafter "b222", "we", "us" or "our") and applies to all personal data collected from users (hereinafter "User", "you" or "your") of the b222 website accessible at https://b222.cam and all associated services, features and products offered therein.

b222 is committed to protecting the privacy of all individuals who interact with our platform. This Policy sets out in clear terms what personal data we collect, the purposes for which it is processed, the legal basis for that processing, how it is stored and protected, with whom it may be shared, and the rights you may exercise in respect of your personal data.

By accessing the b222 platform, registering an Account, or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the practices described here, you must not access or use the b222 platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, b222.
• "Data Processor" means any third party that processes Personal Data on behalf of b222 under contract.
• "KYC" means Know Your Customer — identity-verification procedures required under b222's compliance obligations.
• "Cookies" means small text files placed on your device by the b222 website to store session and preference data.
• "Services" means all products, features, betting markets, casino games, promotional offers and support functions available on the b222 platform.

3. Data Controller

b222 acts as the Data Controller in respect of Personal Data collected through the b222 platform. As Data Controller, b222 is responsible for determining why and how your Personal Data is processed, and for ensuring that processing is carried out lawfully, fairly and transparently in accordance with applicable data-protection law.

b222 operates under international licensing arrangements applicable to the operator's home jurisdiction. The data-protection framework governing this Policy is that of the operator's licensing jurisdiction. References to data subjects' rights below are provided in good faith; the specific statutory rights available to you may vary depending on the data-protection laws applicable in your place of residence.

4. Categories of Personal Data We Collect

Depending on how you interact with b222, we may collect the following categories of Personal Data:

4.1 Identity & Registration Data

Collected during account registration and KYC verification. Required to confirm your identity, verify your age and comply with anti-money-laundering obligations.

4.2 Contact Data

Used for account communications, promotional messages (where you have consented), security alerts and support correspondence. Pakistani users may provide city references such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar as part of their address data.

4.3 Financial & Transaction Data

Recorded for every transaction on the platform. Payment method identifiers (such as partial account numbers or wallet references linked to services like Easypaisa, JazzCash or Raast — referenced as familiar Pakistani payment rails only) are stored in encrypted form. Full payment credentials are not stored on b222 servers.

4.4 Technical & Usage Data

Collected automatically when you access the platform. Used for fraud prevention, responsible-gambling monitoring, platform performance optimisation and compliance with jurisdictional access restrictions.

4.5 Responsible Gambling Data

Recorded to operate the responsible-gambling tools you activate on your account and to fulfil obligations under the operator's licensing requirements.

4.6 Communications Data

Records of your communications with b222 support — including live-chat transcripts and email exchanges — are retained for quality assurance, dispute resolution and compliance purposes.

5. How We Collect Personal Data

b222 collects Personal Data through the following means:

• Direct Provision: Data you provide during registration, KYC, deposit/withdrawal processes, support interactions or promotional opt-ins.
• Automated Collection: Technical data collected automatically via cookies, server logs and session-tracking technologies when you access the platform.
• Third-Party Sources: Identity-verification and KYC data may be supplemented by data from identity-verification service providers, fraud-detection systems and credit-reference agencies as permitted by applicable law.
• Payment Processors: Transaction confirmation data from payment-processing partners. b222 does not receive full payment credential details — only the minimum data required to confirm and record transactions.

6. Legal Basis for Processing

b222 processes your Personal Data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to operate your Account, process transactions and deliver the Services you have requested.
• Legal Obligation: Processing required to comply with anti-money-laundering regulations, KYC obligations, age-verification requirements and any applicable regulatory directives under b222's licensing jurisdiction.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible-gambling monitoring and improving platform performance — where our interests do not override your fundamental rights.
• Consent: Where you have explicitly opted in to receive marketing communications or where consent is the applicable legal basis under the data-protection law of your jurisdiction. Consent may be withdrawn at any time.

7. How We Use Your Personal Data

b222 uses the Personal Data we collect for the following purposes:

• To create, verify and manage your Account, including KYC identity verification.
• To process deposits, withdrawals and all financial transactions on the platform.
• To provide, maintain and improve the b222 platform and its features, including sports betting markets, casino games and live dealer products.
• To detect, prevent and investigate fraud, money laundering, collusion, multi-accounting and other prohibited conduct.
• To enforce our Terms & Conditions and fulfil our obligations under applicable law and our licensing arrangements.
• To operate responsible-gambling tools, including limit monitoring, self-exclusion management and player-protection interventions where required.
• To send you transactional communications — account notifications, security alerts, withdrawal confirmations and support responses.
• To send promotional communications where you have given valid consent, and to personalise offers based on your activity on the platform. You may opt out at any time.
• To comply with requests from regulatory bodies, law-enforcement agencies or courts of competent jurisdiction, where legally required.

8. Data Sharing & Disclosure

b222 does not sell your Personal Data to third parties for their independent marketing purposes. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Identity Verification Providers: Third-party KYC and age-verification service providers who assist in confirming the identity and eligibility of Users.
• Payment Processors: Payment-processing partners who handle transaction execution. These providers process data under their own terms and applicable financial-services regulations.
• Fraud Prevention & Security Services: Providers of fraud-detection, anti-money-laundering screening and cybersecurity services who process data under contract with b222.
• Technology & Hosting Providers: Cloud infrastructure and platform-hosting providers who store and process data on behalf of b222 as Data Processors.
• Regulatory & Law-Enforcement Authorities: Where b222 is legally required to disclose data in response to a valid court order, regulatory request or law-enforcement demand, we will comply to the extent legally required.
• Professional Advisers: Lawyers, auditors and compliance consultants who assist b222 in maintaining its legal and regulatory obligations, subject to professional confidentiality obligations.

9. International Data Transfers

b222 operates internationally, and your Personal Data may be transferred to and processed in countries other than your country of residence — including countries that may not provide the same level of data-protection as your home jurisdiction.

Where such transfers occur, b222 takes steps to ensure that appropriate safeguards are in place in accordance with applicable data-protection law. These may include contractual clauses between b222 and the receiving entity that impose equivalent data-protection obligations. By using the b222 platform, you acknowledge that your data may be processed outside Pakistan and outside the jurisdiction of b222's primary licence.

10. Data Retention

b222 retains Personal Data for no longer than is necessary for the purposes for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active Account plus a minimum retention period following Account closure, as required by the operator's licensing jurisdiction for audit and regulatory purposes.
• Transaction Data: Financial transaction records are retained for the period required under applicable anti-money-laundering and financial-services regulations — typically a minimum of five years from the date of the transaction.
• KYC Documents: Identity-verification documents are retained for the period required by applicable AML/KYC regulations in the operator's licensing jurisdiction.
• Communications Data: Support correspondence and live-chat records are retained for a period sufficient to enable dispute resolution and quality assurance, typically up to three years.
• Marketing Data: Retained until you withdraw consent or as required by applicable direct-marketing regulations, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with b222's data-deletion procedures.

11. Data Security

b222 implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• Industry-standard TLS/SSL encryption for all data transmitted between your device and the b222 platform.
• Encryption at rest for sensitive Personal Data, including financial records and identity documents.
• Access controls ensuring that Personal Data is accessible only to authorised personnel with a documented business need.
• Regular security assessments and penetration testing of the platform infrastructure.
• Incident-response procedures for detecting, containing and reporting personal-data breaches in accordance with applicable regulatory requirements.

12. Cookies & Tracking Technologies

The b222 website uses cookies and similar tracking technologies to operate certain platform functions, remember your preferences, analyse usage patterns and deliver a consistent user experience. Cookies used on b222 include:

• Strictly Necessary Cookies: Required for the platform to function. These cannot be disabled without impacting core features such as login sessions and security controls.
• Functional Cookies: Remember your preferences, language settings and responsible-gambling limit configurations between sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users navigate the platform, helping b222 identify areas for improvement. These cookies do not identify you personally.
• Marketing Cookies: Used to serve relevant promotional content where you have consented. These may track activity across sessions to inform personalisation.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect certain platform features but will not prevent you from accessing core Services. Strictly necessary cookies cannot be disabled through browser controls.

13. Your Data Rights

Subject to applicable data-protection law in your jurisdiction, you may have the following rights in respect of your Personal Data held by b222. To exercise any of these rights, please contact us using the details in Section 17.

b222 will respond to data-rights requests within a reasonable timeframe in accordance with applicable law — typically within 30 calendar days of receipt of a valid, verified request. Identity verification will be required before b222 acts on any data-rights request, to protect against unauthorised access to your information.

14. Children's Privacy

The b222 platform is strictly for adults aged 18 or over, or the higher minimum age required by the operator's licensing jurisdiction. b222 does not knowingly collect Personal Data from any individual under the applicable minimum age. If b222 becomes aware that Personal Data has been collected from an underage individual, that Account will be suspended immediately, all data will be handled in accordance with applicable law, and balances will be dealt with per the operator's underage-access procedures.

If you believe that a person under the minimum age has provided Personal Data to b222 or has access to an Account, please contact our support team immediately so that we can take appropriate action.

15. Pakistani Users — Local Context

b222 serves users located in Pakistan and has designed its platform with Pakistani users in mind. The following context is relevant to Pakistani users specifically:

• b222 is not regulated by, affiliated with, or authorised by the Government of Pakistan, PTA, SBP, any provincial authority or any Pakistani financial institution — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah. These payment method names appear on this site as familiar Pakistani payment references only.
• Pakistani data-protection law is developing. The Personal Data Protection Bill (where applicable) and any associated regulations may impose obligations on both the operator and the user. This Policy is not a legal opinion on how Pakistani data law applies to your specific situation.
• Data submitted to b222 may be stored and processed outside Pakistan on servers in the operator's licensing jurisdiction and other jurisdictions. By using the platform, you acknowledge this cross-border processing.
• b222 does not share your Personal Data with Pakistani government authorities unless required to do so by a valid legal order from a competent court or authority with jurisdiction over b222.

16. Amendments to This Policy

b222 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Users via email or in-platform notification before the change takes effect. The effective date displayed at the top of this page will be updated accordingly.

Your continued use of the b222 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the platform and contact support to close your Account.

17. Contact Us

For any questions, requests or concerns regarding this Privacy Policy, the processing of your Personal Data, or the exercise of your data rights, please contact the b222 Data Protection team:

Email (plain text — not a clickable link): [email protected]

Please include your registered username, the specific nature of your enquiry and, where relevant, your preferred contact email address. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days, subject to identity verification.

For queries relating specifically to account limits, self-exclusion or responsible-gambling tools, please visit our dedicated Responsible Gambling page for a full overview of available options.