dc22 Privacy Policy

01 Introduction & Scope

This Privacy Policy ("Policy") describes how dc22 ("the Company", "We", "Us", "Our") collects, processes, stores, shares, and protects the personal information of individuals ("Player", "User", "You") who access or use the dc22 platform available at dc22.bet.

This Policy applies to all personal data collected through the dc22 website, mobile-optimised platform, live chat support system, email communications, and any other service operated by dc22. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

By registering an account, using the dc22 platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

02 Personal Data We Collect

dc22 collects personal data through several channels — registration forms, account activity, payment processing, customer support interactions, and automatic technical logs. The specific categories of data we collect are outlined below.

dc22 does not knowingly collect data from individuals under the age of 21. If we become aware that a minor has provided personal information, the account will be suspended immediately and all associated data will be deleted.

03 Legal Basis for Processing

dc22 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and game access.
• Legal Obligation: Certain processing activities are mandatory under applicable anti-money-laundering (AML), know-your-customer (KYC), and international gaming licence compliance frameworks.
• Legitimate Interests: We process some data to protect the integrity of the platform, prevent fraud, improve our services, and maintain secure systems — where such interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, to send promotional communications — you may withdraw that consent at any time by contacting support or updating your notification preferences.

04 How dc22 Uses Your Personal Data

The personal data dc22 collects is used for the following specific purposes:

• Account Management: Creating, verifying, and maintaining your dc22 player account, including password resets and identity verification.
• Payment Processing: Executing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Debit Card, and USDT TRC20, and maintaining transaction records.
• Regulatory Compliance: Meeting KYC, AML, and responsible gaming obligations required under international gaming licence standards — including age verification to ensure all players are 21 or older.
• Fraud & Security: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: Responding to your queries, complaints, and feedback through live chat and email at the address listed on our contact page.
• Platform Improvement: Analysing aggregated usage data to understand player behaviour, improve game selection, and optimise the overall experience on dc22.
• Responsible Gaming: Monitoring account activity to identify potential problem gambling behaviour and applying self-exclusion or limit tools as requested by the player.
• Marketing Communications: Sending promotional offers, bonus alerts, and platform updates — only where you have opted in to receive such communications. You may opt out at any time.

05 Data Sharing & Third Parties

dc22 does not sell, rent, or trade your personal information. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Processors: Financial service providers including JazzCash, EasyPaisa, and banking partners receive only the data strictly necessary to process your transactions securely.
• Identity Verification Services: Third-party KYC providers may process identity documents on our behalf under strict data-processing agreements that prohibit further use of your data.
• Game Software Providers: Casino and sports-betting software vendors may receive anonymised session and usage data to support fair game operation and RTP auditing. No personally identifiable information is shared for this purpose.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law or where we believe disclosure is necessary to protect our legal rights or the safety of our users.
• Professional Advisors: Lawyers, auditors, and compliance consultants engaged by dc22 may access relevant personal data subject to professional confidentiality obligations.

All third-party service providers engaged by dc22 are contractually bound to process personal data only for the purposes specified, to maintain appropriate security standards, and to delete or return data upon termination of the service relationship.

06 Cookies & Tracking Technologies

dc22 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core platform functionality.
• Performance Cookies: Collect anonymised data about how players navigate the platform — such as which game categories are most visited — to help us improve page speed and usability.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and notification choices to personalise your experience on subsequent visits.
• Analytics Cookies: Used internally to understand aggregate usage patterns. dc22 does not share analytics data with external advertising networks.

You can manage or disable cookies through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from logging into your dc22 account or accessing certain features of the platform.

07 Data Retention

dc22 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable legal and regulatory obligations. Specific retention periods are as follows:

• Active Account Data: Retained for the duration of your account's existence on the dc22 platform.
• Closed Account Data: Financial records, transaction history, and identity verification documents are retained for a minimum of five (5) years following account closure to satisfy AML and gaming licence compliance requirements.
• Support Communications: Live chat transcripts and email records are retained for two (2) years, or longer if related to an ongoing dispute or legal proceeding.
• Technical Logs: Server access logs and security event records are retained for ninety (90) days unless flagged for fraud or security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

08 Data Security Measures

dc22 implements a layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS enforced site-wide).
• Sensitive data at rest — including payment details and identity documents — is encrypted using AES-256.
• Access to personal data is restricted on a strict need-to-know basis, with role-based permissions and audit logging for all staff access events.
• Regular independent security audits and penetration testing are conducted to identify and remediate vulnerabilities.
• Two-factor authentication (2FA) is available to all players and strongly encouraged for account protection.

09 Your Data Rights

As a dc22 player, you hold the following rights in relation to your personal data. Requests may be submitted via live chat or by emailing [email protected]. We will respond to all verified requests within thirty (30) days.

• Right of Access: You may request a copy of the personal data dc22 holds about you, along with information about how it is being processed.
• Right of Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated.
• Right of Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.

10 Minors & Age Verification

dc22 is strictly an adults-only platform. Access and participation are permitted only for individuals aged 21 years and above. We do not knowingly collect or process personal data belonging to minors.

As part of the registration and KYC process, dc22 verifies the age of all players. If we discover — through our own checks or via a report — that a player is under 21, we will immediately suspend the account, void any associated transactions, and securely delete all personal data collected in relation to that account.

If you are a parent or guardian and believe your child has registered on dc22, please contact us immediately at [email protected] so we can take appropriate action without delay.

11 International Data Transfers

dc22 operates under an international gaming licence framework, which means some of your personal data may be processed or stored on servers located outside Pakistan. In all such cases, dc22 ensures that appropriate safeguards are in place — including contractual data-processing agreements with receiving entities — to maintain a standard of protection equivalent to that described in this Policy.

dc22 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing binding contractual protections that cover the full scope of this Policy.

12 Contact & Complaints

For any privacy-related query, data access request, or concern about how dc22 handles your personal information, please reach out to our dedicated support team:

• Email: [email protected]
• Live Chat: Available 24/7 directly on any dc22 page
• Response Time: Privacy requests are handled within 30 days; urgent security concerns are escalated immediately

If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant regulatory authority under whose framework dc22 holds its international gaming licence.

For responsible gaming concerns, including requests for self-exclusion or deposit limits, please visit our Responsible Gaming page.