Privacy Policy – How 22rs Handles Your Personal Data

1 Introduction

22rs ("we", "us", "the platform") is an online gaming platform serving players in Pakistan. This Privacy Policy describes how we collect, use, store, share and protect personal information provided by users of the 22rs website and associated services.

By registering an account on 22rs, making a deposit, or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions at any point, you can contact our support team — details are in Section 12.

This policy applies to all data collected through the 22rs website. It does not apply to third-party websites or services, including payment providers such as JazzCash and Easypaisa, which have their own separate privacy policies.

2 What We Collect

22rs collects different types of information depending on how you use the platform. Below is a breakdown of what we collect and why.

Information You Provide Directly

• Registration data: Your full name, date of birth, email address, mobile number and preferred payment method when you create an account.
• Identity verification documents: A copy of your CNIC (Computerised National Identity Card) or other accepted ID, and proof of address where required for account verification.
• Payment information: Details of the payment method used for deposits — for example, your JazzCash or Easypaisa mobile number or bank account reference. Full card numbers and mobile wallet PINs are never collected or stored by 22rs.
• Communications: Messages you send to our support team via live chat or email, including the content of those conversations for training and quality purposes.

Information Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device identifiers and screen resolution.
• Usage data: Pages visited, games played, bets placed, deposit and withdrawal activity, login times and session duration.
• Cookies and similar technologies: See Section 6 for full details on how cookies work on 22rs.

3 How We Use Your Data

The information we collect is used for specific, legitimate purposes. We do not use your data in ways that are not described here without first informing you.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If our systems flag an account for a restriction, that flag is reviewed by a person before action is taken.

4 Payment Data

Payment processing on 22rs is handled through third-party payment providers. When you make a deposit via JazzCash, Easypaisa, Raast or bank transfer, the transaction is processed directly through that provider's secure infrastructure.

22rs receives a transaction reference and confirmation from the payment provider — we do not receive or store your full mobile wallet credentials, bank account login details or card PINs. The payment provider you use is subject to their own privacy policy and security standards, which are independent of 22rs.

• You can only deposit and withdraw using a payment method registered in your own name.
• Payment method details you provide for verification purposes are stored securely and used only to confirm that deposits and withdrawals are processed to the right account.
• If you wish to remove a saved payment method, contact 22rs support.

5 Who We Share Your Data With

22rs does not sell personal data to third parties. We share data only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and bank transfer partners receive the transaction data necessary to process your deposit or withdrawal. Each is subject to their own privacy obligations.
• Identity verification providers: Where third-party KYC (Know Your Customer) services are used to verify identity documents, those providers receive the documents and data required to complete verification only.
• Fraud prevention and security services: Technical data such as IP addresses and device identifiers may be shared with fraud detection services to protect the platform and its users.
• Legal and regulatory requirements: Where required by law or in response to a valid legal process, 22rs may disclose user data to the relevant authority. We will inform users of such requests where permitted by law.
• Business transfers: In the event of a merger, acquisition or sale of assets, user data may be transferred to the new entity. Users will be notified of any such change that materially affects how their data is used.

All third parties who handle data on 22rs's behalf are required to process that data securely and use it only for the purpose for which it was shared.

6 Cookies & Tracking

22rs uses cookies and similar tracking technologies to make the platform work correctly and to understand how it is being used. Cookies are small text files stored on your device by your browser when you visit a website.

Types of Cookies Used

• Essential cookies: Required for the platform to function — for example, keeping you logged in during a session, remembering your language preference and enabling secure payment processes. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how users navigate the platform — which pages are visited most, where users spend time, and where they drop off. This data is aggregated and does not identify individual users by name.
• Functional cookies: Store your preferences such as last-visited game category or display settings to improve your experience on return visits.
• Security cookies: Help detect and prevent fraudulent activity by identifying unusual login patterns or devices not previously associated with your account.

You can manage cookie preferences through your browser settings. Blocking all cookies will affect the functionality of 22rs, including the ability to stay logged in. Blocking essential cookies is not recommended if you intend to use the platform.

7 How Long We Keep Your Data

22rs retains personal data for as long as your account is active and for a period after closure to fulfil legal and compliance obligations. Specific retention periods are as follows:

• Account data: Retained for the duration of your account and for a minimum of 5 years after account closure. This is a standard retention period for financial services platforms.
• Identity verification documents: Retained for the duration required by applicable regulations governing the platform's operations, typically 5 years from the date of submission or account closure.
• Transaction records: Deposit and withdrawal history is retained for a minimum of 5 years to support financial record-keeping obligations.
• Support communications: Retained for 2 years from the date of the last communication in a support ticket, to allow for dispute resolution if needed later.
• Usage and analytics data: Aggregated usage data may be retained indefinitely as it does not identify individual users. Individual usage logs are deleted after 12 months.

After the applicable retention period, data is deleted or anonymised so that it can no longer be associated with any individual.

8 Security Measures

22rs takes the security of your personal data seriously. We maintain technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure. These include:

• Encryption of data in transit using standard TLS protocols between your browser and the 22rs platform.
• Secure storage of personal data with access controls that limit who within the organisation can view sensitive account information.
• Regular monitoring for unusual access patterns, failed login attempts and other indicators of potential security incidents.
• Requiring strong password practices for account access and offering security notifications for new login attempts from unrecognised devices.

No online platform can guarantee 100% security against all threats. If you become aware of any security issue with your 22rs account, contact support immediately so that protective action can be taken quickly.

9 Your Rights Over Your Data

You have the following rights in relation to the personal data 22rs holds about you. All requests can be submitted through our support team.

To exercise any of these rights, contact 22rs support with your account email address and a clear description of your request. We will respond within 30 days. Some rights may be limited by legal obligations — for example, we cannot delete transaction records that are required for financial compliance purposes.

10 Minors

22rs is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered on 22rs or provided personal information to the platform, please contact support immediately.

Upon receiving a credible report that a user is under 18, 22rs will:

• Suspend the account immediately pending investigation.
• Delete any personal data collected from the minor that is not required to be retained for legal or fraud-prevention purposes.
• Return any deposits made to the original payment method where it is possible to verify ownership by an adult account holder.

If you are a parent or guardian and you believe your child has accessed 22rs, we encourage you to contact support and to also consider enabling parental controls on shared devices to prevent access to online gambling platforms.

11 Policy Updates

22rs may update this Privacy Policy from time to time. When we make significant changes, the "Last Updated" date at the top of this page will be revised. For changes that materially affect how we use your data, we will make reasonable efforts to notify registered users — typically by email to the address on your account.

Your continued use of 22rs after an update to this policy constitutes acceptance of the revised version. If you disagree with a change, you can request account closure by contacting support.

12 Contact

For any questions about this Privacy Policy, to exercise your data rights, or to report a suspected privacy concern, please contact 22rs through our support channels.

Email: [email protected]

Live chat is available 24/7 through the platform. Email enquiries are typically responded to within 24 hours. Data rights requests — such as access, correction or deletion — are handled within 30 days.