dk22 Privacy Policy — How We Protect & Handle Your Personal Data

1 Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data processed by dk22 in connection with the operation of the dk22 platform, accessible at dk22.cam and any associated applications or services ("the Platform", "dk22", "we", "us", "our").

1.2 This Policy applies to all registered users of dk22, visitors to dk22.cam, and any individual whose personal data is processed by dk22 in connection with the provision of gaming, betting, or associated services.

1.3 By registering an account with dk22 or by using any dk22 service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

1.4 This Privacy Policy should be read alongside the dk22 Terms & Conditions, which form part of the overall agreement governing your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions in respect of data matters, this Privacy Policy shall prevail.

---

2 Data Controller

2.1 For the purposes of this Privacy Policy, dk22 acts as the data controller in respect of all personal data collected from and about its users. As data controller, dk22 determines the purposes and means of processing personal data collected through the Platform.

2.2 dk22 is operated in accordance with international online gaming standards. The contact details for data-related enquiries are provided in Section 16 of this Policy.

2.3 Where dk22 engages third-party service providers to process personal data on its behalf (including payment processors, KYC verification services, and game providers), such third parties act as data processors under instruction from dk22. dk22 ensures that all data processors are bound by appropriate data processing agreements and maintain adequate data protection standards.

---

3 Categories of Personal Data We Collect

3.1 dk22 collects the following categories of personal data in connection with the registration, operation, and management of your dk22 account:

3.1 Identity & Contact Data

• Full legal name (as per CNIC or other official identification);
• Date of birth (for age verification — 21+ requirement);
• Pakistani national identity card (CNIC) number;
• Valid email address;
• Pakistani mobile telephone number;
• Residential address (for KYC purposes).

3.2 Financial & Transaction Data

• JazzCash and EasyPaisa account identifiers;
• Bank account details (for HBL, UBL, Meezan Bank, SadaPay, Raast, 1LINK transfers);
• Cryptocurrency wallet addresses (USDT TRC20 users);
• Complete transaction history including deposit amounts, withdrawal amounts, and transaction timestamps in PKR;
• Source of funds documentation (where required under AML obligations).

3.3 Gaming & Betting Activity Data

• Complete betting history including sports bets, casino game sessions, wager amounts, and outcomes;
• Game preferences, favourite games, and session duration data;
• Responsible gaming tool settings and usage (deposit limits, self-exclusion periods, session reminders);
• Bonus and promotional offer participation history.

3.4 Technical & Device Data

• IP address and geolocation data at the time of account access;
• Device type, operating system, and browser information;
• Login timestamps and session duration;
• Cookies and similar tracking technologies (detailed in Section 9).

3.5 Communications Data

• Support correspondence (chat transcripts, email exchanges, complaint records);
• Responses to surveys or feedback requests;
• Marketing preference settings and communication opt-in/opt-out records.

---

4 How We Collect Personal Data

4.1 dk22 collects personal data through the following primary channels:

Collection Method	Data Collected	Trigger
Account Registration	Identity, contact, date of birth	When you create a dk22 account
KYC Verification	CNIC, address, source of funds	Before first withdrawal is processed
Deposit / Withdrawal	Payment method details, amounts, timestamps	Each transaction on the Platform
Platform Usage	Gaming history, session data, IP address	Continuous during Platform use
Cookies & Analytics	Device data, browsing behaviour, referral source	Site visit (with consent where required)
Support Interactions	Communications, complaint details	When you contact dk22 support
Third-Party Verification	Identity confirmation data	KYC and AML compliance checks

---

5 Legal Basis for Processing

5.1 dk22 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to operate your dk22 account and deliver the services you have requested, including processing bets, managing deposits and withdrawals in PKR, and providing customer support;
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, identity verification obligations, responsible gaming requirements (including age verification enforcement), and any applicable regulatory requirements;
• Legitimate Interests: Processing necessary for dk22's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform's functionality and user experience, where such interests are not overridden by your fundamental rights;
• Consent: Processing based on your explicit consent, including for direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

---

6 How We Use Your Personal Data

6.1 dk22 uses the personal data it collects for the following specific purposes:

Account Management

To create, verify, and maintain your dk22 account; to authenticate your identity at login; to communicate with you about your account status; and to process your requests and instructions in relation to your account.

Service Delivery

To process sports bets and settle results; to operate casino game sessions and apply game outcomes to your account balance; to process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and 1LINK; and to process withdrawal requests to your verified payment method.

Legal & Regulatory Compliance

To conduct identity verification and KYC checks in compliance with anti-money laundering obligations; to perform age verification and enforce the 21+ minimum age requirement; to monitor transactions for suspicious activity; to maintain records required by applicable regulatory frameworks; and to respond to lawful requests from relevant authorities.

Responsible Gaming

To administer responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion; to monitor account activity for patterns consistent with problem gambling; to communicate with players regarding their responsible gaming tool settings; and to enforce self-exclusion periods in accordance with player instructions.

Security & Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, bonus abuse, account manipulation, multi-accounting, and other prohibited conduct; to monitor for cybersecurity threats and respond to security incidents; and to protect the integrity of dk22's sports betting markets against match manipulation.

Platform Improvement

To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience; to conduct internal research and analytics; and to personalise content and promotional offers based on your activity where you have consented to such personalisation.

---

7 Data Sharing & Third Parties

7.1 dk22 does not sell, rent, or trade your personal data to any third party for their own independent marketing purposes. Your personal data is shared only in the following specific circumstances:

7.1 Payment Service Providers

Your financial data is shared with payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, 1LINK, and cryptocurrency processors) solely to the extent necessary to process your deposit and withdrawal transactions. These providers process data under their own privacy policies and are subject to applicable financial data protection regulations.

7.2 Identity Verification Services

Your identity and CNIC data may be shared with authorised third-party KYC verification providers for the purpose of confirming your identity and age in accordance with our compliance obligations. Such providers are bound by contractual data processing agreements with dk22.

7.3 Game Providers

Certain technical and session data is shared with third-party game studios (such as Pragmatic Play, PG Soft, and others) for the purpose of operating casino game sessions and resolving game disputes. Game providers receive only the minimum data necessary for service operation.

7.4 Regulatory & Law Enforcement Authorities

dk22 may disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or regulatory instruction. In all such cases, dk22 will disclose only the minimum data necessary to comply with the applicable legal requirement.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of dk22's business, personal data may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance of any such transfer where reasonably practicable.

---

8 KYC, AML & Age Verification

8.1 dk22 is required by applicable international gaming standards to conduct Know Your Customer (KYC) verification and to implement anti-money laundering (AML) controls. These obligations necessitate the collection and processing of identity documents and financial information.

8.2 KYC verification is triggered before a player's first withdrawal request and may be repeated where account activity triggers additional due diligence requirements. Standard KYC documentation requirements include a valid CNIC (both sides) and a recent proof of address.

8.3 KYC data is processed and stored in accordance with applicable data retention requirements, which typically require retention for a minimum of five years following the end of the business relationship. This retention period is a legal obligation and cannot be waived by individual user request.

8.4 Age verification is an integral component of the KYC process. dk22 enforces a strict minimum age of 21 years. Any account found to belong to a person under 21 years of age will be immediately closed and the matter will be handled in accordance with applicable responsible gaming obligations. The personal data of underage users will be deleted following the resolution of any associated compliance review.

---

9 Cookies & Tracking Technologies

9.1 dk22 uses cookies and similar tracking technologies on dk22.cam. Cookies are small text files stored on your device that help dk22 operate the Platform effectively and understand how it is used.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies that remember your language and currency preferences. These cookies cannot be disabled without impairing Platform functionality;
• Performance & Analytics Cookies: Used to collect anonymised data about how visitors use dk22.cam, including page views, session durations, and navigation paths. This data helps dk22 improve Platform performance;
• Functional Cookies: Remember your preferences such as responsible gaming tool settings, game filter preferences, and notification settings to improve your experience across sessions;
• Marketing & Targeting Cookies: Used only where you have provided explicit consent. These cookies help dk22 show relevant promotional content and measure the effectiveness of marketing activities.

9.2 You can manage your cookie preferences at any time through your browser settings or the cookie preference centre available on dk22.cam. Please note that disabling strictly necessary cookies may impair Platform functionality.

9.3 dk22 does not use cookies to collect sensitive personal data or to track your browsing activity on third-party websites outside of the dk22 Platform.

---

10 Data Security

10.1 dk22 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and dk22 servers;
• Bcrypt or equivalent hashing for stored passwords — dk22 does not store passwords in plain text;
• Two-factor authentication (2FA) available to all account holders;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Automated monitoring systems for anomalous login activity and suspicious transactions;
• Regular security assessments and penetration testing of the dk22 Platform;
• Encrypted storage of KYC documentation and financial records.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, dk22 will notify affected users without undue delay following discovery of the breach, to the extent such notification is required under applicable data protection obligations.

---

11 Data Retention

11.1 dk22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for longer periods where required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	AML / regulatory obligation
KYC / identity documents	Duration of account + 5 years post-closure	Legal obligation (AML)
Transaction & payment records	Duration of account + 5 years post-closure	Financial regulatory requirement
Gaming & betting history	Duration of account + 2 years post-closure	Legitimate interest / dispute resolution
Support communications	3 years from last interaction	Legitimate interest / dispute resolution
Marketing preferences	Until consent withdrawn or account closed	Consent
Analytics / cookies data	Up to 24 months	Legitimate interest / consent

11.2 Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

---

12 Your Data Rights

12.1 As a data subject whose personal data is processed by dk22, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact dk22 using the details provided in Section 16.

12.2 dk22 will respond to all valid data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, dk22 may extend this period by a further 60 days, subject to notifying the requestor within the initial 30-day window.

12.3 dk22 may decline to fulfil a data rights request where it is manifestly unfounded, excessive, or where complying would require dk22 to breach applicable legal obligations (such as AML data retention requirements). In such cases, dk22 will provide written reasons for the refusal.

---

13 Children's Privacy & Age Restriction

13.1 The dk22 Platform is designed exclusively for adults aged 21 years and over. dk22 does not market its services to minors, does not knowingly collect personal data from persons under 21, and does not permit persons under 21 to create or use a dk22 account.

13.2 If a parent or guardian believes that their child under the age of 21 has accessed the dk22 Platform or submitted personal data to dk22 without permission, they should contact dk22 immediately at [email protected]. dk22 will take prompt action to close any such account and delete the associated personal data.

13.3 Age verification is conducted as part of the KYC process applied at the withdrawal stage. dk22 reserves the right to suspend access pending age verification at any point if there is reason to suspect that a user may be under 21 years of age.

---

14 Marketing Communications

14.1 dk22 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, promotions, new game launches, cricket betting markets, and other dk22 services, but only where you have provided your explicit consent to receive such communications during account registration or subsequently through your account settings.

14.2 You can withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences in your dk22 account settings;
• Clicking the unsubscribe link in any marketing email from dk22;
• Contacting dk22 support at [email protected].

14.3 Withdrawal of consent to marketing communications will be processed within 10 business days. Please note that withdrawing marketing consent does not affect transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts — these are necessary for the operation of your account and are not subject to marketing consent.

14.4 dk22 does not share your contact details with third-party marketers for their own promotional purposes.

---

15 Changes to This Privacy Policy

15.1 dk22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational changes to the Platform. The current version of the Privacy Policy will always be published at dk22.cam/privacy-policy.

15.2 Where changes are material — meaning they significantly affect how your personal data is processed or what rights you hold — dk22 will notify registered users via email or in-platform notification at least 14 days before the changes take effect.

15.3 Continued use of the dk22 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and may request account closure.

---

16 Contact & Data Complaints

16.1 If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how dk22 handles your personal data, please contact the dk22 Data Protection team:

16.2 When submitting a data rights request, please include your full name, registered email address, and a description of the specific data rights request you are making. dk22 may require identity verification before processing data rights requests to ensure that data is disclosed only to the rightful account holder.

16.3 If you are dissatisfied with dk22's response to a privacy complaint or data rights request, you may escalate the matter to the relevant supervisory authority or regulatory body with jurisdiction over dk22's data processing activities. dk22 cooperates fully with all regulatory enquiries in respect of data protection matters.