Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ko222 ("the Platform", "we", "us", "our") collects, uses, stores, discloses and protects the personal data of individuals ("you", "the User", "the Player") who access or use the ko222 online gaming platform at ko222.cam, including all associated services, features, account functions and communications.

Privacy is a fundamental right. At ko222, we are committed to handling your personal data with transparency, care and respect. This Policy is written in plain English so that all users — including our Pakistani user base — can clearly understand how their data is managed.

By registering an account or using the Platform, you acknowledge that you have read this Policy and consent to the data processing activities described herein. If you do not accept this Policy, you must not use the Platform.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial information and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — for this Platform, that is ko222.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a written agreement.
• "KYC" means Know Your Customer — the regulatory identity and age verification process applied to account holders.
• "Sensitive Data" means categories of personal data requiring enhanced protection, including identity documents (CNIC, passport), financial records, and liveness/biometric data collected as part of the KYC process.
• "Cookie" means a small text file stored on your device by your web browser at the instruction of the Platform.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data.

3. Data Controller

ko222 is the Data Controller responsible for personal data collected through the Platform. As Data Controller, ko222 determines the purposes for which personal data is collected and the means by which it is processed.

ko222 is an online gaming information and wagering platform. It is not affiliated with, endorsed by, or approved by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial authority or any Pakistani financial institution. Payment references mentioned on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are contextual references to locally familiar services only and do not indicate any affiliation or data-sharing relationship with those institutions.

You may contact the Data Controller at any time regarding privacy matters at: [email protected]

4. Data We Collect

We collect personal data in the following categories:

4.1 Registration Data

When you create a ko222 account, we collect:

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address (city, province, country — e.g., Lahore, Punjab; Karachi, Sindh; Islamabad, ICT)
• Username and encrypted password

4.2 Identity Verification (KYC) Data

As part of mandatory KYC verification, we may collect:

• Scanned or photographed copy of a valid Pakistani CNIC (front and back) or valid passport (photo/data page)
• Proof of address documents (e.g., utility bill or bank statement) where required
• Selfie or liveness photograph for facial verification
• Payment method verification documentation (e.g., bank statement or mobile wallet screenshot showing registered name)

4.3 Financial Transaction Data

When you make deposits or withdrawals, we collect transaction amounts (in PKR or cryptocurrency), transaction dates and times, payment method references, and transaction identifiers. We do not store full card numbers or full bank account credentials on our servers.

4.4 Usage and Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session duration, pages visited, features used and betting/gaming activity logs
• Referral source (where applicable)

4.5 Communications Data

If you contact our support team — by email or live chat — we retain a record of the communication including your name, contact details and the content of your message. This is necessary to resolve your query and maintain an audit trail.

4.6 Responsible Gambling Data

Where you apply limits, cooling-off periods or self-exclusion to your account, we record the nature and duration of those restrictions. This data is processed exclusively to operate your responsible gambling controls and is not used for marketing purposes.

5. Legal Basis for Processing

ko222 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the account agreement with you — including account management, payment processing and support.
• Legal Obligation: Processing is required to comply with applicable regulatory obligations, including KYC/AML requirements and responsible gambling controls.
• Legitimate Interests: Processing is necessary for our legitimate interests in preventing fraud, maintaining platform security, improving services and managing business operations — provided those interests are not overridden by your rights.
• Consent: Where we rely on consent (e.g., optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

6. How We Use Your Data

We use the personal data we collect for the following purposes:

• To create, maintain and secure your ko222 account.
• To verify your identity and age in compliance with KYC requirements.
• To process deposits and withdrawals and maintain accurate transaction records.
• To detect, investigate and prevent fraud, money-laundering, account takeover and other prohibited activities.
• To operate responsible gambling controls — including deposit limits, loss limits, session limits and self-exclusion restrictions — that you have applied to your account.
• To respond to support queries, complaints and disputes.
• To send service communications — such as account verification emails, transaction confirmations and security alerts — that are necessary to operate your account.
• To improve Platform functionality, user experience and security through analysis of aggregated, anonymised usage data.
• To comply with applicable legal, regulatory and audit obligations.

7. Data Sharing & Disclosure

ko222 does not sell, rent or trade your personal data to third parties for marketing purposes. We may share your data in the following limited circumstances:

7.1 Service Providers

We engage carefully selected third-party service providers to assist in operating the Platform — including KYC verification providers, payment processing partners, fraud detection vendors, cloud hosting providers, and customer support tools. These providers act as Data Processors under written data processing agreements and are permitted to use your data only for the specific purpose for which it was shared.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, courts or other authorised authorities where required to do so by applicable law, a court order, or a regulatory directive. We will notify you of such disclosure where legally permissible to do so.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale or restructuring involving ko222, personal data held by the Platform may be transferred to the acquiring or successor entity. You will be notified in advance of any such transfer and, where required, your consent will be sought.

7.4 Fraud Prevention

Where there is a reasonable suspicion of fraud, money-laundering or identity impersonation, we may share relevant data with fraud prevention agencies or other gaming operators within a shared fraud prevention network. This is done in the interests of protecting all players and the integrity of the Platform.

8. International Data Transfers

The Platform and some of its service providers may operate from or store data in jurisdictions outside Pakistan. Where personal data is transferred internationally, ko222 takes appropriate steps to ensure that the transfer is subject to adequate safeguards — including contractual data protection clauses with recipient entities — to maintain a standard of protection equivalent to that applied within the Platform's primary jurisdiction of operation.

ko222 does not transfer personal data to countries or entities that cannot demonstrate an adequate level of data protection, unless compelled to do so by law.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory or audit obligations. The retention periods summarised in the table in Section 4 reflect these requirements.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, secure deletion protocols are applied.

Note that where you have exercised a self-exclusion or responsible gambling restriction, records of that restriction are retained for the full applicable period to ensure the restriction can be appropriately enforced — including preventing re-registration attempts during an active exclusion period.

10. Security Measures

ko222 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or destruction:

• Transport Encryption: All data transmitted between your device and our servers is protected using 256-bit TLS/SSL encryption.
• Data-at-Rest Encryption: Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular training.
• Penetration Testing: We conduct periodic security assessments of our infrastructure to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach incident-response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify affected users promptly.

While we apply robust security measures, no internet-based platform can guarantee absolute security. You are also responsible for keeping your own account credentials confidential and notifying us immediately if you suspect unauthorised access to your account.

11. Cookies & Tracking Technologies

ko222 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. ko222 does not use third-party advertising cookies or sell cookie data to advertising networks.

12. Minors & Age Restriction

The ko222 Platform is strictly for adults aged 18 or over — or such higher minimum age as may be required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under the required minimum age.

Age verification is conducted as a mandatory step in the KYC process. Where it is discovered that an account has been registered by a minor, the account will be closed immediately, all data related to that account will be securely deleted in accordance with applicable obligations, and any funds deposited will be handled in accordance with the operator's minor-access policy.

13. Your Rights

Depending on applicable data protection law, you may have some or all of the following rights in relation to your personal data held by ko222:

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you is corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Note that certain data may be retained where required by law (e.g., AML/KYC obligations).
• Right to Restrict Processing: In certain circumstances, you may request that we restrict processing of your data while a dispute or correction request is pending.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a machine-readable copy of personal data you have provided to us.
• Right to Object: You may object to processing based on our legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact us at [email protected] with your full name, account details and a description of your request. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days (which may be extended by a further 30 days in complex cases, with notification).

We may request proof of identity before processing a data rights request to prevent unauthorised disclosure of personal data.

14. Complaints

If you have a concern about the way ko222 handles your personal data, we encourage you to contact us in the first instance at [email protected]. We will investigate your concern promptly and aim to provide a resolution within 10 business days.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction in which the Platform's operator is licensed and incorporated. Players in Pakistan should note that domestic data protection regulatory frameworks are evolving — this Policy is not legal advice, and you should seek independent legal guidance if necessary.

15. Changes to This Policy

ko222 reviews this Privacy Policy periodically and reserves the right to amend it at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered users via email or a prominent in-platform notice at least 14 days before the updated Policy takes effect, unless earlier implementation is required by law.

Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. The current effective date is always displayed at the top of this document. The current version is always accessible at ko222.cam/privacy-policy.

16. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the personal data ko222 holds about you, please contact our privacy team. All formal privacy communications should be made in writing via email.

This Privacy Policy was last reviewed on 1 January 2026. © 2026 ko222. All rights reserved.