22win Privacy Policy – How We Protect Your Personal Data

22win is an online gaming platform operated for players based in Pakistan. We offer Live Casino, Teen Patti, Andar Bahar, Crash Games, Virtual Sports, Ludo Games and related promotional services. To deliver these services, we need to collect and process certain personal information about you.

This policy sets out in plain language what data we collect and what we do with it. We believe you have every right to know exactly how your information is being handled, and we have tried to write this policy clearly rather than bury important facts in complicated legal language. Where technical or legal terms are unavoidable, we explain them.

22win collects data in three ways: information you provide directly, information we collect automatically when you use the platform, and in some cases information from third-party verification services.

We do not collect data that is irrelevant to operating your account or keeping the platform secure. If we ever need additional information for a specific purpose – such as an age verification check – we will explain why at the point of collection.

Every piece of data 22win collects has a specific, legitimate purpose. The table below summarises how we use your information and why:

• Operating your account – your registration data allows us to identify you when you log in, process bets and credit winnings to the correct account.
• Processing PKR transactions – payment data is necessary to execute deposits from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card networks, and to send withdrawal amounts to the right destination.
• Age and identity verification – 22win is legally and ethically obliged to verify that players are over 18 and that accounts belong to real people. CNIC data is used solely for this purpose.
• Fraud prevention and security – device and IP data helps 22win detect unusual login patterns, potential account takeovers and suspicious transaction activity that could harm you.
• Responsible gaming obligations – gaming activity data is used to monitor play patterns and apply responsible gaming tools such as deposit limits or cooling-off periods where appropriate.
• Customer support – communication records allow our support team to pick up where a previous conversation left off and resolve issues efficiently.
• Platform improvements – anonymised and aggregated analytics help 22win understand how players navigate the platform so we can fix issues and improve the experience.
• Promotional communications – if you have opted in, your email or mobile number may be used to inform you of bonuses and promotions at 22win. You can opt out at any time from your account settings.

Financial transactions at 22win are processed exclusively in Pakistani Rupees (PKR) through certified payment gateways. These gateways include Easypaisa, JazzCash, NayaPay, SadaPay, standard bank IBFT transfers and Visa/Mastercard networks.

Here is exactly how 22win handles payment data:

• 22win does not store full card numbers or CVV codes on its own servers. Card payments are processed through a PCI-DSS compliant payment processor and only tokenised references are held by 22win.
• Easypaisa and JazzCash transactions use the mobile wallet operator's own secure API. 22win receives a transaction reference and confirmation status only – not your PIN or full account credentials.
• IBFT transfers are verified against your registered bank account details. The account details you provide are stored in encrypted form and used only for matching and withdrawal purposes.
• Transaction history – amounts deposited, withdrawn and bonus applied – is stored in your 22win account and visible to you at all times in your transaction log.

22win does not sell, rent or trade your personal data to any third party for commercial purposes. Period. However, there are limited circumstances where we must share certain data with trusted third parties to operate the platform:

• Payment processors – Easypaisa, JazzCash, NayaPay, SadaPay and card networks receive the transaction data necessary to execute deposits and withdrawals. They operate under their own privacy and security standards.
• Identity verification providers – when KYC checks are required, your CNIC details may be shared with a certified identity verification service to confirm authenticity. These providers are contractually bound to use your data only for verification.
• Fraud prevention services – device and behavioural data may be passed to anti-fraud systems that help 22win identify stolen account credentials or suspicious betting patterns. This protects you as much as the platform.
• Regulatory and law enforcement requests – 22win will disclose data if legally required to do so by a valid order from a competent authority. We will notify you of such requests where we are legally permitted to do so.
• Technology infrastructure providers – cloud hosting and database providers who store 22win data on our behalf operate under strict data processing agreements and do not use your data for any purpose outside those agreements.

All third-party providers used by 22win are vetted for security standards and bound by contractual data protection obligations before they receive any player data.

22win uses cookies and similar tracking technologies to make the platform work correctly, remember your preferences, and understand how players use the site so we can improve it. Cookies are small text files stored on your device when you visit 22win.

On your first visit to 22win you will see a cookie consent banner. You can accept all cookies, accept only essential cookies, or customise your choices. You can change your preferences at any time from the cookie settings link in the page footer. Note that disabling non-essential cookies does not affect your ability to play games, deposit or withdraw.

Security is not an afterthought at 22win – it is built into how the platform operates at every level. The following technical and organisational measures are in place to protect your personal data:

• 256-bit TLS encryption on all connections between your device and 22win servers.
• Encrypted data storage – sensitive fields including passwords, CNIC references and payment tokens are encrypted at rest using industry-standard algorithms.
• Access controls – 22win staff can only access player data relevant to their specific role. Support agents see only what is needed to resolve your query. No single employee has unrestricted access to all player data.
• Two-factor authentication – available to all registered players and recommended as an additional layer of account security.
• Regular security audits – 22win conducts periodic security reviews and penetration tests on its infrastructure to identify and address vulnerabilities before they can be exploited.
• Incident response plan – in the event of a data breach, 22win has a documented response plan that includes player notification within 72 hours.

22win retains personal data only for as long as it is needed to serve the purpose for which it was collected, or as long as required by applicable obligations. The general retention schedule is:

• Active account data – retained for as long as your account remains open and active on 22win.
• Transaction records – financial transaction data including deposits, withdrawals and bet history is retained for a minimum of five years from the date of the transaction for audit and fraud prevention purposes.
• Identity verification documents – CNIC scans and selfies are retained for the duration of your account and for five years after account closure, in line with standard KYC obligations.
• Support communications – chat logs and email exchanges are retained for three years from the date of the last message, to assist with any subsequent dispute resolution.
• Cookie and analytics data – anonymised analytics data is retained for up to 26 months. Session cookies are deleted when you close your browser. Preference cookies persist for up to 12 months unless you clear them manually.

When data reaches the end of its retention period and is no longer required for any legitimate purpose, 22win securely deletes or anonymises it so it can no longer be linked back to you.

You have a number of rights with respect to the personal data 22win holds about you. We take these rights seriously and process all requests in good faith:

22win is strictly an adult platform. We do not knowingly collect or process personal data from anyone under the age of 18. Our registration process includes a date-of-birth field and we verify age through identity documents when triggered by our KYC process.

If a parent or guardian believes their child has registered on 22win without authorisation, please contact us immediately at support@22win-bangla.net. We will investigate promptly and, if confirmed, close the account and securely delete all associated personal data within 7 business days.

22win may update this Privacy Policy from time to time to reflect changes in how we operate, new services we introduce, or evolving best practice in data protection. When material changes are made, we will:

• Update the "Last updated" date at the top of this page.
• Display an in-platform notification when you next log in to your 22win account.
• Send an email notification to your registered email address if the changes are significant.

Minor changes such as rephrasing for clarity, correcting typographical errors, or updating contact details may be made without prior notice. We recommend reviewing this policy periodically – it is linked in the footer of every page on 22win.

If you have any questions about this Privacy Policy, want to exercise your data rights, or want to report a potential privacy concern, please get in touch with our team:

When contacting us about a privacy matter, please include your registered 22win username (not your password), a brief description of your query or request, and any relevant dates or transaction references. This helps us locate your account and respond accurately.