LEGAL REFERENCE

How 22games Handles Your Personal Information

This policy sets out exactly what personal data 22games collects when you open an account, how we use it, and the controls you hold over it at every...

Data collected at account creationJazzCash & Easypaisa transaction recordsAccount security & encryptionYour right to access your dataContact our privacy team

Explore the Lobby Read FAQ

What This Policy Covers and Why

22games processes personal data — including your name, contact details, device identifiers and transactional records — solely to operate your account, process deposits made through JazzCash, Easypaisa, SadaPay or Raast, and keep your funds and identity secure. We do not sell your data to third parties. Data is retained for the period required by applicable law in supported regions, after which it

is securely deleted. Where local law permits, we may share anonymised, aggregated statistics with service partners for platform performance purposes only. You may request a full copy of the data we hold by writing to our privacy team, and we aim to respond within 14 working days.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have questions about how your personal information is stored, processed or shared, our privacy team is available through the channels below. We aim to acknowledge every request within one business day and resolve it within 14 days of receipt.

Team online

Email Privacy Request

Send a written data-access or deletion request to our privacy address and we will confirm receipt within one business day, then resolve the matter within 14 working days.

Live Chat Support

Our support agents are available via live chat around the clock. For privacy-specific queries they will route your message directly to the privacy team without delay.

Account Settings Portal

Log in to your 22games account, navigate to Settings, and use the Privacy Controls panel to download your data or submit a deletion request without contacting support.

HOW WE EARN YOUR TRUST

Privacy Practices You Can Verify Yourself

Every commitment in this policy is something you can test from your own account dashboard. We designed the privacy controls to be visible, accessible and actionable — not buried in a support...

Encryption in Transit

All data exchanged between your device and 22games servers travels over TLS 1.3. You can confirm this by checking the padlock in your browser's address bar at any time.

Encryption at Rest

Personal records, including payment method identifiers for JazzCash and Easypaisa, are stored using AES-256 encryption on access-controlled infrastructure that our team audits regularly.

No Data Sales

22games has never sold personal data to advertisers or data brokers. Our revenue comes from account activity, not from profiling or reselling your information to outside parties.

Annual Policy Review

We review this privacy policy at least once per year and notify account holders by email of any material changes at least 30 days before those changes take effect.

Minimal Data Collection

We collect only the data needed to run your account and meet legal obligations in supported regions. Fields that are not strictly necessary are marked optional at account creation.

Access Logs Available

You can request a log of which 22games team members have accessed your account record over the past 12 months. Submit the request through your account settings or via email.

How This Policy Aligns Across Our Platform

Privacy commitments at 22games are consistent whether you are reading this page, our cookie notice or our terms of account. The table below shows how each commitment in...

Data Collection

Covered fully in this policy; also referenced in the account creation flow where each data field is labelled with its purpose.

Cookie Usage

Our separate cookie notice details each cookie category, its lifespan, and how to opt out — consistent with the data-minimisation principle stated here.

Payment Data

JazzCash, Easypaisa, SadaPay and Raast transaction identifiers are handled under this policy and never stored in full on our servers after a transaction clears.

Account Deletion

The terms of account describe how to close your account; this policy explains what happens to your personal data after closure and the retention periods that apply.

Third-Party Processors

Any vendor we use to process your data — such as payment infrastructure partners — is bound by data-processing agreements that mirror the commitments in this policy.

Marketing Communications

You can withdraw consent for marketing emails or SMS at any time from your account settings. This policy governs how that preference is recorded and honoured.

Policy Update Notices

Material changes to any of our privacy-related documents are announced by email 30 days in advance, keeping this policy, the cookie notice and account terms in step.

Six Pillars of the 22games Privacy Approach

Our privacy approach is built on six principles that shape every decision we make about your data. These are not abstract ideals — each one has...

Transparency First

Every category of data we collect is listed in plain language in this policy. We avoid legal jargon where possible and use plain Pakistani English so the meaning is clear.

Purpose Limitation

Data collected for account verification is used only for that purpose. We do not repurpose your identity documents for marketing profiling or share them with unrelated business units.

Security by Default

Account access requires multi-factor verification. Session tokens expire automatically after inactivity, and suspicious login attempts trigger an immediate account alert to your registered contact.

Your Right to Erasure

You can request deletion of your personal data once your account is closed and any legally required retention period has elapsed. We complete verified deletion requests within 30 days.

Lawful Basis Always

Each processing activity in this policy has a documented lawful basis — contract performance, legal obligation, or your explicit consent. We do not process data without one.

Local Context Respected

Pakistani account holders have specific expectations around data privacy. Our practices reflect those expectations, and our privacy team includes staff familiar with the Pakistan market.

Frequently Asked Questions About Your Privacy at 22games

We collect your name, date of birth, email address, phone number and a government-issued identity document for verification. We also record your device type, IP address and the payment method you connect, such as JazzCash or Easypaisa.

We share data only with processors who help us run the platform — such as payment infrastructure partners for SadaPay and Raast transactions. Every processor is contractually bound to use your data solely for the service they provide to us.

Active account data is held for the duration of your account. After closure, we retain records for the minimum period required by applicable law in supported regions, then securely delete them. You can ask for the exact period via email.

Yes. Log in to your account, go to Settings, and select Privacy Controls to submit a data-export request. Alternatively, email our privacy team directly. We aim to deliver the export within 14 working days of verifying your identity.

Full payment credentials are never stored on our servers. We retain only a transaction reference and masked identifier. Data in transit is protected by TLS 1.3, and stored records use AES-256 encryption on access-controlled infrastructure.

We stop using your data for any active purpose the moment your account is closed. Retained records are held in a restricted archive for the legally required period, inaccessible to operational teams, and then permanently deleted.

We send an email notification to your registered address at least 30 days before any material change takes effect. Minor clarifications that do not affect your rights are noted in a changelog published at the bottom of this page.