chang222 Privacy Policy —
How We Collect, Use & Protect Your Personal Data

01 About This Privacy Policy

This Privacy Policy ("Policy") describes how chang222 ("chang222", "we", "us", "our") collects, processes, stores, and protects the personal data of users who access or use the chang222 online gaming platform at chang222.games ("the Platform"), including all Pakistani players who register accounts, make PKR deposits, participate in games or promotions, or contact chang222 support.

This Policy applies to all data processing activities carried out by chang222 in connection with the Platform — regardless of whether you access chang222 from a desktop browser in Karachi, a mobile device in Lahore, or any other device or location across Pakistan.

This Policy should be read alongside chang222's Terms & Conditions and Responsible Gaming Policy, both of which are available on the chang222 website and incorporate data handling provisions relevant to their respective subject matter.

02 Data Controller

For the purposes of this Policy, chang222 is the data controller — meaning the entity that determines the purposes and means of processing your personal data. chang222 is responsible for ensuring that personal data collected from Pakistani players is handled in accordance with this Policy and applicable data protection principles.

If you have any questions about how chang222 processes your personal data, or wish to exercise any of your rights under this Policy, please contact our support team using the details provided in Section 16 of this Policy.

03 Personal Data We Collect

chang222 collects personal data from Pakistani players across three broad categories: data you provide directly, data generated by your use of the Platform, and data collected through automated means.

Data You Provide Directly

Data Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, CNIC or passport number, scanned CNIC / passport copy	Registration and KYC verification
Contact Data	Pakistani mobile number, email address, city of residence	Account registration
Financial Data	Easypaisa account number, JazzCash number, bank account details (HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah), USDT TRC20 wallet address	Deposit and withdrawal processing
Account Credentials	Username (hashed password — never stored in plain text)	Account creation
Support Communications	Chat transcripts, WhatsApp messages, email correspondence	Customer support interactions
Responsible Gaming Data	Self-declared limits, self-exclusion requests, responsible gaming tool settings	Account settings and support requests

Data Generated by Platform Use

When you use the chang222 Platform, the following data is generated automatically as part of normal platform operations:

• Complete betting and gaming history — all games played, stakes, outcomes, and PKR amounts across every game category;
• Transaction history — all PKR deposits, withdrawals, bonus claims, and balance adjustments;
• Login activity — timestamps, device identifiers, and IP addresses for each session;
• Bonus and promotion activity — offers viewed, claimed, wagering progress, and fulfilment status.

Technical and Device Data

Chang222 also collects technical data about the devices and connections used to access the Platform, including IP address, device type and model, operating system and version, browser type and version, screen resolution, and general geographic location derived from IP address (city or region level — chang222 does not collect precise GPS coordinates).

04 How We Collect Your Data

chang222 collects personal data through the following means:

• Directly from you: When you register a chang222 account, complete KYC verification, make a deposit or withdrawal, claim a bonus, contact support, or update your account settings;
• Automatically: Through Platform operation logs, session management systems, and technical infrastructure that records interactions with the Platform as part of normal functioning;
• Through cookies and similar technologies: As described in Section 8 of this Policy;
• From third-party payment providers: Transaction confirmation data from Easypaisa, JazzCash, and other Pakistani payment processors when you initiate deposits or withdrawals;
• From game providers: Game session data, round outcomes, and RTP-related information from licensed third-party game suppliers whose APIs are integrated into the chang222 Platform.

05 Legal Basis for Processing

chang222 processes personal data on one of the following legal bases for each processing activity:

• Contractual necessity: Processing required to provide the chang222 Platform services you have contracted for — including account management, game access, and PKR payment processing;
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, anti-money laundering obligations, and age verification;
• Legitimate interests: Processing in pursuit of chang222's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, and responsible gaming monitoring;
• Consent: Where chang222 requests your explicit consent for specific processing activities — such as marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing.

06 How We Use Your Personal Data

chang222 uses personal data collected from Pakistani players for the following purposes:

• Account management: Creating, maintaining, and managing your chang222 account and login credentials;
• Identity verification and KYC: Verifying your identity using CNIC or passport data as required before processing PKR withdrawals and as part of ongoing regulatory compliance;
• Payment processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, MCB Bank, Meezan Bank, UBL, Bank Alfalah, and other accepted Pakistan payment channels;
• Game provision: Providing access to casino games, live dealer tables, Cockfighting streams, and sports betting markets, and maintaining accurate records of all gaming activity;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multiple account creation, money laundering, bonus abuse, and other prohibited conduct as defined in chang222's Terms & Conditions;
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling and applying responsible gaming tools and interventions where appropriate in the interests of player wellbeing;
• Customer support: Responding to account queries, technical issues, payment questions, and responsible gaming requests from Pakistani players via Live Chat, WhatsApp, and email;
• Promotional communications: Sending promotional offers, bonus notifications, and platform updates to registered Pakistani players who have opted in to marketing communications — where not opted in, only transactional communications are sent;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment channel reliability, and user experience for players across Pakistan.

07 Sharing Your Personal Data

chang222 may share your personal data with the following categories of third parties:

• Payment processors: Personal and financial data necessary to process PKR deposits and withdrawals is shared with Easypaisa, JazzCash, SadaPay, Raast, and Pakistan bank partners (HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah). These providers process data solely to fulfil your transaction and are bound by their own privacy and security obligations;
• Game providers: Game session identifiers and wagering data are shared with licensed game suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Playtech, and others) as necessary to provide game access. These providers do not receive your full identity or financial data;
• KYC verification services: Identity document data (CNIC, passport) may be shared with third-party identity verification service providers for the sole purpose of completing KYC verification as required by chang222's anti-money laundering procedures;
• IT and security service providers: Technical data may be shared with IT infrastructure, hosting, and cybersecurity service providers who support the operation of the chang222 Platform under strict data processing agreements;
• Legal and regulatory authorities: Chang222 may disclose personal data to Pakistani law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by law, court order, or legitimate regulatory request.

08 Cookies and Tracking Technologies

The chang222 Platform uses cookies and similar tracking technologies to operate correctly, maintain your session, remember your preferences, and analyse aggregate Platform usage. chang222 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: Remember your platform preferences (such as language settings and default game category) to personalise your chang222 experience;
• Analytical cookies: Collect anonymised, aggregate data about how Pakistani players navigate and use the chang222 Platform, helping us improve performance and user experience — these do not identify you individually;
• Security cookies: Used to detect fraudulent activity, protect against CSRF attacks, and maintain the integrity of your chang222 account session.

Chang222 does not use advertising cookies or share cookie data with advertising networks. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair Platform functionality. Chang222's Platform does not currently support a separate cookie consent management interface — by using the Platform, you consent to the use of cookies as described in this section.

09 Data Retention

chang222 retains personal data for no longer than necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods required by applicable legal and regulatory obligations:

• Account and identity data: Retained for the duration of your active chang222 account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements;
• Transaction records (PKR deposits, withdrawals, game stakes): Retained for a minimum of 5 years from the date of each transaction;
• KYC verification documents (CNIC, passport copies): Retained for the duration of the account plus 5 years following account closure;
• Customer support records: Retained for 3 years from the date of the last support interaction;
• Marketing consent records: Retained for 3 years from the date consent was last confirmed or withdrawn;
• Technical logs (IP addresses, session data): Retained for 12 months from the date of collection.

Upon expiry of the applicable retention period, personal data is either permanently deleted from chang222 systems or irreversibly anonymised, such that the resulting data can no longer be associated with any individual Pakistani player.

10 Data Security

chang222 implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Specific security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and the chang222 Platform;
• AES-256 encryption for sensitive data at rest in chang222 databases;
• Bcrypt hashing for all user passwords — plain-text passwords are never stored;
• Strict role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of chang222 infrastructure;
• Two-factor authentication available for all chang222 player accounts, with SMS codes to registered Pakistani mobile numbers.

11 International Data Transfers

The operation of the chang222 Platform may involve the transfer of personal data to, or processing by, service providers located outside Pakistan — including game providers, IT infrastructure providers, and identity verification services. Where such international transfers occur, chang222 takes steps to ensure that the receiving party provides an adequate level of protection for personal data, including through contractual data processing agreements that impose equivalent data protection obligations.

Chang222's primary Platform infrastructure is hosted on servers that apply industry-standard security controls. All game providers operating on the chang222 Platform are licensed entities subject to regulatory oversight in their respective jurisdictions and are bound by contractual data protection obligations with chang222.

12 Children's Privacy — 18+ Only

If chang222 discovers that a user's account belongs to a person under 18, the account will be suspended immediately, all personal data associated with the account will be deleted, and all deposits made will be returned. If you believe a person under 18 has registered or is using a chang222 account, please contact chang222 support immediately using the details in Section 16.

13 Responsible Gaming and Your Data

chang222 uses account activity data — including gaming history, deposit frequency, session duration, and bet size patterns — for responsible gaming monitoring purposes. This monitoring is carried out in your interests and in the interests of vulnerable persons on the Platform, and constitutes a legitimate processing activity under this Policy.

If chang222's responsible gaming systems identify patterns consistent with problem gambling behaviour, chang222 may proactively reach out to the affected account holder, apply protective measures to the account, or in serious cases, suspend the account pending a responsible gaming review. These actions are taken to protect player wellbeing and are not punitive in nature.

Data generated by responsible gaming tool usage — including the limits you set, cooling-off requests, and self-exclusion requests — is retained as part of your account record for the duration of the account and the applicable post-closure retention period. This retention is necessary to ensure that responsible gaming restrictions are honoured and not inadvertently reversed.

14 Your Rights Over Your Personal Data

As a Pakistani player on chang222, you have the following rights in relation to the personal data chang222 holds about you. To exercise any of these rights, please contact chang222 support using the details in Section 16. chang222 will acknowledge your request within 5 business days and respond substantively within 28 calendar days.

• Right of Access: You may request a copy of all personal data chang222 holds about you, including how it is used and who it has been shared with;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data chang222 holds about you — some corrections can be made directly through your chang222 account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to chang222's legal retention obligations;
• Right to Restrict Processing: You may request that chang222 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data;
• Right to Data Portability: You may request that chang222 provide your personal data to you in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, and to the processing of your data for direct marketing purposes at any time;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

15 Changes to This Privacy Policy

Chang222 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform operations. Material changes — meaning changes that significantly affect how we process your personal data or your rights — will be communicated to registered Pakistani players via email or in-platform notification at least 7 days before the updated Policy takes effect.

Non-material clarifications or corrections may be made without prior notice. The current version of this Policy, together with its effective date, is always available on the chang222 website. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the revised terms.

16 Contact chang222 — Privacy Enquiries

For all privacy-related queries, data subject rights requests, or concerns about how chang222 processes your personal data, please contact chang222 using the following channels:

• Live Chat: Available 24/7 on the chang222 Platform — fastest response method for Pakistani players;
• WhatsApp: Available around the clock in English with enhanced staffing during Pakistan Standard Time evening hours;
• Email: [email protected] — privacy and data subject requests are prioritised and acknowledged within 5 business days.

When contacting chang222 about a privacy matter, please include your registered username or email address and a clear description of your query or request. chang222 may need to verify your identity before processing any data subject rights request to protect your information from unauthorised disclosure.

This Privacy Policy was last updated on 1 January 2026. All prior versions are superseded by this document. © 2026 chang222. All rights reserved.