Privacy Policy – win288 Data & Security Commitment

1. Introduction

win288 ("Platform", "we", "us", "our") operates an online casino and sports betting service accessible to players in Pakistan and select international markets. We are committed to protecting the privacy and personal data of every user who accesses our platform. This Privacy Policy sets out in clear, transparent terms what data we collect, why we collect it, how we use it, and what rights you have over your own information.

This Policy applies to all data collected through the win288 website, cashier, customer support channels, and any other interaction you have with the platform. It should be read alongside our Terms and Conditions and our Responsible Gaming Policy.

2. Data We Collect

2.1 Registration Data

When you create a win288 account, we collect: full name, date of birth, Pakistani CNIC number, mobile number, email address, residential address, and preferred payment method details. This information is required to open and manage your account.

2.2 KYC & Verification Documents

To comply with Know Your Customer (KYC) requirements, win288 collects identity documents including a copy of your CNIC (front and back), a selfie photograph, and in certain circumstances, proof of address and payment method verification. These documents are processed securely and are never shared commercially.

2.3 Financial Data

win288 collects records of all deposits, withdrawals, and transactions in PKR. Payment method identifiers (e.g., JazzCash account number, Easypaisa wallet reference, HBL or UBL account details) are stored to facilitate withdrawals to verified accounts only. win288 does not store full bank account credentials.

2.4 Gameplay & Betting Data

All game sessions, wagers, outcomes, and betting history on win288 are recorded. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

win288 automatically collects technical data including IP address, browser type, operating system, device identifiers, and session timestamps when you access the platform. This data is used for security monitoring, fraud prevention, and improving platform performance.

2.6 Communications Data

If you contact win288 customer support via live chat or email, the content of those communications is recorded and retained for quality assurance, dispute resolution, and training purposes.

3. How We Use Your Data

win288 uses your personal data exclusively for the following purposes:

• Account Management: To create, maintain, and administer your win288 account, process transactions, and provide access to the platform's services.
• KYC & Compliance: To verify your identity, confirm your eligibility to use win288, and comply with applicable anti-money laundering (AML) and responsible gaming obligations.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, and abuse of the platform.
• Responsible Gaming: To monitor betting patterns and intervene where necessary to protect players who may be exhibiting signs of problem gambling. This includes enforcing deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Service Improvement: To analyse aggregated, anonymised usage data to improve the win288 platform, optimise game performance, and develop new features.
• Marketing Communications: Where you have provided explicit consent, win288 may send you promotional communications about bonuses, new games, and platform updates. You may opt out at any time.

4. Legal Basis for Processing

win288 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to provide the services described in our Terms and Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML, and age verification requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for direct marketing and optional cookies, where your explicit consent has been obtained and may be withdrawn at any time.

5. Data Sharing & Disclosure

win288 does not sell, rent, or commercially trade your personal data. We may share data only in the following limited circumstances:

• KYC & Identity Verification Providers: Third-party identity verification services used to validate CNIC documents and process KYC checks. These providers are bound by strict confidentiality obligations.
• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive the minimum data necessary to process your transactions.
• Game Providers: Game studios such as JILI, Pragmatic Play, and PG Soft may receive anonymised session identifiers to deliver game content. They do not receive your personal identity data.
• Legal Authorities: Where required by law, court order, or regulatory authority, win288 may disclose user data to competent authorities.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to equivalent privacy protections.

6. Cookies & Tracking Technologies

win288 uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse platform usage. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function. These cannot be disabled without preventing access to core features such as login sessions and cashier operations.
• Performance Cookies: Anonymised analytics data used to understand how players navigate win288 and to identify areas for improvement. No personal identity data is included.
• Preference Cookies: Store your language settings, UI preferences, and display options to personalise your experience on win288.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use win288.

7. Data Security

win288 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and win288 servers;
• Encrypted storage of sensitive identity and financial data at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of platform infrastructure;
• Two-factor authentication (2FA) available to all players to protect account access.

No system is entirely immune to security risks. In the event of a data breach affecting your personal data, win288 will notify you and relevant authorities in accordance with applicable obligations.

8. Data Retention

win288 retains your personal data for as long as your account is active or as required to fulfil the purposes described in this Policy. Upon account closure, certain data categories (particularly KYC documents and transaction records) are retained for a minimum of five years to comply with AML and regulatory obligations. Anonymised analytical data may be retained indefinitely for platform improvement purposes.

If you request account deletion, win288 will delete or anonymise your personal data to the extent permitted by applicable legal retention requirements.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data held by win288:

• Right of Access: You may request a copy of the personal data win288 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that win288 restrict processing of your data in certain circumstances.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to win288.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact win288 support via live chat or by emailing [email protected] (plain text – not a clickable link). win288 will respond within a reasonable period and may require identity verification before fulfilling the request.

10. Children's Privacy

win288 strictly prohibits access by individuals under the age of 18. We do not knowingly collect personal data from minors. If we determine that an account was created by a person under 18, that account will be immediately closed and all associated data deleted, with the exception of any records required for regulatory compliance. If you believe a minor has accessed win288, please contact support immediately.

11. International Data Transfers

win288 may process or store personal data on servers located outside Pakistan. Where data is transferred internationally, win288 applies appropriate safeguards to ensure your data receives a level of protection consistent with this Policy, including contractual data protection clauses with third-party service providers. By using win288, you acknowledge and consent to such transfers where necessary for platform operation.

12. Changes to This Policy

win288 may update this Privacy Policy periodically to reflect changes in our data practices, platform services, or applicable laws. Material changes will be communicated via a notice on the win288 platform or by email to your registered address where reasonably practicable. The date of the most recent update is shown at the top of this page. Continued use of win288 following any update constitutes your acceptance of the revised Policy.

13. Contact & Data Enquiries

For all privacy-related enquiries, data access requests, or concerns about how win288 handles your personal information, please contact our support team via live chat (available 24/7 on the platform) or by email at: