win288 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how win288 ("win288", "we", "us", "our") collects, processes, stores, and protects personal data in connection with the operation of the win288 online betting and casino platform at win288.asia ("the Platform").

This Policy applies to all users of the Platform, including registered account holders and visitors who access win288 without creating an account. It covers personal data collected through the win288 website, mobile browser interface, customer support channels, and all associated services including sports betting, live casino games, slots, virtual casino products, and the Tower game.

By registering a win288 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the win288 Platform.

This Policy should be read alongside win288's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

win288 is the data controller in respect of personal data collected through the Platform. As data controller, win288 determines the purposes and means of processing your personal data. win288 processes data in accordance with applicable data protection legislation and the principles set out in this Policy.

For questions regarding data controller responsibilities or to exercise your data subject rights, please contact win288 using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

win288 may collect and process the following categories of personal data:

3.1 Identity Data: Full name, date of birth, gender, and copies of identity documents provided for Know Your Customer (KYC) verification purposes.

3.2 Contact Data: Mobile phone number, email address, and city or region of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).

3.3 Account Data: Username, encrypted password, account creation date, account status, and account preferences.

3.4 Financial Data: Payment method identifiers (JazzCash account number, Easypaisa mobile wallet number, HBL or UBL bank account details), transaction history, deposit and withdrawal records, and PKR wallet balance.

3.5 Technical Data: IP address, browser type and version, device identifiers, operating system, time zone settings, and session logs.

3.6 Usage Data: Betting history, game play history, win/loss records, session duration, pages visited on the Platform, and feature interactions.

3.7 Communications Data: Records of correspondence between you and win288 customer support, including support ticket content and email communications.

3.8 Responsible Gaming Data: Self-imposed deposit limits, loss limits, self-exclusion requests, and responsible gaming tool usage records.

4. How We Collect Your Data

win288 collects personal data through the following means:

• Direct submission: Data you provide when registering a win288 account, completing KYC verification, making deposits or withdrawals, or contacting support.
• Automated collection: Technical and usage data collected automatically when you access or interact with the Platform, including through cookies and session tracking technologies.
• Third-party payment processors: Transaction data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and USDT TRC20 processors in connection with deposits and withdrawals.
• Identity verification providers: Where win288 engages third-party KYC providers to verify the identity or age of account holders, data may be received from those providers.
• Fraud prevention services: Data received from fraud detection and anti-money laundering service providers to fulfil win288's compliance obligations.

5. Purposes & Legal Basis for Processing

win288 processes personal data for the following purposes and on the following legal bases:

• Account administration and service delivery: Processing necessary for the performance of the contract between win288 and the user, including operating your account, processing bets, and crediting winnings to your PKR wallet.
• Identity and age verification: Processing necessary to comply with legal obligations, including the requirement to verify that users are aged 18 or above and to satisfy applicable KYC regulations.
• Financial transaction processing: Processing necessary for the performance of the contract, including facilitating deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods.
• Fraud prevention and AML compliance: Processing necessary to comply with legal obligations and to protect the legitimate interests of win288 and its users against fraud, money laundering, and abuse.
• Responsible gaming monitoring: Processing carried out in the legitimate interests of win288 and users to identify problem gambling indicators and enforce responsible gaming obligations.
• Customer support: Processing necessary for the performance of the contract and in the legitimate interests of win288 to resolve player queries and complaints effectively.
• Platform security and technical maintenance: Processing in the legitimate interests of win288 to maintain Platform integrity, prevent unauthorised access, and ensure technical performance.
• Marketing communications: Where you have provided explicit consent, win288 may send promotional communications about win288 offers, new games, or platform features. You may withdraw this consent at any time.

6. Disclosure of Personal Data

win288 does not sell personal data to third parties. win288 may disclose personal data to the following categories of recipients only to the extent necessary for the stated purposes:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and USDT network operators, for the purpose of processing deposits and withdrawals.
• Game software providers: Including Evolution Gaming, Pragmatic Play, PG Soft, JILI, and other certified studio and RNG providers, to the extent required to facilitate your game sessions.
• KYC and identity verification providers: Third-party services engaged to verify user identity and age in compliance with regulatory requirements.
• Fraud prevention and AML compliance services: Third-party providers engaged to detect and prevent fraudulent activity and money laundering.
• Regulatory and law enforcement authorities: Where win288 is legally required to disclose personal data by applicable law, court order, or regulatory directive.
• Professional advisers: Including lawyers, auditors, and compliance consultants, subject to binding confidentiality obligations.

All third-party recipients of win288 user data are required to handle that data in accordance with applicable data protection standards and are prohibited from using win288 user data for their own marketing or commercial purposes.

7. International Data Transfers

win288 operates internationally and your personal data may be processed in countries outside of Pakistan. Where personal data is transferred outside the jurisdiction in which it was collected, win288 ensures that appropriate safeguards are in place to protect your data, including contractual protections equivalent to those required under applicable data protection law. By using the win288 Platform, you consent to the transfer of your personal data as described in this section.

8. Data Retention

win288 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account data is retained for the duration of your win288 account and for a period of at least five years following account closure, to comply with AML and regulatory obligations.
• Transaction and financial data is retained for a minimum of five years from the date of each transaction.
• KYC documentation is retained for a minimum of five years following account verification.
• Customer support correspondence is retained for three years from the date of the most recent communication in a thread.
• Technical and usage data may be retained in aggregate or anonymised form for analytical purposes indefinitely.

When personal data is no longer required, win288 will securely delete or anonymise it in accordance with applicable data protection standards.

9. Cookies & Tracking Technologies

win288 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser. win288 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your login session and PKR wallet state. These cannot be disabled without preventing use of the Platform.
• Performance and analytics cookies: Used to understand how users interact with win288, which pages are most visited, and where technical errors occur. Data collected is aggregated and does not identify individual users.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations.
• Security cookies: Used to detect and prevent fraudulent login attempts and protect your account.

You may configure your browser to refuse cookies. Disabling strictly necessary cookies will affect Platform functionality. win288 does not use cookies to serve third-party advertising.

10. Security Measures

win288 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the win288 Platform.
• Secure password hashing using industry-standard algorithms — win288 staff cannot view your password.
• Two-factor authentication (2FA) availability for all registered accounts.
• Access controls limiting personal data access to authorised win288 personnel with a legitimate business need.
• Regular security assessments and infrastructure reviews.
• Separation of player funds from operational accounts to protect PKR wallet balances.

Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Users are encouraged to use strong, unique passwords and to enable 2FA on their win288 accounts.

11. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of your personal data held by win288:

• Right of access: You may request confirmation of whether win288 processes your personal data and, if so, a copy of that data.
• Right of rectification: You may request correction of inaccurate or incomplete personal data held by win288.
• Right of erasure: You may request deletion of your personal data where there is no longer a legal or legitimate basis for win288 to retain it. Note that certain data must be retained to comply with regulatory obligations and cannot be erased on request.
• Right to restrict processing: You may request that win288 restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to win288 for the purposes of portability to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on win288's legitimate interests where you believe your fundamental rights override those interests.

To exercise any of these rights, please contact win288 using the details in Section 14. win288 will respond to all valid data subject requests within 30 days of receipt. Identity verification may be required before win288 processes a data subject request.

12. Children's Privacy

win288 does not knowingly collect personal data from individuals under the age of 18. The Platform is strictly for adults aged 18 and above. If win288 discovers or has reason to believe that personal data has been collected from a person under 18, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe your child has registered a win288 account, please contact support immediately using the contact details in Section 14.

13. Changes to This Policy

win288 reserves the right to update this Privacy Policy at any time. When material changes are made, the updated Policy will be published on this page with a revised effective date. Continued use of the win288 Platform following publication of an updated Policy constitutes acceptance of the revised terms. win288 recommends that you review this Policy periodically to remain informed about how your personal data is handled.

14. Contact & Data Enquiries

For all privacy-related queries, data subject access requests, or concerns about how win288 handles your personal data, please contact the win288 data protection team. All requests must be submitted in English and include your registered mobile number (not your account password) to enable identity verification.

The win288 support email address is displayed in the footer of this page. win288 prioritises responses during Pakistan Standard Time (PKT, UTC+5) business hours and aims to respond to all data subject requests within 30 calendar days of receipt.