win288 Privacy Policy
How We Protect Your Data

win288 ("win288", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who visits, registers on, or transacts through the win288 platform at win288.site. This Privacy Policy describes what personal data win288 collects, why we collect it, how it is used, who it may be shared with, and the rights available to you as a Player or visitor.

This Privacy Policy applies to all users of win288, including registered Players and visitors browsing the platform without an account. By accessing win288, you consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should refrain from using the win288 platform.

win288 processes personal data in compliance with its international gaming licensing obligations, which require robust data protection, identity verification, and anti-money laundering data handling standards. We treat the personal information of our Pakistani players with the same seriousness as financial institutions such as HBL, UBL, and Meezan Bank treat customer banking data.

win288 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third parties such as payment processors. The categories of data collected are set out below.

win288 does not knowingly collect sensitive personal data such as religious beliefs, political opinions, or health information, except where voluntarily disclosed by a Player in the context of a responsible gaming support request.

win288 uses collected personal data for the following purposes:

• Account creation and management — to register your win288 account, authenticate login attempts, and maintain your account preferences.
• Age and identity verification — to confirm that you are at least 21 years of age and to verify your identity as required under win288's KYC obligations before processing withdrawals.
• Payment processing — to process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to detect and prevent payment fraud.
• Compliance and AML monitoring — to meet anti-money laundering obligations imposed by win288's international gaming licence, including transaction monitoring and source-of-funds verification where required.
• Customer support — to respond to your inquiries, resolve account issues, and provide assistance via live chat or email.
• Responsible gaming — to administer deposit limits, loss limits, cool-off periods, and self-exclusion requests, and to identify patterns that may indicate problem gambling behaviour.
• Platform security — to detect unauthorised access attempts, prevent fraud, and maintain the overall security of the win288 platform.
• Marketing communications — where you have provided consent, to send you information about win288 promotions, new games, and platform updates.
• Legal and regulatory reporting — to comply with requests from regulatory bodies, law enforcement, or other authorities as required under applicable law and win288's licensing obligations.

win288 processes personal data on the following legal bases:

• Contractual necessity — processing required to provide the win288 services you have registered for, including account management and game access.
• Legal obligation — processing required to comply with KYC, AML, and other regulatory requirements imposed on win288 under its international gaming licence.
• Legitimate interest — processing necessary for fraud prevention, platform security, and service improvement, balanced against your privacy rights.
• Consent — processing of your data for marketing communications, which you may withdraw at any time without affecting other aspects of your account.

5.1 No Sale of Personal Data. win288 does not sell, rent, or trade Player personal data to third parties for their own marketing or commercial purposes. Any data sharing is strictly limited to what is necessary for the operation, compliance, and security of the win288 platform.

5.2 Categories of Recipients. win288 may share personal data with the following categories of third parties:

• Payment processors — JazzCash, EasyPaisa, and partner banks (HBL, UBL, Meezan Bank) to facilitate deposits and withdrawals.
• KYC and identity verification providers — third-party verification services engaged by win288 to confirm Player identity and age.
• Game and software providers — to facilitate gameplay, where minimal account identifiers are shared strictly for game session purposes.
• Regulatory and law enforcement authorities — where win288 is legally required to disclose information in connection with its licensing obligations or a lawful request.
• Professional advisers — including legal counsel and auditors, where necessary for the operation and compliance of win288's business.

5.3 Data Processing Agreements. Where win288 shares data with third-party service providers, such providers are contractually bound to handle the data in accordance with confidentiality and data protection standards consistent with this Privacy Policy.

6.1 Encryption. All data transmitted between your device and win288's servers is protected using 256-bit SSL encryption. Passwords are stored using industry-standard one-way hashing algorithms and are never stored or transmitted in plain text.

6.2 Access Controls. Access to Player personal data within win288's systems is restricted to authorised personnel whose job functions require such access, including compliance, KYC verification, and customer support staff. All access is logged and subject to periodic internal review.

6.3 Infrastructure Security. win288's data infrastructure incorporates firewalls, intrusion detection systems, and regular security audits to protect against unauthorised access, data breaches, and cyber-attacks.

win288 retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including ongoing legal and regulatory obligations. As a general rule:

• Identity verification documents and KYC records are retained for the period required under win288's AML and licensing obligations, typically for a minimum of five years following account closure.
• Transaction and gameplay records are retained in accordance with applicable financial record-keeping requirements under win288's international licence.
• Marketing consent records are retained until consent is withdrawn, plus a reasonable period thereafter to evidence compliance with your request.
• Support interaction records (live chat transcripts, emails) are retained for a reasonable period to enable quality assurance and dispute resolution.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with win288's data retention schedule.

Subject to applicable law, you have the following rights in relation to your personal data held by win288:

• Right of access — to request a copy of the personal data win288 holds about you.
• Right of rectification — to request correction of inaccurate or incomplete personal data.
• Right of erasure — to request deletion of your personal data, subject to win288's legal retention obligations (for example, KYC and AML records cannot be deleted before the mandated retention period expires).
• Right to restrict processing — to request that win288 limit the processing of your data in certain circumstances.
• Right to withdraw consent — to withdraw consent for marketing communications at any time without affecting your ability to use win288's core services.
• Right to lodge a complaint — to raise concerns regarding win288's data handling practices with our support team in the first instance.

To exercise any of these rights, please contact win288 support via live chat or email. We aim to respond to all data rights requests within a reasonable timeframe, generally within 30 days, and may require identity verification before processing a request.

9.1 Use of Cookies. win288 uses cookies and similar tracking technologies to maintain your login session, remember your preferences, analyse platform usage patterns, and improve overall site performance. Cookies do not collect personal data beyond what is necessary for these functional purposes.

9.2 Types of Cookies. win288 uses essential cookies (required for core platform functionality such as login sessions), performance cookies (to understand how Players interact with the platform), and preference cookies (to remember display settings such as language).

9.3 Managing Cookies. You can control or disable cookies through your browser settings. Please note that disabling essential cookies may affect your ability to log in or use certain features of win288.

With your consent, win288 may send you marketing communications via email or SMS regarding promotions, new game releases, and platform updates relevant to Pakistani players. You can withdraw consent for marketing communications at any time via your Account Settings or by contacting support — this will not affect your ability to log in, deposit, withdraw, or play on win288.

win288 does not send marketing communications to individuals who have activated self-exclusion or who have not provided explicit marketing consent during or after registration.

win288 is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21. Age verification is a mandatory part of our KYC process before any withdrawal is processed. If win288 becomes aware that an account has been registered by an individual under 21, the account will be closed immediately, all collected data relating to that account will be handled in accordance with applicable law, and any deposited funds will be returned to the original payment source.

As an internationally licensed gaming platform, win288's data infrastructure and certain service providers may be located outside Pakistan. Where personal data is transferred internationally, win288 ensures that appropriate safeguards — including contractual data protection obligations with service providers — are in place to protect the data to a standard consistent with this Privacy Policy.

win288 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated via email to your registered address and/or a prominent notice on the win288 platform. Continued use of win288 following any update constitutes acceptance of the revised Privacy Policy. We encourage Players to review this Policy periodically.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how win288 handles your personal data, please contact us through the following channel:

• Live Chat: Available 24 hours a day, 7 days a week via the win288 platform.
• Email: [email protected] (plain text — not a clickable link).