Privacy Policy

win988 ("win988", "we", "us", "our") operates the online gaming information and entertainment platform accessible at win988.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with the Platform, whether as a registered user, visitor or prospective user.

This Privacy Policy ("Policy") sets out in clear terms what personal data win988 collects, the purposes for which we use that data, the legal bases on which we rely to process it, how long we retain it, with whom we may share it, the security measures we apply to protect it, and the rights available to you as a data subject.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which are incorporated by reference. Where there is a conflict between this Policy and any other document, this Policy shall prevail in respect of data privacy matters.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including but not limited to name, email address, IP address, account credentials and financial data.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure or deletion.
• "Data Controller" means win988, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of win988 under a data-processing agreement.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in this context, you, the User.
• "Cookies" means small text files placed on your device by the Platform to store browsing preferences, session identifiers and analytics data.
• "KYC" means Know Your Customer — the identity verification process required to confirm a user's identity, age and payment method ownership.
• "Third Party" means any entity other than you and win988, including payment processors, analytics providers and fraud-prevention services.

win988 collects Personal Data across several categories, depending on the nature of your interaction with the Platform. The categories of data we may collect include:

Identity and Contact Data

• Full legal name, date of birth and gender.
• Residential address, city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and country.
• Email address and phone number.
• Copies of government-issued identity documents submitted for KYC verification.

Account and Financial Data

• Username, encrypted password and account settings.
• Deposit and withdrawal history, transaction amounts (denominated in PKR or other currencies) and payment method references.
• Bonus and promotional activity records.
• Gaming history, bet records and session data.

Technical and Usage Data

• IP address, device type, operating system and browser type.
• Pages visited, time spent on the Platform, click paths and referral sources.
• Session timestamps, login and logout records.
• Cookie identifiers and similar tracking technologies.

Communications Data

• Records of correspondence with our support team, including email content, chat transcripts and support ticket history.
• Survey responses and feedback submissions.

win988 collects Personal Data through the following channels:

• Direct Submission: Data you provide when creating an Account, completing the KYC verification process, making a deposit or withdrawal, contacting our support team or responding to a survey.
• Automated Technologies: Data collected automatically through cookies, web beacons, pixel tags and server logs when you access or interact with the Platform.
• Third-Party Sources: Data received from identity verification providers, fraud-detection services, payment processors and analytics platforms that have their own privacy policies governing data they share with us.
• Publicly Available Sources: In limited circumstances and where legally permissible, win988 may verify data against publicly accessible records for fraud prevention and compliance purposes.

You are under no obligation to provide Personal Data to win988; however, certain data is required to register an Account, complete KYC verification and access the full range of Platform services. Failure to provide required data may result in your inability to use specific Platform features.

win988 processes your Personal Data for the following specific purposes:

win988 processes Personal Data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing is required to perform our obligations under the Terms & Conditions you agreed to when registering an Account — for example, operating your Account and processing transactions.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements and responsible gambling obligations under applicable operator licence conditions.
• Legitimate Interests: Processing is necessary for win988's legitimate business interests, including fraud prevention, platform security, product improvement and analytics, provided those interests are not overridden by your privacy rights.
• Consent: For certain processing activities, such as sending marketing communications or placing non-essential cookies on your device, win988 relies on your explicit, freely given and withdrawable consent.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, update your preferences in your Account settings or contact us at [email protected].

win988 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Identity Verification Providers: Third-party KYC and age-verification services that process identity documents and biographic data to satisfy our regulatory compliance obligations.
• Payment Processors: Entities that facilitate deposit and withdrawal transactions. Where payment references familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — are involved, data shared is limited to what is necessary to execute the transaction. These references are contextual and do not imply that these providers endorse win988 or the gambling sector.
• Fraud Prevention and Security Services: Providers that analyse transaction patterns and behavioural data to detect and prevent fraud, money laundering and account takeover attempts.
• Analytics Providers: Services that help us understand how users interact with the Platform, enabling product improvements. Data shared with analytics providers is aggregated and anonymised wherever possible.
• Legal and Regulatory Authorities: Where required by law, court order or applicable regulatory authority, win988 may disclose Personal Data to competent authorities. win988 will, where legally permitted, notify affected users of such disclosures.
• Corporate Transactions: In the event of a merger, acquisition, restructuring or sale of all or part of win988's business, Personal Data may be transferred as part of that transaction. Affected users will be notified in accordance with applicable law.

win988 uses cookies and similar tracking technologies to operate core Platform functions, remember your preferences and gather analytics data that helps us improve the user experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your session, maintain login state and support basic security features. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options and notification preferences to provide a more personalised experience.
• Analytics Cookies: Collect anonymised data about how you navigate the Platform — pages visited, time spent and interaction events — enabling us to identify and address usability issues.
• Marketing Cookies: Used, with your consent, to deliver promotional content relevant to your interests and to measure the effectiveness of our marketing campaigns. These are not placed without your explicit consent.

You may manage your cookie preferences through the Platform's cookie settings panel or through your browser settings. Disabling certain cookies may affect Platform functionality. For more detail on the specific cookies in use, refer to our cookie settings panel accessible from the Platform footer.

win988 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The general retention periods are as follows:

• Account Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, to meet anti-money laundering and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in line with financial record-keeping obligations.
• KYC Documents: Retained for the period required by the applicable operator licence jurisdiction and AML regulations, typically five (5) years from the end of the business relationship.
• Communications Data: Support correspondence and chat transcripts retained for up to three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Analytics and Technical Data: Aggregated analytics data may be retained indefinitely in anonymised form. Identifiable technical data such as IP logs is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with win988's data lifecycle management procedures.

win988 implements a range of technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields, including passwords and payment information, at rest using industry-standard algorithms.
• Role-based access controls that restrict access to Personal Data to authorised personnel on a need-to-know basis.
• Regular security audits, vulnerability assessments and penetration testing of Platform infrastructure.
• Intrusion detection systems and real-time security monitoring.
• Staff training on data protection, information security and incident response procedures.

While win988 applies robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for using a secure, private network when accessing your Account.

Subject to applicable law, you have the following rights in relation to the Personal Data win988 holds about you. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a verified request.

Please note that some rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain for regulatory or compliance purposes. win988 will clearly explain any such limitations when responding to your request.

The win988 Platform is strictly intended for adults aged 18 and over, or the higher minimum age required by the applicable operator or licence jurisdiction. win988 does not knowingly collect, process or store Personal Data from individuals under the age of 18.

If win988 becomes aware that Personal Data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated Account. Any funds deposited by an underage user will be handled in accordance with applicable legal requirements.

Parents and guardians who believe that a minor has registered an Account or submitted Personal Data to win988 are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

win988 operates internationally and your Personal Data may be processed by win988 or its Data Processors in countries outside Pakistan. Where Personal Data is transferred to countries that may not offer equivalent data protection standards to those applicable in your jurisdiction, win988 will implement appropriate safeguards to protect your data, which may include:

• Standard contractual clauses approved by applicable data protection authorities.
• Data processing agreements imposing data security and confidentiality obligations on the receiving party.
• Transfers to jurisdictions with adequate data protection frameworks as recognised by applicable regulatory authorities.

By using the win988 Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. win988 remains responsible for the protection of your data throughout any such transfer and will not authorise international data transfers without ensuring appropriate safeguards are in place.

win988 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal or regulatory requirements, or Platform features. When we make material changes to this Policy, we will update the effective date at the top of the document and, where required, notify registered users via email or an in-Platform notification.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the revised Policy, you should cease using the Platform and contact us to arrange Account closure and a data subject access or deletion request as appropriate.

We encourage you to review this Policy periodically to stay informed about how win988 handles your Personal Data.

If you have any questions, concerns or complaints about this Privacy Policy or win988's data processing practices, or if you wish to exercise any of your data subject rights, please contact our support team using the details below. We aim to acknowledge all privacy-related inquiries within five (5) business days and to resolve them within thirty (30) days.