win338 Privacy Policy — Your Data, Your Rights, Our Commitment

win338 is the data controller responsible for the personal data of Pakistan players collected through the win338 platform at win338.games. As data controller, win338 determines the purposes and means by which your personal data is processed.

win338 operates under an international gambling licence and is required to collect and process certain categories of personal data to comply with licensing obligations, anti-money laundering (AML) regulations, responsible gaming requirements, and Know Your Customer (KYC) standards.

For any privacy-related queries, data subject requests, or concerns regarding how win338 handles your personal data, Pakistan players may contact win338's data protection team directly:

Email: [email protected] — please mark the subject line "Privacy Request" for faster routing to the appropriate team. win338 aims to respond to all privacy-related enquiries within 5 business days.

When you register a win338 account, we collect the following information:

• Full legal name;
• Date of birth (to verify you are 18 years of age or older);
• Pakistan mobile number;
• Email address;
• Username and encrypted password;
• Country of residence (Pakistan).

To comply with our licensing obligations and to process your PKR withdrawals, win338 may request the following identity verification documents from Pakistan players:

• Copy of a valid government-issued photo identification (CNIC, passport, or driver's licence);
• Proof of current Pakistan residential address (utility bill, bank statement, or official correspondence dated within three months);
• Proof of payment method ownership — for example, a screenshot of your Easypaisa or JazzCash account registered in your name, or a bank statement from HBL, UBL, or MCB confirming account ownership.

KYC documents are stored securely and used solely for identity verification and fraud prevention purposes. win338 does not sell or share KYC documents with third parties except as required by law or our licensing authority.

win338 collects data related to your PKR deposits and withdrawals, including:

• Payment method used (Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB);
• Transaction amounts in PKR;
• Transaction timestamps and reference numbers;
• Deposit and withdrawal history.

win338 does not store full payment account credentials. Payment transactions are processed through secure, licensed payment processors, and only transaction references and amounts are retained by win338.

win338 records your gaming activity on the platform, including:

• Games played, bet amounts in PKR, win/loss outcomes, and session durations;
• Bonus offers claimed and wagering progress;
• Sports betting selections and stake amounts;
• Responsible gaming tool settings (deposit limits, session time limits, self-exclusion status).

Gaming activity data is used to operate the platform, calculate payouts, monitor for problem gambling indicators, detect fraud, and comply with responsible gaming obligations.

When you access win338, our systems automatically collect certain technical data, including:

• IP address and approximate location (country/city level — used for security and fraud prevention);
• Device type, operating system, and browser version;
• Pakistan mobile network operator (where applicable);
• Pages visited on win338, session duration, and navigation patterns;
• Login timestamps and account access logs.

If you contact win338 support via Live Chat, WhatsApp, Telegram, or email, we retain records of those communications. This includes the content of your messages, timestamps, and the resolution provided by our support team. These records are used to improve our service quality, resolve disputes, and comply with regulatory obligations.

The majority of win338's data processing activities are necessary to perform the contract between win338 and you as a registered Pakistan player — specifically, to operate your PKR account, process deposits and withdrawals, and deliver gaming services. Without this data processing, win338 cannot provide its services to you.

win338 is required by its international gambling licence and applicable anti-money laundering regulations to collect and retain certain categories of personal data, including identity verification documents, transaction records, and responsible gaming activity records. Compliance with these legal obligations is non-negotiable and independent of your consent preferences.

win338 processes certain data — such as device fingerprinting, IP address logging, and gaming pattern analysis — on the basis of legitimate interests, namely platform security, fraud detection, and responsible gambling monitoring. Where win338 relies on legitimate interests, we have assessed that these interests do not override your fundamental privacy rights.

Where win338 relies on your consent as the legal basis for processing — for example, for marketing communications via email or WhatsApp — you have the right to withdraw that consent at any time. Withdrawing consent for marketing will not affect the lawfulness of any processing carried out prior to withdrawal, nor will it affect your ability to use your win338 account.

win338 shares your personal data with carefully selected third-party service providers who assist us in operating the platform. These include:

• Payment processors — Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank, for the purpose of processing your PKR deposits and withdrawals;
• KYC verification providers — identity verification services that assist win338 in verifying your CNIC, passport, or other identity documents;
• Game providers — licensed game developers whose games are available on the win338 platform may receive anonymised session data necessary to operate game mechanics;
• Cloud infrastructure providers — secure hosting and data storage providers who process data on win338's behalf under binding data processing agreements.

All third-party service providers are bound by contractual data protection obligations and are permitted to use your data only for the specific purpose for which it was shared.

win338 may be required to disclose your personal data to regulatory authorities, law enforcement agencies, or our licensing authority where required to do so by law, court order, or regulatory direction. win338 will only disclose the minimum data necessary to fulfil such obligations and will notify you where legally permitted to do so.

win338 does not sell, rent, or otherwise commercially exploit your personal data to third parties for their own marketing or commercial purposes. Your PKR account data, identity documents, transaction history, and gaming activity records are never sold to data brokers or advertising networks.

win338 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit win338. The following categories of cookies are used:

• Essential cookies — required for the platform to function, including maintaining your login session, remembering your PKR account settings, and enabling secure transactions. These cannot be disabled without affecting platform functionality.
• Performance cookies — collect anonymised data about how Pakistan players use the win338 platform, such as which games are most popular and where players encounter technical issues. This data helps us improve the platform.
• Functional cookies — remember your preferences such as language settings, responsible gaming tool configurations, and display options.
• Analytics cookies — used to measure platform traffic, user flows, and engagement patterns. Analytics data is aggregated and anonymised where possible.

You can control non-essential cookies through your browser settings on any device. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling essential cookies will affect the functionality of your win338 account and may prevent you from accessing certain features, including your PKR balance and game lobby. For detailed guidance on managing cookies on your specific browser or Pakistan mobile device, consult your browser's help documentation.

win338 employs the following technical security measures to protect Pakistan player data:

• 256-bit SSL/TLS encryption on all connections between your device and win338 servers — the same encryption standard used by international banking institutions;
• Encrypted password storage — win338 never stores passwords in plaintext. All passwords are hashed using industry-standard cryptographic algorithms;
• Two-factor authentication (2FA) — available to all Pakistan players as an optional additional layer of account security;
• Session management — automatic session expiry and logout on inactivity to protect accounts on shared devices;
• Login location alerts — anomalous login attempts from unrecognised devices or locations trigger security alerts;
• DDoS protection and intrusion detection — enterprise-grade infrastructure with real-time threat monitoring.

In the event of a personal data breach that is likely to result in risk to Pakistan players' rights and freedoms, win338 will notify affected players via their registered email address or Pakistan mobile number as promptly as possible. win338 will also notify its licensing authority and any relevant regulators within the timeframe required by applicable law. win338 maintains a documented data breach response procedure reviewed regularly by our security team.

win338 retains personal data for the periods necessary to fulfil the purposes set out in this Privacy Policy and to comply with legal obligations. The following retention periods apply:

• Active account data — retained for the full duration of your win338 account being active;
• KYC documents and identity verification records — retained for a minimum of 5 years following account closure, as required by anti-money laundering regulations;
• PKR transaction records — retained for a minimum of 5 years following each transaction, as required by financial record-keeping regulations;
• Gaming activity logs — retained for a minimum of 3 years following account closure;
• Support communications — retained for a minimum of 2 years following the resolution of each query;
• Marketing consent records — retained for the duration of your consent, or until you withdraw it.

Once the applicable retention period has expired and there is no longer a legal or regulatory requirement to retain your data, win338 will securely delete or anonymise your personal data. Anonymised data (which cannot be used to identify you) may be retained for statistical and platform improvement purposes beyond the standard retention periods.

As a win338 Pakistan player, you have the following rights in relation to your personal data. To exercise any of these rights, contact win338's data protection team at [email protected] with the subject line "Privacy Request":

• Right of access — you may request a copy of the personal data win338 holds about you, including your account details, transaction history, and KYC records;
• Right to rectification — if any personal data win338 holds about you is inaccurate or incomplete, you have the right to request correction. Inaccurate account information can also be updated directly within your win338 account settings where applicable;
• Right to erasure — you may request deletion of your personal data in certain circumstances. Please note that win338 is legally required to retain certain data (KYC documents, transaction records) for defined periods regardless of an erasure request;
• Right to restrict processing — you may request that win338 restrict the processing of your personal data in specific circumstances, such as while a dispute regarding its accuracy is being resolved;
• Right to data portability — you may request a copy of certain personal data win338 holds about you in a structured, commonly used, machine-readable format;
• Right to object — you may object to win338's processing of your personal data where that processing is based on legitimate interests. You may also withdraw consent for marketing communications at any time;
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

win338 will respond to all data subject requests within 30 calendar days of receipt. Where a request is particularly complex or win338 receives a high volume of requests simultaneously, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

win338 does not knowingly collect personal data from individuals under 18 years of age. win338 is strictly an adults-only platform and all Pakistan player accounts are subject to age verification. If win338 discovers that personal data has been collected from a person under 18, that data will be immediately deleted and the associated account will be permanently closed.

Pakistan parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. win338 asks all registered players to ensure that their win338 login credentials are kept secure and inaccessible to minors in their household.

The win338 platform may contain links to third-party websites or services — for example, game provider websites, payment processor information pages, or responsible gaming resources. win338 is not responsible for the privacy practices of any third-party websites. This Privacy Policy applies solely to data collected by win338 through the win338 platform. Pakistan players are encouraged to review the privacy policies of any third-party sites they visit independently of win338.

win338 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Privacy Policy will be communicated to Pakistan players via their registered email address or through a prominent notice displayed on the win338 platform upon login. The effective date of the most recent version of this Privacy Policy is displayed at the top of this page and within the introductory section. Continued use of the win338 platform following notification of any amendment constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or win338's handling of your personal data, please contact the win338 data protection team using any of the following channels:

• Email: [email protected] (Subject line: "Privacy Request")
• Live Chat: Available 24/7 directly from your win338 account dashboard
• WhatsApp: Contact details listed in your win338 account after login
• Telegram: Contact details listed in your win338 account after login

win338 aims to acknowledge all privacy-related enquiries within 1 business day and to resolve them fully within 30 calendar days. If you are not satisfied with win338's response to a privacy complaint, you may escalate the matter to the relevant data protection authority or win338's licensing regulator.