Win888 Privacy Policy – How We Protect Pakistani Players

1. Who We Are

This Privacy Policy applies to the Win888 platform, accessible at win888-bangla.com, and to all services offered through that platform including games, payment processing, account management and customer support. In this policy, "Win888", "we", "us" and "our" refer to the operator of the Win888 platform. "You" and "your" refer to any person who visits, registers on or uses Win888.

Win888 is the data controller for personal data processed in connection with your account and use of the platform. If you have any questions about how Win888 handles your data, the contact details are provided in Section 13 of this policy. Win888 is committed to handling all player data in accordance with the principles set out in this policy and takes its data protection responsibilities seriously as a matter of core operational practice — not merely as a compliance formality.

2. Personal Data Win888 Collects

Win888 collects personal data in two main categories: data you provide directly when registering and using the platform, and data generated automatically by your use of the platform. The specific data collected in each category is described below.

3. How Win888 Collects Your Data

Win888 collects personal data through the following channels:

3.1 Directly From You

When you register a Win888 account, complete your player profile, make a deposit or withdrawal, submit a verification document, contact support or participate in a promotion, you are directly providing personal data to Win888. The specific data requested at each stage is limited to what is necessary for that step of your account journey.

3.2 Automatically Through Platform Use

When you use Win888 — browsing the platform, loading a game, placing a bet, processing a payment — Win888's servers automatically record technical data including your IP address, device type, browser version, session start and end times, and page navigation patterns. This data is used for security monitoring, fraud detection, platform performance analysis and service improvement.

3.3 Through Cookies and Similar Technologies

Win888 uses cookies and similar browser storage technologies to maintain session continuity (keeping you logged in between pages), remember your preferences and analyse platform usage patterns. Full details of the cookies Win888 uses are set out in Section 8 of this policy.

3.4 From Third-Party Payment Processors

When you make a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard, Win888 receives confirmation data from those payment processors to reconcile the transaction against your account. Win888 does not receive your full payment account credentials from these processors — only transaction reference numbers and confirmation status are transmitted to Win888's systems.

4. Why Win888 Uses Your Personal Data

Every use of your personal data by Win888 is tied to a specific, legitimate purpose. The following table sets out the purposes for which Win888 processes personal data and the type of data used for each purpose.

5. Legal Basis for Processing

Win888 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil Win888's obligations to you under the Terms and Conditions — including account registration, payment processing, game delivery and customer support — is carried out on the basis that it is necessary to perform the contract between you and Win888.
• Legal obligation: Processing required for identity verification, age verification, anti-money-laundering compliance and responding to regulatory authorities is carried out to comply with legal obligations applicable to Win888.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement and responsible gaming monitoring is carried out on the basis of Win888's legitimate interest in operating a secure, fair and legally compliant platform, balanced against your interests and rights.
• Consent: Where Win888 relies on your consent to process personal data — for example, for optional marketing communications — you may withdraw that consent at any time by contacting Win888 support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Personal Data

Win888 does not sell, rent or share your personal data with third parties for their own commercial purposes. The circumstances in which Win888 does share personal data with third parties are limited to the following:

6.1 Payment Processors

Win888 shares the minimum necessary data with payment processors — including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT services and Visa/Mastercard networks — to execute deposits and withdrawals on your behalf. These processors are bound by their own data protection obligations and may not use your data for any purpose other than processing the transaction.

6.2 Identity Verification Services

Where Win888 uses a third-party identity verification provider to assist with KYC checks, your verification documents and biometric data may be transmitted to that provider in encrypted form. Identity verification providers are contractually bound to process your data only for the purpose of completing the verification and to delete it immediately after the check is completed.

6.3 Legal and Regulatory Authorities

Win888 may be required by law to disclose personal data to regulatory bodies, law enforcement agencies or courts in response to a valid legal request. Win888 will disclose only the minimum data required to satisfy the legal obligation and will inform you of such a disclosure where it is legally permissible to do so.

6.4 Business Continuity

In the event of a merger, acquisition or sale of Win888's business or assets, player personal data may be transferred to the acquiring entity as part of that transaction. Win888 will notify registered players before any such transfer takes effect and will ensure that the acquiring entity is bound by data protection commitments at least equivalent to those in this policy.

7. How Win888 Keeps Your Data Secure

Win888 implements a layered approach to data security that covers both technical and organisational measures.

7.1 Technical Security Measures

• Encryption at rest: All stored personal data is encrypted using AES-256 encryption. Encryption keys are stored separately from the encrypted data and rotated on a scheduled basis.
• Encryption in transit: All data transmitted between your device and Win888's servers is protected using TLS 1.3, preventing interception during transmission.
• Access controls: Win888's internal systems enforce role-based access controls, meaning that staff can only access the categories of data required for their specific function.
• Intrusion monitoring: Win888's server infrastructure is monitored continuously for anomalous activity patterns, unauthorised access attempts and data exfiltration indicators.
• Regular security audits: Win888 conducts periodic security assessments of its platform infrastructure and data handling practices.

7.2 Organisational Security Measures

Staff who handle player personal data receive data protection training as part of their onboarding and on a regular refresher schedule. Win888 maintains an internal data breach response procedure that includes notification obligations to affected players where a breach creates a risk to their rights. If you suspect your Win888 account has been accessed without your authorisation, contact support immediately so the account can be secured.

8. Cookies and Browser Storage

Win888 uses cookies — small text files stored in your browser — and similar local storage technologies to support the operation of the platform. The categories of cookies Win888 uses are described below.

You can manage cookie preferences through your browser settings at any time. Disabling essential cookies will prevent Win888 from functioning correctly and will log you out of your session. Disabling non-essential cookies will not affect your ability to play games or process payments, but may affect some convenience features like remembered preferences.

9. Data Retention

Win888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention required by applicable law. The standard retention periods applied by Win888 are as follows:

• Active account data: Retained for the full life of your Win888 account.
• Post-closure account data: Following account closure, Win888 retains identity verification records, transaction history and betting history for a period required by anti-money-laundering regulations to allow for compliance investigations and audit obligations.
• Support records: Retained for a defined period after the support interaction is resolved, to allow for escalation and quality review.
• Technical and security logs: Retained for a rolling period sufficient for security monitoring and fraud investigation purposes, then automatically deleted.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies expire on the schedule defined for each cookie type, as described in the cookie preference centre in Section 8.

When data reaches the end of its defined retention period, Win888 deletes it securely — overwriting storage to prevent recovery — or permanently anonymises it so that it can no longer be associated with any individual player.

10. Your Rights Over Your Personal Data

As a Win888 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact Win888 support using the details in Section 13. Win888 will respond to all valid data rights requests within a reasonable timeframe.

11. Children's Privacy

Win888 is strictly an 18+ platform. Win888 does not knowingly collect, store or process personal data from any person under the age of 18. If Win888 discovers that a player has provided false information about their age during registration, the account will be immediately suspended, all balances will be held pending investigation and any funds deposited will be returned to the payment account used.

If you believe a minor has registered an account on Win888 using falsified information, please contact Win888 support immediately at support@win888-bangla.com. Win888 takes underage access extremely seriously and will act on all credible reports without delay.

12. Changes to This Privacy Policy

Win888 may update this Privacy Policy from time to time to reflect changes in data handling practices, platform functionality, legal requirements or regulatory guidance. When a material update is made, Win888 will notify registered players via their registered email address and will update the "Last Updated" date at the top of this page.

Win888 recommends that you review this policy periodically to stay informed about how your personal data is handled. If you disagree with any change to this policy, you may close your Win888 account. Continued use of Win888 following notification of a change constitutes acceptance of the updated policy.

Win888 will not apply revised data handling practices retroactively in a way that is materially detrimental to data that was collected under a prior version of this policy without your explicit consent.

13. Contact Win888 About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to the handling of your personal data on Win888, please contact Win888's support team using the details below. Privacy enquiries and data rights requests are handled by dedicated staff and are treated with complete confidentiality.

For issues relating to your Win888 account access, payment processing or game queries, the general support team is also available 24/7 at the same email address. For responsible gaming support and self-exclusion, please visit the Responsible Gaming page.