win788 Privacy Policy —
Your Data, Your Rights, Our Obligations

This Privacy Policy ("Policy") describes how win788 ("win788", "we", "us", "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you", "the Player", "the User") who register for, access, or use the win788 platform at win788.asia and all associated services (collectively, the "Platform").

win788 is committed to protecting the privacy and personal data of all players, including those accessing the Platform from Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Rawalpindi, and across Pakistan. This Policy has been drafted to reflect both our obligations under the conditions of our international gaming licence and our genuine commitment to data transparency.

This Policy should be read in conjunction with the win788 Terms & Conditions, which is available at win788.asia/terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

The data controller responsible for the personal data collected on the win788 Platform is the entity holding the win788 international gaming licence (the "Company"). As the data controller, win788 determines the purposes for which and the means by which personal data is processed.

For all data protection enquiries, requests to exercise your rights, or complaints relating to how win788 handles your personal data, you may contact our Data Protection team at the email address set out in Section 15 of this Policy. win788 aims to acknowledge all data protection enquiries within 5 business days and to provide a substantive response within the timelines specified under applicable data protection law.

win788 collects the following categories of personal data from players, depending on their level of account activity and verification status:

win788 does not collect any special category data (such as health data, biometric data beyond CNIC facial photographs required for identity verification, political opinions, or religious beliefs) and has no legitimate purpose to do so.

win788 collects personal data through the following channels:

• Direct Provision by You: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotional communication.
• Automated Technical Collection: When you access the win788 Platform, our servers and analytics systems automatically collect technical data including your IP address, device identifiers, browser information, and session activity logs.
• Cookies and Tracking Technologies: win788 uses cookies and similar technologies to maintain session state, remember your preferences, and analyse Platform usage. Full details are provided in Section 10 below.
• Third-Party KYC Providers: Where win788 uses a third-party identity verification service to support CNIC verification, that provider may supply additional verification data to win788 as part of the KYC process. All such providers are bound by data processing agreements.
• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors may share transactional data with win788 as necessary to confirm payment status and prevent fraud.

win788 processes personal data only where a valid legal basis exists. The following legal bases apply to win788's data processing activities:

• Contract Performance: Processing is necessary to perform the contract between win788 and the player — including account management, bet settlement, payment processing, and the delivery of all Platform features.
• Legal Obligation: Processing is required for win788 to comply with its obligations under its gaming licence conditions, including Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations, and responsible gaming monitoring duties.
• Legitimate Interests: win788 processes certain data — including technical usage data and fraud detection signals — on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where win788 processes data for marketing communications, personalised promotions, or non-essential cookies, we rely on your explicit consent, which may be withdrawn at any time.

win788 uses the personal data it collects for the following specific purposes:

• To create, verify, and administer your win788 account, including processing your CNIC-based KYC verification.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment channels in PKR.
• To settle sports bets, casino game results, and promotional rewards accurately and promptly.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited activities on the Platform.
• To monitor player behaviour for responsible gaming purposes, including identifying indicators of problem gambling and applying responsible gaming tools where appropriate.
• To communicate with you about your account, including transactional emails, security alerts, and support responses.
• To send you marketing communications about win788 promotions, offers, and new features — where you have consented to receive such communications.
• To comply with win788's obligations under its gaming licence, including reporting requirements to our licensing authority.
• To improve the win788 Platform, including through analysis of aggregated, anonymised usage data to understand player behaviour trends.
• To maintain the security and integrity of the win788 Platform, including through fraud detection systems and access control monitoring.

win788 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors receive the minimum personal data necessary to process your transactions securely.
• KYC and Identity Verification Providers: Third-party providers that support our CNIC-based identity verification process receive identity data strictly for the purpose of verification. All such providers are engaged under data processing agreements that bind them to confidentiality and data protection standards consistent with this Policy.
• Game Software Providers: Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, and others may receive a player session identifier and game activity data necessary to deliver the game session. These providers do not receive your personally identifiable data beyond what is required for game delivery.
• Regulatory Authorities: win788 may be required to disclose player data to its licensing authority, financial intelligence units, or other regulatory bodies in compliance with its legal obligations.
• Law Enforcement: win788 will disclose personal data to law enforcement agencies where required by a valid legal process, court order, or where disclosure is necessary to prevent an imminent risk of harm.
• Professional Advisors: win788's legal counsel, auditors, and compliance consultants may access personal data in the course of providing professional services to win788, subject to professional confidentiality obligations.

win788 operates as an internationally licensed platform. As a result, personal data collected from Pakistani players may be transferred to, stored on, and processed by systems located outside Pakistan. Such transfers may occur where win788's server infrastructure, third-party service providers, or regulatory counterparties are based in other jurisdictions.

win788 ensures that all international transfers of personal data are conducted in accordance with applicable data protection standards. Where data is transferred to a jurisdiction that does not provide equivalent data protection standards to those applicable in the context of our gaming licence, win788 implements appropriate safeguards — including contractual data transfer mechanisms — to protect your personal data during such transfers.

win788 retains personal data for the following periods, after which data is either securely deleted or irreversibly anonymised:

• Account and identity data: For the duration of your account and for a minimum of 5 years following account closure, in compliance with our anti-money laundering obligations and gaming licence conditions.
• Transaction and financial data: For a minimum of 7 years following the transaction date, in line with standard financial record-keeping requirements.
• Responsible gaming records (including self-exclusion history): For the duration of any active self-exclusion period and for a minimum of 5 years thereafter, to prevent circumvention of self-exclusion measures.
• Support and communications records: For a minimum of 3 years following the closure of the relevant support case.
• Technical log data (IP addresses, session logs): For a maximum of 12 months, unless required for an ongoing fraud investigation or legal proceeding.
• Marketing consent records: For the duration of your consent and for 3 years following withdrawal of consent, to demonstrate compliance.

Following the expiry of the applicable retention period, win788 will securely destroy personal data in a manner that prevents reconstruction or recovery.

win788 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the core functioning of the win788 Platform — including maintaining your login session, storing your account preferences, and enabling secure payment processing. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Analytics Cookies: win788 uses anonymised analytics cookies to understand how players interact with the Platform — which pages are most visited, how long sessions last, and which features are most used. This data is used solely to improve the win788 Platform and is not linked to individually identifiable player profiles.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings and responsible gaming limit configurations — to personalise your experience on return visits.
• Marketing Cookies: Used only where you have provided explicit consent. Marketing cookies enable win788 to present relevant promotional content based on your Platform activity. You may withdraw consent for marketing cookies at any time through your account cookie settings.

You can manage your cookie preferences through your win788 account settings or through your browser's cookie management controls. Disabling non-essential cookies will not prevent you from using the core Platform features.

Subject to applicable data protection law and the conditions of win788's gaming licence, you have the following rights in relation to the personal data win788 holds about you:

• Right of Access: You have the right to request a copy of the personal data win788 holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by win788 be corrected. Certain data — such as your CNIC number — can only be updated following re-verification.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to win788's obligations to retain certain data under its gaming licence and AML obligations, which take precedence.
• Right to Restriction of Processing: You may request that win788 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is contested.
• Right to Data Portability: You have the right to receive a copy of personal data that you have provided to win788 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of win788's legitimate interests. win788 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact win788 using the details in Section 15. win788 will respond within 30 calendar days of receipt of your request. We may require you to verify your identity before processing certain requests.

The win788 Platform is strictly intended for adults aged 21 years and above. win788 does not knowingly collect, use, or retain the personal data of individuals under the age of 21 years.

win788 employs CNIC-based age verification at account registration to prevent access by underage individuals. If win788 becomes aware that it has inadvertently collected personal data from an individual under the age of 21 years, we will immediately close the associated account and permanently delete the personal data of the underage individual from our systems, subject to any retention obligations under applicable AML regulations.

win788 implements a comprehensive suite of technical and organisational security measures to protect the personal data of Pakistani players against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and win788 servers.
• Encryption of personal data at rest within win788's database infrastructure.
• Role-based access controls limiting internal access to personal data to staff with a documented operational need.
• Two-factor authentication (2FA) requirements for all staff accessing systems containing personal data.
• Regular independent security audits and penetration testing of the win788 Platform and infrastructure.
• A documented data breach response plan with defined escalation timelines and regulatory notification procedures.
• Mandatory data protection training for all win788 staff who process personal data in the course of their duties.

Notwithstanding these measures, no internet-based system can guarantee absolute security. Players are reminded of their own responsibility to maintain the confidentiality of their win788 login credentials and to enable two-factor authentication on their accounts for additional personal protection.

win788 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — meaning they meaningfully alter your rights or how win788 processes your personal data — win788 will notify registered players via the email address associated with their account with a minimum of 7 days' notice before the revised Policy takes effect.

The current version of this Privacy Policy is always accessible at win788.asia/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the win788 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

win788 encourages all players to review this Policy periodically to stay informed about how their personal data is being protected. If you have questions about any changes, please contact us using the details below before continuing to use the Platform.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints about how win788 processes your personal data, please contact the win788 Data Protection team:

If you are unsatisfied with win788's response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction of win788's gaming licence, or to the dispute resolution mechanism available under our licence conditions.