Privacy Policy

Our Privacy Commitments at a Glance

The following summary is provided for convenience. It does not replace the full policy text below. Where any conflict exists between this summary and the full clauses, the full clauses shall govern.

Data Encryption All data transmitted between your device and win998 is protected by 256-bit SSL/TLS encryption. Your credentials and financial details are never sent in plain text.

No Data Selling win998 does not sell, rent, or trade your personal information to third-party marketers. Your data is used solely for operating, improving, and protecting the platform.

Segregated Financial Data Payment details — including JazzCash, EasyPaisa, and bank account information — are handled through secure, PCI-compliant channels and are never stored in full on win998 servers.

Your Consent Controls You control how win998 uses your data for marketing and communications. Consent can be updated at any time through your account settings or by contacting our support team.

Right of Access You have the right to request a full copy of the personal data win998 holds about you, free of charge, at any time by submitting a Subject Access Request to our team.

Right to Erasure Subject to legal retention obligations, you may request deletion of your personal data from win998 systems at any time after permanently closing your account.

1. Introduction & Data Controller

This Privacy Policy ("Policy") applies to all personal data collected and processed by win998 ("the Company", "we", "us", "our") in connection with the operation of the win998 online gaming platform accessible at win998.pro. The Company acts as the data controller in respect of all personal data collected from players and visitors to the platform.

win998 operates under an international gaming licence and is subject to the data protection and privacy obligations imposed by that regulatory framework, as well as the requirements of applicable law. This Policy is reviewed and updated periodically. The effective date of the current version is stated above.

By registering a win998 account, depositing funds, or using any service offered through the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

Contact for Privacy Queries:
For all data protection enquiries, Subject Access Requests, or consent withdrawal requests, please contact the win998 data protection team at: [email protected] Please include your registered account username and the nature of your request in your communication.

2. Personal Data We Collect

win998 collects personal data from you through several channels: directly during registration and account management, automatically through your use of the platform, and occasionally from third-party identity and payment verification services. The categories of data we collect include the following.

2.1 Registration & Identity Data

Identity Information: Full legal name, date of birth, gender, and nationality as provided during win998 account registration.
Contact Information: Email address, mobile phone number, and residential address including city and postal code (Karachi, Lahore, Islamabad, Faisalabad, and all other locations across Pakistan).
Government ID: A copy of your CNIC, passport, or driving licence obtained during our Know Your Customer (KYC) verification process as required by our gaming licence obligations.
Account Credentials: Your chosen username and a hashed (never plain-text) version of your password.

2.2 Financial & Transaction Data

Payment Method Details: Masked JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or SadaPay account references used to process deposits and withdrawals in PKR. Full payment credentials are processed by our PCI-compliant payment partners and are not stored on win998 servers.
Transaction History: Records of all deposits, withdrawals, bonuses credited, and bets placed on win998, including timestamps, amounts in PKR, and transaction reference numbers.
Source of Funds: Documentation provided voluntarily or upon request under anti-money laundering (AML) screening procedures.

2.3 Usage & Technical Data

Device & Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
Behavioural Data: Pages visited on win998, games played, bet history, session duration, click patterns, and navigation paths used within the platform.
Geolocation Data: Approximate location derived from IP address for fraud prevention, regulatory compliance, and responsible gaming purposes.
Cookies & Tracking Technologies: Session cookies, persistent cookies, and similar technologies as described in Section 8 of this Policy.

2.4 Communications Data

Records of your correspondence with win998 customer support, including live chat transcripts and email exchanges.
Responses to optional surveys or feedback forms submitted through the platform.
Records of marketing communication preferences and consent withdrawal requests.

3. How We Use Your Personal Data

win998 processes your personal data only for specific, legitimate purposes. We do not process personal data in any manner that is incompatible with the purposes for which it was originally collected. The table below outlines our principal processing activities and the legal basis for each.

Purpose	Data Used	Legal Basis
Account registration and identity verification (KYC)	Identity data, government ID, contact information	Contractual necessity; legal obligation
Processing deposits and withdrawals in PKR	Financial data, transaction records	Contractual necessity
Providing and operating gaming services (slots, cricket betting, Jacks or Better, Plinko)	Account data, usage data, transaction data	Contractual necessity
Anti-money laundering and fraud prevention screening	Identity data, financial data, geolocation data	Legal obligation; legitimate interest
Responsible gaming monitoring and intervention	Behavioural data, transaction data, communications data	Legal obligation; legitimate interest
Customer support and dispute resolution	Communications data, account data, transaction data	Contractual necessity; legitimate interest
Sending promotional offers and bonus notifications	Contact information, behavioural data	Consent (withdrawable at any time)
Platform improvement and analytics	Usage data, technical data (anonymised where possible)	Legitimate interest
Regulatory reporting and licence compliance	Identity data, transaction data, communications data	Legal obligation

Responsible Gaming Data Processing:
win998 uses behavioural and transaction data to identify players who may be at risk of problem gambling. This processing is carried out under our legal obligation as a licensed gaming operator. Players who trigger responsible gaming indicators may be contacted by our support team or have account restrictions applied automatically. This is done with the sole aim of protecting player welfare.

4. Data Sharing & Third-Party Disclosure

win998 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where strictly necessary for the purposes described in this Policy.

Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT payment processors receive only the minimum financial data required to execute your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated.
Identity Verification Partners: Third-party KYC and AML service providers may receive copies of your identity documentation to perform regulatory verification checks. These providers are contractually bound to process your data solely for verification purposes on win998's behalf.
Gaming Software Suppliers: Game technology providers that power specific titles on win998 — including slot engines, live dealer platforms, and casino game studios — may receive anonymised session and game-play data for technical and auditing purposes. These providers do not receive personally identifiable information unless contractually required for game integrity checks.
Regulatory Authorities: win998 is legally obligated to report certain transactions and player information to its licensing authority and, where required by law, to financial intelligence units, law enforcement agencies, or other government bodies. Such disclosures are made only in accordance with applicable legal requirements.
Professional Advisors: Lawyers, auditors, and compliance consultants engaged by win998 may access personal data to the extent necessary to provide their professional services, subject to strict confidentiality obligations.
Business Transfers: In the event of a merger, acquisition, or sale of substantially all of win998's assets, personal data held by the Company may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy terms via your registered email address.

          International Data Transfers:

          Some of win998's service providers and technology partners are located outside Pakistan. Where personal data is transferred internationally, win998 ensures that appropriate safeguards are in place — including data processing agreements and, where applicable, standard contractual clauses — to protect your data to a standard equivalent to that described in this Policy.

5. Data Retention

win998 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as we are legally required to retain it. The following retention periods apply as a general guide.

Active Account Data: Personal data associated with an active win998 account is retained for the lifetime of the account plus a minimum of five (5) years following permanent account closure. This retention period satisfies our AML, KYC, and gaming licence obligations.
Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of seven (7) years in accordance with financial record-keeping requirements applicable to licensed gaming operators.
KYC Documentation: Copies of identity documents submitted for verification are retained for five (5) years following account closure, or longer if required by a specific regulatory instruction.
Marketing Data: Where you have consented to receive marketing communications from win998, your marketing preferences and associated contact data are retained until you withdraw your consent or for two (2) years following your last interaction with a marketing communication, whichever is earlier.
Support Communications: Customer support correspondence is retained for three (3) years following the closure of the relevant support case to facilitate dispute resolution and service quality improvement.
Technical & Usage Logs: Server logs and usage analytics data are retained for a maximum of thirteen (13) months, after which they are either deleted or irreversibly anonymised.

6. Your Data Rights

As a win998 player, you hold a number of rights in respect of the personal data we process about you. win998 is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights described below, please contact us at [email protected] from your registered email address.

Right of Access: You may request a copy of all personal data win998 holds about you at any time. This is known as a Subject Access Request (SAR). win998 will respond within thirty (30) calendar days of receiving a valid request, free of charge.
Right to Rectification: If any personal data win998 holds about you is inaccurate or incomplete, you have the right to request correction. Where possible, you may update certain data directly through your win998 account settings. For data that cannot be self-corrected, please contact our support team.
Right to Erasure ("Right to be Forgotten"): Following permanent closure of your win998 account, you may request deletion of your personal data. win998 will process such requests subject to our legal retention obligations. Data that must be retained for AML, KYC, or gaming licence compliance purposes cannot be deleted until the applicable retention period expires.
Right to Restrict Processing: You may request that win998 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interest.
Right to Data Portability: You may request that win998 provide your personal data in a structured, commonly used, machine-readable format for transfer to another controller, where this is technically feasible and the processing is based on consent or contractual necessity.
Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. Upon receipt of such an objection, win998 will cease all marketing communications to you without delay.
Right to Withdraw Consent: Where win998 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Response Timeframe:
win998 will acknowledge all data rights requests within forty-eight (48) hours of receipt and will provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you promptly with an explanation.

7. Data Security

win998 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following.

Transport Layer Security: All data exchanged between your browser or device and win998 is encrypted using TLS 1.2 or higher. You can verify this via the padlock icon displayed in your browser's address bar when visiting win998.pro.
Password Hashing: Player passwords are never stored in plain text. win998 uses a robust cryptographic hashing algorithm with salting to store password data, meaning that even internal staff cannot read your password.
Access Controls: Access to personal data within win998's internal systems is restricted on a strict need-to-know basis. Employees are granted only the minimum level of access required to perform their duties, and all access is logged and auditable.
Payment Security: win998 does not store full card numbers, JazzCash wallet PINs, or online banking credentials. Payment processing is delegated to PCI-DSS-compliant third-party processors who are independently certified for financial data security.
Intrusion Detection: win998's infrastructure is monitored around the clock for anomalous activity, intrusion attempts, and data breach indicators using automated security monitoring tools.
Data Breach Response: In the event of a personal data breach that poses a risk to player rights and freedoms, win998 will notify the relevant regulatory authority within seventy-two (72) hours of becoming aware of the breach. Affected players will be notified directly without undue delay where the breach is likely to result in a high risk to their rights.

          Your Role in Data Security:

          Security is a shared responsibility. win998 strongly recommends that you use a strong, unique password for your win998 account, enable any available two-factor authentication, never share your login credentials with any third party, and log out of your account after each session — particularly when using a shared or public device.

8. Cookies & Tracking Technologies

win998 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used on win998.pro.

Strictly Necessary Cookies: These cookies are essential for the win998 platform to function. They maintain your login session, remember your language and currency preferences, and enable core security features. These cookies cannot be disabled without severely impacting your ability to use the platform.
Analytics Cookies: win998 uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues may arise. This data is aggregated and does not identify you personally.
Functionality Cookies: These cookies remember choices you make on win998 — such as your preferred game categories, notification settings, and responsible gaming limits — to provide a more personalised experience.
Marketing & Targeting Cookies: With your consent, win998 may use cookies to track your engagement with promotional offers and to ensure that marketing communications you receive are relevant to your gaming preferences. You may withdraw consent for marketing cookies at any time via your account settings.

You may also control cookie behaviour through your browser settings. Note that disabling certain cookies may affect the functionality of the win998 platform. win998 does not use cookies to track your activity on third-party websites unrelated to the platform.

9. Children & Age Verification

win998 does not knowingly collect personal data from any individual under the age of 21. The win998 platform is strictly for adults aged 21 and above. Age verification is a mandatory step in our KYC process, and accounts found to belong to individuals under 21 will be closed immediately with all funds returned net of any bonuses received.

If you are a parent or guardian and believe that a minor in your care has created a win998 account or shared personal data with us, please contact our support team immediately at [email protected]. We will investigate and take prompt remedial action, including deletion of the minor's data where applicable.

win998 also recommends the use of parental control software on shared household devices to prevent underage individuals from accessing gambling platforms. More information on this topic is available on our Responsible Gaming page.

10. Marketing Communications

win998 may send you promotional communications including bonus offers, match betting promotions, PSL cricket specials, new game announcements, and platform updates, subject to your consent preferences.

Opt-In: Marketing communications are sent only to players who have explicitly opted in during registration or subsequently updated their preferences to enable marketing contact. win998 will not send unsolicited marketing communications to players who have not provided consent.
Opt-Out: You may unsubscribe from all win998 marketing communications at any time by clicking the unsubscribe link included in any email we send, updating your preferences in your account settings, or contacting our support team directly at [email protected]. Opt-out requests are processed within five (5) business days.
Transactional Communications: Regardless of your marketing preferences, win998 will continue to send you essential account communications — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts — as these are necessary for the operation of your account.
Personalisation: Where you have consented to marketing, win998 may use your game history and betting behaviour to personalise the offers and promotions we send you, ensuring they are relevant to your interests on the platform.

11. Links to Third-Party Content

The win998 platform may contain references to payment providers and other third-party services. win998 is not responsible for the privacy practices of any third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of win998, including your chosen payment method providers such as JazzCash and EasyPaisa.

12. Changes to This Policy

win998 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory obligations, or platform features. Where changes are material, we will notify registered players by email at the address associated with their win998 account at least seven (7) days before the revised Policy takes effect. The effective date shown at the top of this document will be updated accordingly.

Continued use of the win998 platform following notification of a Policy update constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and contact our support team to request account closure.

Privacy Contact:
All privacy-related enquiries, data rights requests, and concerns should be directed to our dedicated data protection contact at: [email protected] Please clearly mark the subject of your communication as "Privacy Query" or "Data Rights Request" for prompt routing to the appropriate team.