win788 Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for personal data collected and processed through the win788 platform is the operating entity behind win788.app. References to "win788", "we", "us" and "our" in this Policy refer to that entity. If you have any questions about this Policy or wish to exercise your data rights, please contact our Data Protection contact point at [email protected].

2. Personal Data We Collect

win788 collects personal data from you in the following categories:

• Identity Data: Full name, date of birth, national identity card or passport number, and any other documentation submitted for the purposes of age and identity verification (KYC).
• Contact Data: Email address, mobile phone number, and city or region of residence (for example, Karachi, Lahore, Islamabad, Rawalpindi or Faisalabad).
• Account Data: Username, encrypted password, account registration date, account status, and communication preferences.
• Financial Data: Deposit and withdrawal history, transaction amounts in PKR, payment method identifiers (such as JazzCash wallet references, Easypaisa account indicators, or partial bank account details) and bonus redemption records. win788 does not store full payment card numbers on its servers.
• Gaming Data: Bet history, game session logs, wagering activity, win and loss records, bonus usage and responsible gaming settings such as deposit limits or self-exclusion status.
• Technical Data: IP address, device type, operating system, browser type and version, and session timestamps, collected automatically when you access the win788 platform.
• Communications Data: Records of communications you send to win788 support, including live chat transcripts and email correspondence.

win788 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where specific health-related disclosures are made voluntarily in the context of a responsible gaming self-exclusion request.

3. How We Use Your Personal Data

win788 uses your personal data for the following purposes, each of which is supported by a lawful basis for processing:

• Account Registration and Management: To create and administer your win788 account, verify your identity and age, and communicate with you regarding your account. Lawful basis: contractual necessity.
• Payment Processing: To facilitate deposits and withdrawals in PKR via supported payment methods and to maintain accurate financial records. Lawful basis: contractual necessity and legal obligation.
• Regulatory Compliance: To comply with KYC, AML and responsible gaming obligations under win788's licensing conditions, including verifying source of funds and monitoring for suspicious activity. Lawful basis: legal obligation.
• Platform Security and Fraud Prevention: To detect and prevent fraud, bonus abuse, account takeovers, and other security threats. Lawful basis: legitimate interest.
• Customer Support: To respond to your queries, resolve disputes and improve our support services. Lawful basis: contractual necessity and legitimate interest.
• Service Improvement: To analyse aggregated usage data to improve the win788 platform, game library, and payment experience. Lawful basis: legitimate interest. This analysis uses anonymised or aggregated data wherever possible.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about win788 bonuses, new games, and offers. Lawful basis: consent. You may withdraw consent at any time via your account settings.

4. Data Sharing and Third Parties

win788 does not sell your personal data to third parties. We may share your data with the following categories of third parties only where necessary and under appropriate data protection safeguards:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, UnionPay and cryptocurrency processing partners receive transaction data necessary to process your deposits and withdrawals.
• Game Providers: Certified third-party game providers whose titles are hosted within the win788 lobby may receive a player identifier and session token to facilitate gameplay. These providers are contractually bound to data protection standards.
• Identity Verification Services: Third-party KYC and age verification providers receive identity documentation submitted by you for verification purposes.
• Regulatory Authorities: win788 may be required to disclose player data to licensing authorities, financial intelligence units, or law enforcement agencies in response to lawful requests or as required by its licensing obligations.
• IT and Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers operate under data processing agreements that restrict their use of your data to service delivery only.

win788 requires all third-party processors to implement appropriate technical and organisational security measures and to process your data only in accordance with win788's documented instructions.

5. Cookies and Tracking Technologies

win788 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used include:

• Essential Cookies: Required for the platform to function, including session management, login state, and security features. These cannot be disabled without impacting platform functionality.
• Analytics Cookies: Used to collect aggregated data about how players navigate the win788 platform, which pages are most visited, and where technical errors occur. This data is used to improve the platform.
• Preference Cookies: Store your preferences such as language settings and responsible gaming tool configurations.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core win788 features.

6. Data Retention

win788 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations. Specifically:

• Account and identity data is retained for the duration of your active win788 account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs are retained for a minimum of three (3) years and may be retained longer where required for regulatory reporting or dispute resolution.
• Marketing consent records are retained for as long as you remain a registered win788 player and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, win788 will securely delete or anonymise your personal data.

7. Your Data Rights

As a win788 player, you have the following rights in relation to your personal data, subject to applicable law and our regulatory obligations:

• Right of Access: You may request a copy of the personal data win788 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to win788's legal retention obligations.
• Right to Restriction: You may request that win788 restricts the processing of your data in certain circumstances, for example while a complaint is being investigated.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time via your account settings or by contacting support.

To exercise any of these rights, please contact win788 at [email protected]. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing a data rights request.

8. Security

win788 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include 256-bit SSL/TLS encryption on all platform communications, encrypted storage of sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, and regular security assessments and penetration testing.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, win788 will notify affected players without undue delay in accordance with applicable legal requirements.

9. Changes to This Policy

win788 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes will be communicated to registered players via the email address on their account. The updated Policy will display a revised effective date. We encourage you to review this Policy periodically. Continued use of win788 following publication of a revised Policy constitutes your acceptance of the updated terms.

For any privacy-related queries, please contact win788 at [email protected].