win588 Privacy Policy

1 Who We Are

1.1 This Privacy Policy is issued by win588, the operator of the online gaming and sports betting platform accessible at win588.bio (the "Platform"). References to "win588", "we", "us", and "our" throughout this Policy refer to the Platform operator and its authorised affiliates involved in the delivery of win588 services.

1.2 win588 operates under an international gaming licence that imposes specific obligations regarding the collection, processing, storage, and protection of player personal data. This Policy is designed to meet and exceed those obligations.

1.3 win588 is the data controller in respect of the personal data collected through the Platform. This means win588 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and transparently.

1.4 This Policy applies to all individuals who access or use the win588 Platform, including registered players, visitors who browse without registering, and individuals who interact with win588 via our support channels. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Personal Data We Collect

2.1 win588 collects personal data in several categories depending on the nature of your interaction with the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used for mandatory age verification — you must be 21 or older);
• Residential address, including city, province, and postal code;
• Pakistani mobile number (CNIC-linked where applicable);
• Email address used for account registration and communications;
• Copies of identification documents such as your CNIC, passport, or driving licence submitted during KYC.

2.2 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet number associated with deposits and withdrawals;
• Bank account details for HBL, UBL, Meezan Bank, Raast, or 1LINK transfers;
• Transaction history including deposit amounts, withdrawal amounts, and dates;
• Source of funds documentation where required for enhanced due diligence;
• PKR balance and wagering history within your win588 account.

2.3 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type, and screen resolution;
• Session timestamps, pages visited, games played, and features used;
• Referring URL and search terms used to reach the Platform;
• Cookie identifiers and similar tracking technology data as described in Section 7.

2.4 Communications Data

• Content of support queries, complaints, and feedback submitted to win588;
• Records of email, live chat, and any other communications with win588 staff;
• Responses to surveys or promotional communications where you choose to participate.

2.5 Responsible Gaming Data

• Deposit limits, loss limits, and session time limits you have set on your account;
• Self-exclusion status and the duration of any active self-exclusion period;
• Responsible gaming assessments completed voluntarily or as part of our player monitoring processes.

3 How We Collect Your Data

3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or set responsible gaming limits on your account.

3.2 Automatically — when you access the Platform, our servers and analytics tools automatically record technical data including your IP address, device identifiers, session data, and browsing behaviour on the Platform. This occurs whether or not you are logged into a registered account.

3.3 From third parties — win588 may receive personal data from identity verification providers used for KYC, from payment processors such as JazzCash and EasyPaisa to confirm transaction status, and from fraud prevention services used to protect the integrity of the Platform.

3.4 From cookies and similar technologies — as described in Section 7, win588 uses cookies and similar tracking technologies to collect data about your interactions with the Platform, your preferences, and your session activity.

4 Legal Basis for Processing

4.1 win588 processes your personal data on one or more of the following legal bases:

5 How We Use Your Personal Data

5.1 win588 uses the personal data we collect for the following purposes, always limited to what is necessary for the relevant purpose:

• Account creation and management: To open, maintain, and administer your win588 account, including processing your registration, verifying your identity, and managing your PKR balance;
• Payment processing: To process deposits from and withdrawals to your JazzCash, EasyPaisa, HBL, UBL, Meezan, Raast, or 1LINK accounts, and to maintain accurate transaction records;
• KYC and compliance: To verify your age (21+ requirement), identity, and source of funds in accordance with our international licensing obligations and anti-money laundering regulations;
• Customer support: To respond to your queries, complaints, and feedback, and to maintain records of those interactions for quality assurance and dispute resolution purposes;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and any other prohibited conduct on the Platform;
• Responsible gaming: To monitor your gaming activity for indicators of problematic behaviour, to apply the limits and restrictions you have set, and to administer self-exclusion requests;
• Platform improvement: To analyse how players use the Platform so we can improve performance, navigation, game offerings, and the overall player experience;
• Marketing communications: Where you have provided opt-in consent, to send you promotional emails or notifications about win588 bonuses, new games, and special offers relevant to Pakistani players.

6 Sharing Your Personal Data

6.1 win588 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

6.1 Service Providers

win588 engages third-party service providers who process personal data on our behalf under written data processing agreements. These include identity verification providers for KYC, payment processors including JazzCash and EasyPaisa, gaming software suppliers, cloud hosting providers, fraud detection services, and customer support platform providers. These parties are contractually prohibited from using your data for any purpose other than the specific service they provide to win588.

6.2 Legal and Regulatory Authorities

win588 may be required to disclose personal data to law enforcement agencies, regulatory authorities, licensing bodies, or courts where required by applicable law, a valid legal order, or our licensing obligations. win588 will not disclose data beyond what is strictly required by such requests and will notify you where legally permissible.

6.3 Business Transfers

In the event that win588 undergoes a merger, acquisition, or sale of all or substantially all of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity prior to your data being transferred.

6.4 With Your Consent

win588 may share your personal data with additional third parties where you have provided explicit, informed consent for a specific sharing purpose. Such consent may be withdrawn at any time without affecting the lawfulness of sharing carried out prior to withdrawal.

7 Cookies & Tracking Technologies

7.1 win588 uses cookies and similar tracking technologies on the Platform to support core functionality, improve the player experience, and carry out analytics. Cookies are small text files stored on your device when you visit the Platform.

7.2 win588 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly — for example, maintaining your login session, remembering your language preference, and enabling secure payment flows. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect anonymised information about how players use the Platform, including which pages are visited most frequently and where errors occur. This data is used solely to improve the Platform.
• Preference cookies: Used to remember your account settings and Platform preferences between sessions, such as your display settings and responsible gaming reminders.
• Security cookies: Used to detect fraudulent activity and protect the security of your win588 account, including session authentication and bot detection.

7.3 win588 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks.

7.4 You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary and security cookies cannot be disabled while using the Platform.

8 Data Retention

8.1 win588 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any mandatory retention periods imposed by our licensing authority, applicable law, or anti-money laundering regulations.

8.2 The following indicative retention periods apply:

8.3 Upon expiry of the applicable retention period, win588 will securely delete or irreversibly anonymise your personal data. Where anonymisation is applied, the resulting data may be retained indefinitely for analytical purposes as it can no longer be linked to any individual.

9 Data Security

9.1 win588 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and win588's servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment information;
• Role-based access controls ensuring that employee access to player data is restricted strictly to what is required for their specific role;
• Multi-factor authentication required for all administrative access to systems containing player personal data;
• Regular third-party security audits and penetration testing of Platform infrastructure;
• Automated intrusion detection systems and 24-hour security monitoring;
• Formal incident response procedures with defined notification timelines in the event of a data breach.

9.2 While win588 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed as completely secure. You are responsible for maintaining the confidentiality of your win588 account credentials and for reporting any suspected unauthorised access to [email protected] immediately.

10 International Data Transfers

10.1 win588 operates internationally and may transfer your personal data to servers or service providers located outside Pakistan. Where such transfers occur, win588 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Privacy Policy.

10.2 Safeguards for international transfers may include standard contractual clauses approved by the relevant data protection authority, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.

10.3 win588 does not transfer personal data to jurisdictions that do not provide adequate protections without first implementing contractual or technical safeguards sufficient to maintain the security and confidentiality of that data.

11 Children and Minors

11.1 win588 employs mandatory age verification as part of the KYC process. Where there is any reasonable doubt about a player's age, win588 will suspend access pending satisfactory proof that the player is 21 years of age or older.

11.2 Parents and guardians who have reason to believe that a minor has registered on the win588 Platform or provided personal data to win588 are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.

12 Exercising Your Data Rights

12.1 To exercise any of the data rights described in this Privacy Policy, please contact the win588 privacy team by email at [email protected]. Please include your full name, registered email address, and a description of the right you wish to exercise along with sufficient information for us to locate your records.

12.2 win588 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or where a large volume of requests has been received simultaneously, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

12.3 win588 will not charge a fee for processing data rights requests unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. win588 will notify you before applying any such fee.

12.4 win588 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or modified by unauthorised persons. We may request a copy of your CNIC or other identification for this purpose.

13 Marketing Communications

13.1 win588 sends promotional communications — including emails about bonuses, new game releases, PSL and cricket betting promotions, and special offers — only to players who have explicitly opted in to receive such communications during registration or via their account settings.

13.2 You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your win588 account settings or by clicking the unsubscribe link included in every marketing email. Withdrawal of marketing consent does not affect your ability to continue using the Platform.

13.3 win588 does not send marketing communications via third-party advertising networks, and your win588 account data is never shared with external marketing agencies for the purpose of targeting you with advertising on other platforms or websites.

13.4 Transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, KYC status updates, and responsible gaming notifications — are not marketing communications and will be sent regardless of your marketing preferences, as they are necessary for the proper administration of your account.

14 Changes to This Privacy Policy

14.1 win588 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or updates to our licensing obligations. The effective date at the top of this Policy will be updated whenever material changes are made.

14.2 Where changes to this Privacy Policy are material — meaning they affect the way we collect, use, or share your personal data in a significant way — win588 will notify registered players by email to the address associated with their account and/or by a prominent notice on the Platform at least 14 days before the changes take effect.

14.3 Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you should contact us to discuss your options, including account closure.

15 Contact & Complaints

15.1 If you have any questions about this Privacy Policy, about how win588 processes your personal data, or if you wish to exercise any of your data rights, please contact our privacy team:

• Support Email: [email protected]
• Subject line for privacy requests: "Privacy Request — [Your Full Name]"
• Support hours: 9:00 AM – 2:00 AM PKT, daily
• Response time: Within 30 days of receipt for data rights requests; within 48 hours for general privacy enquiries

15.2 If you are dissatisfied with win588's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection authority or to the licensing authority under whose jurisdiction win588 operates. win588 will provide you with the relevant contact details upon request.

15.3 win588 takes all privacy complaints seriously and will investigate every complaint thoroughly and impartially. We are committed to resolving privacy concerns in a fair and timely manner and to maintaining the trust of our players across Pakistan and beyond.