win345 Privacy Policy

This Privacy Policy ("Policy") describes how win345 ("win345", "we", "us", or "the Company") — the operator of the online gaming platform accessible at win345.lat — collects, processes, stores, and shares personal data relating to registered and prospective users ("you" or "User") of the Platform.

win345 is the data controller in respect of all personal data processed under this Policy. The Company operates under an internationally recognised gaming licence and is accordingly subject to regulatory obligations governing the handling of player data. This Policy is drafted to satisfy those obligations and to provide Users with a transparent, comprehensive account of how their information is managed.

This Policy forms part of the win345 user agreement and is incorporated by reference into the win345 Terms & Conditions. By registering an account with win345 or continuing to use the Platform following the effective date of this Policy, you acknowledge that you have read and understood its contents and consent to the processing of your personal data as described herein.

win345 collects the following categories of personal data from Users, depending on the services accessed and the stage of the user relationship:

win345 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information — except where health information is voluntarily provided by a User in the context of a responsible gaming self-exclusion request, in which case it is processed solely for the purpose of managing that exclusion.

3.1 Directly from You

The majority of personal data win345 holds is provided directly by the User — at the point of registration, during KYC document submission, when initiating a deposit or withdrawal, when contacting customer support, or when activating responsible gaming tools. win345 does not use deceptive means to obtain personal data and collects only what is explicitly requested through the Platform's standard interfaces.

3.2 Automatically through Platform Use

Certain technical and usage data is collected automatically when you access the win345 Platform — for example, your IP address, device identifiers, and session timestamps are logged as a standard consequence of web server operation. This data is collected regardless of whether you are a registered User and is used for security monitoring, fraud prevention, and platform performance optimisation.

3.3 From Third-Party Service Providers

win345 may receive personal data from third-party service providers engaged in the operation of the Platform — including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay), identity verification services, fraud detection providers, and game suppliers. Data received from third parties is subject to the same protections as data collected directly and is used only for the purposes described in this Policy.

win345 processes personal data on the following legal bases, which vary according to the purpose of the processing:

• Contractual necessity — processing required to fulfil the win345 user agreement, including account management, game access, bet processing, payment handling, and withdrawal processing. Without this processing the Platform cannot be provided.
• Legal obligation — processing required to comply with regulatory obligations imposed by the win345 gaming licence, including KYC identity verification, anti-money laundering record-keeping, responsible gaming monitoring, and reporting obligations to the licence authority.
• Legitimate interests — processing carried out in the Company's legitimate business interests, such as fraud detection, security monitoring, platform performance analysis, and internal audit — where such interests are not overridden by your own privacy rights and interests.
• Consent — processing based on your freely given, specific, and informed consent, primarily in the context of optional marketing communications. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

win345 uses personal data collected from Users for the following documented purposes:

• Account registration and management — creating and maintaining your win345 account, verifying your contact details, and enabling Platform access via secure login.
• Identity verification (KYC) — confirming that you are a real, eligible individual aged 21 or above, as required by the win345 gaming licence.
• Payment processing — facilitating deposits via JazzCash, EasyPaisa, and other supported Pakistani payment channels, and processing withdrawal requests back to verified payment instruments.
• Game and betting services — recording bets, calculating and crediting winnings, managing open positions, and maintaining your account transaction history.
• Fraud prevention and security — detecting unauthorised account access, identifying suspicious betting patterns, investigating potential money laundering, and protecting the integrity of the Platform for all Users.
• Bonus and promotion management — tracking wagering contributions, monitoring eligibility for promotional offers, and identifying bonus abuse.
• Responsible gaming — monitoring play patterns that may indicate problem gambling behaviour, implementing player-set limits, processing self-exclusion requests, and maintaining exclusion records as required by our Licence.
• Customer support — responding to your queries, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Regulatory compliance — satisfying reporting and record-keeping obligations to the win345 Licence authority and law enforcement agencies where legally required.
• Platform improvement — analysing aggregated, anonymised usage data to improve the win345 user interface, game selection, and payment infrastructure.
• Marketing communications — sending promotional messages about win345 offers, bonuses, and new features, where you have given consent to receive such communications.

6.1 Service Providers

win345 shares personal data with third-party service providers engaged to support Platform operations. All such providers are subject to contractual data processing agreements that restrict their use of personal data to the specific services being provided and require them to maintain appropriate security standards. Categories of service providers include: payment processors (JazzCash, EasyPaisa, bank transfer intermediaries); identity verification and KYC service providers; fraud detection and security analytics providers; cloud hosting and infrastructure providers; game software suppliers; and customer support platform operators.

6.2 Regulatory and Law Enforcement Disclosure

win345 may disclose personal data to regulatory authorities, law enforcement agencies, or other competent government bodies where required to do so by applicable law or the terms of the win345 gaming licence. Such disclosures include responses to lawful production orders, reports of suspicious financial activity as required under applicable anti-money laundering regulations, and mandatory disclosures in the context of regulatory inspections.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the Company's assets, personal data held by win345 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via the email address registered to your win345 account, and the acquiring entity will be required to honour the commitments made in this Policy unless you are notified of specific changes.

6.4 Data Not Sold

win345 does not sell, rent, or trade personal data to third parties for their independent commercial use under any circumstances. Any disclosure of personal data to third parties is made strictly within the parameters described in Sections 6.1 through 6.3 above.

win345 operates internationally and certain personal data — particularly data processed by cloud infrastructure providers, game suppliers, and identity verification services — may be transferred to and processed in countries outside Pakistan. win345 implements appropriate safeguards to ensure that such transfers afford a level of protection to personal data equivalent to that required by the applicable data protection standards under our gaming licence.

Safeguards used by win345 for international data transfers include: contractual data transfer agreements with third-party processors; requirement that third-party processors maintain internationally recognised information security certifications; and restriction of data transfers to jurisdictions with adequate data protection frameworks recognised by our Licence authority.

8.1 What Cookies win345 Uses

win345 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device by the Platform that enable certain functions and analytical capabilities. win345 uses the following categories of cookies:

• Essential cookies — strictly necessary for Platform operation, including session management, security token storage, and authentication state. These cannot be disabled without preventing Platform use.
• Analytical cookies — used to collect aggregated, anonymised data about how Users interact with the Platform, enabling win345 to improve user experience and Platform performance.
• Functional cookies — used to remember your preferences, such as display settings and preferred language, so that these do not need to be reset on each visit.
• Security cookies — used to detect fraudulent logins, identify suspicious session behaviour, and maintain the integrity of account access controls.

8.2 Managing Cookies

You may configure your browser to reject non-essential cookies. Most modern browsers — Chrome, Firefox, Safari — provide cookie management controls in their settings. Note that disabling essential cookies will impair or prevent your ability to access and use the win345 Platform. win345 does not use tracking cookies for the purpose of building behavioural advertising profiles for third-party advertising networks.

win345 retains personal data for the following periods, calculated from the later of the date the data was collected or the date of the last account activity:

• Identity and KYC documents — retained for a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable under our gaming licence.
• Transaction records — all deposit, withdrawal, and betting records are retained for a minimum of 5 years following the date of the transaction.
• Account data — core account information is retained for the duration of the account's existence and for 5 years following permanent closure.
• Communications data — support chat transcripts and email correspondence are retained for 3 years from the date of the communication.
• Technical and usage data — IP address logs and session data are retained for 12 months from the date of collection for security and fraud investigation purposes.
• Responsible gaming records — self-exclusion records and responsible gaming tool activation histories are retained for the duration of the exclusion period plus 5 years, to prevent circumvention of exclusion through re-registration.
• Marketing preference data — consent records and marketing preference settings are retained for the duration of the account plus 3 years.

Upon expiry of the applicable retention period, personal data is securely deleted from win345 systems or, where deletion is not technically feasible for specific data sets, permanently anonymised so that it can no longer be associated with any individual.

win345 implements the following technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption — all data transmitted between Users' devices and win345 servers is encrypted using industry-standard transport layer security.
• Encryption at rest — sensitive personal data, including identity documents and financial account details, is encrypted in storage.
• Access control — access to personal data within win345 is restricted to authorised employees and contractors on a documented need-to-know basis, controlled through role-based access management systems.
• Password hashing — User account passwords are stored using one-way cryptographic hashing algorithms. win345 staff cannot read your password in its original form.
• Intrusion detection — automated systems monitor win345 infrastructure for unauthorised access attempts, anomalous data access patterns, and other indicators of security incidents.
• Third-party security assessments — win345 engages independent security specialists to conduct periodic assessments of Platform security controls.
• Data breach response — win345 maintains a documented data breach response procedure. In the event of a breach affecting User personal data, win345 will notify affected Users and, where required by applicable law, the relevant regulatory authority within legally mandated timeframes.

As a win345 User, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with your registered mobile number and a description of the right you wish to exercise. win345 will respond within 30 calendar days of receiving a valid request.

The win345 Platform is strictly intended for individuals aged 21 years and above. win345 does not knowingly collect personal data from any person below the age of 21. Age verification — through the KYC process — is enforced as a platform-wide requirement and not merely stated as a terms condition.

If win345 discovers or has reasonable grounds to suspect that personal data has been collected from an individual below the age of 21, the relevant account will be immediately suspended, all personal data associated with that account will be flagged for review, and appropriate action will be taken in accordance with our regulatory obligations — including notification of the relevant regulatory authority where required. Any funds held in a minor's account will be dealt with in accordance with the win345 Terms & Conditions and regulatory guidance.

win345 may send you marketing communications about Platform promotions, bonus offers, new game launches, and PSL / cricket betting specials where you have explicitly consented to receive such communications at registration or subsequently through your Account Settings. Marketing communications are sent via SMS to your registered Pakistani mobile number and/or via email.

You may withdraw consent to marketing communications at any time by: updating your notification preferences in Account Settings; clicking the unsubscribe link in any marketing email; or contacting [email protected] with a written opt-out request. Withdrawal of marketing consent will be processed within 5 business days. Note that withdrawal of marketing consent does not affect your receipt of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as part of the contractual relationship and cannot be opted out of while your account remains active.

win345 collects and processes specific data in connection with responsible gaming obligations. This includes records of deposit limits set by Users, cool-off periods activated, self-exclusion periods and their duration, and Platform-side monitoring of play patterns that may indicate problematic gambling behaviour.

Responsible gaming data is processed on the basis of legal obligation — our gaming licence requires win345 to maintain such records and to use them to protect vulnerable players. Self-exclusion records are retained for the duration of the exclusion period plus five years following its expiry, to prevent a previously excluded User from circumventing their own exclusion by registering a new account. This retention overrides a User's right of erasure with respect to exclusion records for the duration of the applicable retention period.

Responsible gaming monitoring data is not shared with third parties except: (a) where required by our Licence authority; or (b) in anonymised, aggregated form for research purposes that may improve responsible gaming practices across the industry. Full details of responsible gaming tools available on win345 are set out on the Responsible Gaming page.

win345 reserves the right to amend this Privacy Policy at any time. Where amendments are material — for example, where win345 proposes to use personal data for a new purpose not described in the current Policy, or where the categories of data collected change significantly — win345 will notify registered Users via the email address on their account at least 14 days prior to the amendment taking effect.

Non-material amendments — such as corrections of typographical errors, clarifications that do not alter the substance of any provision, or updates to reflect minor operational changes — may be published on this page without individual notification. The Effective Date shown at the top of this Policy will be updated to reflect the date of any amendment. Your continued use of the win345 Platform following an amendment's effective date constitutes your acceptance of the revised Policy. If you object to any amendment, you should cease using the Platform and may close your account in accordance with the win345 Terms & Conditions.

For all privacy-related queries, data subject access requests, and complaints relating to how win345 handles your personal data, please contact the win345 Data Protection team using the following details:

• Email: [email protected] — mark your subject line "Data Protection Request"
• Live Chat: Available 24/7 via the win345 Platform — indicate that your query is a data protection matter
• Response target: win345 will acknowledge data protection requests within 5 business days and provide a substantive response within 30 calendar days

If you are dissatisfied with win345's response to a data protection complaint, you may escalate the matter to the independent arbitration mechanism designated by win345's Licence authority. Details of the escalation process are available on request from the support team.