228win Privacy Policy

1. Who We Are

228win ("228win", "we", "us", "our") operates the online casino and sports betting platform accessible at 228win.org. 228win is the data controller responsible for the personal data you provide to us in connection with your use of the platform.

This Privacy Policy applies to all personal data processed by 228win in connection with your registration, use of our gaming and betting services, participation in promotions, and any other interactions you have with the 228win platform.

If you have any questions about how 228win handles your personal data, please contact our data protection team at [email protected] before using the platform.

2. Personal Data We Collect

228win collects personal data in a number of ways when you use the platform. The categories of personal data we may collect include:

2.1 Registration & Account Data

• Full name as it appears on your official identity document
• Date of birth (for mandatory age verification – 18+ requirement)
• Pakistani mobile number and/or email address
• Chosen username and encrypted password
• Residential address in Pakistan or other jurisdiction

2.2 Identity Verification (KYC) Data

• Copies of identity documents: Pakistani CNIC, passport, or other government-issued identification
• Proof of address documentation (utility bill, bank statement)
• Proof of payment method ownership where required for withdrawal processing

2.3 Financial & Transaction Data

• PKR deposit and withdrawal amounts and dates
• Payment method details – JazzCash account reference, Easypaisa number, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), card type and partial card number, cryptocurrency wallet address
• Transaction history including all bets placed, casino game activity, and bonus usage

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and platform navigation data
• Geolocation data (country/city level) derived from IP address
• Device identifiers and cookies (see Section 9)

2.5 Communications Data

• Records of communications with 228win customer support, including live chat transcripts and email correspondence
• Your responses to surveys or promotions where you voluntarily participate

3. How 228win Uses Your Personal Data

228win uses the personal data we collect for the following purposes:

3.1 Account Management & Service Delivery

To register and maintain your 228win account; to verify your identity and age in compliance with our 18+ policy; to process your PKR deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods; to provide you with access to casino games, cricket betting markets, slots, virtual sports, and lottery products on the 228win platform.

3.2 Legal & Regulatory Compliance

To fulfil obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) regulations; to verify that users are of legal age; to respond to lawful requests from regulatory authorities, law enforcement, or courts; to maintain transaction records for the required statutory retention periods.

3.3 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, match-fixing, and other prohibited activities. 228win uses automated monitoring systems that analyse transaction patterns and gaming behaviour to identify and flag suspicious activity for human review.

3.4 Responsible Gaming

To monitor gaming behaviour and identify patterns that may indicate problem gambling; to enforce player-set deposit limits, session restrictions, and self-exclusion requests; to contact players proactively where our monitoring systems detect concerning patterns. This use of your data is essential to 228win's commitment to responsible gaming and player welfare.

3.5 Marketing & Promotions

Subject to your marketing preferences set during registration or subsequently updated in your account settings, 228win may use your contact details to send you information about promotions, bonuses, PSL season offers, and new features available on the 228win platform. You may opt out of marketing communications at any time through your account settings or by contacting [email protected].

3.6 Platform Improvement

To analyse aggregated, anonymised usage data to understand how players interact with the 228win platform and to improve the user experience, game selection, payment processing speed, and customer support quality.

4. Legal Basis for Processing

228win processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a 228win account holder, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML, KYC, and age verification obligations.
• Legitimate interests: Processing carried out for 228win's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, specifically in relation to direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

228win does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described below:

5.1 Service Providers & Technology Partners

228win engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include game software providers (such as Evolution Gaming, Pragmatic Play, PG Soft, and JILI), payment processing partners (including providers that facilitate JazzCash and Easypaisa transactions), cloud hosting providers, customer support platform providers, and fraud detection services. All such providers are contractually bound to process data only on 228win's instructions and to maintain appropriate security standards.

5.2 Regulatory & Law Enforcement Authorities

228win may disclose your personal data to regulatory bodies, licensing authorities, financial intelligence units, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the legal rights and interests of 228win or third parties.

5.3 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring involving 228win, your personal data may be transferred as part of the transaction. You will be notified of any such transfer where required by applicable law.

6. International Data Transfers

Given the international nature of the online gaming industry, your personal data may be transferred to and processed in countries outside Pakistan where 228win's service providers and technology partners operate. Where such transfers occur, 228win takes appropriate measures to ensure that your personal data remains protected to a standard equivalent to that described in this Privacy Policy, including through the use of contractual safeguards with data processors.

By registering a 228win account and using the platform, you acknowledge and consent to such international transfers of your personal data for the purposes described in this policy.

7. Data Retention

228win retains your personal data for as long as is necessary for the purposes set out in this Privacy Policy, subject to any applicable legal or regulatory retention obligations. Specifically:

• Account data and transaction records are retained for a minimum of 5 years following account closure, in compliance with standard AML record-keeping obligations.
• KYC identity verification documents are retained for the period required by applicable regulations from the date of the last transaction or account closure, whichever is later.
• Customer support communications are retained for 3 years from the date of the interaction.
• Technical log data is typically retained for 12 months before being deleted or anonymised.
• Marketing preference data is retained until you withdraw consent or request erasure, subject to any overriding legal obligation to retain it.

Upon expiry of the applicable retention period, 228win will securely delete or anonymise your personal data.

8. Security Measures

228win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser or device and the 228win platform
• Encrypted storage of passwords using industry-standard hashing algorithms
• Role-based access controls limiting employee access to personal data to those with a legitimate business need
• Regular security reviews and vulnerability assessments of the 228win platform
• Two-factor authentication (2FA) available to all registered players as an additional account security layer
• Automated monitoring systems to detect and alert on unusual account access patterns

While 228win takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your 228win login credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9. Cookies & Tracking Technologies

228win uses cookies and similar tracking technologies on the 228win.org platform to enable essential functionality, improve user experience, and analyse platform usage. The categories of cookies used include:

• Strictly necessary cookies: Required for the 228win platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences and settings, such as language and display options, to personalise your 228win experience across sessions.
• Analytics cookies: Collect anonymised or aggregated data about how players use the 228win platform to help us improve performance, navigation, and game discovery.
• Marketing cookies: Used, subject to your consent, to deliver relevant promotional content about 228win offers.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 228win platform. For strictly necessary cookies, no consent mechanism is required as these are essential to service delivery.

10. Your Data Protection Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your personal data held by 228win:

• Right of access: To request a copy of the personal data 228win holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: To request that 228win limits processing of your data in certain circumstances.
• Right to data portability: To receive a copy of your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: To object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact 228win at [email protected]. 228win will respond to all data rights requests within 30 days of receipt, subject to verification of your identity.

11. Children's Privacy

The 228win platform is strictly for adults aged 18 and over. 228win does not knowingly collect personal data from any person under 18 years of age. Age verification is a mandatory step in the 228win KYC process and accounts found to belong to persons under 18 will be immediately closed and any associated data deleted in accordance with applicable law.

12. Third-Party Links & Services

The 228win platform may contain references to third-party game providers whose software is embedded within the platform. These providers operate under their own privacy policies and data practices. While 228win carefully selects its technology partners, we are not responsible for the privacy practices of third-party game studios or software vendors once data is processed directly by those parties. You should review the privacy practices of any third-party provider whose games you access through the 228win platform.

13. Changes to This Privacy Policy

228win reserves the right to update or revise this Privacy Policy at any time. Where material changes are made that affect how we process your personal data, we will notify you via the email address registered on your 228win account or via a prominent in-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how 228win protects your data. Your continued use of the 228win platform following notification of changes constitutes your acceptance of the revised policy.

14. How to Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the way 228win processes your personal data, please contact our team: