228win Privacy Policy

1 Introduction

228win operates as an online gaming and entertainment platform designed for adult players in Pakistan. As part of running this platform we collect and process certain personal data. This is necessary for us to verify your identity, process your PKR deposits and withdrawals, manage your account and provide customer support.

This policy applies to all users of the 228win website and mobile app, including visitors who have not yet registered an account. By accessing the platform, you acknowledge that you have read and understood this policy.

If you have any questions about this policy or how we handle your data, you can reach our support team via live chat or by email at [email protected]. Full contact details are in Section 13.

2 Data We Collect

228win collects personal data in the following categories depending on how you interact with the platform:

We do not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs or political opinions. Where identity documents are submitted for verification purposes, copies are used only for the verification process and then handled in accordance with our retention policy in Section 7.

3 How We Collect Your Data

We collect personal data through the following channels:

• Direct submission: Data you provide when you fill in the registration form, complete identity verification, make a deposit, or contact support.
• Automated collection: Technical data collected automatically when you visit the platform, including your IP address, device information, browser type and session activity. This data is collected via server logs and cookies.
• Payment processors: When you make a deposit or request a withdrawal, payment processors such as JazzCash, Easypaisa, Raast and banking partners share transaction confirmation data with us so we can credit or debit your account correctly.
• Third-party verification: In some cases, identity verification may involve third-party services that cross-reference the documents you submit against available records. These services act under strict data processing agreements.

4 How We Use Your Data

The personal data we collect is used for specific, legitimate purposes directly related to running the 228win platform and your use of it. The main purposes are:

• Account creation and management: To set up your account, verify your identity, maintain your profile and give you access to the full range of platform features including casino games, slots, live casino, sports betting and the game lobby.
• Payment processing: To process your PKR deposits via JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets, and to process your withdrawal requests back to your registered payment method.
• Identity verification: To confirm that you are aged 18 or over and that your identity matches your registered account details. This is a standard requirement for all gaming platforms.
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, money laundering and other prohibited activities described in the Terms and Conditions.
• Customer support: To respond to your queries, resolve disputes and investigate any concerns you raise about your account, transactions or game results.
• Platform improvement: To analyse how players use the platform, identify technical issues and improve features, game selection and overall performance.
• Responsible gaming: To monitor account activity in support of responsible gaming tools such as deposit limits, session reminders and self-exclusion. For more details see the Responsible Gaming page.
• Communications: To send you account-related notifications such as deposit confirmations, withdrawal updates and important policy changes. We may also send promotional communications if you have opted in to receive them. You can opt out at any time.

We do not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you, except where such processing is required for fraud detection and is subject to human review.

5 Payment Data and PKR Transactions

All financial transactions on 228win are conducted in Pakistani Rupees (PKR). When you make a deposit or withdrawal, limited payment data is processed to complete the transaction. This includes:

• Your JazzCash or Easypaisa mobile account reference number
• Your Raast ID or bank account number (partial, for verification purposes)
• Transaction amount in PKR and timestamp
• Payment status confirmation received from the payment gateway

228win does not store full card numbers, CVV codes or full bank account numbers on our servers. This data is handled entirely by the relevant payment processor under their own security standards. Our servers only receive a tokenised reference or partial identifier that allows us to match a transaction to your account.

Transaction history in your 228win account — showing deposits, withdrawals, bonuses and game results in PKR — is retained as part of your account record. You can view your full transaction history at any time within your account dashboard.

6 Sharing Your Data

228win does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card networks receive the minimum data required to process your deposits and withdrawals in PKR.
• Identity verification providers: Third-party identity verification services may receive copies of your submitted documents for the purpose of confirming your identity. These providers are bound by data processing agreements and are prohibited from using your data for any other purpose.
• Game providers: Third-party game studios such as Evolution Gaming, Pragmatic Play, JILI and others receive your account session data to operate game rounds correctly. They do not receive your full personal profile.
• Technology and hosting providers: Cloud hosting and infrastructure providers that power the 228win platform may have access to server data as part of their service. These providers are contractually required to maintain confidentiality and security.
• Legal and regulatory requirements: We may disclose personal data if required to do so by a valid legal process, court order or government authority. In such cases, we disclose only the minimum data required by the applicable legal obligation.
• Business transfers: In the event of a merger, acquisition or transfer of business assets, your personal data may be transferred to the new entity. You would be notified of any such transfer and its implications for your data.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection standards. We do not permit third parties to use your data for their own marketing purposes.

7 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. The general retention periods we apply are:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised, aggregated data — which cannot identify any specific person — may be retained indefinitely for statistical and analytical purposes.

If you request account closure, your active account data will be deactivated promptly. However, certain data such as transaction records and identity verification documents will be retained for the periods stated above even after account closure, in accordance with standard financial record-keeping practice.

8 Data Security

228win takes the security of your personal data seriously. We apply a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 228win platform is protected using TLS (Transport Layer Security) encryption. This applies to the website, mobile app and all API communications.
• Encrypted storage: Sensitive personal data stored on our servers is encrypted at rest. This includes identity documents and financial data references.
• Access controls: Access to personal data within 228win's systems is restricted to staff and systems that have a genuine operational need for it. Access is granted on a least-privilege basis and is logged and audited.
• Two-factor authentication: 228win supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access.
• Fraud monitoring: Automated systems monitor account activity for signs of fraud, unusual login patterns and suspicious transactions. Alerts trigger human review where necessary.
• Incident response: In the event of a data security incident that affects your personal data, we will investigate promptly and notify affected users in accordance with our obligations.

9 Cookies and Tracking Technologies

228win uses cookies and similar technologies on the website and app. A cookie is a small text file placed on your device that helps the platform recognise you between visits and remember your preferences. We use the following types of cookies:

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit. Without these, core features such as account access and gameplay would not work.
• Functional cookies: Remember your preferences such as your preferred language, lobby display settings and notification choices. These improve your experience but are not strictly necessary.
• Analytics cookies: Help us understand how players navigate the platform — which pages are visited most, how long sessions last, and where players encounter issues. This data is aggregated and does not identify individual users. It is used to improve the platform over time.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity checks.

228win does not use advertising or cross-site tracking cookies. We do not serve third-party advertising networks that track you across other websites.

You can manage or block cookies through your browser settings. Note that disabling essential cookies will affect your ability to use the platform. Disabling functional or analytics cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

10 Your Data Rights

As a user of 228win, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 13:

• Right of access: You can request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe and in a commonly used format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct it. For basic account details such as your email or phone number, you can update these directly within your account settings.
• Right to erasure: In certain circumstances, you can request that we delete your personal data. Note that we may be unable to fulfil deletion requests for data we are legally required to retain, such as transaction records.
• Right to restrict processing: You can ask us to pause the processing of your personal data in certain situations, for example while a dispute is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format so that you can transfer it to another service provider if you choose.
• Right to object: You can object to processing of your personal data for direct marketing purposes at any time. You can also unsubscribe from promotional emails using the unsubscribe link included in each marketing communication.

We will acknowledge your request promptly and aim to respond in full within 30 days. In complex cases we may request an extension and will notify you if this applies.

11 Minors

228win is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a registered account belongs to a person under 18, we will close the account immediately, delete all associated personal data in accordance with our retention policy, and return any deposits made.

If you are a parent or guardian and believe that a minor has registered on 228win, please contact our support team immediately with the relevant details so we can investigate and act without delay.

12 Changes to This Policy

228win may update this Privacy Policy from time to time. When changes are made, the "Last Updated" date at the top of this page will be revised. For material changes — those that significantly affect how we use your personal data — we will notify registered players via email or an in-platform notification before the changes take effect.

We encourage you to review this page periodically to stay informed. Continued use of the platform after a policy update constitutes your acceptance of the revised terms. If you disagree with any changes, you should stop using the platform and contact support to discuss account closure.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal data has been handled, please get in touch with the 228win support team:

• Live chat: Available within the platform — the fastest way to get a response during business hours.
• Email: [email protected] — we aim to respond to all email enquiries within 24 hours.
• FAQ: Visit the FAQ page for quick answers to the most common questions about accounts, payments and platform features.

When contacting us about a data rights request, please include your registered email address and a brief description of your request so we can locate your account and respond efficiently. We may ask for identity verification before fulfilling access or deletion requests to ensure your data is not disclosed to an unauthorised party.