win365 Privacy Policy —
How We Collect, Use, and Protect Your Data

1 Introduction

This Privacy Policy ("Policy") applies to win365 ("win365", "we", "us", "our") and governs the collection, processing, storage, and sharing of personal data relating to individuals ("you", "your", "Player") who access or use the win365 online casino and sports betting platform at win365.life ("the Platform").

win365 is committed to protecting the privacy of all players, particularly those accessing the Platform from Pakistan. This Policy explains in clear terms what data we hold about you, why we hold it, and how you can exercise control over it.

By registering an account, logging in, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its contents, you must discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of your agreement with win365.

2 Personal Data We Collect

win365 collects the categories of personal data described in the table below. We collect only what is necessary for the purposes set out in this Policy.

3 How We Collect Your Data

win365 collects personal data through the following means:

• Direct registration: Data you provide when creating your win365 account, completing KYC verification, or updating your profile.
• Transactional activity: Data generated when you deposit or withdraw PKR funds using Easypaisa, JazzCash, bank transfers, or crypto wallets.
• Platform usage: Data automatically generated as you browse the Platform, play games, place bets, or interact with live tables.
• Cookies and similar technologies: Session cookies, persistent cookies, and analytics tools that record how you interact with the Platform. See Section 10 for details.
• Third-party verification services: Identity and age verification data returned by KYC and anti-fraud service providers engaged by win365.
• Support interactions: Data you provide when contacting win365's 24/7 live chat or email support team.

4 How We Use Your Personal Data

win365 uses the personal data it holds for the following purposes:

• To create, manage, verify, and maintain your win365 player account.
• To process PKR deposits and withdrawals and maintain accurate financial records.
• To verify your identity, age (18+), and eligibility to use the Platform.
• To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• To deliver customer support through live chat and email and to resolve disputes fairly.
• To operate responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion in accordance with our Responsible Gaming policy.
• To send transactional communications such as deposit confirmations, withdrawal receipts, and account security alerts.
• To send promotional communications about win365 offers — only where you have given your explicit consent to receive such communications, and subject always to your right to opt out at any time.
• To improve the Platform through aggregated, anonymised analysis of usage patterns and player feedback.
• To comply with applicable legal obligations and respond to lawful requests from regulatory or law enforcement authorities.

5 Legal Basis for Processing

win365 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely on are:

• Performance of a contract: Processing necessary to provide the win365 service you have registered for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, and other applicable laws.
• Legitimate interests: Processing to detect and prevent fraud, improve Platform security, and analyse usage patterns — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

win365 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients strictly on a need-to-know basis and under binding data protection obligations:

• Payment service providers: Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, and crypto wallet processors — solely to execute your requested transactions.
• Identity and KYC verification providers: Third-party services used to verify your identity documents and confirm your eligibility to use win365.
• Fraud prevention and security services: Third-party tools that help win365 detect unusual account behaviour, prevent money laundering, and protect player funds.
• Game software providers: Provider systems may process limited account and session data to deliver the games you play on the Platform.
• Legal and regulatory authorities: Where required by law, court order, or regulatory instruction, win365 may disclose personal data to government bodies, law enforcement agencies, or financial regulators.
• Professional advisers: Lawyers, auditors, and accountants engaged by win365, who are bound by professional confidentiality obligations.

7 Payments, KYC, and Financial Data

All financial transactions on win365 are conducted in Pakistani Rupees (PKR). When you deposit or withdraw funds, win365 processes your payment details through encrypted channels. Financial data is stored in compliance with applicable financial regulations and is accessible only to authorised personnel for the purpose of transaction processing, fraud investigation, and regulatory reporting.

KYC verification may require you to submit copies of your CNIC, passport, or other government-issued identity documents, along with proof of your payment method. This data is processed solely for identity verification and anti-money laundering compliance. win365 does not retain full copies of sensitive financial credentials beyond what is necessary for these legal purposes.

8 Data Retention

win365 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The general retention periods we apply are:

• Account data and KYC records are retained for a minimum of five years following account closure, in accordance with anti-money laundering legislation.
• Financial transaction records (deposits, withdrawals, game results) are retained for a minimum of five years for regulatory compliance and audit purposes.
• Support communications are retained for up to three years following resolution of the relevant query or complaint.
• Cookie and analytics data is retained in accordance with the retention periods specified in Section 10.
• Marketing consent records are retained for as long as you remain subscribed and for one year following opt-out, to demonstrate compliance with consent requirements.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

9 Security Measures

win365 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest within our secure data storage infrastructure.
• Strict role-based access controls ensuring that personal data is accessible only to win365 personnel who require it to perform their duties.
• Automated session timeout and login alert mechanisms to detect and respond to suspicious account activity.
• Regular internal and third-party security audits and penetration testing of Platform infrastructure.
• Incident response procedures to promptly address any personal data breach, including notification to affected players where required by law.

While win365 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying win365 immediately if you suspect any unauthorised access to your account.

10 Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the win365 Platform. They allow the Platform to recognise your browser, remember your preferences, and collect information about how you interact with the site.

10.2 Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in to your win365 account during a browsing session. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings, display options, and last-used payment method. Retained for up to 12 months.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform so we can improve the user experience. Retained for up to 24 months.
• Marketing cookies: Used to deliver relevant promotional content where you have provided consent. You may withdraw consent at any time via your account settings.

11 Your Data Rights

As a win365 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team as described in Section 14.

• Right of access: You may request a copy of the personal data that win365 holds about you at any time.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data held in your account profile.
• Right to erasure: You may request deletion of your personal data subject to win365's legal retention obligations. Note that data required for regulatory compliance cannot be deleted before the applicable retention period expires.
• Right to restriction: You may request that win365 restricts the processing of your data in certain circumstances, such as where accuracy is disputed.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to win365's legal obligations.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

win365 will respond to all data rights requests within a reasonable period and in any event within 30 days of receipt. We may ask you to verify your identity before processing a request to protect your security.

12 Minors and Under-18 Protection

win365 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If win365 becomes aware that personal data has been collected from an underage individual, that account will be immediately closed, all associated data will be deleted in accordance with applicable law, and any funds held in the account will be handled in accordance with our Terms & Conditions.

13 Changes to This Privacy Policy

win365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, data protection best practices, or the way we operate the Platform. Where material changes are made, we will notify registered players via email or a prominent notice on the Platform at least 14 days before the changes take effect.

Your continued use of the Platform following such notice constitutes your acceptance of the revised Privacy Policy. The date of the most recent update is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed of how win365 protects your data.

14 Contact Us — Privacy & Data Queries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how win365 handles your personal data, please contact us through the following channels:

• 24/7 live chat — accessible from within your win365 account after login.
• Email: [email protected] (plain text — not a clickable link).

Please mark privacy-related enquiries clearly in your message. Our team will respond promptly and treat all privacy requests with the sensitivity they deserve. For responsible gaming concerns — including requests for self-exclusion or deposit limits — please visit our Responsible Gaming page or contact live support directly.