Your privacy matters to us. This Privacy Policy explains exactly what personal data win228 collects when you register, deposit PKR or use any of our games, how we use it, who we share it with, and the controls you have over your own information.
Six core privacy commitments win228 makes to every registered member in Pakistan — before you read the full policy below.
win228 does not sell, rent or trade your personal information to any third party for marketing or any other commercial purpose. Full stop.
Section 4All account data and PKR transaction records are stored with encryption. Payment details processed through JazzCash, Easypaisa and Raast are handled by PCI-compliant processors.
Section 6You can request a copy of your data, ask for corrections or request deletion of your account at any time by contacting win228 support.
Section 8win228 only uses cookies that are necessary for the platform to function and to improve your experience. We do not use third-party advertising cookies.
Section 7win228 keeps your data only for as long as needed to operate your account and meet record-keeping obligations. Closed accounts are not stored indefinitely.
Section 9Whenever this Privacy Policy is updated in a material way, win228 will notify registered members via the platform or by message to your registered mobile number.
Section 10This Privacy Policy applies to all personal data collected and processed by win228 in connection with the win228 platform at win228.pro. It covers every registered member, visitor and anyone who contacts win228 support, regardless of whether they are based in Karachi, Lahore, Islamabad or anywhere else across Pakistan.
By creating a win228 account and using the platform, you confirm that you have read this Privacy Policy and understand how your information is handled. If you disagree with any part of this policy, please do not register or continue using win228 services.
This policy should be read alongside the win228 Terms and Conditions and the Responsible Gaming page, which together set out the full framework under which win228 operates and how it looks after its members.
Plain English: We have written this policy to be as straightforward as possible for our Pakistan members. Where we use technical or legal terms, we explain them in plain language alongside. If anything is still unclear, reach out to win228 support.
win228 is an online gaming and sports betting platform operating at win228.pro, providing cricket betting, PSL markets, live casino, slots, bingo and other entertainment products to adult members in Pakistan. Throughout this Privacy Policy, "win228", "we", "us" and "our" refer to the operator of the win228 platform.
win228 is the data controller for all personal data collected through the platform. This means win228 determines the purposes and means by which your personal data is processed, and is responsible for making sure that processing is carried out lawfully, fairly and transparently.
For any privacy-related queries — including requests to access, correct or delete your personal data — you can contact the win228 support team. Contact details are available on the platform after login, or you can use the email address listed in the footer of this page.
win228 collects different categories of personal data depending on how you interact with the platform. Below is a breakdown of the main types of data we collect and when we collect them.
When you create a win228 account, we collect the information you provide directly:
If win228 requests identity verification — for example before processing your first PKR withdrawal or if unusual activity is flagged — you may be asked to provide:
Identity documents are used solely for verification purposes and are stored securely. They are not shared beyond what is necessary for verification and fraud prevention.
Every PKR deposit, withdrawal and bonus transaction on your win228 account is logged. This includes:
win228 records all betting and gaming activity on the platform, including:
When you visit win228.pro or use the platform, we automatically collect certain technical information:
We do not collect: win228 does not collect full payment card numbers directly. Card transactions are processed by PCI-DSS-compliant third-party payment processors who handle card data under their own strict security standards. win228 only receives a transaction reference and status confirmation.
| Data Category | Examples | When Collected |
|---|---|---|
| Registration | Name, DOB, mobile number, address | At account sign-up |
| Identity Documents | CNIC, passport, selfie | During KYC verification |
| Financial | PKR transactions, wallet references | On each deposit or withdrawal |
| Gameplay | Bets, casino sessions, PSL wagers | During platform use |
| Technical | IP address, device, browser | On each platform visit |
| Communications | Support messages, chat logs | When you contact support |
win228 uses your personal data only for the purposes described below. We do not process your data in ways that are incompatible with these stated purposes, and we do not sell, rent or trade your personal information to any third party for their own marketing use.
No Third-Party Marketing: win228 does not share your personal data with third-party advertisers, data brokers or marketing agencies. If you receive unsolicited communications claiming to be from win228 through an unknown channel, please report it to our support team immediately as this could indicate a phishing attempt.
win228 shares your personal data with third parties only where it is necessary to operate the platform and provide services to you, or where we are required to do so by applicable law. We do not share more data than is necessary for each purpose.
Your PKR transaction data is shared with the payment processors and financial institutions that handle your deposits and withdrawals — including JazzCash, Easypaisa, Raast and bank networks. These processors operate under their own privacy policies and data security standards and are engaged only for the purpose of completing your transactions.
win228's casino, slot, bingo and live casino games are provided by third-party software suppliers. These suppliers may receive a session token and limited gameplay data necessary to run the game and record its outcome. They do not receive your full identity or payment details.
Where win228 uses a third-party identity verification provider to assist with CNIC or document checks, your submitted identity documents and verification data are shared with that provider for the sole purpose of completing the verification check. Verification providers are required to handle your data under strict confidentiality obligations.
win228 may use third-party fraud detection tools that process certain technical and behavioural data — such as IP address, device fingerprint and session patterns — to identify suspicious activity. These tools do not receive your full personal profile.
win228 may disclose personal data to relevant authorities if required to do so under applicable law, in response to a lawful request from a law enforcement or regulatory body, or to protect the rights, property or safety of win228, its members or others.
Data Processing Agreements: All third-party service providers who receive personal data from win228 are required to process that data only for the specified purpose, under contractual obligations that include confidentiality, security and data minimisation requirements.
win228 takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, loss, alteration or disclosure.
While win228 uses strong security measures, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — by using a strong password, not sharing your OTP codes and logging out of shared devices. If you suspect your account has been accessed without your permission, contact win228 support immediately.
Password Security: win228 never stores your password in plain text. Your password is transformed using a one-way cryptographic hash before storage. This means win228 support staff cannot see your password — only you know it. If you forget your password, you will need to reset it through the account recovery process.
win228 uses cookies and similar technologies on win228.pro to make the platform work correctly and to understand how members use the site so we can improve it. We keep our cookie use minimal and purposeful.
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on return visits, remember your preferences and maintain your login session. Cookies do not contain your full personal details — they typically store a session identifier or preference reference.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Keep you logged in, maintain your session and enable core platform functions | No — platform won't work without these |
| Functional | Remember your language, game preferences and display settings | Yes — platform still works |
| Analytics | Understand how members navigate the platform (aggregated, anonymised data) | Yes — via browser settings |
| Security | Detect suspicious login attempts and protect against cross-site request forgery | No — required for account security |
win228 does not use third-party advertising cookies, retargeting pixels or social media tracking cookies on its platform. You will not be followed around the web by win228 advertisements based on your platform behaviour.
You can manage or delete cookies through your browser settings at any time. Most browsers allow you to block all cookies, block third-party cookies only, or clear cookies when you close the browser. Be aware that disabling essential or security cookies will affect your ability to log in and use win228 normally.
As a win228 member, you have rights over your personal data. win228 is committed to supporting these rights and responding to valid requests in a reasonable timeframe. Here is what you can ask for:
To exercise any of the above rights, contact win228 support from your registered account. We will verify your identity before processing any data request to ensure your data is not disclosed to someone else. win228 aims to respond to all data rights requests within 30 days.
Note on Account Closure: Requesting deletion of your personal data will result in the permanent closure of your win228 account. Any real-money PKR balance will be returned to your registered payment method before the account is closed, subject to standard verification and withdrawal processing.
win228 does not hold onto your personal data for longer than is necessary for the purposes it was collected. The table below outlines how long different categories of data are typically retained:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | Duration of account + up to 5 years after closure | Fraud prevention and record-keeping |
| PKR Transaction Records | Up to 7 years from transaction date | Financial record-keeping obligations |
| Identity Documents | Up to 5 years after account closure | Anti-fraud and verification audit trail |
| Gameplay & Betting History | Duration of account + 2 years after closure | Dispute resolution and responsible gaming |
| Support Communications | 3 years from last communication | Quality assurance and dispute records |
| Technical / Device Logs | Up to 12 months | Security monitoring and fraud detection |
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised, aggregated data may be retained for platform analytics beyond these periods.
win228 may update this Privacy Policy from time to time to reflect changes in the platform, our data practices or applicable requirements. When we make material changes, we will update the "Last updated" date at the top of this page.
For significant changes that affect how we use your personal data in a meaningful way, win228 will notify registered members through the platform or via a message to your registered Pakistani mobile number before the changes take effect. We recommend checking this page periodically — especially if you are a regular win228 member — so you are always aware of the current version.
Your continued use of win228 after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you disagree with material changes, you have the right to request account closure and data deletion before the revised policy takes effect.
The previous version of this Privacy Policy is available on request from win228 support for a period of 12 months following any update. If you want to compare the current and previous versions, contact our support team and we will share both documents.
Beyond the policy wording — here is how win228 actually protects your data and your account every day.
Every connection between your device and win228 is encrypted using TLS. Your registration details, PKR transactions and login credentials are never transmitted in plain text across any network.
TLS Encryptedwin228 uses OTP verification to your Pakistani mobile number every time you log in from a new device. Even if someone else knows your password, they cannot access your account without your phone.
Two-Factor Securitywin228's identity verification process is not just about compliance — it also protects you. By confirming your identity before large withdrawals, we ensure PKR cannot be withdrawn by anyone other than you.
Identity Verifiedwin228 runs no third-party advertising pixels, retargeting tags or social media trackers on its platform. Your betting and gaming habits are not shared with any advertising network anywhere.
No Ad TrackingOur fraud detection systems analyse patterns rather than reading your messages or personal content. We detect problems like duplicate accounts and unusual transaction behaviour, not your private communications.
Smart Fraud DetectionFrom your win228 account settings you can update your personal details, set deposit and session limits, request self-exclusion and manage your communication preferences — all without contacting support.
Full Account Control