Win886 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which Win886 ("we", "us", "our", "the Platform", "win886.cam") collects, uses, stores, discloses and otherwise processes personal data relating to users ("you", "your", "User") of the Win886 platform and any associated services.

Win886 is an English-language online gaming information and entertainment platform designed for users in Pakistan and other permitted jurisdictions. We are committed to protecting your personal data and handling it in a transparent, lawful and responsible manner consistent with applicable data protection standards.

By accessing or using the Win886 platform — whether to browse content, create an account, make deposits, place bets or contact our support team — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated herein by reference.

For clarity throughout this Policy, the following terms are used as defined below:

Win886 collects personal data across several categories depending on the nature of your interaction with the Platform:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Residential address (including city — such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — and country)
• Username and encrypted password
• Phone number (where provided)

3.2 Identity Verification (KYC) Data

• Government-issued national identity card (CNIC), passport or driver's licence number and image
• Proof of address documents (utility bills, bank statements)
• Source of funds documentation (where required for enhanced due diligence)
• Facial verification data (where biometric KYC processes are employed)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amounts, timestamps, methods)
• Payment instrument identifiers (e.g., masked card numbers, mobile wallet IDs) — Win886 does not store full card numbers
• Account balance history and wagering activity records

3.4 Technical & Device Data

• IP address and geolocation (country/city level)
• Device type, operating system and browser type
• Session tokens and authentication logs
• Platform interaction logs (pages visited, features used, timestamps)

3.5 Communications Data

• Content of support messages submitted via live chat or email
• Records of complaints, dispute correspondence and KYC queries
• Marketing preferences and communication opt-in/opt-out records

Win886 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically — through cookies, session tokens and server logs when you browse or interact with the Platform. Technical data is collected regardless of whether you are logged in.
• From third-party KYC providers — where Win886 uses identity verification service providers to cross-reference submitted identity documents against relevant databases.
• From payment processors — limited transaction confirmation data is received from payment processors to reconcile deposits and withdrawals. Win886 does not receive your full payment credentials from processors.
• From fraud prevention and AML screening services — to comply with anti-money laundering obligations, Win886 may screen account data against watchlists, sanctions lists and politically exposed persons (PEP) databases.

Win886 processes your personal data only for specific, documented and legitimate purposes. The table below sets out the main processing activities and their legal basis:

Win886 will not process your personal data for purposes that are incompatible with those listed above without obtaining your explicit prior consent or where required by law.

Win886 does not sell, rent or trade your personal data to third parties for their own commercial purposes. Personal data may be disclosed in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data on our behalf under documented data processing agreements. These include KYC and identity verification providers, payment processing infrastructure, customer support platform operators, fraud detection services and cloud hosting providers. All processors are contractually bound to process data only for purposes authorised by Win886 and to implement appropriate security measures.

6.2 Regulatory and Legal Disclosure

Win886 may be required to disclose personal data to regulatory bodies, law enforcement authorities, anti-money laundering agencies or courts where legally compelled to do so. Such disclosures are made only to the extent required by applicable law and only to the relevant authority. Win886 will, where legally permitted, notify you of any such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of Win886's business or assets, your personal data may be transferred to a successor entity, subject to that entity being bound by equivalent data protection obligations. You will be notified of any such transfer prior to its completion where practicable.

6.4 Consent-Based Sharing

With your explicit prior consent, we may share personal data with selected third parties for purposes clearly described at the time consent is sought. You may withdraw such consent at any time without detriment to your account.

Win886 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve disputes and enforce our agreements. Key retention periods are outlined below:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of the most recent transaction, consistent with anti-money laundering compliance requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction for AML, audit and dispute resolution purposes.
• Support and communications data: Retained for a maximum of three (3) years from the date of the last interaction, unless a dispute or regulatory matter requires longer retention.
• Technical and device data (logs): Retained for a maximum of twelve (12) months from collection, unless required for an ongoing security investigation.
• Marketing preferences: Retained until you withdraw consent or for a maximum of three (3) years from the date of last marketing engagement, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user.

Win886 recognises and supports the following data protection rights for all users of the Platform. To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within a reasonable timeframe and in any event within 30 calendar days.

Win886 uses cookies and similar technologies to operate core Platform functions and to improve your experience. We do not use advertising cookies, cross-site tracking pixels or third-party audience profiling tools.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform, including the ability to log in. Win886 does not operate a cookie consent banner for essential and security cookies as these are strictly necessary for Platform operation.

Win886 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration and destruction. Our key technical and organisational security measures include:

• TLS/SSL encryption on all data transmitted between your device and Win886 servers.
• AES-256 encryption at rest for sensitive personal data stored in our databases, including KYC document images and financial account identifiers.
• Role-based access control (RBAC) ensuring that Win886 personnel can only access personal data required for their specific job function.
• Multi-factor authentication (MFA) required for all administrative access to systems containing personal data.
• Intrusion detection systems (IDS) and continuous security monitoring to identify and respond to anomalous access patterns.
• Regular security assessments and penetration testing by qualified security professionals.
• Data breach response procedures including notification protocols in the event of a confirmed breach that poses a risk to users.

Notwithstanding these measures, no transmission over the internet or electronic storage method is 100% secure. Win886 cannot guarantee absolute security and users are encouraged to use strong, unique passwords and to enable account two-factor authentication where available.

The Win886 Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the applicable operator licence jurisdiction. Win886 does not knowingly collect, store or process personal data from individuals below the minimum eligible age.

All users are required to complete age verification as part of the KYC process. If Win886 discovers that personal data has been collected from an underage individual, the account will be immediately suspended, collected data will be deleted and any associated funds will be held pending investigation.

Win886 operates internationally and your personal data may be processed in countries outside the jurisdiction in which you reside, including countries where the Win886 operator's infrastructure and third-party processors are based. Such countries may not have data protection laws equivalent to those of your home jurisdiction.

Where personal data is transferred internationally, Win886 ensures that appropriate safeguards are in place, which may include contractual data processing agreements incorporating standard data protection clauses, or transfers to jurisdictions that provide an adequate level of data protection as recognised by relevant authorities.

By using the Win886 Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the protections outlined above.

Win886 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform functionality. Material changes — that is, changes that materially affect how your personal data is processed or your rights in relation to it — will be communicated to registered users by email at least 14 days before they take effect.

Non-material changes, such as typographical corrections or clarifications that do not alter processing practices, will be reflected by updating the "Last updated" date at the top of this page without prior individual notice.

Your continued use of the Win886 Platform after the effective date of any change to this Policy constitutes your acceptance of the revised Policy. If you do not accept any revision, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by Win886, please contact our Data Protection team using the details below:

For responsible gambling limit-setting, self-exclusion or account closure requests, please refer to our dedicated Responsible Gambling page which contains dedicated guidance and tooling for those matters.