688win Privacy Policy – Your Data, Protected

This Privacy Policy ("Policy") is issued by 688win ("688win", "we", "us", "our") and applies to all personal data collected from individuals ("you", "User", "Player") who access, browse, register on, or otherwise use the 688win platform at 688win.asia, including all associated subdomains, mobile interfaces, and communication channels operated by 688win.

At 688win, we take the protection of your personal information seriously. This is particularly important given the financial and identity information involved in operating a real-money online casino and sportsbook serving Pakistani players. We are committed to handling your personal data lawfully, transparently, and in strict accordance with our obligations under the data protection standards required by our international gaming licensing framework.

This Policy should be read alongside the 688win Terms & Conditions, which also contain provisions relevant to the use and protection of your account data. In the event of any conflict, the Terms & Conditions will prevail with respect to matters of account operation, while this Policy governs specifically the collection, storage, and processing of personal data.

For the purposes of applicable data protection law, 688win is the data controller in respect of personal data collected through the 688win platform. This means 688win determines the purposes and means by which your personal data is processed. 688win operates under an international gaming licensing framework that imposes specific obligations on how we collect, retain, and safeguard player data.

Where 688win engages third-party service providers — including payment processors, identity verification partners, and customer support platform providers — to process personal data on its behalf, those providers act as data processors under contractual obligations that require them to handle your data only in accordance with 688win's instructions and this Privacy Policy.

688win collects personal data through a number of channels and at different stages of your relationship with the platform. The categories of data we collect are as follows:

688win uses the personal data we collect solely for the following defined and legitimate purposes:

• Account Creation and Management: To create, maintain, and administer your 688win player account, including processing deposits and withdrawals, managing your PKR wallet balance, and providing access to all platform features.
• Identity Verification (KYC): To verify your identity and age in compliance with our licensing obligations and anti-money laundering (AML) requirements. This includes confirming that you are at least 21 years of age and that your stated identity matches your submitted documents.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, Raast, 1LINK, and Pakistani bank transfers, and to process withdrawal requests to your registered payment accounts.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multiple account creation, bonus abuse, money laundering, and other prohibited activities. This includes monitoring login patterns, device fingerprinting, and transaction behaviour analysis.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to administer responsible gaming tools including deposit limits, loss limits, session controls, and self-exclusion arrangements.
• Customer Support: To provide assistance via live chat, email, Messenger, and Viber, including maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Legal and Regulatory Compliance: To fulfil our obligations under our international gaming licensing framework, including reporting requirements, record retention obligations, and responding to lawful requests from regulatory or law enforcement authorities.
• Promotional Communications: To send you information about 688win bonuses, promotions, and platform updates — but only where you have provided explicit consent or where we have a legitimate interest in contacting existing account holders about relevant offers, and only via your registered mobile number or email.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve the 688win platform's performance, user experience, game selection, and payment infrastructure. This analysis does not involve the use of individually identified personal data.

688win processes your personal data only where a valid legal basis exists. The legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the 688win Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with our obligations under applicable international gaming licensing regulations, anti-money laundering laws, and other regulatory frameworks governing the operation of the 688win platform.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided such interests are not overridden by your rights and interests.
• Consent: Processing undertaken on the basis of your explicit consent — primarily in relation to direct marketing communications. You may withdraw consent to marketing communications at any time by contacting 688win support without affecting the lawfulness of processing carried out prior to withdrawal.

688win does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other licensed payment service providers involved in processing your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• KYC and Identity Verification Partners: Third-party providers engaged by 688win to conduct CNIC verification, age verification, and document authentication as required by our licensing framework.
• Technology and Infrastructure Providers: Cloud hosting, platform software, and security service providers who process data solely on 688win's instructions under contractual confidentiality obligations.
• Customer Support Platforms: Licensed customer relationship management platforms used to manage live chat, email, and messaging support interactions.
• Game Developers and Providers: Certified gaming content providers whose games are integrated into the 688win platform may receive anonymised session data for the purpose of game performance monitoring. Individually identifiable data is not shared with game providers.
• Regulatory and Law Enforcement Authorities: Where required by our licensing obligations or by a lawful order from a competent authority, 688win will disclose personal data as required. 688win will notify you of such a disclosure to the extent permitted by applicable law.

688win uses cookies and similar tracking technologies on its platform to support essential functionality, improve user experience, and conduct internal analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including session management, login state persistence, and security token handling. These cannot be disabled without preventing access to 688win's core features.
• Performance and Analytics Cookies: Used to collect anonymised data about how players interact with the 688win platform — including pages visited, time spent, and navigation paths — to improve platform design and performance. This data does not identify individual users.
• Preference Cookies: Store user preferences such as language selection and display settings to personalise your experience during and between sessions.
• Security Cookies: Used for fraud prevention and bot detection purposes, including IP reputation scoring and device fingerprinting to protect the security of accounts and transactions.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 688win platform, including the ability to maintain a logged-in session or process payments correctly.

688win retains personal data for the period necessary to fulfil the purposes for which it was collected, and to meet our legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, as required by our anti-money laundering compliance obligations.
• KYC and Identity Verification Documents: Retained for a minimum of 5 years following the end of the business relationship, in compliance with international AML/CFT record-keeping requirements.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years for regulatory and dispute resolution purposes.
• Gaming Activity Records: Betting history, game logs, and bonus transaction records are retained for a minimum of 3 years following account closure.
• Support Communications: Live chat transcripts, email correspondence, and support ticket records are retained for a minimum of 3 years for dispute resolution and quality assurance purposes.
• Technical and Security Logs: IP address logs and security event records are retained for a minimum of 12 months and up to 3 years where relevant to an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be associated with an identifiable individual.

688win implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and 688win's servers is encrypted using industry-standard TLS protocols, equivalent to the encryption standards used by Pakistani commercial banks.
• At-Rest Encryption: Personal data and financial records stored in 688win's systems are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 688win's systems is strictly controlled on a need-to-know basis. Staff members can access only the data categories required for their specific role, and all access is logged and audited.
• Two-Factor Authentication: The 688win platform requires OTP-based two-factor authentication for new device logins, reducing the risk of unauthorised account access even in the event of credential compromise.
• Penetration Testing: 688win's platform infrastructure is subject to regular security assessments and penetration tests conducted by qualified independent security professionals.
• Incident Response: 688win maintains a documented data breach response procedure that includes immediate containment measures, notification of affected users, and reporting to relevant regulatory authorities in accordance with our licensing obligations.

688win operates an international platform and may, in the course of providing its services, transfer personal data to systems or processors located outside Pakistan. Such transfers may occur in connection with cloud infrastructure hosting, KYC verification services, payment processing networks, or licensed gaming software providers.

Where personal data is transferred internationally, 688win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under our licensing framework's data protection requirements. This may include standard contractual clauses, adequacy decisions, or the equivalent of binding corporate rules governing international data transfers within our service provider network.

688win will not transfer your personal data to jurisdictions that lack adequate data protection standards without first implementing appropriate protective mechanisms as required by applicable data protection obligations.

As a 688win account holder, you hold the following rights with respect to personal data that 688win processes about you. To exercise any of these rights, please contact 688win's support team through the live chat or by email at the address provided in Section 15 of this Policy:

• Right of Access (Subject Access Request): You may request a copy of all personal data 688win holds about you. 688win will respond to verified access requests within 30 calendar days.
• Right to Rectification: If personal data 688win holds about you is inaccurate, incomplete, or out of date, you have the right to request correction. Simple corrections (such as mobile number updates) are processed immediately through the account settings or support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw the consent on which processing was based; or (c) the data has been unlawfully processed. This right is subject to 688win's legal obligation to retain certain records for the periods specified in Section 8 above.
• Right to Restriction of Processing: You may request that 688win restrict the processing of your data in circumstances including where data accuracy is disputed or where you have objected to processing pending determination of that objection.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that 688win provide the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You may object to 688win's processing of your personal data where that processing is based on legitimate interests, including in relation to direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal date.

688win will not charge a fee for handling data rights requests submitted in good faith. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive.

688win is a real-money gambling platform strictly limited to adults aged 21 years and above. 688win does not knowingly collect, process, or store personal data from individuals under the age of 21, and does not permit persons under 21 to register accounts or access real-money gambling services on the platform under any circumstances.

If 688win becomes aware that personal data has been collected from an individual under the age of 21 — through a misrepresentation of age during registration or any other means — we will immediately suspend the associated account, delete all personal data associated with that account to the extent permitted by our anti-money laundering record-keeping obligations, and return any deposited funds through the original payment method.

688win may send you promotional communications about bonuses, new games, seasonal offers, and platform updates through the communication channels associated with your account — primarily SMS to your registered Pakistani mobile number and/or email, where applicable.

You may opt out of marketing communications at any time by:

• Contacting 688win's 24/7 live chat support and requesting to unsubscribe from marketing communications.
• Sending a written opt-out request to the support email address listed in Section 15 below.
• Updating your communication preferences through the account settings panel where this feature is available.

Opting out of marketing communications does not affect 688win's ability to send you transactional communications required for account operation — including OTP codes, deposit confirmations, withdrawal notifications, and mandatory regulatory notices.

Please note that if you are registered as a self-excluded player under the Responsible Gaming provisions, 688win will automatically suppress all marketing communications for the duration of your self-exclusion period and will not re-add you to marketing lists upon exclusion expiry without your explicit re-consent.

688win reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulatory requirements, or licensing obligations. The date of the most recent revision is displayed at the top of this document.

Where changes to this Policy are material — meaning they meaningfully affect how your personal data is processed or your rights as a data subject — 688win will notify registered account holders via their registered Pakistani mobile number (SMS) and/or notification within the account dashboard at least 7 days before the revised Policy takes effect.

Your continued use of the 688win platform following notification of any changes to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Privacy Policy, you must cease using the platform and may contact support to request account closure in accordance with the account closure provisions of the Terms & Conditions.

Prior versions of this Privacy Policy are available on request from 688win's support team for reference purposes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 688win holds about you, please contact our support team through any of the following channels. 688win's support team is available 24 hours a day, 7 days a week, in both English and Urdu:

• Live Chat: Available continuously through the 688win website. Average first response time: 3–5 minutes. Please state "Privacy Enquiry" at the start of your chat to be directed to the appropriate team member.
• Support Email: [email protected] — displayed as plain text, not a clickable link. Include "Privacy Policy Request" in your subject line for fastest routing.
• Messenger / Viber: Available as additional communication channels for Pakistani players who prefer mobile messaging.
• Response Time — Data Rights Requests: Formal data rights requests (access, rectification, erasure) will receive an acknowledgement within 72 hours and a substantive response within 30 calendar days of identity verification being completed.

For the purpose of data rights requests, 688win will need to verify your identity before processing the request to ensure that personal data is not disclosed to or acted upon on behalf of an unauthorised party. Verification will typically be conducted via the OTP mechanism associated with your registered Pakistani mobile number.