Data Protection

Privacy Policy
Win588 Data Practices

This Privacy Policy explains how Win588 collects, processes, stores and protects your personal data. It also sets out your rights as a data subject and how you can exercise them. Please read this document carefully before creating an account or using our services.

Last Updated: 1 January 2026
What We Collect

Registration details, identity documents, transaction records, device data and usage information collected during account use and KYC verification.

Why We Process It

To operate your account, process payments, comply with KYC and AML obligations, improve the platform and communicate service updates.

Your Rights

Access, correct, restrict, port or request deletion of your personal data. Withdraw marketing consent at any time via account settings or by contacting support.

How We Protect Data

SSL/TLS encryption, restricted staff access, secure data centres and regular security reviews protect your personal information from unauthorised access.

01 Introduction

Win588 (the "Company", "Operator", "we", "us" or "our") is committed to protecting the privacy and personal data of all users who access or use the Win588 platform at win588.cam (the "Platform") and the associated services it provides (collectively, the "Services").

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, with whom we may share it, how long we retain it, how we protect it, and the rights available to you as a data subject. It applies to all users of the Platform regardless of their geographic location, method of access (desktop, mobile browser or application) or account status (registered or unregistered visitor).

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, which are incorporated by reference. By creating an account, depositing funds or otherwise using the Services, you confirm that you have read and understood this Policy.

Notice for Pakistani Users: Win588 is not regulated by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani data protection authority. We process personal data in accordance with the laws of the jurisdiction governing our gaming licence. Nothing in this Policy constitutes legal advice applicable to Pakistan.

02 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Term Meaning
Personal Data Any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, location data, email address or any factors specific to that person's identity.
Processing Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
Controller Win588, which determines the purposes and means of processing Personal Data collected via the Platform.
Processor Any third-party entity that processes Personal Data on behalf of Win588 under a data processing agreement.
Consent Freely given, specific, informed and unambiguous agreement by the data subject to the processing of their Personal Data for one or more specified purposes.
KYC Know Your Customer — the identity and address verification process required before account withdrawals or high-value transactions are permitted.
Cookie A small text file placed on a user's device by the Platform for functional, analytical or marketing purposes.

03 Data We Collect

Win588 collects personal data through various interactions with the Platform. The categories and specific types of data collected are set out below.

3.1 Registration & Identity Data

When you create an account, we collect:

  • Full legal name and date of birth
  • Residential address (including city, province and postcode)
  • Email address and, where provided, mobile phone number
  • Username and encrypted password
  • Preferred account currency (e.g., PKR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and Know Your Customer obligations, we may collect:

  • Government-issued photo identification (e.g., CNIC for Pakistani residents)
  • Proof of residential address (utility bill, bank statement)
  • Payment method ownership documentation
  • Source of funds or source of wealth declarations where required
KYC documents are handled with strict access controls and used solely for verification and compliance purposes. They are not shared for marketing or sold to third parties.

3.3 Financial Transaction Data

We record all financial transactions on the Platform, including deposit amounts, withdrawal requests, payment method references, transaction timestamps and currency data. We store references to payment methods (e.g., e-wallet identifiers, partial account numbers) but do not store full card numbers or banking credentials.

3.4 Technical & Usage Data

When you access the Platform, we automatically collect:

  • IP address, browser type and version, operating system
  • Device type and unique device identifiers
  • Pages visited, session duration, features accessed and click-path data
  • Referring URL and exit page
  • Approximate geolocation derived from IP address

3.5 Communications Data

If you contact our support team via Live Chat or email, we retain records of those communications including timestamps, the nature of the enquiry and any resolution provided. This data is used to improve support quality and, where necessary, to investigate complaints.

3.6 Marketing Preferences

Where you have consented, we store your marketing preferences including the types of communications you have opted into and the channels through which you have agreed to receive them (e.g., email, platform notifications).

05 How We Use Your Data

Win588 uses the personal data we collect for the following purposes:

  • Account management: Creating, maintaining and securing your account; processing login authentication; enabling password resets.
  • Service delivery: Enabling access to games, sports betting markets and all other platform features associated with your account.
  • Payment processing: Processing deposits and withdrawals in accordance with the methods available in the live cashier; verifying payment method ownership; preventing fraudulent transactions.
  • KYC and compliance: Verifying your identity and age; conducting AML screening; maintaining records required by applicable regulations.
  • Responsible gambling: Monitoring for signs of problem gambling; enforcing self-exclusion requests; applying deposit, loss and session limits set by the user; responding to responsible gambling support requests.
  • Customer support: Responding to enquiries submitted via Live Chat or email; resolving account disputes; improving support quality based on interaction records.
  • Platform improvement: Analysing usage patterns and technical performance data to improve features, navigation and overall user experience.
  • Security and fraud prevention: Detecting and preventing unauthorised access, multi-accounting, bonus abuse, money laundering and other prohibited conduct described in the Terms & Conditions.
  • Marketing communications: Where you have given consent, sending promotional offers, bonus notifications and platform news via the channels you have selected. You may withdraw consent at any time.
  • Legal compliance: Complying with court orders, regulatory requests or lawful government authority directions, and exercising or defending legal claims.

06 Data Sharing & Disclosure

Win588 does not sell your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients under the circumstances described:

6.1 Service Providers (Processors)

We engage third-party processors to support platform operations, including payment processing partners, identity verification services, cloud infrastructure providers, customer support software providers and analytics platforms. All processors operate under contractual data processing agreements and may only use your data to provide the specific service for which they are engaged.

6.2 Game Content Providers

Some game providers may receive limited technical session data (e.g., session token, stake amount, game result) necessary to operate the game. No additional personal data is shared beyond what is necessary for game functionality and regulatory audit purposes.

6.3 Regulatory and Law Enforcement Authorities

Where required by applicable law, court order or regulatory obligation, Win588 may disclose personal data to competent authorities including law enforcement agencies, gaming regulators, financial intelligence units or tax authorities. We will notify you of such disclosures where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, sale of assets or corporate restructuring, your personal data may be transferred to a successor entity. You will be notified of any such transfer via a notice on the Platform or by email to your registered address prior to your data becoming subject to a different privacy policy.

Payment provider names mentioned on this platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are referenced as familiar Pakistani payment infrastructure only. Win588 does not share your personal data with these institutions for any purpose beyond what is strictly necessary for transaction processing where they are your chosen payment method — and only where they are available in the live cashier.

07 Cookies & Tracking Technologies

Win588 uses cookies and similar tracking technologies to operate the Platform and improve user experience. The categories of cookies we use are described below.

Cookie Type Purpose Can Be Disabled?
Strictly Necessary Required for the Platform to function — including session authentication, security tokens and load balancing. No — disabling would break platform functionality
Functional Remember your preferences such as language selection, odds format, currency display and responsible gambling tool settings. Yes — via browser settings; may affect experience
Analytical Aggregate usage data to understand how users navigate the Platform and identify areas for improvement. Yes — via cookie consent manager
Marketing Track promotional campaign effectiveness and, where consented, personalise promotional offers. Yes — withdraw consent at any time

You can manage cookie preferences through your browser settings or through the cookie consent tool available on the Platform. Note that disabling strictly necessary cookies will prevent core Platform functions from operating.

08 Data Retention

Win588 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The general retention principles are:

  • Active account data: Retained for the duration of the account relationship and for a period thereafter as required by the applicable gaming licence, typically a minimum of five (5) years post-account closure.
  • KYC documents: Retained for the period required by applicable AML regulations in the licensing jurisdiction, which is typically five (5) years from the date of verification or the date of last account activity, whichever is later.
  • Transaction records: Retained for a minimum of five (5) years for AML and financial audit purposes.
  • Support communications: Retained for a maximum of three (3) years unless they form part of an ongoing complaint or legal proceeding.
  • Marketing consent records: Retained for three (3) years from the date of last confirmed consent or until consent is withdrawn, whichever is earlier.
  • Technical and usage logs: Typically retained for thirteen (13) months for security and analytics purposes, then deleted or anonymised.

Where data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

09 Data Security

Win588 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

Encryption

All data transmitted between your device and the Win588 Platform is encrypted using SSL/TLS protocols. Sensitive data at rest is encrypted using industry-standard algorithms.

Access Controls

Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.

Security Reviews

The Platform undergoes regular security assessments and vulnerability testing. Known vulnerabilities are remediated according to a prioritised risk-based schedule.

Incident Response

Win588 maintains an incident response procedure to detect, contain and report personal data breaches in accordance with applicable regulatory obligations and notification timelines.

While Win588 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and reporting any suspected unauthorised access to our support team promptly.

10 Your Data Rights

Depending on the data protection laws applicable in your jurisdiction and the legal basis on which Win588 processes your data, you may have the following rights. To exercise any of these rights, contact our support team using the details in Section 14.

Right of Access

Request confirmation of whether Win588 holds personal data about you, and obtain a copy of that data along with information about how it is being processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data held about you. Certain data (e.g., name on KYC documents) may require re-verification before correction.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations that may prevent immediate deletion.

Right to Restriction

Request that Win588 suspends processing of your data in specified circumstances — for example, while accuracy is contested or while an objection is under review.

Right to Portability

Where processing is based on consent or contract performance, request that your personal data be provided in a structured, commonly used and machine-readable format.

Right to Object

Object to processing based on legitimate interests or direct marketing purposes. Where an objection to direct marketing is raised, we will cease processing promptly.

Win588 will respond to verifiable data rights requests within thirty (30) calendar days. Where requests are complex or numerous, this period may be extended by a further two (2) months with notice provided to you.

Please note that certain rights may be limited where Win588 is required to retain data for regulatory compliance, legal proceedings or fraud investigation purposes. We will explain any limitations when responding to your request.

11 Minors & Age Restriction

Win588 is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18 — or the higher minimum age required by the Operator's licence jurisdiction — and we do not permit such individuals to create accounts or use the Services.

Where Win588 discovers or has reason to believe that personal data has been collected from a minor, we will:

  • Immediately suspend the associated account pending investigation
  • Delete all personal data collected from or about the minor to the extent permissible by law
  • Report the matter to relevant authorities where required by applicable regulations
18+ Adults Only. Win588 employs mandatory age verification as part of the KYC process. Being 18 years of age does not make gambling lawful in Pakistan. Users are responsible for understanding applicable local law before participating in online gaming.

12 International Data Transfers

Win588 may transfer personal data to third-party processors or affiliate entities located in countries other than the country in which the data was originally collected. These transfers may include jurisdictions outside of Pakistan and may be to countries whose data protection laws differ from those applicable in your location.

Where personal data is transferred internationally, Win588 ensures that appropriate safeguards are in place, which may include:

  • Standard contractual clauses approved by a relevant data protection authority
  • Binding corporate rules where applicable to intra-group transfers
  • Transfers to countries recognised as providing an adequate level of data protection by the applicable supervisory authority

You may request further information about the specific safeguards applied to international data transfers by contacting us using the details in Section 14.

13 Policy Amendments

Win588 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify you by:

  • Posting a prominent notice on the Platform homepage or login page
  • Sending a notification to your registered email address
  • Updating the "Last Updated" date at the top of this Policy

Where changes involve new processing purposes or new categories of data, we will seek fresh consent from you where consent is the applicable legal basis. Your continued use of the Platform following notification of material changes constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically. Archived versions of previous policies are available on request.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data has been handled, please contact our support team:

Live Chat

Available 24/7 directly on the Win588 platform. Start a session via the chat icon. Responses to data rights queries may require identity verification before we can act on your request.

Email

For formal data rights requests and privacy complaints, please email: [email protected] (plain text only — not a clickable link).

Win588 aims to resolve all data rights requests and privacy complaints within the timeframes specified in Section 10. If you are unsatisfied with our response, you may have the right to escalate your complaint to a competent data protection supervisory authority, depending on the laws applicable in your jurisdiction.

Questions About Your Data?

Our support team is available 24/7 to help you understand your data rights, update your preferences or exercise any of the rights described in this Policy. You can also read our FAQ for common questions.

Back to Homepage Read the FAQ Terms & Conditions

🔞 Adults 18+ only — or the higher minimum required by the operator/license jurisdiction. Local laws may restrict gambling. Play responsibly.