By creating an account and using win222, you confirm that you have read and understood this Privacy Policy. It should be read alongside our Terms and Conditions. If you have questions about how your data is handled, contact our data team at the address in Section 14 before registering.
1About This Privacy Policy
This Privacy Policy applies to all personal data processed by win222 in connection with the operation of the online gaming platform at win222.im ("the Platform"). It covers all players who register an account, visit the Platform without registering, or interact with win222 through any channel including email and live chat support.
win222 acts as the data controller for the personal information you provide and for the data we generate about your use of the Platform. As data controller, win222 determines the purposes for which your personal data is processed and is responsible for handling it in accordance with applicable data protection standards.
This policy is written in plain English so that Pakistani players can understand it without legal training. If something is unclear, contact us directly using the details in Section 14 — our data team will respond in plain language.
2Personal Data We Collect
win222 collects different categories of personal data depending on how you interact with the Platform. The table below summarises the main categories:
win222 does not collect sensitive data categories such as racial or ethnic origin, religious beliefs, health information or biometric data beyond what is strictly necessary for identity verification purposes.
3How We Collect Your Data
win222 collects personal data through several channels:
- Directly from you — when you register an account, make a deposit, complete KYC verification, submit a support request, or otherwise interact with win222's team or platform.
- Automatically — when you access the win222 platform, technical data including your IP address, device information, browser type and session timestamps are logged automatically by our servers and analytics systems. This happens whether or not you are logged in.
- From payment processors — when you complete a payment through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or a card provider, those processors share transaction confirmation data (reference numbers, amounts, timestamps) with win222. They do not share full account credentials or card numbers with us.
- From identity verification services — win222 may use third-party age and identity verification services to confirm the details you provide during KYC. These services cross-reference your submitted data against official databases and return a verification result to win222.
- From fraud prevention systems — win222 uses automated tools that generate risk scores based on transaction patterns, device fingerprints and account behaviour. These scores help detect fraud and multi-account violations.
4Why We Use Your Data — Purposes
win222 processes your personal data only for the purposes described below. We do not use your data for purposes that are incompatible with those listed here without first obtaining your explicit consent.
- Account Management: To create, maintain and manage your win222 account, process your deposits and withdrawals, and deliver the gaming services you have signed up for.
- Identity Verification (KYC): To confirm that you are who you say you are, that you are 18 or over, and that you are not operating multiple accounts. This is a legal and operational requirement.
- Payment Processing: To initiate, record and confirm your deposits and withdrawals in PKR via your chosen payment method. Win222 retains transaction records for financial audit and dispute resolution purposes.
- Fraud and Security: To detect and prevent fraud, money laundering, multi-account violations, bonus abuse and other prohibited conduct as defined in the Terms and Conditions.
- Responsible Gaming: To monitor gaming patterns for signs of problem gambling, apply deposit limits and self-exclusion instructions, and fulfil our responsible gaming obligations.
- Customer Support: To respond to your queries, investigate disputes, review live game session recordings when relevant, and maintain a record of our communications with you.
- Marketing Communications: Where you have opted in, to send you information about promotions, bonuses and new games available on win222. You may opt out at any time by contacting support or using the unsubscribe link in any marketing email.
- Platform Improvement: To analyse aggregate, anonymised usage data to improve the win222 platform's performance, navigation, game selection and overall player experience.
- Legal Compliance: To comply with applicable laws and cooperate with regulatory authorities, law enforcement agencies and courts when legally required to do so.
5Legal Basis for Processing
win222 relies on the following legal bases to process your personal data:
- Contractual Necessity: Processing your identity data, account data, financial data and gaming data is necessary to perform the contract between you and win222 — i.e. to provide the gaming services you signed up for. Without this processing, win222 cannot operate your account.
- Legal Obligation: Processing for KYC, age verification, anti-money laundering checks and financial record-keeping is required by applicable law. win222 has no discretion to waive these requirements.
- Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming monitoring and platform analytics is carried out on the basis of win222's legitimate interests in operating a safe and compliant platform. We balance these interests against your privacy rights before relying on this basis.
- Consent: Processing for marketing communications is carried out only where you have given explicit consent. You may withdraw this consent at any time.
6Payment Data — How win222 Handles It
Payment data deserves its own section because it is the most sensitive category of information that win222 processes, and Pakistani players understandably want to know exactly how it is handled.
What win222 stores: win222 retains transaction records — amounts, timestamps, payment method type, and transaction reference numbers assigned by the payment processor. These records are necessary for withdrawal processing, dispute resolution and financial auditing. They are retained for the period described in Section 9.
What win222 does not store: win222 does not store your full Easypaisa or JazzCash account number, your card number, your card CVV, or your bank account details beyond what is required by your payment processor to initiate transactions. Full payment credentials are processed exclusively by PCI DSS-compliant payment processors — they never pass through win222's own servers in their complete form.
Easypaisa and JazzCash specifically: When you authorise a deposit via Easypaisa or JazzCash, you authenticate the transaction within that app. win222 receives a transaction confirmation and reference number, not your mobile wallet credentials. win222 will never ask for your Easypaisa or JazzCash PIN or password — anyone claiming to be win222 support and asking for these details should be reported immediately.
win222 will never contact you and ask for your payment app PIN, OTP, password, or full card number through any channel — not via email, SMS, live chat or phone. If you receive such a request, treat it as fraudulent and do not respond.
7Who win222 Shares Your Data With
win222 does not sell your personal data. We share it only where necessary and only with the categories of recipient listed below, each of whom is bound by contractual data protection obligations:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard acquiring banks receive the transaction data required to process your deposits and withdrawals. They operate under their own privacy frameworks in addition to their agreements with win222.
- Identity Verification Providers: Third-party KYC services receive the identity documents you submit during verification. These providers use your data only to perform the verification check and confirm the result to win222.
- Fraud Prevention Services: Automated fraud scoring tools and shared fraud prevention networks may receive device and behavioural data in anonymised or pseudonymised form. These services help win222 detect multi-accounting and financial crime.
- Technology and Hosting Providers: win222's server infrastructure, database management and platform security services are provided by third-party technology companies. These providers have access to data only to the extent necessary to provide their services and are bound by strict data processing agreements.
- Game Software Providers: Some game providers may receive the minimum data necessary to authenticate your game session and record its outcome. They do not receive your payment details or identity documents.
- Legal and Regulatory Authorities: win222 will disclose personal data to government authorities, law enforcement agencies or courts when required to do so by applicable law. This includes anti-money laundering reporting obligations.
win222 does not share your data with social media platforms, advertising networks, data brokers or any entity whose purpose is to profile you for marketing to third parties.
8Cookies and Tracking Technologies
win222 uses cookies and similar tracking technologies when you access the Platform. A cookie is a small text file stored on your device by your browser at the instruction of the website you are visiting.
win222 uses the following categories of cookies:
- Strictly Necessary Cookies: These are required for the Platform to function. They manage your login session, maintain your game state, and enable secure communication with win222's servers. You cannot opt out of these cookies without also being unable to use the Platform.
- Functional Cookies: These remember preferences you have set — such as your preferred language or the last table you visited — so you do not have to reconfigure them on every visit.
- Analytics Cookies: These collect anonymised data about how players use the Platform — which pages are visited most, how long players stay on each section, and where navigation improvements might be made. This data is aggregated and does not identify individual players.
- Security Cookies: These are used to detect and mitigate security threats including login attempts from unusual locations and automated bot activity.
win222 does not use third-party advertising cookies that track your behaviour across other websites for the purpose of serving you advertisements elsewhere on the internet.
9How Long win222 Keeps Your Data
win222 retains personal data for the minimum period necessary to fulfil the purposes described in this policy, subject to legal retention obligations. The following retention periods apply:
- Account and Identity Data: Retained for the lifetime of your win222 account plus a minimum of 5 years following permanent account closure, to meet financial record-keeping and anti-money laundering obligations.
- Transaction Records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction. This period may be extended if a transaction is subject to investigation.
- KYC Documents: Identity verification documents are retained for 5 years following account closure or the last date of account activity, whichever is later.
- Gaming Session Data: Detailed game session logs are retained for 12 months from the session date. Aggregate gaming history records are retained for the lifetime of the account.
- Support Communications: Live chat transcripts and support emails are retained for 2 years from the date of the communication.
- Marketing Consent Records: Where you have given consent to receive marketing communications, a record of that consent is retained for as long as marketing is sent and for 2 years thereafter.
At the end of each retention period, data is securely deleted or anonymised. Anonymised data — which cannot identify you individually — may be retained indefinitely for statistical analysis and platform improvement purposes.
10How We Keep Your Data Secure
win222 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and win222's servers is encrypted using industry-standard transport layer security. This applies to login, game sessions, payment processing and support communications.
- Access Controls: Access to personal data within win222 is restricted to staff who require it to perform their specific job functions. Access is authenticated and logged. No member of win222's team has routine access to player payment credentials.
- Infrastructure Security: win222's servers are hosted in data centres with physical security controls, redundant connectivity and regular third-party security audits.
- Two-Factor Authentication: New device logins on win222 require SMS OTP verification, adding a second layer of protection against unauthorised access even if your password is compromised.
- Penetration Testing: win222 conducts regular third-party penetration tests of its platform infrastructure to identify and address security vulnerabilities before they can be exploited.
- Data Breach Response: In the event of a data breach that is likely to result in risk to players, win222 will notify affected players and relevant authorities promptly in accordance with applicable law.
No internet platform is 100% immune to security incidents. win222 takes all reasonable precautions to protect your data, but we encourage you to use a strong, unique password for your win222 account and to enable SMS verification on every new device.
11Your Data Rights
As a player registered with win222, you have the following rights over your personal data. To exercise any of these rights, contact our data team using the details in Section 14.
Right of Access
You may request a copy of all personal data win222 holds about you. We will provide it within 30 days of your request in a readable format.
Right to Rectification
If any data win222 holds about you is incorrect or out of date, you may request that it be corrected. We will review and update the record within 14 days.
Right to Erasure
You may request deletion of your personal data. Note that legal retention obligations (Section 9) may prevent full deletion of certain records such as transaction logs.
Right to Restriction
You may ask win222 to pause processing of your data in certain circumstances — for example, if you contest the accuracy of the data while we investigate.
Right to Data Portability
You may request your data in a machine-readable format where technically feasible, so you can transfer it to another service if you choose.
Right to Object
You may object to processing of your data for marketing purposes at any time. You may also object to processing based on legitimate interests — win222 will review each objection on its merits.
12Children's Privacy
win222 is strictly for adults aged 18 and over. win222 does not knowingly collect personal data from any person under the age of 18. Age verification is applied at registration and again during KYC checks.
If win222 identifies that an account has been created by a person under 18, the account will be closed immediately, all deposits will be returned where possible to the originating payment method, and any winnings generated during the underage period will be forfeited.
If you are a parent or guardian and believe a minor may have registered at win222 using your payment details or mobile number, contact our support team immediately at support@win222.im. We will investigate and take appropriate action as a priority.
13Updates to This Privacy Policy
win222 reviews this Privacy Policy periodically and updates it when our data processing practices change, when new legal obligations apply, or when we add new features to the Platform that affect how player data is handled.
When a material change is made — meaning a change that significantly affects your rights or how your data is used — win222 will notify registered players via email to the address on file and via an on-platform notification before the change takes effect. The "Last Updated" date at the top of this page is revised with each update.
Minor updates — such as typographical corrections, clarifications that do not alter the substance of any section, or addition of new data processor categories covered by existing purposes — may be made without individual notification. Continued use of win222 after any update to this policy constitutes your acknowledgment of the revised version.
Previous versions of this Privacy Policy are available on request by emailing our data team. We retain previous versions for a minimum of 3 years.
14Contact win222 About Your Privacy
For any questions about this Privacy Policy, to exercise any of your data rights, or to raise a concern about how win222 handles your personal data, you can reach our data team through the following channels:
- Email (Data Rights & Privacy): support@win222.im — include "Privacy Request" in your subject line so your message reaches the correct team. We aim to respond within 5 business days for privacy enquiries, and within 30 days for formal data rights requests.
- Live Chat: Available 24/7 from any page when logged into your win222 account. Live chat is suitable for general privacy questions. Formal data rights requests should be made by email so they can be tracked and responded to in writing.
- FAQ: Common questions about accounts, payments and data are answered on our FAQ page.
If you submit a data rights request, win222 will ask you to verify your identity before processing it — this is to protect you from someone else requesting your data fraudulently. Verification is typically done via the SMS OTP method associated with your registered mobile number.
This Privacy Policy was last reviewed and updated in July 2025. It supersedes all previous versions. The governing language is English (en-PK). In the event of any conflict with a translated summary, this English document prevails.