688win Privacy Policy – How We Handle Your Personal Data

This Privacy Policy ("Policy") explains how 688win ("we", "us", "688win", "the Platform") collects, processes, stores, and protects personal data about users ("you") of the 688win website at 688win.io, any associated mobile applications, and all casino, sports betting, and gaming services provided through the platform. 688win is committed to handling your personal data responsibly and transparently. We understand that Pakistani players — many of whom use mobile wallets like Easypaisa and JazzCash — share sensitive financial information with us, and we take that responsibility seriously. By registering a 688win account or using any part of the platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the 688win Terms and Conditions.

2. Personal Data We Collect

688win collects the minimum data necessary to operate the platform, verify your identity, process your transactions, and comply with our legal obligations. Below is a clear breakdown of what we collect and why.

2.1 Account Registration Data

• Mobile phone number (used as your primary account identifier and for security notifications)
• Password (stored in hashed, encrypted form — never in plain text)
• Date of birth (used to verify you are at least 18 years old)
• Full name (used for identity verification and payment matching)

2.2 Identity Verification Data (KYC)

• CNIC (Computerised National Identity Card) number and scan or photograph
• Passport copy (where provided as an alternative to CNIC)
• Proof of address (utility bill or bank statement, where required for enhanced verification)
• Selfie or live photo (where required to match identity document)

2.3 Payment & Transaction Data

• Easypaisa or JazzCash mobile number used for transactions
• NayaPay or SadaPay account details where applicable
• Bank account number and title (for IBFT withdrawals)
• Partial card details for Visa/Mastercard transactions (full card numbers are handled by our payment processor and never stored on 688win servers)
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers — all denominated in PKR

2.4 Gaming Activity Data

• Bet history, game play sessions, wagering amounts, and outcomes
• Casino game choices, sports markets accessed, betting patterns
• Bonus balances, wagering progress, and promotional participation

2.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and platform navigation data
• Cookie and similar tracking data (see Section 9)

2.6 Communications Data

• Content of live chat conversations with 688win support
• Email correspondence with the 688win support or compliance team
• Complaint records and their resolution

3. How We Collect Your Data

688win collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or respond to a promotional offer.
• Automatically through technology: When you browse the 688win website or use the app, technical data is collected automatically via cookies, server logs, and similar technologies. This includes your IP address, device information, and session activity.
• From payment processors: When you transact via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, our payment processing partners confirm transaction outcomes and share necessary reference data with 688win for account crediting and reconciliation.
• From identity verification services: Where 688win uses a third-party KYC partner to verify your CNIC or other documents, that partner shares verification outcomes and relevant data with 688win in connection with your account.
• From fraud prevention partners: Where fraud screening services flag activity linked to your device or account, we may receive data from those services to investigate and act on potential fraud.

4. How We Use Your Personal Data

688win uses your personal data only for the purposes listed below. We do not use it for anything outside this list without obtaining your separate consent.

5. Legal Basis for Processing

Every piece of personal data 688win processes has a legal basis. We rely on the following grounds:

• Contract performance: Processing necessary to deliver the services you have signed up for — account management, game access, payment processing, and withdrawal handling. Without this processing, 688win cannot provide the platform to you.
• Legal obligation: Processing required by law, including KYC identity verification, anti-money laundering checks, age verification (18+), and data retention required by financial regulators.
• Legitimate interests: Processing where 688win has a legitimate business interest that does not override your rights — including fraud prevention, platform security, responsible gaming monitoring, and improving the player experience.
• Consent: Where you have actively opted in to a specific use of your data — most relevantly, marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before that withdrawal.

6. Sharing Your Personal Data

688win does not sell your personal data to any third party for commercial marketing purposes. We share your data only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, and Visa/Mastercard processors receive the data necessary to execute your transactions. These processors handle payment data under their own privacy and security obligations.
• Identity verification providers: Where a third-party KYC service is used to verify your CNIC or other documents, your identity data is shared with that provider solely for the purpose of verification. Results are returned to 688win and the data is not retained by the provider for any other purpose.
• Fraud prevention and security services: Anonymised or pseudonymised data may be shared with fraud screening services to detect and prevent fraudulent activity, account takeover, and money laundering.
• Game software providers: When you play a game powered by Evolution Gaming, Pragmatic Play, Playtech, or another provider, your game session data is processed by that provider's servers. These providers are licensed and operate under their own data protection obligations.
• Legal and regulatory authorities: Where required by a valid court order, regulatory instruction, or law enforcement request, 688win will disclose relevant data. We will notify you of such disclosures where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of 688win's business, personal data held at the time of transfer may be included in the transferred assets. Affected users will be notified before their data becomes subject to a different privacy policy.

7. Data Retention

688win retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account and registration data: Retained for the lifetime of your 688win account plus a minimum of 5 years after account closure, to satisfy financial record-keeping and anti-money laundering requirements.
• KYC and identity documents: Retained for a minimum of 5 years after the last transaction on your account, as required by financial compliance obligations.
• Transaction records (PKR deposits and withdrawals): Retained for a minimum of 5 years in accordance with financial record-keeping requirements.
• Gaming activity data: Retained for the duration of your account and up to 3 years after account closure, to support responsible gaming monitoring and dispute resolution.
• Customer support communications: Retained for 2 years from the date of the interaction, or longer if related to an ongoing dispute or legal matter.
• Technical and device data: Retained for up to 12 months for platform security and fraud detection purposes.

When your data is no longer required, 688win securely deletes or anonymises it. Anonymised data — from which you cannot be identified — may be retained indefinitely for analytical purposes.

8. Data Security

688win takes the security of your personal data seriously. We implement the following technical and organisational measures to protect it against unauthorised access, loss, or disclosure:

• SSL/TLS encryption: All data transmitted between your device and the 688win platform — including login credentials, payment details, and personal information — is encrypted using industry-standard TLS protocols.
• Password hashing: Passwords are never stored in plain text. They are stored as one-way cryptographic hashes using a secure algorithm. Not even 688win staff can see your password.
• Access controls: Personal data is accessible only to 688win staff who need it to perform their roles. Access is role-restricted and logged. CNIC and KYC documents are subject to especially strict access controls.
• Infrastructure security: 688win's servers are hosted in secure data centres with physical and network security measures including firewalls, intrusion detection, and regular security audits.
• Payment security: Full card numbers for Visa/Mastercard transactions are handled exclusively by our PCI-DSS compliant payment processor and are never stored on 688win infrastructure.
• Fraud monitoring: Automated systems monitor account activity in real time for signs of compromise, unusual transaction patterns, or unauthorised access attempts.

No security system is entirely infallible. If 688win becomes aware of a security incident that affects your personal data and poses a risk to your rights, we will notify you without undue delay and take immediate steps to contain the incident and minimise its impact.

9. Cookies and Similar Technologies

688win uses cookies and similar technologies on the platform to ensure it works correctly, to improve your experience, and to gather analytical information. Here is a plain-language breakdown of the cookies we use:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preference, and support the payment flow. You cannot opt out of essential cookies and continue to use 688win.
• Analytics cookies: These help us understand how Pakistani players use the platform — which games are most popular, how players navigate the lobby, and where technical issues occur. Analytics data is aggregated and does not identify you individually.
• Preference cookies: These remember settings you have chosen, such as your preferred game category or notification preferences, so you don't have to reconfigure them every time you log in.
• Security cookies: These help 688win detect and prevent suspicious account activity, including login attempts from unusual devices or locations.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent some parts of 688win from working. Blocking analytics or preference cookies will not affect your ability to play or transact on the platform.

10. Marketing Communications

688win may send you marketing communications about new games, promotions, deposit bonuses, and platform features. We do this only where you have opted in to receiving such communications.

• Marketing communications may be sent via SMS to your registered mobile number, or by email if you have provided an email address and opted in.
• You can opt out of marketing communications at any time. Each SMS or email will include an opt-out instruction. You can also update your marketing preferences in your account settings or by contacting 688win support.
• Opting out of marketing communications does not affect the transactional communications 688win sends as part of its service — such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming reminders. These are sent regardless of marketing preferences because they are part of the service itself.
• 688win does not share your contact details with third-party marketers for their own promotional purposes.

11. Your Rights Over Your Personal Data

As a 688win user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@688win.io with your registered mobile number and a description of your request. We will respond within 30 days.

12. Children and Minors

688win is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. Age verification is a mandatory step in the withdrawal process, and accounts found to belong to minors are closed immediately with funds returned to source where possible.

If you are a parent or guardian and believe that a minor has registered on 688win using your details or their own, please contact us immediately at support@688win.io. We will investigate and close the account without delay.

688win encourages parents to use internet filtering and parental control tools on shared or family devices to prevent minors from accessing online gaming platforms. Details of available tools are referenced in the Responsible Gaming section of the platform.

13. Changes to This Privacy Policy

688win may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform operations. When we make material changes — those that meaningfully affect how we use your personal data — we will notify registered users via the platform and, where available, by SMS or email.

The date at the top of this page reflects when the Policy was last updated. We encourage you to review this Policy periodically. Your continued use of 688win after an update takes effect constitutes your acceptance of the revised Policy.

14. Contact Us & Complaints

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how 688win has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the 688win platform. Fastest channel for urgent queries.
• Email: support@688win.io — for written data rights requests, privacy complaints, and formal correspondence. Please include your registered mobile number and a clear description of your request.

688win will acknowledge your request within 5 business days and provide a full response within 30 days. If you are not satisfied with our response to a privacy complaint, you have the right to escalate to the relevant data protection authority in your jurisdiction.