This Privacy Policy explains what personal data 228win collects from registered players and visitors, how that data is used, who it may be shared with, how long it is retained, and what rights you have over your own information. 228win is committed to handling personal data responsibly and in accordance with internationally recognised data protection standards. Please read this document in full before registering an account or using any 228win service.
228win collects registration information, identity verification documents, financial transaction records, gameplay data, device information, and communication records. Only data necessary for lawful platform operation and regulatory compliance is collected.
Your data is used to operate your 228win account, process PKR deposits and withdrawals via JazzCash and EasyPaisa, verify your identity for KYC compliance, deliver customer support, detect fraud, and send relevant promotional communications where you have opted in.
228win shares data only with necessary third parties: licensed payment processors (JazzCash, EasyPaisa, HBL, UBL), game software providers, KYC verification services, and regulatory authorities where legally required. Your data is never sold to third parties.
228win employs 256-bit SSL encryption across all platform connections, access controls restricting data to authorised personnel only, encrypted storage for sensitive documents, and regular security assessments. Player data is never transmitted over unsecured channels.
228win retains personal data for as long as your account remains active plus any additional period required by applicable anti-money laundering and gaming regulations. After the applicable retention period, data is securely deleted or anonymised in accordance with our internal data lifecycle policy.
Registered 228win players have the right to access, correct, and in certain circumstances request deletion of their personal data. You may also object to specific processing activities or request data portability. All privacy rights requests are handled through the 228win support team.
228win is an internationally operated online casino and sports betting platform serving English-speaking players in Pakistan. The data controller responsible for personal data collected through the 228win website and platform is the internationally licensed gaming entity that operates 228win, details of which are published in the platform's licensing information section accessible from the site footer.
For the purposes of this Privacy Policy, references to "228win," "we," "us," or "our" refer to that operating entity in its capacity as data controller. References to "you" or "your" refer to any individual who accesses the 228win website, creates a registered player account, or interacts with any 228win service.
228win collects personal data through several channels: directly from players during the registration and KYC verification process, automatically through your use of the platform, and in some cases from trusted third-party identity verification providers. The categories of personal data collected are as follows:
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, gender, nationality | Registration & KYC verification |
| Contact Data | Email address, Pakistani mobile number, residential address | Registration |
| Verification Documents | CNIC scan or photograph, proof of address documents, payment method ownership evidence | KYC verification process |
| Financial Data | Deposit and withdrawal amounts, payment method identifiers (JazzCash, EasyPaisa, bank account last digits), transaction history | Cashier interactions |
| Gameplay Data | Games played, wagers placed, session duration, wins and losses, betting history, bonus usage | Active platform sessions |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | All platform visits |
| Communication Data | Live chat transcripts, support email content, complaint records | Support interactions |
| Marketing Preferences | Opt-in or opt-out status for promotional communications, preferred communication channel | Registration & account settings |
228win does not collect or store full payment card numbers. Where card-based payments are processed, this is handled entirely by the relevant licensed payment processor and 228win retains only truncated reference identifiers necessary for transaction reconciliation.
228win processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which 228win relies are as follows:
Where 228win relies on legitimate interests as a basis for processing, a balancing assessment is conducted to ensure that the processing does not disproportionately impact your privacy rights. You may request further information about any specific legitimate interests assessment by contacting the support team.
228win uses the personal data it collects for the following purposes:
The 228win website uses cookies and similar tracking technologies to operate certain platform functions, analyse usage patterns, and deliver a personalised experience. Cookies are small text files stored on your device when you visit the 228win website. The categories of cookies used are as follows:
You can control cookie settings through your browser preferences. Note that disabling certain cookie categories may impair the functionality of the 228win platform. 228win does not use third-party advertising cookies or sell cookie data to advertising networks.
228win does not sell, rent, or trade your personal data to any third party. Data is shared with third parties only in the following limited and controlled circumstances:
As an internationally operated platform, 228win may transfer personal data to countries outside of Pakistan in the course of its operations, including to the jurisdiction in which its licensing entity is incorporated and to the locations where its third-party service providers operate their infrastructure.
Where personal data is transferred internationally, 228win ensures that appropriate safeguards are in place to protect the data at the destination. These safeguards may include contractual data protection clauses, adherence to internationally recognised data transfer frameworks, or reliance on the adequacy of the destination jurisdiction's data protection regime as assessed by the relevant regulatory authority.
You may request information about the specific safeguards applied to international transfers of your data by contacting 228win support at the details provided in Section 14 of this policy.
228win implements a layered security framework to protect personal data against unauthorised access, loss, alteration, disclosure, and destruction. The specific technical and organisational measures employed include:
Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. Players are encouraged to use strong, unique passwords for their 228win account, to enable two-factor authentication where available, and to report any suspected security incidents to 228win support immediately.
228win retains personal data for the duration of a player's active account relationship and for the additional period required by applicable gaming regulations, anti-money laundering legislation, and financial record-keeping obligations. In practice this typically means that personal data associated with a registered 228win account is retained for a minimum of five years following account closure, consistent with standard AML retention requirements.
Specific retention periods by data category are as follows:
On expiry of the applicable retention period, personal data is either securely deleted from 228win's systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual.
Registered 228win players have the following rights in relation to their personal data, subject to applicable legal limitations and the requirements of 228win's regulatory obligations:
You may request a copy of all personal data that 228win holds about you. Requests are processed within 30 days of receipt.
If any personal data held by 228win is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the relevant correction details.
In certain circumstances, you may request deletion of your personal data. This right is subject to 228win's legal and regulatory retention obligations, which may require retention of certain data regardless of a deletion request.
You may request that 228win restrict the processing of your personal data in specific circumstances, such as while a rectification request is being resolved.
Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, machine-readable format suitable for transfer to another service provider.
You may object to processing based on legitimate interests, including profiling for marketing purposes. 228win will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the above rights, contact 228win's support team via live chat or at the email address provided in Section 14. 228win may ask you to verify your identity before processing a rights request. All requests are handled within 30 days; complex requests may require up to 60 days with notice provided to you.
The 228win platform is strictly intended for individuals who are 21 years of age or older. 228win does not knowingly collect personal data from individuals under the age of 21 and does not permit persons under 21 to register or access the platform.
Parents and guardians in Pakistan who believe their child may have accessed or attempted to access the 228win platform are encouraged to contact 228win support immediately. 228win takes underage access seriously and cooperates fully with any parental concern raised in good faith. We also encourage the use of parental control software where children have access to internet-connected devices in the household.
228win may send you promotional communications about bonuses, new game releases, platform updates, and special offers where you have explicitly opted in to receive marketing communications during registration or subsequently through your account settings. The legal basis for this processing is your consent.
You may withdraw your consent to marketing communications at any time by:
Withdrawal of consent for marketing communications does not affect your ability to use the 228win platform or receive transactional communications necessary for account operation, such as deposit confirmations, withdrawal notifications, and security alerts. These transactional communications are sent on the basis of contract performance and cannot be disabled while your account remains active.
228win reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform functionality. The effective date displayed at the top of this document reflects the date of the most recent revision.
Where changes to this Privacy Policy are material — meaning they significantly affect how 228win processes your personal data or affect your rights — 228win will notify registered players via email or an in-platform notification prior to the revised policy taking effect. Where changes are minor or administrative in nature, the updated policy will be published on this page without separate individual notification.
Your continued use of the 228win platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept the revised policy should contact support to request account closure and data handling in accordance with the original policy terms where legally permissible.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how 228win has handled your personal data, please contact the 228win data protection contact point through the following channels:
228win will acknowledge all formal privacy complaints within five business days and provide a substantive response within 30 days. Where a complaint requires extended investigation, 228win will notify you of the expected resolution timeline. If you are not satisfied with 228win's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority or gaming regulatory body under the terms of 228win's operating licence.
228win treats all privacy complaints seriously and is committed to resolving them fairly, consistently, and promptly in a manner that respects the rights and reasonable expectations of all players on the platform.
Ready to join Pakistan's dedicated online casino and sportsbook? Create your account and start playing securely today.
Create a 228win Account Read Our FAQ21+ Only. 228win is strictly available to players aged 21 years and above. Gambling involves financial risk. Please play responsibly. Visit our Responsible Gaming page for deposit limits, self-exclusion tools, and support resources available to Pakistani players.