Privacy Policy – How w888 Protects Your Data in Pakistan

1Introduction

This Privacy Policy explains how w888 collects, uses, stores, shares, and protects personal information provided by or about players who use the w888 platform — whether accessed via the website or the mobile application. This policy applies to all products and services offered by w888, including sports betting, live casino, online slots, PSL betting, live cricket scores, and any associated account or support functions.

At w888, we understand that Pakistani players entrust us with sensitive personal and financial information when they register and use the platform. That trust is not something we take lightly. We are committed to handling your data with care, keeping it secure, and being fully transparent about how it is used. That commitment is what this Privacy Policy is built on.

By registering an account or using the w888 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you should not use the w888 platform. If you have already registered, you may contact the support team to request account closure and data deletion in accordance with Section 9.

2What Personal Data We Collect

w888 collects only the personal data that is necessary to provide you with a functioning, secure, and compliant account. The categories of data we collect include:

w888 does not collect biometric data, real-time location data beyond what is provided voluntarily, or data about your browsing behaviour on third-party websites outside of the w888 platform.

3How We Collect Your Data

w888 collects personal data through the following means:

• Direct Registration: When you create a w888 account, you provide your name, date of birth, contact details, and other account information directly through the registration form. You are responsible for the accuracy of this information.
• Account Activity: As you use w888 — placing bets, making deposits, playing casino games, or contacting support — the platform records your activity as part of normal account operation. This includes your betting history, balance changes, and session data.
• Payment Processing: When you make a deposit or request a withdrawal, transaction data is exchanged between w888 and the relevant payment provider (such as Easypaisa, JazzCash, NayaPay, SadaPay, bank, or card network). w888 receives confirmation and reference data from these transactions.
• Device and Browser Signals: The w888 platform automatically receives technical information from your device when you connect — including your IP address, device type, operating system, and browser version. This is standard practice for any web or mobile platform and is used for security and performance purposes.
• Cookies and Similar Technologies: w888 uses cookies and local storage to maintain session state, remember your preferences, and analyse platform usage. See Section 8 for full details on cookies.
• Identity Verification (KYC): When w888 requires identity verification — for example, before processing a large withdrawal or where unusual activity is detected — you may be asked to provide a copy of a government-issued identity document such as your CNIC. These documents are processed securely and used solely for verification purposes.

4How We Use Your Personal Data

w888 uses your personal data for the following specific purposes. We only process data where we have a valid legal basis for doing so — primarily the performance of your account contract, our legal obligations, and our legitimate interests in operating the platform securely.

• Account Management: To create, maintain, and operate your w888 account — processing logins, balance updates, and account settings.
• Payment Processing: To receive deposits in PKR and send withdrawals to your registered payment methods, including verifying transaction accuracy and reconciling your account balance.
• Identity and Age Verification: To confirm that you are 18 or over and that the identity you have provided is genuine, in compliance with applicable requirements.
• Fraud Prevention and Security: To detect unusual account activity, prevent unauthorised access, identify potential money laundering, and protect both the player and the platform from abuse.
• Customer Support: To respond to your queries, resolve disputes, and follow up on complaints. Support interactions are logged for quality assurance purposes.
• Responsible Gaming: To monitor your betting patterns for signs of problematic behaviour, enforce any limits or restrictions you have set, and fulfil our obligations around player welfare.
• Platform Improvement: To analyse how players use the w888 platform — which features are most used, where friction occurs, what pages are visited most — and use these insights to improve the product.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about w888. You can opt out of marketing communications at any time.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.

5Who We Share Your Data With

w888 does not sell your personal data. We share it only in the following limited and controlled circumstances:

• Payment Processors: When you make a deposit or request a withdrawal, the necessary transaction data is shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card network. These providers process data in accordance with their own privacy policies and applicable financial regulations.
• Identity Verification Services: Where KYC verification is required, document images or data extracts may be shared with third-party identity verification service providers who operate under strict data processing agreements with w888.
• Platform Technology Providers: The w888 platform relies on infrastructure partners — cloud hosting, analytics platforms, customer support software — who may process your data as data processors acting on w888's instructions. These providers are bound by contractual data protection obligations.
• Regulatory and Legal Authorities: w888 will disclose personal data to competent authorities — regulatory bodies, law enforcement, or courts — when required by applicable law or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of w888, its players, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of w888 or its assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified before their data is transferred and becomes subject to a different privacy policy.

6Data Retention

w888 retains your personal data for as long as your account is active and for a reasonable period afterwards to meet our legal, financial, and regulatory obligations. The general retention principles that apply at w888 are as follows:

• Active Accounts: While your w888 account is open and active, your personal and account data is retained in full. This includes your registration data, betting history, transaction records, and support communications.
• Closed Accounts: After an account is closed — whether by the player or by w888 — core identity and transaction data is retained for a minimum of five years. This reflects standard financial record-keeping obligations.
• Self-Excluded Players: Where a player has self-excluded, w888 retains sufficient data to recognise and enforce the exclusion should the player attempt to re-register. This is a player protection measure, not a data collection exercise.
• Marketing Data: If you have opted out of marketing communications, your opt-out preference is retained so that we do not inadvertently contact you again.
• Support Records: Customer support chat and email records are retained for two years for quality assurance and dispute resolution purposes.

When data is no longer required and retention obligations have been met, w888 securely deletes or anonymises it in accordance with our internal data lifecycle management procedures.

7Security Measures

w888 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the w888 servers is encrypted using TLS 1.3 / 256-bit SSL. This includes login credentials, payment data, and all account API communications.
• Encryption at Rest: Sensitive stored data — including password hashes, financial identifiers, and identity documents — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to player data within w888's internal systems is restricted to authorised personnel on a need-to-know basis. All internal data access is logged and audited.
• Two-Factor Authentication: w888 supports two-factor authentication (2FA) for player accounts. We strongly recommend all players enable 2FA through their account security settings.
• Fraud Monitoring: Automated systems monitor all account activity for anomalous patterns indicative of fraud, account takeover, or money laundering. Flagged activity is reviewed by the w888 security team.
• Penetration Testing: The w888 platform undergoes regular security assessments by independent specialists to identify and remediate vulnerabilities before they can be exploited.

While w888 takes all reasonable precautions to protect your data, no system is 100% immune to security incidents. In the unlikely event of a breach that affects your personal data, w888 will notify affected players promptly and take all necessary steps to contain and remediate the incident.

8Cookies & Tracking Technologies

w888 uses cookies and similar local storage technologies to make the platform work properly and to help us understand how players use it. The following categories of cookies are used:

Most modern browsers allow you to control or delete cookies through their privacy settings. Please note that disabling non-essential cookies may affect some elements of your w888 experience. For guidance on managing cookies on your specific browser or device, refer to your browser's help documentation.

9Your Data Rights

As a w888 player, you have rights over your personal data. These rights can be exercised by contacting the w888 support team at any time. w888 will respond to all data rights requests within a reasonable timeframe and will not charge a fee for standard requests.

To exercise any of these rights, contact the w888 support team via live chat or email at support@w888-khelo.com. We will acknowledge your request within 48 hours and complete it within 30 days. Where a request is complex or voluminous, we may extend this timeframe by a further 30 days and will notify you if this is the case.

10Minors & Under-18 Protection

w888 does not knowingly collect personal data from any individual under the age of 18. The platform is strictly intended for adults only. If w888 discovers that personal data has been collected from a person under 18 — through misrepresentation during registration or any other means — that account will be closed immediately, all associated data will be deleted to the extent legally permitted, and any deposits or winnings will be returned to the original payment method after deducting any losses that occurred during the period of underage use.

Parents and guardians should be aware that minors may attempt to access online gambling platforms. We recommend the use of parental control software on shared devices to prevent access to the w888 platform by persons under 18. If you suspect that a minor in your household has created a w888 account, contact the support team immediately so the account can be investigated and closed.

11Updates to This Privacy Policy

w888 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, or evolving legal and regulatory requirements. When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via email or through a prominent notice on the platform, with reasonable advance notice before the changes take effect.

Non-material changes — such as clarifications to existing text, corrections of typographical errors, or minor structural reorganisation that does not alter the substance of any section — may be made without specific prior notification, beyond updating the "Last Updated" date at the top of this page. We recommend that players review this Privacy Policy periodically to stay informed of how w888 handles their data.

Your continued use of the w888 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any change, you should stop using the platform and contact the support team to request account closure and data handling in accordance with Section 9.

12Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the w888 data team using any of the following channels:

• Live Chat: Available 24/7 from within the w888 app or website. Ask to speak to a member of the data or compliance team.
• Email: support@w888-khelo.com — for privacy-specific queries, please include the subject line "Privacy Request" so we can route your message directly to the appropriate team.
• Response Time: All privacy-related queries and data rights requests will receive an acknowledgement within 48 hours. Resolution timelines depend on the nature of the request but will not exceed 30 days for standard requests.