win399 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for your personal information is win399, operating the online gaming platform accessible at win399.pro. All references to "win399", "we", "us", or "our" in this document refer to win399 in its capacity as the entity that determines the purposes and means of processing your personal data.

win399 is the primary point of contact for all data protection matters, privacy requests, and enquiries relating to the collection and use of personal data in connection with your win399 account and gaming activity. You can reach the win399 data team via the contact details provided in Section 14 of this Policy.

win399 collects the following categories of personal data from players in Pakistan during the registration, verification, gaming, and support processes:

win399 does not collect sensitive personal data — such as biometric data beyond basic identity verification liveness checks, health records, or religious affiliation — unless a specific regulatory or legal obligation requires it and you have been separately informed.

win399 collects personal data through the following channels and mechanisms:

• Direct registration: Data you enter into the win399 registration form, including your name, date of birth, email address, and Pakistan mobile number.
• KYC verification submissions: Documents and images you upload during the win399 identity verification process, including CNIC scans and selfie captures.
• Payment transactions: Information generated when you initiate a PKR deposit or withdrawal via Easypaisa, JazzCash, Raast, a major Pakistan bank, or USDT TRC20.
• Platform usage: Technical and behavioural data collected automatically as you navigate and play on win399, including session logs, game interaction records, and device fingerprint data used for fraud prevention.
• Customer support interactions: Information you share with win399 support agents during live chat, email correspondence, or any other communication channel.
• Cookies and similar technologies: Data collected via cookies, session storage, and tracking pixels as described in Section 8 of this Policy.
• Third-party verification services: Identity and age verification data received from third-party KYC partners engaged by win399 to authenticate player identities in accordance with applicable compliance standards.

win399 processes your personal data exclusively for the following defined purposes:

• Account creation and management: To register your win399 account, authenticate your win399 Login credentials, manage your account settings, and communicate account-related notifications to your registered Pakistan contact details.
• Identity and age verification (KYC): To verify that you are who you say you are, that you are at least 18 years of age, and that your account complies with applicable player eligibility requirements before processing deposits or withdrawals.
• PKR payment processing: To process your deposits and withdrawals in Pakistani Rupees via your chosen payment method, including reconciling transaction records against your win399 balance and communicating payment status updates.
• Gaming service delivery: To provide access to win399's live casino tables, Jackpot Slots, Turbo Games, and Cockfighting arena, and to record your gaming activity accurately for balance management, dispute resolution, and responsible gaming monitoring purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the win399 Terms & Conditions.
• Responsible gaming compliance: To monitor gaming patterns, enforce deposit and loss limits set by you, implement self-exclusion periods, and identify potentially harmful gaming behaviour in order to fulfil win399's responsible gaming obligations.
• Legal and regulatory compliance: To meet win399's obligations under applicable anti-money laundering (AML) frameworks, know-your-customer (KYC) standards, and other legal requirements, including responding to lawful requests from enforcement or regulatory authorities.
• Customer support: To respond to your support queries, resolve account issues, and maintain records of support communications for quality assurance and dispute resolution purposes.
• Marketing communications (consent-based only): To send you promotional offers, new game announcements, and bonus notifications — but only where you have provided explicit consent. You may withdraw this consent at any time through your win399 account communication settings.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve win399's platform performance, user experience, and product offering for Pakistan players.

win399 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your win399 account, process your PKR transactions, and deliver the gaming services you have requested falls under the performance of the contract between you and win399.
• Legal obligation: Processing required to comply with KYC verification standards, AML regulations, and other applicable legal and regulatory requirements is carried out to fulfil legal obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform performance analytics is carried out on the basis of win399's legitimate interests, provided such processing does not override your fundamental privacy rights.
• Consent: Processing for marketing communications, optional personalisation features, and non-essential cookies is carried out only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

win399 does not sell your personal data to any third party. win399 shares personal data only in the following limited and controlled circumstances:

• Payment processors: win399 shares the minimum necessary data with PKR payment processing partners — including Easypaisa, JazzCash, Raast, and major Pakistan banks — strictly for the purpose of processing your deposit and withdrawal transactions. These partners process data under their own privacy policies and applicable financial regulation.
• KYC and identity verification partners: win399 uses vetted third-party identity verification services to assist with CNIC validation and age verification. These partners are contractually bound to process verification data solely for the purposes of confirming your identity and are prohibited from using or retaining the data for any other purpose.
• Gaming software providers: win399's live casino, Jackpot Slots, Turbo Games, and Cockfighting products are powered by third-party game providers. These providers may receive anonymised session data — such as game round outcomes and bet totals — for game integrity and RNG audit purposes. Personally identifiable player data is not shared with game providers unless required for dispute resolution.
• Fraud prevention and compliance services: win399 may share account and transaction data with specialist fraud prevention or regulatory compliance service providers where necessary to investigate suspected fraudulent activity or meet legal obligations.
• Legal and regulatory authorities: win399 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order, warrant, or legal obligation applicable to win399's operations.

win399 applies specific data handling standards to your financial information given the sensitivity of PKR payment data and the importance of protecting your transaction privacy:

• win399 does not store your full Easypaisa PIN, JazzCash PIN, bank account password, or any payment authentication credential. All payment authentication occurs through the secure interfaces of the relevant payment provider.
• Your payment method identifiers — such as the mobile number associated with your Easypaisa or JazzCash wallet, or the account name on a linked Pakistan bank account — are stored in encrypted form and used only to process transactions and to comply with the withdrawal-to-same-method policy.
• PKR deposit and withdrawal records are retained for the minimum period required under applicable financial regulation and anti-money laundering standards. This retention period is typically a minimum of five years from the date of the relevant transaction.
• USDT TRC20 cryptocurrency transactions are processed via a blockchain interface. win399 records the wallet address used for such transactions but does not retain private key information. Blockchain transaction records are publicly visible on the TRC20 network by their nature.

win399 uses cookies, session tokens, and similar browser storage technologies to operate the platform and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the win399 platform to function. They manage your win399 Login session, maintain your authenticated state as you navigate between game sections, and ensure that your PKR balance and game state are accurately maintained. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: win399 uses anonymised analytics data — collected via first-party performance cookies — to understand how Pakistan players navigate the platform, identify pages with usability issues, and measure the effectiveness of platform improvements. This data is aggregated and does not identify individual players.
• Preference cookies: These cookies remember your display preferences, language settings, and game lobby filters so that your win399 experience reflects your previous configuration when you return to the platform.
• Marketing cookies (consent required): win399 may use marketing cookies to serve relevant promotional content within the win399 platform — such as bonus offer banners tailored to your gaming history. These cookies are only activated with your explicit consent and can be disabled through your browser settings or the win399 cookie preference panel.

You can manage cookie preferences through your browser settings or through the win399 cookie consent interface displayed on first visit. Disabling strictly necessary cookies will affect platform functionality; disabling all other cookie categories will not impact your ability to play games or make PKR transactions.

win399 retains personal data for the following periods based on the data category and the purpose for which it was originally collected:

• Account data (identity and contact): Retained for the duration of your active win399 account and for a period of five years following account closure, to comply with AML record-keeping requirements and to defend against potential legal claims.
• PKR financial transaction records: Retained for a minimum of five years from the date of the relevant deposit, withdrawal, or wager, in accordance with applicable financial regulatory standards.
• KYC documentation: Retained for the duration of your win399 account and for five years post-closure. KYC documents held by third-party verification partners are subject to those partners' retention policies, which align with legal requirements.
• Gaming activity logs: Retained for a period of three years from the date of the relevant gaming session, for dispute resolution, responsible gaming monitoring, and platform analytics purposes.
• Support communications: Retained for two years from the date of the last relevant support interaction, for quality assurance and dispute record purposes.
• Marketing consent records: Retained for as long as your win399 account is active and for one year following account closure or consent withdrawal, as evidence of the consent basis on which communications were sent.

Upon the expiry of the relevant retention period, win399 securely deletes or anonymises the applicable data in a manner that makes re-identification impossible.

win399 employs the following technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• End-to-end encryption: All data transmitted between your device and win399 servers is encrypted using TLS 1.3. Data stored on win399 servers — including PKR transaction records and KYC documents — is encrypted at rest using AES-256.
• Access controls: Access to personal data within win399's operational infrastructure is restricted to personnel who require it to perform defined job functions. Role-based access controls and activity logging are applied to all systems holding player data.
• Two-factor authentication: win399 supports two-factor authentication (2FA) for player account logins. Players in Pakistan are strongly encouraged to enable 2FA to add an additional layer of protection to their win399 Login credentials.
• Fraud detection systems: win399 operates real-time fraud monitoring across all PKR payment transactions, login attempts, and gameplay activity. Suspicious patterns trigger automated alerts and human review processes.
• Third-party security audits: win399's platform security, RNG fairness, and data handling practices are subject to periodic independent audits by qualified third-party security specialists.
• Incident response: In the event of a personal data breach that poses a risk to players, win399 will notify affected players via their registered email address within a reasonable period of becoming aware of the breach, and will take all reasonable steps to contain and remediate the incident.

As a win399 player based in Pakistan, you have the following rights in relation to the personal data win399 holds about you:

• Right of access: You may request a copy of the personal data win399 holds about you. win399 will respond to verified access requests within 30 calendar days.
• Right to rectification: If any personal data held by win399 is inaccurate or incomplete, you have the right to request that it be corrected. Account detail corrections — such as contact number or email address updates — can be made directly from your account settings panel.
• Right to erasure: You may request that win399 delete personal data it holds about you. win399 will fulfil erasure requests subject to any legal retention obligations — particularly PKR financial transaction records subject to AML retention requirements — that prevent immediate deletion.
• Right to restrict processing: You may request that win399 restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to a particular processing activity.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format to facilitate transfer to another service provider, where technically feasible and applicable to the data concerned.
• Right to withdraw marketing consent: Where win399 processes your data for marketing purposes on the basis of your consent, you may withdraw that consent at any time through your account communication preferences. Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent prior to withdrawal.
• Right to object: You may object to the processing of your personal data where win399 relies on legitimate interests as the legal basis for processing. win399 will assess your objection and cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, submit a written request to win399 support via the contact details in Section 14. win399 may require identity verification before processing certain data rights requests, to ensure that data is disclosed only to its rightful owner.

win399 is strictly an 18+ platform. win399 does not knowingly collect personal data from individuals under the age of 18. Age verification is conducted as part of the standard win399 registration and KYC process.

If win399 becomes aware that personal data has been collected from a person under 18, win399 will immediately close the relevant account, delete or securely destroy the associated personal data to the extent not required to be retained for legal compliance purposes, and — where applicable — report the incident in accordance with applicable legal obligations.

If you are a parent or guardian and believe that your child has registered on win399 or provided personal data to win399, please contact win399 support immediately at the contact details provided in Section 14 so that the account can be investigated and closed without delay.

win399 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or improvements to our platform operations. The "Last Updated" date at the top of this Policy and in the Table of Contents panel will always reflect the date of the most recent revision.

For material changes — particularly those that significantly alter how win399 uses your personal data or your rights in relation to it — win399 will provide registered Pakistan players with advance notice via their registered email address before the changes take effect. The notice period for material changes will be a minimum of seven (7) calendar days unless a shorter period is required to comply with an urgent legal obligation.

Your continued use of win399 after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised Policy. If you do not agree with a material change to this Policy, you may request account closure before the change takes effect by contacting win399 support.

For any privacy-related enquiry, data rights request, or concern about how win399 processes your personal data, please contact win399 through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Support: Available 24/7 via the Live Support widget accessible from any page on win399.pro

When submitting a data rights request, please include your registered win399 username, your registered Pakistan email address, a description of the specific request you are making, and — for erasure or access requests — a copy of a valid identity document to enable win399 to verify your identity before processing the request.

win399 aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response to formal data rights requests within 30 calendar days. Where a request is complex or high in volume, win399 may extend this period by a further 30 days, in which case you will be informed of the extension and the reasons for it before the initial 30-day period expires.