Privacy Policy

This Privacy Policy ("Policy") describes how 298win ("298win", "the Platform", "we", "us", "our"), operating at the domain 298win.cam, collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or interact with the Platform.

298win provides online sports betting, live casino, slots and related gambling-information services to adult users in Pakistan and other international markets. The protection of user privacy is fundamental to our operations, and this Policy is designed to give you a clear and honest picture of our data practices.

By registering an account, accessing the Platform or otherwise engaging with any 298win service, you confirm that you have read this Policy and agree to the collection and processing of your personal data as described herein. This Policy is to be read alongside our Terms & Conditions.

In this Policy, the following terms carry the meanings assigned below unless the context requires otherwise:

298win collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Account & Identity Data

• Full name, date of birth, nationality and gender
• Email address, mobile phone number and correspondence address
• Username and encrypted password
• Government-issued identification documents provided during KYC (e.g., CNIC, passport, driving licence)
• Proof of address documentation (e.g., utility bills, bank statements)

3.2 Financial & Transaction Data

• Deposit and withdrawal amounts, dates and methods
• Payment instrument details (e.g., partial account numbers, transaction IDs) as required by payment-processing partners
• Currency denomination — typically PKR or other supported currencies
• Bonus claims and wagering history

3.3 Betting & Gaming Activity Data

• Bet history, stake amounts, game selections and outcomes
• Session duration, frequency and timing of activity
• Responsible gambling limit settings and self-exclusion records

3.4 Technical & Device Data

• IP address, browser type and version, operating system
• Device type, screen resolution and device identifiers
• Log files recording login events, errors and session activity
• Referring URL and pages visited within the Platform

3.5 Communications Data

• Records of correspondence between you and our support team
• Responses to optional surveys or feedback requests
• Marketing preference records (opt-in/opt-out status)

We collect personal data through the following channels:

• Direct provision by you: When you register an account, complete a KYC submission, make a deposit or withdrawal, contact support, or respond to a survey.
• Automated collection: Technical data such as IP addresses, device identifiers and usage logs are collected automatically when you access the Platform via cookies and server logs.
• Third-party sources: Identity and fraud-prevention data may be received from third-party KYC and AML verification providers. Payment transaction data is received from payment-processing partners.
• Publicly available sources: In limited circumstances, we may supplement our records with data from publicly available databases for fraud-prevention or compliance purposes.

Where data-protection frameworks apply to our operations, 298win relies on the following legal bases for processing your personal data:

298win uses your personal data for the following purposes:

• Account management: Creating, maintaining, suspending or closing your account; processing login and authentication; and responding to account-related enquiries.
• Transaction processing: Facilitating deposits and withdrawals; processing bonuses and promotional credits; and maintaining accurate financial records.
• Identity verification: Conducting KYC checks to confirm age, identity and address, and to comply with anti-money-laundering requirements.
• Fraud & security: Detecting and investigating suspicious activity, preventing unauthorised access and protecting the integrity of the Platform.
• Responsible gambling: Monitoring player behaviour to identify signs of problem gambling; administering deposit, loss and session limits; processing self-exclusion requests; and complying with responsible-gambling obligations.
• Customer support: Responding to queries, resolving complaints and maintaining support records.
• Marketing: Where you have opted in, sending promotional communications about offers, bonuses, new game releases and platform news. You may withdraw consent at any time by contacting our support team.
• Legal compliance: Meeting obligations under applicable law, responding to lawful requests from authorities, and maintaining records as required by law.
• Platform analytics: Understanding usage patterns to improve the Platform's performance, design and content offering.

298win does not sell, rent or trade your personal data. We may share your data with third parties only in the circumstances described below:

• Payment processors: Transactional data is shared with third-party payment providers necessary to process deposits and withdrawals. References to payment brands such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual; data sharing with any specific provider occurs only as technically required by that transaction.
• KYC and AML providers: Identity and address documentation may be shared with specialist verification agencies to fulfil our compliance obligations.
• Game content providers: Where required for the delivery of specific casino games, limited technical data (e.g., session tokens) may be shared with licensed game providers.
• Fraud prevention services: Data may be shared with third-party fraud-detection services to protect the Platform and its users from financial crime.
• Legal authorities: We may disclose personal data to law-enforcement agencies, regulators or courts where required by law or in response to a lawful order.
• Business transfers: In the event of a merger, acquisition or asset sale, user data may form part of the transferred assets. Users will be notified of any material change in data controller.

298win retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and for as long as required by applicable legal, regulatory or contractual obligations. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's existence on the Platform.
• Financial and transaction records: Retained for a minimum of five years following the date of the transaction, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC documentation: Retained for a minimum of five years following account closure or the last relevant transaction.
• Responsible gambling records: Self-exclusion and limit records are retained in accordance with the applicable licence terms and for a sufficient period to prevent circumvention.
• Marketing preference records: Retained until you withdraw consent or request erasure, after which records of the withdrawal itself are retained to evidence compliance.
• Support correspondence: Retained for a reasonable period following resolution of the relevant matter to allow for follow-up or disputes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

298win implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive fields including passwords and payment instrument data
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the Platform infrastructure
• Anomaly detection and intrusion-prevention systems monitoring for unauthorised access
• Incident response procedures in place to detect and respond to data breaches promptly

You also bear responsibility for the security of your account. You should maintain a strong, unique password and not share your login credentials with any third party. If you suspect your account has been compromised, contact our support team immediately.

298win uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

You may adjust cookie preferences through your browser settings. Note that disabling certain cookie types may affect Platform functionality. 298win does not use cookies to serve third-party advertising on the Platform.

Subject to applicable law and the specific circumstances of your request, you may have the following rights in relation to your personal data held by 298win. To exercise any of these rights, contact us at the details provided in Section 15.

298win will respond to valid rights requests without undue delay. We may need to verify your identity before processing your request. Requests that are manifestly unfounded, excessive or repetitive may be refused or charged a reasonable fee.

298win is strictly an adults-only platform. Access is prohibited for individuals under the age of 18, or the higher minimum age required by the operator's licence jurisdiction. The Platform does not knowingly collect, store or process personal data from individuals under this age threshold.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will not be returned and will be handled in accordance with our Terms & Conditions.

If you believe that a minor has registered on the Platform using false information, please contact our support team immediately so we can investigate and act appropriately.

298win operates as an international Platform and your personal data may be processed in, or transferred to, countries other than your country of residence. This includes countries where our servers are hosted, where our technology partners operate, or where KYC and payment-processing services are based.

Where personal data is transferred internationally, 298win takes appropriate steps to ensure that adequate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, data processing agreements with third-party processors, or reliance on recognised data-transfer frameworks applicable to the jurisdictions involved.

Users in Pakistan should be aware that domestic data-protection frameworks may differ from those in the destination country. By using the Platform, you acknowledge and agree to the international transfer of your data as described in this section.

298win reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice by posting a prominent notice on the Platform or by sending an email to the address registered on your account.

The date shown at the top of this page indicates when this Policy was last reviewed. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with material changes, you must close your account and cease using the Platform.

We recommend reviewing this page periodically so you remain aware of our current data practices.

If you wish to exercise your data rights, have a question about this Privacy Policy, or wish to raise a data-related concern or complaint, please contact the 298win support team using the details below:

For responsible gambling tools, self-exclusion requests or limit management, please visit our Responsible Gambling page.