win345 Privacy Policy — How We Handle Your Personal Data

win345 is an online betting and gaming platform operating at win345.click. For the purposes of this Privacy Policy, "win345," "we," "us," and "our" refer to the operator of the win345 platform. When we say "you" or "your," we mean any person who visits win345.click, creates an account, or uses any service provided by win345.

win345 acts as the data controller for personal data collected through the platform. This means we determine the purposes and means by which your personal data is processed. Where third-party service providers process data on our behalf — such as payment processors or identity verification providers — they act as data processors under our instruction and are bound by data processing agreements that restrict their use of your data to the specific service they provide for us.

Questions, concerns, or requests relating to this Privacy Policy should be directed to our support team at support@win345.click. We aim to respond to all privacy-related queries within 3 business days.

win345 collects the following categories of personal data from players. We have included the specific reason each category is collected alongside it so that this section functions as a practical reference rather than a generic list.

win345 collects your personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, place a bet, contact support, or respond to a promotion. This is the primary source of personal data on win345.
• Automatically through platform use — technical data such as IP address, session timestamps, device identifiers, and browser information is collected automatically when you access win345.click. This data is used for security and fraud detection purposes.
• From third-party verification providers — when win345 conducts identity or address verification checks, a third-party provider may return data to confirm or supplement the information you have provided. win345 uses only licensed, certified verification providers.
• From payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and bank processing partners may share transaction confirmation data with win345 as part of deposit and withdrawal processing. Payment providers do not share your full payment credentials with win345.

win345 does not purchase personal data from data brokers, lead generation companies, or any other commercial data source. All data we hold about you originated from one of the channels described above.

win345 uses your personal data for the following specific purposes. Each purpose corresponds to a lawful basis described in Section 5.

• Account creation and management — creating and maintaining your win345 account, processing login requests, updating your account details, and communicating essential account-related information to you
• Identity and age verification — confirming that you are who you say you are and that you meet the minimum age requirement of 18 years. This is a non-negotiable legal obligation, not a discretionary process
• Payment processing — processing deposits and withdrawals to and from your win345 account using the payment methods you have registered, and maintaining a transaction record for your account history
• Anti-money-laundering (AML) compliance — screening transactions and account activity against our AML obligations, which include monitoring for suspicious patterns and reporting to relevant authorities where required by law
• Fraud prevention and security — detecting, investigating, and preventing fraudulent account activity, collusion, bonus abuse, and unauthorised access attempts
• Responsible gaming monitoring — monitoring account activity patterns to identify potential problem gambling indicators and to apply responsible gaming tools appropriately
• Customer support — handling your support queries, resolving disputes, and maintaining records of communications for quality assurance and compliance purposes
• Marketing communications — sending you promotions, bonus offers, and platform news where you have opted in to receive marketing communications from win345. You can withdraw this consent at any time
• Platform improvement — using aggregated, anonymised usage data to understand how the platform is used and to improve features, performance, and the overall player experience
• Legal and regulatory compliance — fulfilling our obligations to licensing authorities, tax authorities, and other regulatory bodies as required by applicable law

win345 processes your personal data on the following legal bases, depending on the specific purpose:

• Contract performance — the majority of data processing on win345 is necessary to perform the contract between you and win345 (i.e., to operate your betting account, process payments, and settle bets). Without this processing, we cannot provide the service.
• Legal obligation — identity verification, age verification, AML monitoring, and regulatory reporting are legal obligations that win345 must fulfil regardless of your preferences. We cannot accept accounts without fulfilling these obligations.
• Legitimate interests — fraud detection, security monitoring, platform improvement using anonymised data, and responsible gaming monitoring are based on win345's legitimate interest in operating a secure, legal, and responsibly managed platform. We have assessed that these interests do not override your privacy rights in these specific contexts.
• Consent — marketing communications and non-essential cookies are processed only with your explicit consent. You can withdraw consent at any time by contacting support or updating your communication preferences within your account.

win345 shares your personal data with third parties only in the following specific circumstances and only to the extent necessary for each purpose. We do not share your data for any commercial purposes beyond operating your account:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the data necessary to process your specific transaction. They do not receive your full betting history or behavioural data.
• Identity verification providers — licensed KYC (Know Your Customer) service providers receive identity documents and personal details to perform verification checks. These providers are contractually prohibited from using your data for any purpose other than the verification check.
• Regulatory and law enforcement authorities — win345 is legally required to share certain data with licensing authorities, financial intelligence units, and law enforcement agencies in specific circumstances. We cannot refuse these requests where they are made under applicable law.
• IT and infrastructure providers — cloud hosting providers, database service providers, and security monitoring services may have access to technical systems containing personal data as part of providing infrastructure services to win345. These providers operate under strict data processing agreements.
• Fraud prevention services — win345 may use shared fraud intelligence databases to check new account registrations and transactions against known patterns of fraud. Information shared with these services is limited to technical identifiers and transaction characteristics.

win345 takes special care with financial data because we understand that Easypaisa, JazzCash, and banking credentials are among the most sensitive data categories for Pakistani players. The following measures apply specifically to financial data processed through win345:

• win345 does not store full payment credentials such as Easypaisa PINs, JazzCash mobile money PINs, or bank card numbers on our platform servers. These credentials are handled exclusively by the respective payment processors using their own certified, regulated systems.
• Deposit and withdrawal requests processed by win345 use tokenised references — unique identifiers linked to your payment method — rather than your actual account credentials. This means a win345 data breach would not expose your Easypaisa or JazzCash PIN.
• Transaction data — amounts, timestamps, and reference numbers — is retained as part of your win345 account history for the period required by our AML compliance obligations and applicable financial record-keeping law.
• Withdrawal processing always requires verification that the destination account belongs to the same person as the win345 account. This is both a security measure and an AML requirement.

win345 retains personal data only for as long as it is necessary for the purposes described in this Policy, or as required by law. The following retention periods apply to the main categories of data:

• Account data and betting history — retained for the duration of your account plus 7 years after account closure, in line with standard financial record-keeping requirements applicable to licensed gambling operators.
• Identity verification documents — retained for 5 years after your account is closed, in line with AML record-keeping obligations.
• Transaction records — retained for 7 years after the relevant transaction, reflecting the standard financial record-keeping period.
• Support communications — retained for 3 years after the last communication, unless the communication relates to a dispute or regulatory matter in which case it is retained for the duration of that matter plus 2 years.
• Marketing consent records — retained for the period during which consent is active plus 3 years after withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical logs — retained for 12 months for standard security monitoring purposes, and for longer periods where a security incident investigation is ongoing.

When data is no longer required for any of the above purposes, it is securely deleted or anonymised in a way that means it can no longer be associated with any individual.

You have the following rights over the personal data that win345 holds about you. These rights can be exercised by contacting support@win345.click. win345 will respond to data rights requests within 30 days and will acknowledge receipt of your request within 72 hours.

win345 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. The following types of cookies are used on win345.click:

• Essential cookies — required for the platform to function. These maintain your login session, remember your bet slip contents, and enable basic security features. These cannot be disabled without breaking core functionality.
• Analytics cookies — used to understand how players interact with the platform in aggregate, anonymised form. This data is used to improve platform features and performance. These cookies do not identify you individually.
• Preference cookies — remember your display preferences, language settings, and other choices you have made on the platform to save you from reconfiguring them each visit.
• Marketing cookies — used to track whether you arrived at win345 from a marketing campaign, enabling win345 to assess the effectiveness of promotional activity. These require your consent and can be declined without affecting your ability to use the platform.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies and to receive notifications before a cookie is stored. Note that disabling essential cookies will affect your ability to log in and use win345.

win345 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been created by or on behalf of a minor, we will close the account immediately, delete all associated personal data, and return any deposited funds to the payment method from which they originated.

Parents and guardians who are aware of, or suspect, that a minor is using win345 should contact us immediately at support@win345.click. We will treat all such reports as urgent and act within 24 hours of receipt.

Beyond the encryption and data segregation measures described earlier in this Policy, win345 implements the following technical and organisational security measures:

• Access controls — access to systems containing personal data is restricted to authorised personnel based on a least-privilege principle. All access is subject to multi-factor authentication.
• Regular security audits — win345 undergoes regular independent security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Intrusion detection — automated systems monitor win345's infrastructure 24/7 for anomalous access patterns, attempted breaches, and other security events, with alerts routed to our security team in real time.
• Incident response plan — win345 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected players promptly and report to relevant authorities as required by law.
• Staff training — all win345 employees who handle personal data receive regular training on data protection obligations and security best practices.

win345 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. Material changes — those that significantly affect your privacy rights or how we use your data — will be communicated to registered players by email at least 14 days before taking effect.

Minor changes — such as clarifications of existing practices or updates to contact information — will be reflected in the updated policy on this page without advance notice. The effective date at the top of this page will be updated to reflect the date of each revision.

We encourage you to review this Privacy Policy periodically. Continued use of win345 after a policy update takes effect constitutes acceptance of the updated terms, provided we have notified you of material changes in advance.

For any questions, requests, or complaints relating to this Privacy Policy or to how win345 handles your personal data, please contact us through the following channels:

win345 aims to acknowledge all privacy-related contacts within 72 hours and to resolve requests within 30 days. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in our operating jurisdiction. We will provide contact details for that authority in our response if requested.