w588 Privacy Policy — How We Protect Your Data

1. About This Policy

This Privacy Policy ("Policy") is issued by w588 ("we", "us", "our", "the Company") and applies to all personal data collected through the w588 website at w588.pro, our mobile-optimised platform, customer support channels, and any related services (collectively "the Platform").

By registering a w588 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy.

This Policy is intended for all players accessing w588, including users from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other locations. Where local laws impose additional privacy obligations, w588 will comply with the stricter standard.

2. Data We Collect

w588 collects personal data in three ways: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties such as payment processors and identity verification services.

Information You Provide Directly:

• Identity data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact data: Email address, phone number, and residential address (including city, province, and postal code).
• Identity documents: Copies of your Pakistani CNIC, passport, or other government-issued photo ID submitted for age and identity verification.
• Financial data: Payment method details including JazzCash account numbers, EasyPaisa wallet IDs, HBL or UBL bank account information, and transaction records.
• Communications data: Records of your correspondence with our customer support team via live chat, email, or any other channel.
• Responsible gaming data: Self-imposed limits, cooling-off requests, and self-exclusion preferences set within your account.

Information Collected Automatically:

• Technical data: IP address, device type, operating system, browser type and version, and unique device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the Platform.
• Cookie data: Information collected via cookies, pixels, and similar tracking technologies as described in Section 5.
• Location data: Approximate geographic location derived from your IP address, used for regulatory compliance purposes.

Information from Third Parties:

• Identity verification results from our KYC and anti-money laundering (AML) service providers.
• Payment transaction confirmations and fraud flags from our payment processing partners.
• Risk signals from fraud prevention and responsible gaming screening services.

3. How We Use Your Data

w588 uses your personal data for the following specific and legitimate purposes:

We will never use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

4. Legal Basis for Processing

w588 processes your personal data on one or more of the following lawful bases, in line with internationally recognised data protection frameworks:

• Contractual necessity: Processing required to fulfil our obligations under the player agreement — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable laws, including KYC and AML regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing conducted for w588's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the legality of prior processing.

5. Cookies & Tracking Technologies

w588 uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse usage patterns so we can continue improving the experience.

Types of cookies we use:

• Strictly necessary cookies: Essential for core platform functionality, including keeping you logged in during a session, maintaining your game state, and processing transactions. These cannot be disabled without breaking core features.
• Functional cookies: Remember your preferences such as preferred language, currency display, and notification settings to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve w588 and is never linked to your identity.
• Security cookies: Help us detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the w588 Platform, including logging in and completing transactions.

6. Sharing Your Data

w588 does not sell your personal data. We share data only where necessary and only with the following categories of recipients, each of whom is bound by confidentiality obligations and data protection requirements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners receive transaction-relevant financial data to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and AML service providers receive identity data and document copies to verify player identities in compliance with regulatory requirements.
• Fraud prevention services: Risk and fraud screening providers may receive technical and usage data to help us identify suspicious activity and protect our platform and its players.
• Technology and infrastructure providers: Cloud hosting, database, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: We may be legally required to disclose player data to gaming regulators, financial intelligence units, or law enforcement agencies upon receipt of a valid legal request.
• Group companies: w588 may share data with affiliated entities within its corporate group for internal operational and compliance purposes only.

7. International Transfers

As an internationally operating platform, w588 may transfer personal data to servers and service providers located in countries other than Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than that required under applicable privacy regulations.

Safeguards we rely upon for international transfers include:

• Standard contractual clauses incorporated into data processing agreements with all international vendors.
• Transfers only to jurisdictions that maintain an adequate level of data protection as assessed by relevant international standards.
• Encryption of data in transit and at rest, regardless of the destination country.

By using the w588 Platform, you acknowledge and consent to the transfer of your data across international boundaries in accordance with the safeguards described above.

8. Data Retention

w588 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data: Retained for the lifetime of your active account plus a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial regulations.
• Identity verification documents: Retained for five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Customer support records: Retained for three (3) years from the date of the last interaction, to enable effective dispute resolution.
• Analytics and usage data: Anonymised and aggregated after thirteen (13) months; the anonymised data may be retained indefinitely for statistical purposes.
• Marketing consent records: Retained for the duration of consent plus three (3) years to evidence compliance.

When data reaches the end of its retention period, it is securely and permanently deleted or rendered irreversibly anonymous. w588 does not retain data "just in case" — every retention period has a specific justification.

9. Your Rights

As a player on the w588 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Privacy team at support@w588.pro with the subject line "Data Rights Request". We will respond within thirty (30) calendar days.

• Right of access: You may request a copy of all personal data held about you by w588, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account. For most fields, you can update this directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the original purpose, subject to legal retention obligations that may override this right.
• Right to restriction of processing: You may request that w588 temporarily suspend the processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to w588, which you may transmit to another service provider.
• Right to object: You may object to the processing of your data based on legitimate interests, including profiling for direct marketing purposes. Such objections will be honoured immediately for marketing and assessed on their merits for other uses.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Children & Minors

The w588 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21 under any circumstances.

All registrations are subject to mandatory age verification. Where w588 becomes aware — through our own checks, player reports, or any other means — that an account has been created by or is being used by a person under the age of 21, that account will be immediately suspended, all activity investigated, and the account permanently closed. Any funds in the account will be reviewed and handled in accordance with our underage access procedures.

Parents and guardians who are concerned that a minor may have gained access to the w588 Platform are urged to contact us immediately at support@w588.pro. We take such reports very seriously and will act without delay.

11. Security Measures

w588 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your device and w588 servers is protected by 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this is active.
• Encryption at rest: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using industry-standard algorithms.
• Access controls: Internal access to player data is strictly controlled on a need-to-know basis. All staff access is authenticated, logged, and regularly audited.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their w588 accounts for an additional layer of login security.
• Penetration testing: w588's infrastructure undergoes regular independent security assessments to identify and address vulnerabilities before they can be exploited.
• Incident response: In the unlikely event of a data breach affecting your personal data, w588 has established procedures to contain the incident, notify affected players promptly, and report to relevant authorities as required by law.

While w588 takes every reasonable precaution, no system is entirely immune to security risks. You also play a role in protecting your data — please use a strong, unique password for your w588 account and never share your login credentials with anyone.

12. Third-Party Links

The w588 Platform may, from time to time, contain references to third-party content, game providers, or services. While we take care in how we present such content, w588 is not responsible for the privacy practices or policies of third-party operators.

This Privacy Policy applies exclusively to the w588 Platform. If you navigate away from w588 to a third-party website or service, we strongly recommend reviewing that party's own privacy policy before providing any personal information. w588 has no control over, and accepts no liability for, how third parties collect, use, or protect data.

13. Changes to This Policy

w588 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — for example, if we introduce a new purpose for processing your data or change how we share information with third parties — we will notify registered players via email and/or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For minor clarifications or corrections, the updated Policy will be posted without prior notice.

Your continued use of the w588 Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you may request account closure by contacting our support team.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way w588 handles your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and fairly.

• Email: support@w588.pro — subject line: "Privacy Enquiry"
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 30 days.
• Data Rights Requests: Email support@w588.pro with subject line "Data Rights Request" and include your full name and registered email address.
• Formal Complaints: If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.