786 Win Privacy Policy – Your Data, Your Rights, Our Commitments

1Introduction — Why Privacy Matters at 786 Win

Pakistan has a mobile-first digital economy, and the reality is that more and more Pakistani players manage significant parts of their financial lives through their phones. Easypaisa, JazzCash, and digital wallets are mainstream — not novelties. When you use a platform like 786 Win, you're entrusting it with your name, your CNIC details for verification, and your PKR transaction history. We don't take that lightly.

This Policy exists to give you a clear, honest account of what data 786 Win holds about you and why. We've written it in straightforward English because we believe you deserve to understand it, not just acknowledge it. If at any point something in this Policy is unclear, contact us at support@786win.biz — we will explain it directly.

The data protection principles that guide our approach at 786 Win are: collect only what is necessary, use it only for stated purposes, protect it with appropriate technical measures, keep it only as long as needed, and give you meaningful control over it. These aren't aspirations — they are operational standards applied across our platform.

2What Personal Data We Collect

Depending on how you interact with the 786 Win platform, we may collect and process the following categories of personal data:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless specifically required by a legal obligation and with your prior explicit consent.

3How We Collect Your Data

786 Win collects personal data through three primary channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, participate in promotions, or update your account profile. This is the primary source of your personal data on 786 Win.
• Automatically through your use of the platform: Technical and behavioural data is collected automatically when you access the 786 Win website via cookies, web beacons, log files, and analytics tools. This happens whether or not you are logged in to an account.
• From third parties: In limited circumstances, we may receive data from payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank partners) to confirm transaction status; from identity verification services used during KYC processes; and from fraud detection services that help us maintain platform integrity.

All third-party data sources used by 786 Win are contractually required to handle data in a manner consistent with this Privacy Policy and applicable data protection standards.

4Why We Use Your Personal Data

786 Win uses your personal data for the following specific purposes. We will never use your data for a purpose not listed here without informing you first:

• Account management: Creating and maintaining your 786 Win account, verifying your identity, processing login requests, and enabling account recovery.
• Processing transactions: Handling PKR deposits via Easypaisa, JazzCash, IBFT, and card; processing withdrawal requests; reconciling your balance; and maintaining an accurate transaction record.
• Game delivery: Running game sessions, recording bet histories, calculating and crediting winnings, managing bonus balances, and ensuring the integrity of RNG and live dealer game outcomes.
• Legal compliance: Meeting Know Your Customer (KYC) obligations, responding to law enforcement requests, maintaining records required by financial oversight standards, and preventing money laundering and fraud.
• Customer support: Responding to your queries, resolving disputes, and improving support processes based on historical interaction data.
• Responsible gaming: Monitoring for signs of problem gambling behaviour, implementing player-requested limits and exclusions, and conducting proactive welfare checks in line with our responsible gaming commitments.
• Platform security: Detecting, preventing, and investigating fraudulent activity, account compromise, bot usage, and other threats to platform integrity.
• Marketing communications: Sending you information about promotions, bonuses, and new features — but only where you have provided consent to receive such communications. You can opt out at any time.
• Platform improvement: Using aggregated, anonymised behavioural and usage data to understand how players interact with the platform and to prioritise development improvements.

5Legal Basis for Processing

786 Win processes your personal data under one or more of the following lawful bases, depending on the purpose of processing:

• Contract performance: Processing necessary to operate your 786 Win account, execute transactions, and deliver gameplay falls under contract performance — i.e., we cannot run your account without processing this data.
• Legal obligation: Identity verification, transaction record-keeping, and cooperation with financial oversight authorities are legal obligations that require data processing regardless of individual consent.
• Legitimate interests: Fraud detection, platform security monitoring, responsible gaming behaviour analysis, and platform improvement analytics are conducted under 786 Win's legitimate interest in operating a safe, fair, and sustainable platform — balanced against your privacy interests.
• Consent: Marketing communications and certain non-essential cookies are processed only with your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Sharing Your Data — Who We Share With and Why

786 Win does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. We do, however, share data in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our banking partners receive the transaction data necessary to process your deposits and withdrawals. These partners are required to handle your data under strict confidentiality obligations and are prohibited from using it for their own marketing purposes.
• KYC and identity verification providers: Third-party services used to verify your CNIC and other identity documents receive only the specific data required for verification. Verification providers do not receive your gaming history or financial balance information.
• Fraud detection services: Anonymised technical data (IP address, device fingerprint, behavioural patterns) may be shared with fraud prevention systems to identify and block fraudulent activity.
• Legal and regulatory authorities: 786 Win will disclose personal data to law enforcement, financial intelligence, or regulatory bodies when required by applicable law or a valid legal order. We will notify you of such requests where we are legally permitted to do so.
• Platform infrastructure providers: Cloud hosting, database, and CDN providers who process data on our behalf as data processors, bound by data processing agreements that restrict their use of your data strictly to the services they provide to us.

Any third party that receives personal data from 786 Win is contractually obligated to protect it with security standards equivalent to or greater than our own, and to use it solely for the purpose for which it was shared.

7Payment Data & PKR Transactions

All financial transactions on the 786 Win platform are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, or Visa/Mastercard, the following data handling applies:

• 786 Win records the transaction amount in PKR, the payment method used, the timestamp, and the account identifier (wallet number or masked card/account number). Full card numbers and complete bank account details are never stored on 786 Win's servers.
• Mobile wallet identifiers (Easypaisa/JazzCash numbers) are stored in encrypted form and used solely to match your withdrawal request to a verified payment method on file.
• Your PKR balance held within the 786 Win platform is recorded in our secure financial ledger, accessible only to authorised 786 Win finance team staff and — in your own account dashboard — to you.
• Transaction records are retained for the period required to meet legal and financial reporting obligations. For most transaction records, this is a minimum of five years.

8Cookies & Tracking Technologies

786 Win uses cookies and similar technologies (web beacons, local storage, pixel tags) to operate and improve the platform. Here is a straightforward breakdown of what we use and why:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security tokens that protect your account from CSRF attacks. You cannot opt out of essential cookies while using the platform.
• Functional cookies: Remember your preferences such as language settings, preferred payment method display, and game lobby layout. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited most, where users drop off during registration, how long game sessions last. This data helps us improve 786 Win. Analytics cookies require your consent.
• Marketing cookies: Used to track whether promotional campaigns resulted in registrations or deposits, so we can understand which offers resonate with Pakistani players. Marketing cookies require your consent and can be withdrawn at any time via your account settings.

You can manage cookie preferences through your browser settings or, for consent-based cookies, through the cookie preference centre accessible in the footer of the 786 Win platform. Disabling essential cookies will prevent you from logging in to your account.

9Data Retention — How Long We Keep Your Data

786 Win retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Active account data (identity, contact, payment method records): Retained for the duration of your account plus a minimum of five years after account closure to meet legal and financial record-keeping obligations.
• Transaction records (PKR deposit/withdrawal history, bet records): Retained for a minimum of five years from the date of each transaction, in line with standard financial record requirements.
• Customer support communications: Retained for three years from the date of each interaction, to support dispute resolution and service quality management.
• Marketing consent records: Retained until you withdraw consent, plus one year thereafter to demonstrate compliance.
• KYC verification documents: Retained for five years from the date of verification or account closure, whichever is later.
• Technical and behavioural data: Aggregated and anonymised after 13 months from collection. Raw logs retained for a maximum of 90 days.

When personal data reaches the end of its retention period, it is securely deleted or anonymised. You may request early deletion of certain categories of data — see Section 11 for your data rights.

10How 786 Win Secures Your Data

786 Win implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These include:

• SSL/TLS encryption: All data transmitted between your device and the 786 Win platform is encrypted using industry-standard TLS 1.2 or higher. The padlock in your browser address bar confirms this connection is active.
• Encrypted data storage: Sensitive data including identity document copies, financial account identifiers, and passwords are stored in encrypted form within our database infrastructure. Passwords are stored as salted hashes — 786 Win staff cannot read your password.
• Access controls: Access to personal data within 786 Win's systems is restricted on a need-to-know basis. Staff are granted access only to the data required for their specific role, and all access is logged and audited.
• Two-factor authentication: 2FA is available for all player accounts and is encouraged. All 786 Win staff accounts with access to player data require 2FA as a mandatory control.
• Regular security reviews: 786 Win conducts periodic security assessments of our platform infrastructure, including vulnerability scanning and review of access logs for anomalous activity.
• Incident response: In the event of a data breach that is likely to affect your rights, 786 Win will notify affected players within 72 hours of becoming aware of the breach, describing what data was affected and what steps are being taken.

11Your Data Rights as a 786 Win Player

You have the following rights in relation to the personal data that 786 Win holds about you. To exercise any of these rights, contact support@786win.biz with the subject line "Data Rights Request — [Your Username]":