Privacy Policy – How 366win Protects Your Data

1. Overview

At 366win, we understand that trusting an online platform with your personal information is a big deal. This Privacy Policy is written to be honest and straightforward — not buried in legal jargon — so that every player on the platform genuinely understands how their data is handled.

This policy applies to all users of the 366win website and mobile app, regardless of how you access the platform. It covers information collected during registration, during your use of the platform, through payment processing, and through customer support interactions.

By creating an account and using 366win, you agree to the practices described in this Privacy Policy. This policy should be read together with our Terms and Conditions and our Responsible Gaming guidelines.

2. Data We Collect

We collect personal information in the following ways: directly from you when you register or use the platform, automatically through your use of the website or app, and from third-party payment processors when you make a deposit or withdrawal.

What We Do Not Collect

We do not store full payment card numbers. Card data is handled directly by our payment processing partners and is never stored on 366win servers. Similarly, we do not collect data from your contacts, microphone, or camera — the app only requests the permissions it genuinely needs to function.

3. How We Use Your Data

The information we collect is used strictly for operating and improving the 366win platform. Here is a clear breakdown of the purposes:

• Account management: Creating and maintaining your account, verifying your identity, and keeping your account secure.
• Processing transactions: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfers, and mobile wallets accurately and on time.
• Fraud prevention and security: Monitoring account activity for unusual patterns, verifying that bets are placed by genuine account holders, and protecting the platform from abuse.
• Customer support: Responding to your queries, resolving disputes, and maintaining a history of support interactions for quality and accountability.
• Platform improvement: Analysing aggregated, anonymised usage data to understand which features are most useful, where players spend their time, and how to make the betting and casino experience better.
• Responsible gaming: Using your account activity data to identify potential problem gambling patterns and, where appropriate, reaching out with responsible gaming information or applying account protections you have requested.
• Legal compliance: Meeting any applicable anti-money-laundering, anti-fraud, and record-keeping obligations.
• Communications: Sending account notifications (transaction confirmations, security alerts), service updates, and — only if you have opted in — promotional offers and bonus information.

4. Legal Basis for Processing

We process your personal data under the following legal grounds:

• Contract performance: Processing your data is necessary to provide the services you signed up for — running your account, processing bets, and handling payments.
• Legitimate interests: We have a legitimate interest in keeping the platform secure, preventing fraud, and improving our services. These interests do not override your rights as a user.
• Legal obligation: Certain data processing — particularly identity verification and transaction records — is required to meet applicable anti-money-laundering and financial compliance obligations.
• Consent: For optional communications such as promotional emails and marketing SMS, we rely on your explicit consent. You can withdraw this consent at any time.

5. Data Sharing

366win does not sell your personal data. We share it only in the limited circumstances described below, and only to the extent necessary:

Payment Processors

When you make a deposit or withdrawal, relevant transaction data is shared with our payment processing partners (such as JazzCash, Easypaisa, and bank transfer networks) to complete the transaction. These partners operate under their own privacy policies and data security obligations.

Identity Verification Services

To verify your identity during the KYC (Know Your Customer) process, we may share your identification documents with a third-party verification provider. This is a standard and necessary step for all accounts requesting withdrawals.

Technology and Infrastructure Providers

We use cloud hosting, analytics, and security services to run the platform. These providers may process certain technical and usage data as part of their service to us. They are contractually obligated to handle your data securely and only for the purposes we specify.

Legal Requirements

We may disclose personal data if required to do so by law, in response to a valid legal order, or to protect the safety and integrity of the platform and its users.

6. Cookies and Tracking Technologies

366win uses cookies and similar technologies to keep the platform running smoothly and to understand how it is being used. Here is what each type does:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling essential or security cookies will prevent the platform from functioning correctly. We do not use third-party advertising cookies.

7. Data Retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to meet legal obligations, resolve disputes, and maintain accurate records.

• Account data (name, contact, identity): Retained for the duration of your account and for up to 5 years after closure, in line with standard financial record-keeping practices.
• Transaction records: Retained for a minimum of 5 years following each transaction.
• Support communications: Retained for 2 years after the resolution of the last related query.
• Technical and usage logs: Typically retained for 90 days in detailed form, then aggregated anonymously for longer-term platform analysis.
• Verification documents: Retained for the period required by applicable anti-money-laundering obligations, typically 5 years from the end of the customer relationship.

Once data is no longer required for its stated purpose or legal obligation, it is securely deleted or anonymised so it can no longer be linked to you personally.

8. Data Security

Keeping your data secure is something we invest in continuously. The platform uses the following protective measures:

• HTTPS/TLS encryption on all connections between your device and our servers — no data is transmitted in plain text.
• Password hashing using strong cryptographic algorithms. We do not store your password in a readable format.
• Two-factor authentication (2FA) is available on your account for an added layer of login protection.
• Access controls: Only authorised staff with a legitimate need can access account data, and access is logged and monitored.
• Regular security reviews of our infrastructure and codebase to identify and address potential vulnerabilities.
• Breach response plan: In the event of a data breach that affects your personal information, we will notify you promptly and take immediate corrective action.

9. Your Rights Over Your Data

You have meaningful control over the personal data we hold about you. The following rights are available to all 366win account holders:

• Right to access: You can request a copy of the personal data we hold about you at any time. We will provide this in a clear, readable format.
• Right to correction: If any of your personal data is inaccurate or incomplete, you can ask us to update it. For basic details like your email or phone number, you can update these directly from your account settings.
• Right to deletion: You can ask us to delete your personal data. Note that some data must be retained for legal and financial compliance reasons and cannot be deleted on request.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances — for example, while a dispute is being resolved.
• Right to data portability: You can request your data in a machine-readable format so you can transfer it elsewhere if you choose.
• Right to withdraw consent: Where we process your data based on your consent (e.g. for marketing communications), you can withdraw that consent at any time without affecting your account.
• Right to object: You can object to certain types of data processing, particularly direct marketing.

To exercise any of these rights, please contact our support team with your request. We aim to respond within 30 days. For complex requests, we may need to verify your identity before proceeding.

10. Minors and Under-18 Policy

366win is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has created an account on the platform, please contact us immediately at [email protected] and we will close the account and delete the associated data without delay.

During the registration and verification process, we collect date of birth information specifically to confirm that all users meet the minimum age requirement. Accounts where the age cannot be confirmed will be suspended until verification is complete.

11. Third-Party Links and Services

The 366win platform may occasionally reference other services — for example, in the context of payment methods like JazzCash or Easypaisa. These third-party services operate under their own privacy policies, and 366win is not responsible for how they collect or handle your personal data.

We recommend reviewing the privacy policies of any third-party services you use in connection with your 366win account, particularly your payment provider. This ensures you have a complete picture of how your data is handled end-to-end during financial transactions.

366win does not embed third-party advertising trackers on the platform. Any third-party technology we use — such as analytics or security tools — is selected and configured with user privacy in mind.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the way we operate, improvements to our data practices, or updates to applicable obligations. When we make material changes, we will:

• Update the "Effective Date" shown at the top of this page.
• Where the changes are significant, notify active users via email or an in-platform notification.
• Give you a reasonable opportunity to review the changes before they take effect.

Continued use of the platform after updated terms have been published constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes, you should stop using the platform and request account closure before the new policy takes effect.

We encourage you to bookmark this page and check back periodically, especially if you are a regular user of the platform.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information is being handled, please get in touch with our support team.

We aim to respond to all privacy-related queries within 5 business days. For data deletion or access requests, please include your registered email address and account username so we can locate your records efficiently.