Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 588won ("we", "us", "our", "the Platform") collects, uses, stores, discloses and protects the personal information of individuals ("you", "User", "Player") who access or use the 588won website, mobile applications and related services (collectively, "the Services").

We are committed to handling your personal data with transparency, integrity and respect. By registering an account or using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Services immediately.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify you as an individual, including your name, CNIC number, date of birth, email address, phone number, postal address and payment details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission or deletion.
• "Controller" means 588won, being the entity that determines the purposes and means of processing your personal data.
• "Processor" means a third party that processes personal data on behalf of 588won under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data.
• "Cookie" means a small text file placed on your device by the 588won platform to store session and preference information.
• "KYC" means Know Your Customer — the identity verification process required under applicable anti-money-laundering regulations.

3. Data We Collect

We collect personal data through several channels including account registration, account usage, KYC verification submissions, customer support interactions and automatic technical collection. The categories of data we collect are set out below.

3.1 Account Registration Data

• Full legal name
• Date of birth
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Email address
• Mobile phone number
• Username and encrypted password
• Currency preference (PKR)

3.2 Identity Verification (KYC) Data

• Copy of Pakistani National Identity Card (CNIC) — front and back
• Copy of valid passport (bio-data page) where submitted as an alternative
• Proof of address documents (utility bills, bank statements)
• Source of funds documentation where required by compliance
• Facial verification images where applicable

3.3 Financial Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method references (e.g., bank name, mobile wallet type)
• Transaction identifiers assigned by 588won's payment processing systems
• Running account balance records

3.4 Behavioural and Usage Data

• Pages visited, features used and time spent on the platform
• Betting and gaming history (markets, stakes, outcomes)
• Search queries entered within the platform
• Responsible gambling tool settings and limit configurations
• Customer support chat logs and email correspondence

3.5 Technical and Device Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system and browser version
• Session identifiers and authentication tokens
• Platform error logs and crash reports

4. How We Use Your Data

588won uses personal data only for legitimate, specified purposes directly connected to delivering, improving and protecting the Services. The table below sets out our primary processing purposes and the data categories involved.

5. Legal Basis for Processing

We rely on the following legal bases to process your personal data, depending on the specific activity involved:

1. Contract Performance: Processing that is necessary to create and manage your account, settle bets and process payments as part of our contractual relationship with you.
2. Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, identity verification requirements and regulatory reporting obligations.
3. Legitimate Interest: Processing carried out for purposes such as fraud detection, platform security, responsible gambling enforcement and service analytics, where these interests are not overridden by your rights.
4. Consent: Processing for optional activities such as marketing communications, where you have given clear, withdrawable consent. You may withdraw consent at any time through your account settings without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

588won does not sell your personal data. We may share your data with third parties only in the circumstances described below, and always subject to appropriate contractual safeguards.

6.1 Service Providers (Processors)

We engage carefully vetted third-party processors to support our operations, including payment processing infrastructure, KYC verification technology providers, cloud hosting services, customer support tooling and fraud detection platforms. These processors are permitted to use your data only for the specific purpose for which they are engaged and under binding data processing agreements.

6.2 Regulatory and Law Enforcement Bodies

We may disclose personal data to competent regulatory authorities, law enforcement agencies or courts where we are legally required to do so, where disclosure is necessary to protect the safety of users or the public, or where disclosure is necessary to establish, exercise or defend legal claims.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of 588won's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to this Policy that results from it.

7. International Data Transfers

As a platform operating across multiple jurisdictions, 588won may transfer your personal data to servers or processors located outside Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual clauses that require the recipient to provide a comparable standard of data protection.

If you have questions about the specific safeguards applied to a transfer involving your personal data, please contact us using the details in Section 14.

8. Data Retention

We retain personal data for as long as your account is active and for a defined period thereafter as required by applicable law. The key retention periods we apply are summarised below:

Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9. Cookies and Tracking Technologies

588won uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences and analyse platform performance. We do not use third-party advertising cookies or cross-site tracking technologies.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These cannot be disabled without breaking core functionality such as login sessions and security tokens.
• Performance and Analytics Cookies: Used to understand how users interact with the platform, identify errors and measure page performance. Data is aggregated and anonymised where possible.
• Functional Cookies: Used to remember your preferences such as language settings, display options and responsible gambling tool configurations.

9.2 Managing Cookies

You can manage or block cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Services. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 588won:

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that override this right.
• Right to Restriction: You may ask us to restrict processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract performance, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest, including profiling for responsible gambling purposes. We will assess whether our legitimate interests override your rights in each specific case.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Children's Privacy

588won's Services are strictly intended for adults aged 18 or older — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

If we become aware that personal data has been collected from an individual below the minimum age threshold, we will immediately suspend that account, delete the associated personal data and return any deposits. Parents or guardians who believe a minor has registered an account should contact us immediately.

12. Data Security

We implement a layered security framework to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. Key measures include:

• TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments by independent security specialists
• Multi-factor authentication requirements for administrative access to our systems
• Incident response procedures including breach notification processes aligned with applicable regulatory requirements

While we take every reasonable step to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, please contact our support team immediately.

13. Changes to This Policy

588won reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. When we make material changes, we will post a prominent notice on the platform and, where operationally practical, notify you via your registered email address.

The "Last updated" date at the top of this page will always reflect when the most recent revision was made. Continued use of the Services after the effective date of any change constitutes your acceptance of the revised Policy. If you disagree with the revised Policy, please stop using the Services and contact us to close your account.

14. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way in which 588won processes your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly from your account dashboard — the fastest way to reach our team.
• Email: [email protected] (plain text — not a clickable link)

Our support team operates in English and can also assist in Urdu where requested. For data rights requests, please include "Data Rights Request" in your message subject line and provide your registered account email address so we can verify your identity efficiently.