786win Privacy Policy — How We Protect Your Personal Data

This Privacy Policy applies to all personal data collected, processed, and stored by 786win ("786win", "we", "us", "our") in connection with your use of the 786win website, mobile platform, casino games, sportsbook, live dealer products, instant win games, and all associated services (collectively, "the Services").

786win acts as the data controller in respect of the personal data of all registered players on the 786win platform. This means that 786win determines the purposes for which and the manner in which your personal data is processed. Where 786win engages third-party service providers to process personal data on its behalf, those providers act as data processors under contractual obligations consistent with this Policy.

By creating a 786win account or using any part of the Services, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the 786win platform.

786win collects the following categories of personal data from players registered on the platform. We collect only what is necessary for the purposes described in Section 4 of this Policy.

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are 21 years of age or older).
• Pakistani mobile number, which serves as your primary account identifier and OTP delivery channel.
• Email address, where provided during registration or subsequently added to your account profile.
• Chosen username and account password (stored in encrypted, non-reversible format).

• Scanned or photographed copies of government-issued identity documents, including National Identity Cards, passports, and driver's licences.
• Proof of address documents, where required by 786win's verification process.
• Selfie or live photograph verification images submitted during enhanced KYC procedures.

• JazzCash or EasyPaisa mobile wallet account numbers associated with deposits or withdrawals.
• Bank account details, bank name (HBL, UBL, Meezan Bank, or other), and account holder name, where bank transfer methods are used.
• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Account wallet balance history and transaction ledger.

• Game session history, including game titles played, wager amounts, outcomes, and timestamps.
• Sportsbook betting history, including markets, odds, stake amounts, and settlement outcomes.
• Bonus and promotion history, including bonuses credited, wagering progress, and redemptions.

• IP address recorded at the time of each login and gaming session.
• Device type, operating system, and browser type used to access 786win.
• Session timestamps, login locations, and navigation patterns within the 786win platform.
• Cookie identifiers and similar tracking data — see Section 7 for full details.

• Content of live chat conversations with 786win support agents, including timestamps.
• Email correspondence with 786win support or compliance teams.
• Feedback, complaints, and dispute submissions made through any 786win channel.

786win collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly when registering a 786win account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Platform activity: Data generated automatically as you use the 786win platform, including game play records, login events, and transaction activity logged by our systems.
• Cookies and similar technologies: Technical data collected via cookies, session tokens, and similar tracking mechanisms as described in Section 7 of this Policy.
• Third-party verification providers: Identity and age verification data received from KYC service providers engaged by 786win to validate documents submitted by players.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors integrated with 786win.

786win does not purchase personal data from external commercial data sources or marketing lists. All personal data held by 786win is obtained through the above channels in direct connection with your use of the 786win Services.

786win uses the personal data we collect for the following specific, legitimate purposes:

To register your 786win account, verify your eligibility (including confirmation that you are 21 years of age or older), maintain your account profile, process login authentication, and manage your account settings and preferences.

To comply with our obligations under international gaming licensing regulations, including verification that each 786win player is a genuine, age-eligible individual whose identity matches the information provided at registration. KYC verification is conducted before any withdrawal is processed.

To process PKR deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer; to process withdrawal requests to verified payment methods; and to maintain a complete, auditable transaction ledger for each 786win account.

To meet our legal and regulatory obligations including anti-money laundering (AML) monitoring, fraud detection and prevention, responsible gaming compliance (including enforcement of our 21+ age policy and self-exclusion requests), and reporting obligations to our gaming licensing authority.

To provide you with accurate, account-specific assistance when you contact 786win via live chat or email, to investigate and resolve complaints and disputes, and to maintain a record of support interactions for quality assurance and training purposes.

To detect and prevent cheating, collusion, bonus abuse, and other forms of prohibited conduct; to identify and block unauthorised access attempts; to maintain audit logs of all significant account events; and to protect the integrity of the 786win gaming environment for all players.

To analyse aggregated, anonymised usage data for the purpose of improving 786win's platform performance, game lobby, payment flows, and user experience. Individual player data is not used for this purpose without anonymisation.

Where you have provided explicit consent, to send you personalised promotional communications about 786win bonuses, game releases, PSL betting promotions, and platform updates via your registered mobile number or email address. You may withdraw marketing consent at any time through your account settings.

786win processes your personal data on the following legal bases under applicable data protection law:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the 786win Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML monitoring, and age verification obligations under our gaming licence.
• Legitimate interests: Processing carried out for the legitimate business interests of 786win, including fraud prevention, platform security, responsible gaming enforcement, and general service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, including marketing communications and optional data collection features. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

786win does not sell, rent, or trade your personal data. We share your data only in the following limited and controlled circumstances:

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers solely to the extent necessary to process your PKR deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the specified payment purpose.

Identity document images and verification data are shared with 786win's contracted KYC service providers for the purpose of verifying your identity and age in compliance with our gaming licence obligations. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.

Limited technical data (such as session tokens and player IDs) may be shared with 786win's game content providers to facilitate seamless game delivery. These providers do not receive your full personal profile and are contractually restricted from using any data received for independent purposes.

786win will disclose your personal data to gaming regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, court order, or regulatory direction. We will notify you of any such disclosure where legally permitted to do so.

786win uses cookies and similar tracking technologies to operate the platform, personalise your experience, and maintain your login session. The following types of cookies are used on the 786win platform:

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 786win account or using core platform features. Analytical cookies may be opted out of through your 786win account privacy settings without affecting platform functionality.

786win implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your browser or mobile device and the 786win platform is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by major international banks.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial account details, is stored in encrypted form on secure servers. Passwords are stored using one-way cryptographic hashing and are never accessible in plain text even to 786win's own technical team.
• Access Control: Internal access to player personal data is granted only to staff who require it to perform their specific job function. All internal data access is logged, monitored, and subject to regular audit.
• Two-Factor Authentication: 786win's platform supports OTP-based two-factor authentication and biometric login for all player accounts, providing an additional layer of protection against unauthorised access.
• Intrusion Detection: 786win's security infrastructure includes real-time intrusion detection and prevention systems (IDPS) that monitor for and block suspicious activity patterns.
• Incident Response: In the event of a confirmed data security incident affecting player personal data, 786win will notify affected players without undue delay and will take immediate remediation steps in accordance with our incident response plan.

786win retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation.

When personal data has reached the end of its applicable retention period, 786win will securely delete it or, where deletion is not technically feasible due to backup architecture, anonymise it such that it can no longer be associated with any individual player.

As a 786win player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact 786win's support team via live chat or at support@786win.asia.

• Right of Access: You have the right to request confirmation of whether 786win processes personal data about you and, if so, to receive a copy of that data together with details of the purposes for which it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that 786win holds about you. Requests to update account information that affect KYC status will require supporting documentation.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to overriding legal and regulatory retention obligations — for example, 786win cannot delete financial transaction records that must be retained for AML compliance purposes.
• Right to Restrict Processing: You have the right to request that 786win restricts the processing of your personal data in specified circumstances — for example, while a dispute about the accuracy of that data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive the personal data you have provided to 786win in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where 786win processes your data on the basis of your consent (e.g., marketing communications), you have the right to withdraw that consent at any time through your account settings or by contacting support.

786win will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. All requests will be processed free of charge unless they are manifestly unfounded or excessive.

786win's Services are strictly restricted to adults aged 21 years and over. 786win does not knowingly collect or process personal data from individuals under the age of 21. Our platform actively enforces age verification requirements — including mandatory KYC identity and age verification prior to processing any withdrawal — precisely to ensure that no minor accesses the Services.

If 786win becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will immediately suspend the associated account, void any transactions conducted during the period of underage access, and permanently delete any personal data collected in connection with that account, subject only to overriding legal obligations that may require temporary retention.

786win's servers and data infrastructure are operated in jurisdictions consistent with our international gaming licence requirements. In the course of providing the Services to Pakistani players, your personal data may be processed in countries outside Pakistan by 786win's contracted service providers — including KYC verification partners, game content providers, and secure cloud infrastructure providers.

Where personal data is transferred internationally, 786win ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Privacy Policy. These safeguards include contractual obligations imposed on all data processors, encryption of data in transit and at rest, and limitation of data transferred to the minimum necessary for the specified processing purpose.

The 786win platform does not include links to third-party websites or services beyond those integral to delivering the Services described in this Policy (such as embedded game content from licenced providers). Where any such link is present, please be aware that 786win has no control over the content or privacy practices of third-party websites and that visiting them is at your own risk.

This Privacy Policy applies exclusively to personal data collected and processed by 786win in connection with the 786win Services. It does not apply to any data collected by third parties through their own platforms, even where those platforms are accessed via a link on the 786win site.

786win may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulation, or changes to the 786win platform and Services. When material updates are made, we will notify registered players via a notice displayed on the platform upon login and, where the change significantly affects your privacy rights, via an alert sent to your registered mobile number.

The "Effective Date" displayed at the top of this Policy indicates when the current version came into force. Continued use of the 786win Services after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to any revised Policy, you may close your account in accordance with the 786win Terms & Conditions.

786win maintains a version archive of previous Privacy Policies. If you require a copy of a previous version for reference purposes, please contact us and we will provide it where reasonably practicable.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the manner in which 786win processes your personal data, please contact us through any of the following channels. Our data privacy team will respond to all privacy-related enquiries within 30 days.

This Privacy Policy was last reviewed and updated in January 2026. 786win is committed to operating a transparent, player-respecting privacy framework that reflects both our obligations under international gaming law and our genuine respect for the privacy of every Pakistani player who places their trust in us.