Win 345 Privacy Policy — Your Personal Data, Handled with Respect and Care

This Privacy Policy describes how Win 345 ("we", "us", "our", "the Platform") collects, processes, stores and protects the personal information of users ("you", "the Player") who access or register on the Win 345 platform at win345.im. Win 345 is committed to handling your personal data responsibly and transparently.

By creating an account on Win 345, depositing funds, placing bets or otherwise using the platform, you acknowledge that you have read this Privacy Policy and that you understand how your data is handled. If you do not agree with any part of this Privacy Policy, please do not use Win 345 and contact our support team to discuss closing your account.

This Privacy Policy sits alongside and should be read in conjunction with the Win 345 Terms and Conditions and Responsible Gaming Policy, both of which are available on the Win 345 website. Where there is any conflict between these documents on matters of data privacy, this Privacy Policy takes precedence.

Win 345 collects personal data in three ways: data you provide directly when registering or using the platform, data generated automatically by your use of the Win 345 platform, and data received from third parties such as payment processors in connection with your transactions.

Data you provide directly to Win 345:

• Registration data: Full legal name, date of birth, email address, Pakistani mobile number, chosen username and password.
• Identity verification data: CNIC number, copy of CNIC front and back, selfie photograph for liveness verification. This is collected as part of our KYC (Know Your Customer) process and is required before processing withdrawals above certain thresholds.
• Payment method details: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, and masked card numbers for Visa/Mastercard transactions. Win 345 does not store full card numbers — only masked references provided by our PCI-compliant payment processor.
• Address information: City and province of residence, requested for account verification purposes.
• Communication records: Records of your communications with Win 345 customer support, including emails, chat transcripts and any documents you submit.
• Responsible gaming preferences: Deposit limits, session limits, loss limits or self-exclusion status that you configure through your Win 345 account settings.

Data collected automatically through your use of Win 345:

• Device and browser data: Device type, operating system, browser type and version, screen resolution, device identifiers.
• Network data: IP address, approximate geographic location derived from IP, internet service provider name.
• Session and behaviour data: Pages visited on Win 345, time spent on each page, features used, games played, markets viewed, bets placed, deposit and withdrawal history, login timestamps and session durations.
• Performance and error data: Technical error logs, crash reports and performance metrics used to identify and fix platform issues.

Every piece of data collected by Win 345 has a specific, legitimate purpose. We do not collect data speculatively or "just in case". The following table maps each data type to its use on the Win 345 platform:

Win 345 analyses aggregated, anonymised behavioural data to improve the platform experience — for example, identifying which game categories are most popular during PSL season, or which payment methods are preferred by players in a particular region of Pakistan. This analysis never identifies individual players and is used only to make Win 345 a better product for everyone.

Win 345 also uses your activity data to monitor for responsible gaming risk indicators — such as rapidly increasing bet sizes, extended sessions or deposit frequency patterns that may suggest a problem. Where these indicators are present, Win 345 may proactively reach out to the player concerned to offer support resources. This is a care function, not a commercial one.

Win 345 does not sell, rent or trade your personal data to any third party for any commercial purpose. Full stop. This is a non-negotiable principle of how Win 345 operates. However, certain limited categories of third parties do have access to specific data elements in order for the Win 345 platform to function. These are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card processing networks receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own data protection obligations and do not receive access to your betting history or account profile.
• Identity verification providers: Third-party KYC providers process CNIC and selfie data on Win 345's behalf for age and identity verification. These providers are bound by contractual data protection obligations and operate on a data-processing-only basis — they cannot use your data for any purpose other than the verification task Win 345 has assigned.
• Live score and sports data providers: These providers receive no personal data. They supply data to Win 345; nothing flows the other way.
• Cloud infrastructure providers: Win 345 uses reputable cloud infrastructure providers to host platform data. These providers access data only to provide hosting services and are contractually prohibited from accessing or using it for any other purpose.
• Law enforcement and regulatory authorities: Win 345 will disclose personal data to law enforcement agencies, financial intelligence units or court-ordered proceedings where legally required to do so. Win 345 will notify affected players of such disclosures unless prohibited by the relevant legal process.

Win 345 retains personal data only for as long as it is necessary for the purpose it was collected, or for as long as we are required to keep it by applicable law. The following retention periods apply:

Win 345 uses cookies and similar technologies on the platform website. Cookies are small text files stored on your device by your browser that help the platform remember your preferences, keep you logged in securely and understand how the platform is being used. Here is a breakdown of the cookie types used on Win 345:

Win 345 does not use advertising cookies or cross-site tracking cookies. No third-party advertising network places cookies on your device through Win 345. The analytics cookies used by Win 345 are anonymised and aggregate — no individual player is profiled through them.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete and block cookies on a per-site basis. Note that disabling essential cookies will prevent the Win 345 platform from functioning correctly — you will not be able to log in or place bets without them.

Data security is not an afterthought at Win 345 — it is a foundational design principle. The following security measures are in place to protect your personal data at all times:

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and Win 345 servers. This is the same standard used by banks and financial institutions worldwide.
• At-rest encryption is applied to all sensitive data stored on Win 345 database servers, including CNIC data, financial records and authentication credentials.
• Password hashing: Win 345 never stores your password in plain text. Passwords are hashed using a modern cryptographic hashing algorithm with unique salts — even Win 345 employees cannot see your password.
• Two-factor authentication (2FA): Win 345 offers 2FA for all registered accounts and strongly recommends enabling it. 2FA means that even if someone obtains your password, they cannot access your Win 345 account without the second factor.
• Access controls: Win 345 employee access to player data is restricted on a strict need-to-know basis. Customer support agents can access the minimum data necessary to resolve your query. No employee can view your full payment card numbers.
• Intrusion detection and monitoring: Win 345 runs continuous automated monitoring for unusual access patterns, login anomalies and potential data breach indicators. Alerts are investigated by the security team in real time.
• Regular security audits: Win 345 conducts periodic security assessments including penetration testing by independent security professionals.

Despite these measures, no digital system can claim absolute security against all possible threats. In the event of a data breach affecting your personal information, Win 345 will notify you promptly via your registered email address and will take all reasonable steps to contain the breach and minimise any harm.

As a registered Win 345 player, you have meaningful rights over your personal data. Win 345 is committed to honouring these rights promptly and without unnecessary friction. To exercise any of the rights below, contact us at support@win345.im with the subject line "Data Rights Request" and your registered account email.

Win 345 will not charge a fee for exercising any of these rights. We will respond to all data rights requests within 30 days of receiving a verified request. If a request is complex or there are a large number of requests, we may extend this by a further 30 days — in which case we will notify you of the extension and the reason for it.

Given that Win 345 handles real-money deposits and withdrawals in PKR through Pakistani payment channels, payment data privacy deserves specific attention. Here is how Win 345 handles your financial information:

• Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and are visible only to the payments processing system and, in masked format, to your account statement. Win 345 support staff see only the last four digits of a mobile wallet number for verification purposes.
• Bank account numbers provided for IBFT withdrawals are stored in encrypted form. They are used only for the specific withdrawal transactions you authorise and are never shared with any party other than the relevant banking system.
• Card data for Visa/Mastercard payments is handled exclusively by a PCI DSS-compliant payment processor. Win 345 does not store full card numbers, CVV codes or cardholder authentication data on its own servers.
• Transaction history is stored within your Win 345 account and is available to you at any time through your account transaction statement. This history is also used for account reconciliation, bonus calculations and dispute resolution.
• Source of funds documentation, when requested for AML purposes, is stored securely and reviewed only by trained compliance staff. It is never used for marketing or any commercial purpose.

Win 345 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is carried out at registration through date of birth confirmation and, where required, CNIC verification.

If Win 345 discovers or is notified that personal data has been collected from a minor, we will immediately close the associated account, delete the personal data to the extent permitted by applicable law, and return any deposits to the originating payment method. The player's date of birth will be flagged to prevent re-registration.

Parents and guardians who believe their child may have registered on Win 345 should contact us immediately at support@win345.im. We take such reports extremely seriously and will act promptly on any verified report of underage account usage.

Win 345 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law or guidance from regulatory authorities. The most current version of this Privacy Policy will always be available at win345.im/privacy-policy and will display the date of the most recent revision.

For material changes — those that significantly affect how your data is collected, used or shared — Win 345 will notify registered players via their registered email address or through a notification in the Win 345 account dashboard at least 14 days before the change takes effect.

Your continued use of Win 345 after a revised Privacy Policy is published constitutes your acceptance of the changes. If you do not accept a revised Privacy Policy, you must stop using Win 345 and contact us to close your account.

If you have any questions about this Privacy Policy, want to exercise your data rights, have a concern about how your data is being handled on Win 345, or want to report a suspected data breach or impersonation attempt, please contact us:

Win 345 is committed to resolving privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection or financial regulatory authority in Pakistan.