588win8 Privacy Policy —
Your Data, Your Rights, Our Commitments

This Privacy Policy ("Policy") is published by 588win8 ("we", "us" or "our") and applies to all personal data collected, processed and stored in connection with the 588win8 platform, accessible at 588win8.net (the "Platform"). The 588win8 Platform provides online sportsbook betting, accumulator wagering, casino games, jackpot slots and cockfighting products to users primarily located in Pakistan.

We take privacy seriously. This Policy is intended to be clear, straightforward and genuinely informative — not a document designed to obscure your rights. We have written it in plain English so that players across Pakistan, whether in Karachi, Lahore, Islamabad or elsewhere, can understand exactly what happens with their personal information when they use 588win8.

588win8 is the operator of the 588win8 Platform and is the data controller responsible for the personal information collected and processed through the Platform. For the purposes of this Policy, "data controller" means the entity that determines the purposes and means of processing personal data.

If you have any questions about this Policy, wish to exercise a data right, or need to raise a privacy concern, please contact our data privacy team using the contact details provided in Section 15 of this Policy.

588win8 collects personal data through several channels. The categories of data we collect, and the context in which we collect them, are set out below:

When you create a 588win8 account, we collect the information you provide during the registration process, which includes:

• Full name as it appears on your identification document
• Date of birth (to verify you meet the 18+ age requirement)
• Pakistan mobile telephone number
• Email address
• Preferred username and encrypted password
• City and region within Pakistan (optional)

To meet our anti-money-laundering obligations and to verify user age and identity, we may collect copies of:

• National Identity Card (CNIC) or equivalent government-issued identity document
• Proof of address documentation where required
• Selfie or liveness verification images where requested as part of the KYC process

When you deposit, withdraw or place bets on the 588win8 Platform, we collect:

• Payment method details (Easypaisa mobile number, JazzCash wallet ID, bank account number or card details as applicable)
• Deposit and withdrawal amounts in PKR
• Transaction timestamps and reference numbers
• Betting and gaming history, including markets, stake amounts and outcomes

When you access the 588win8 Platform, our systems automatically collect certain technical data, including:

• IP address and approximate geolocation (city-level)
• Device type, operating system and browser version
• Session timestamps, pages visited and features used
• Referral source (how you arrived at the 588win8 Platform)

If you contact 588win8 customer support via Live Chat, WhatsApp or email, we retain records of those communications for quality assurance, dispute resolution and training purposes.

If you activate any responsible gaming tools — deposit limits, session time controls, self-exclusion — or if our responsible gaming monitoring flags your account for a proactive welfare check, we create and retain records associated with those interactions to ensure the tools remain effective and to comply with our duty of care obligations.

588win8 uses the personal data we collect for the following purposes:

588win8 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the 588win8 Terms & Conditions and to provide the services you have requested, including account operation and payment processing.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering regulations, age verification obligations and record-keeping duties.
• Legitimate interests: Processing that serves 588win8's legitimate business interests, including fraud prevention, responsible gaming monitoring, security operations and platform analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including marketing communications by email or SMS. You may withdraw this consent at any time without affecting prior processing.

The 588win8 Platform uses cookies and similar tracking technologies to ensure core functionality, improve the user experience and support security. The categories of cookies we use are:

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in to your 588win8 account and security tokens that protect against cross-site request forgery.
• Functional cookies: Remember your preferences — for example, your preferred language setting or the last game lobby section you visited.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform, which pages are most visited and where users encounter difficulty. This data helps 588win8 improve the Platform experience for Pakistan users.
• Marketing cookies: Where you have provided consent, these cookies allow 588win8 to deliver relevant promotional messages and to measure the effectiveness of marketing campaigns.

You may manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use core 588win8 Platform features, including login and payment processing.

588win8 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment providers: Easypaisa, JazzCash, SadaPay, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, Visa and Mastercard receive the transactional data necessary to process your PKR deposits and withdrawals.
• Identity verification partners: Third-party KYC/AML service providers receive identity documents and related data for the purpose of verifying user identity and age.
• Game software providers: Casino and slot providers including Evolution Gaming, NetEnt, Pragmatic Play and SA Gaming receive the minimum session data required to deliver their games within the 588win8 Platform.
• Legal and regulatory authorities: 588win8 may disclose personal data to government authorities, law enforcement agencies or regulators where legally required to do so, or where we believe disclosure is necessary to prevent fraud, protect the safety of any individual or comply with a lawful request.
• Business transfers: In the event of a merger, acquisition or sale of all or part of 588win8's business, personal data held at the time may be transferred to the acquiring entity, subject to equivalent privacy protections.

588win8 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 588win8 servers
• AES-256 encryption for all personal data and financial records stored at rest
• Multi-factor authentication requirements for access to internal systems containing personal data
• Regular third-party security penetration testing and vulnerability assessments
• Role-based access controls ensuring that staff can only access personal data required for their specific job function
• Incident response and data breach notification procedures

In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected users, 588win8 will notify the affected individuals without undue delay and take all reasonable steps to contain and remediate the breach.

588win8 retains personal data for as long as it is necessary for the purposes for which it was collected, taking into account applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your 588win8 account and for a period of up to seven years following account closure, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure to comply with AML obligations.
• Transaction records: Retained for seven years following the date of each transaction.
• Customer support communications: Retained for three years following the resolution of each communication.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus two years following withdrawal of consent.
• Analytics data: Aggregated and anonymised after 24 months of collection. Individual session data is retained for no longer than 12 months.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 588win8's data disposal procedures.

588win8 respects and supports the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 15: