345win Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction & Scope

345win is committed to protecting the privacy and personal data of every individual who uses the platform. This Policy applies to all personal data processed by 345win in connection with the operation of the 345win platform — including during account registration, deposits and withdrawals, gameplay, customer support interactions, marketing communications, and compliance activities.

This Policy applies to all users of the 345win platform regardless of their location, including Pakistani players accessing the platform from cities including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other locations. Where local data protection laws impose requirements additional to those described in this Policy, 345win will comply with the more protective standard.

This Policy does not apply to third-party websites, payment processors, or services that may be linked from or interact with the 345win platform. Each third party operates under its own independent privacy policy, which you should review separately.

2 Data Controller

345win is the data controller responsible for personal data processed in connection with the 345win platform at 345win.lat. As data controller, 345win determines the purposes and means of processing personal data and is accountable for ensuring that processing is conducted in accordance with applicable data protection principles and this Policy.

For all data protection enquiries, requests to exercise your data rights, or complaints regarding the processing of your personal data, please contact 345win's designated data protection contact at: [email protected].

3 Personal Data We Collect

345win collects the following categories of personal data in the course of operating the platform. The specific data collected in any given interaction depends on the nature of that interaction.

345win does not collect special category personal data (such as health information, political opinions, or religious beliefs) as a standard part of account operation. Limited health-related information may be processed where voluntarily provided by a Player in the context of a responsible gambling intervention — such information is treated with the highest level of confidentiality.

4 How We Collect Personal Data

345win collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, using live chat support, submitting email enquiries, or updating your account settings.
• Automated collection: Technical data collected automatically when you access the 345win platform, including IP address, device identifiers, browser characteristics, and session activity — captured through server logs, cookies, and similar tracking technologies.
• Payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when you make deposits or receive withdrawals. 345win receives confirmation data only — full payment credentials are handled by your payment provider under their own security and privacy standards.
• Identity verification services: Where third-party KYC verification services are used to confirm your identity during account verification, those services may share identity confirmation results with 345win.
• Fraud prevention services: Technical signals shared by fraud prevention partners to support account security monitoring.

5 Legal Basis for Processing

345win processes personal data in accordance with recognised legal bases for data processing. The applicable legal basis depends on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between 345win and the Player — including account management, processing deposits and withdrawals in PKR, enabling gameplay, and providing customer support.
• Legal obligation: Processing required to comply with 345win's obligations under its international gaming licence — including KYC identity verification, anti-money laundering checks, transaction record-keeping, and responsible gambling monitoring.
• Legitimate interests: Processing necessary for 345win's legitimate business interests where these interests are not overridden by the Player's privacy rights — including fraud detection, platform security monitoring, service improvement, and responsible gambling analytics.
• Consent: Processing activities based on your freely given, specific, and informed consent — principally direct marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of any prior processing.

6 How We Use Your Personal Data

345win uses the personal data collected for the following specific purposes:

• Creating and managing your 345win account, including authentication of your identity at login.
• Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and processing withdrawal requests back to your registered payment method.
• Verifying your identity and age to ensure compliance with the 345win 21+ age restriction and applicable KYC obligations under the platform's international gaming licence.
• Detecting and preventing fraud, money laundering, account takeover, bonus abuse, and other prohibited activities described in the 345win Terms & Conditions.
• Monitoring gameplay patterns to identify indicators of problem gambling and to trigger responsible gambling interventions where appropriate, including imposing protective account limits.
• Providing customer support, including maintaining records of live chat and email communications sufficient to resolve ongoing queries and disputes.
• Communicating with you regarding your account, including security alerts, transaction confirmations, and material changes to platform terms or policies.
• Sending promotional communications where you have provided consent or where a legitimate interest basis applies — including information about 345win bonuses, PSL cricket betting offers, and casino promotions.
• Conducting analytical and statistical analysis to improve platform performance, user experience, and the quality of 345win's product offering.
• Maintaining audit records as required under 345win's regulatory obligations.

7 Data Sharing & Disclosure

345win does not sell personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard — to process PKR deposits and withdrawals. Each provider processes payment data under their own independent privacy framework.
• Identity verification providers: Third-party KYC service providers used to verify the identity and age of Players as required under 345win's gaming licence obligations.
• Game content providers: Live casino studio operators and slot game developers who supply certified games to the 345win platform may receive limited technical session data necessary to operate live game streams and RNG titles.
• Regulatory and licensing authorities: 345win's gaming regulator and licensing authority may require access to Player data and transaction records as part of their regulatory oversight function.
• Law enforcement and legal authorities: Personal data may be disclosed to relevant authorities where required by law, court order, or regulatory direction — including in connection with investigations into fraud or money laundering.
• Fraud prevention services: Technical and behavioural data may be shared with fraud prevention platforms to support account security.
• Professional advisors: Legal advisors, auditors, and compliance consultants engaged by 345win may access personal data where necessary for the provision of professional services — subject to confidentiality obligations.

All third parties with whom 345win shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using 345win Player data for their own independent commercial purposes.

8 International Data Transfers

345win operates under an international gaming licence and uses technology infrastructure that may involve the transfer and storage of personal data outside Pakistan. Where personal data is transferred internationally, 345win ensures that appropriate safeguards are in place to protect the data in accordance with applicable standards, including:

• Contractual data protection clauses with all international data processors and sub-processors.
• Transfer to jurisdictions that provide an adequate level of data protection as recognised under the governing licence framework.
• Implementation of technical and organisational security measures appropriate to the risk level of the data transferred.

By using the 345win platform, you acknowledge that your personal data may be transferred to, processed in, and stored in jurisdictions outside Pakistan as described in this Policy. 345win implements the safeguards described above to ensure that such transfers are conducted responsibly.

9 Cookies & Tracking Technologies

345win uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device when you access a website. 345win uses the following categories of cookies:

• Strictly necessary cookies: Required for basic platform functionality, including maintaining your login session, managing your PKR wallet state, and remembering your security preferences. These cookies cannot be disabled without breaking core platform features.
• Performance cookies: Used to collect anonymous aggregate data about how Players use the 345win platform — which pages are visited most frequently, where Players encounter errors, and how navigation flows perform. This data is used exclusively for platform improvement and does not identify individual users.
• Functional cookies: Used to remember your preferences — such as language settings, last visited game section, and responsible gambling tool configurations.
• Analytics cookies: Used by analytics services to measure platform traffic and usage patterns. Data is aggregated and anonymised before analysis.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core 345win platform features, but may affect some personalisation and performance tracking functionality. Note that strictly necessary cookies cannot be disabled through browser settings without preventing platform login.

10 Data Security

345win implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Transport Layer Security: All data transmitted between your browser or device and 345win servers is encrypted using TLS (256-bit SSL), ensuring that your login credentials, PKR transactions, and personal information cannot be intercepted in transit.
• Encrypted storage: Personal and financial data stored on 345win infrastructure is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within 345win's systems is restricted on a strict need-to-know basis. Staff access is role-limited, logged, and subject to regular audit review.
• Brute-force and intrusion detection: 345win employs automated systems to detect and block suspicious login attempts, credential stuffing attacks, and other account security threats.
• Incident response: 345win maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and interests, 345win will notify affected Players and relevant authorities in accordance with applicable obligations.

While 345win implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own 345win login credentials. If you suspect your account has been compromised, contact 345win support immediately at [email protected].

11 Data Retention

345win retains personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable regulatory retention requirements under the platform's international gaming licence. The following general retention principles apply:

• Account data: Retained for the duration of the account and for a minimum period of five (5) years following account closure, as required under anti-money laundering and gaming licence record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records, including JazzCash and EasyPaisa transaction data, are retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, in line with AML record-keeping requirements.
• Customer support communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the last interaction, or longer where a complaint or dispute remains unresolved.
• Marketing consent records: Records of marketing consent and withdrawal are retained for the duration of the account and for a period of two (2) years following account closure.
• Technical and log data: Server logs and security monitoring data are retained for up to twelve (12) months unless a specific security investigation requires longer retention.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised, the resulting aggregated information no longer constitutes personal data and may be retained indefinitely for statistical and analytical purposes.

12 Your Data Rights

As a 345win Player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and specify the right you wish to exercise.

• Right of Access: You have the right to request confirmation of whether 345win holds personal data about you and, if so, to receive a copy of that data along with information about how it is used.
• Right of Rectification: You have the right to request correction of any personal data held about you that is inaccurate or incomplete. You can update many basic account details directly through your 345win account settings.
• Right of Erasure: You have the right to request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent where consent was the basis for processing; (c) the data has been unlawfully processed. This right is subject to overriding retention obligations under 345win's gaming licence and anti-money laundering requirements.
• Right to Restrict Processing: You have the right to request that 345win restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and conducted by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests grounds, including profiling. 345win will cease such processing unless compelling legitimate grounds are demonstrated that override your interests.
• Right to Withdraw Marketing Consent: Where processing of your data for marketing is based on your consent, you may withdraw that consent at any time by contacting support or updating your account communication preferences. Withdrawal does not affect lawfulness of prior processing.

13 Children's Privacy & Age Verification

345win is strictly an adult platform. Access to the platform is prohibited for individuals under the age of 21 years. 345win does not knowingly collect personal data from individuals under 21. If 345win becomes aware that personal data has been collected from a person under the minimum age, that data will be immediately deleted and the associated account will be closed in accordance with the 345win Terms & Conditions.

345win implements age verification procedures as part of the KYC process to confirm that all account holders meet the 21+ requirement before withdrawal eligibility is granted. Players are required to confirm their age at account registration, and documentary proof of age may be requested at any point.

If you have reason to believe that a person under 21 has registered an account on 345win, please contact us immediately at [email protected]. 345win takes underage gambling extremely seriously and cooperates fully with child protection authorities where required.

14 Marketing Communications

345win may send you promotional communications about 345win bonuses, cricket betting offers, casino promotions, and platform updates. Marketing communications are sent only where: (a) you have provided explicit consent during account registration or subsequently via account settings; or (b) where a legitimate interest basis applies for communications about products or services substantially similar to those you have previously used on the platform.

You may opt out of receiving marketing communications at any time by:

• Updating your communication preferences in your 345win account settings.
• Contacting 345win support at [email protected] with a written opt-out request.

Opting out of marketing communications does not affect your receipt of transactional communications related to your account — including deposit confirmations, withdrawal notifications, account security alerts, and mandatory policy change notifications, which 345win is required to send regardless of marketing preferences.

15 Third-Party Services

The 345win platform integrates with a number of third-party services necessary for its operation — including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard), live casino game providers, slot game suppliers, and KYC verification services. Each of these third parties operates under its own independent privacy policy.

345win does not control the data practices of third-party providers and is not responsible for the content or accuracy of their privacy policies. Players are encouraged to review the privacy policies of any payment provider or service they use in connection with their 345win account. 345win selects third-party partners who demonstrate appropriate data protection standards, and all partnerships are subject to contractual data protection obligations.

16 Policy Amendments

345win reserves the right to update or amend this Privacy Policy at any time to reflect changes in: applicable law or regulatory requirements; the nature of data processing activities conducted by 345win; or third-party service partnerships.

Where material changes are made to this Policy, 345win will provide advance notice to Players via: (a) a notification displayed upon next login; (b) email to your registered address; or (c) a prominent notice on the 345win platform. The revised Policy will state the updated effective date at the top of the document.

Your continued use of the 345win platform following the effective date of any amended Policy constitutes acceptance of the revised terms. If you disagree with any changes, you should cease using the platform and may request account closure by contacting 345win support.

17 Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding 345win's handling of your personal data, please contact us via the following channels:

• Email: [email protected] — subject line "Data Protection Request" or "Privacy Complaint".
• Live Chat: Available 24/7 inside your 345win account for general privacy queries. Complex data rights requests should be submitted via email to ensure proper documentation.

If you are not satisfied with 345win's response to a privacy complaint, you may have the right to escalate the matter to the data protection supervisory authority in your jurisdiction or to the relevant authority under 345win's international gaming licence. 345win will provide guidance on escalation paths upon request.

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. The current version is always available at 345win.lat/privacy-policy.