Does 298win share my JazzCash or Easypaisa details with anyone?

No. When you make a deposit via JazzCash or Easypaisa, your payment is processed through the respective payment gateway directly. 298win receives confirmation that a transaction was successful along with the reference number and amount — it does not receive or store your full wallet credentials, PIN, or authentication details. The payment processor handles that data under their own security and privacy standards.

Can I ask 298win to delete my account and all my data?

Yes. You can request account closure and data deletion by contacting the support team. Before closure, any remaining real-money balance will be processed as a withdrawal to your verified payment method. After closure, most personal data is deleted. Transaction records are retained for the minimum legally required period for financial compliance purposes — typically five years — and cannot be deleted earlier. After the retention period expires, those records are also deleted.

Why does 298win ask for my CNIC for withdrawals?

Identity verification for withdrawals is a standard fraud prevention and anti-money laundering measure applied by financial platforms globally. It confirms that the person requesting a withdrawal is the same person who registered and funded the account. 298win only requests identity documents when necessary — typically for higher-value withdrawals or where account activity requires confirmation. Your CNIC data is stored securely and retained only for as long as legally required, then deleted.

How do I stop receiving promotional messages from 298win?

You can opt out of promotional communications at any time through the notification settings in your 298win account, or by contacting the support team and requesting to be removed from the marketing list. Opting out of promotions does not affect service communications — you will still receive messages about your account, transactions, and security alerts. Players who self-exclude are automatically removed from all promotional communications for the duration of their exclusion period.

Privacy Policy – 298win Online Gaming Platform Pakistan

1Introduction

This Privacy Policy applies to all users of the 298win platform — the website at 298win.pro and the 298win mobile application for Android. It covers how we collect personal data, the reasons we need it, how it is protected, who it may be shared with in limited circumstances, and how long it is retained.

By creating an account with 298win or using the platform in any capacity, you acknowledge that you have read this policy and consent to the processing of your personal data as described here. If you do not agree with any part of this policy, please do not register an account or use the platform.

298win takes privacy seriously. The platform is designed for adult players in Pakistan, and the way we handle personal data reflects the practical reality of operating a PKR-based gaming platform — including the identity verification requirements that apply to financial transactions.

Scope: This policy covers personal data processed by 298win in connection with your account, transactions, gameplay, and communications. It does not cover third-party sites or services that may be linked from the platform.

2Data We Collect

298win collects personal data in several ways — directly from you during registration and use, automatically through your interactions with the platform, and from payment processors in connection with your transactions.

Information You Provide Directly

Registration data: Full name, date of birth, mobile number, and any email address provided at sign-up. Date of birth is required to verify that you meet the minimum age of 18.
Identity verification documents: When you request a withdrawal above certain thresholds, or when 298win has a reasonable need to verify your identity, you may be asked to provide a copy of your CNIC or other government-issued identity document.
Communication records: If you contact the support team through live chat or email, the content of those conversations is retained for quality assurance and dispute resolution purposes.
Responsible gaming preferences: If you activate deposit limits, session reminders, or self-exclusion through your account settings, these preferences are stored and applied to your account.

Information Collected Automatically

Device and access data: IP address, device type, operating system, browser or app version, and approximate geographic location derived from IP. This is used for security monitoring and fraud prevention.
Gameplay and activity logs: Records of bets placed, games accessed, deposit and withdrawal history, login times, and session durations. These records are necessary for account management, dispute resolution, and responsible gaming monitoring.
Cookies and similar technologies: As described in Section 6 of this policy.

298win does not collect or store sensitive data categories such as religious beliefs, health information, biometric data, or political opinions. Data collection is limited to what is functionally necessary to operate a gaming and payment platform.

3How We Use Your Data

Personal data collected by 298win is used for the following purposes. We rely on different legal bases for different types of processing:

Purpose	Data Used	Legal Basis
Creating and managing your account	Name, mobile number, date of birth	Contract performance
Processing deposits and withdrawals in PKR	Payment method details, transaction records	Contract performance
Identity verification for withdrawals	CNIC or identity document, name	Legal obligation / fraud prevention
Detecting and preventing fraud or abuse	IP address, device data, activity logs	Legitimate interest
Sending promotional offers and bonuses	Contact details, gaming preferences	Consent (opt-out available)
Responsible gaming monitoring	Activity logs, session data, limit settings	Legitimate interest / legal obligation
Customer support and dispute resolution	Communication records, account history	Contract performance / legitimate interest

298win does not use personal data for automated decision-making that has a significant legal or similarly significant effect on you, other than fraud detection systems that may flag accounts for human review.

4Payment Data and Financial Records

All financial transactions on 298win are conducted in PKR. The platform supports JazzCash, Easypaisa, Raast, Bank Transfer, and eligible card payments. When you make a deposit or request a withdrawal, your payment is processed through the relevant payment gateway.

What 298win stores: Transaction records — amounts, dates, payment method type, and transaction reference numbers — are stored in your account history. These records are necessary for account management, dispute resolution, and financial compliance obligations.

What 298win does not store: Complete mobile wallet PINs, full card numbers, or bank account credentials. Sensitive payment authentication data is handled directly by the payment processor and is not transmitted to or stored by 298win's own systems.

298win applies a matching rule for withdrawals: funds can only be withdrawn to the same payment method used for the deposit. This is a fraud prevention and anti-money laundering measure. Withdrawal requests to different payment methods or third-party accounts will not be processed.

If you believe there is an error in your transaction history, contact the 298win support team through live chat. Transaction disputes are investigated using the records held on both the 298win platform and the relevant payment processor.

5Data Sharing

298win does not sell personal data. Sharing of personal data with third parties is limited to the following specific circumstances:

Payment processors: JazzCash, Easypaisa, Raast, and card payment networks receive the data necessary to process each transaction — typically your account reference, transaction amount, and payment method identifier. They operate under their own privacy policies and security standards.
Game software providers: When you launch a casino game, fish game, or arcade title, the game provider's system records the session, bet amounts, and outcomes. Game providers receive a player session token and bet data but do not receive your full personal profile unless specifically required for the game type.
Fraud prevention and security services: IP addresses and device identifiers may be checked against fraud detection databases as part of standard security monitoring. No full personal profiles are shared for this purpose.
Legal and regulatory requests: Where 298win receives a valid legal request from an authority requiring disclosure of account information, we will comply to the extent legally required. We will notify you of such requests where we are legally permitted to do so.

No personal data is shared with advertisers, data brokers, social media platforms, or marketing agencies. 298win does not participate in cross-platform data sharing arrangements.

International transfers: Some game providers and technical service partners operate systems hosted outside Pakistan. Where personal data is processed outside Pakistan, 298win takes reasonable steps to ensure it is handled with comparable security standards.

6Cookies and Tracking Technologies

The 298win website and app use cookies and similar technologies to support platform functionality and security. Here is a breakdown of the types used:

Essential cookies: Required for the platform to function — these manage your login session, keep your bet slip contents while you navigate, and maintain your language and display preferences. These cannot be disabled without breaking core functionality.
Security cookies: Used to detect unusual login activity, prevent cross-site request forgery, and monitor for automated access attempts. These are active for all users and are not optional.
Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, where users encounter issues, and how long sessions last on average. This data is aggregated and not linked to individual player profiles. These can be opted out of through your browser settings.
Performance cookies: Help load commonly used platform resources faster. These do not collect personal data beyond session identifiers.

298win does not use third-party advertising cookies or tracking pixels that profile your browsing behaviour across other websites. The platform does not display third-party advertisements.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the platform from functioning correctly — you may not be able to log in or place bets with essential cookies disabled.

7Retention Periods

298win retains personal data for as long as it is needed for the purpose it was collected, and not beyond that. The following retention periods apply:

Active account data: Retained for the full duration your account remains active. This includes your registration details, communication preferences, and responsible gaming settings.
Transaction and financial records: Retained for a minimum of five years after the transaction date to meet standard financial record-keeping obligations. After this period, records are deleted or anonymised.
Identity verification documents: Retained for the duration of your account and for a period after account closure consistent with anti-money laundering record-keeping requirements. Documents are securely deleted after the retention period expires.
Support communications: Retained for 24 months from the date of the conversation, after which they are deleted unless they are relevant to an ongoing dispute or legal matter.
Security and access logs: Retained for 12 months, after which they are deleted or anonymised unless flagged for security investigation.
Self-exclusion records: Records of self-exclusion periods are retained even after account closure to prevent re-registration during an active exclusion period.

When data is no longer required for any of the above purposes and no legal obligation requires its retention, it is securely deleted from 298win's systems.

8Data Security

298win implements technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include:

Encryption of data in transit between your device and the 298win platform using standard TLS protocols.
Access controls that restrict which staff members can access personal player data, based on job function and necessity.
Regular security reviews of the platform infrastructure to identify and address vulnerabilities.
Monitoring systems that flag unusual access patterns — including unusual login locations, rapid successive login attempts, and abnormal withdrawal request patterns — for human review.

While 298win takes reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. Players can contribute to the security of their own account by using a strong, unique password, not sharing their login credentials, and reporting any suspected unauthorised access to support immediately.

If you suspect your 298win account has been accessed without your authorisation, contact the support team immediately through live chat. Accounts can be locked quickly pending investigation.

9Your Rights Over Your Data

As a 298win player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the support team through live chat or email at [email protected].

Right of Access

Request a copy of the personal data 298win holds about you. We will provide this within a reasonable timeframe after verifying your identity.

Right to Correct

If any of your personal data held by 298win is inaccurate or incomplete, you can request that it be corrected. Contact support with the details of what needs updating.

Right to Delete

You can request deletion of your personal data. This is subject to legal retention obligations — financial transaction records cannot be deleted before their minimum retention period expires.

Right to Opt Out of Marketing

You can withdraw consent for marketing communications at any time through your account notification settings or by requesting opt-out through support. This does not affect service communications.

Right to Portability

You can request your account data in a structured, machine-readable format. This typically includes your registration details, transaction history, and activity records.

Right to Restrict Processing

In certain circumstances you can ask 298win to restrict how your data is used — for example, while a correction request is under review — without requiring full deletion.

Requests will be handled within 30 days. If a request is complex or numerous, we may extend this by up to a further 30 days with notification. Identity verification will be required before any data access or deletion request is actioned.

10Minors and Age Protection

298win is strictly an adults-only platform. No one under the age of 18 may register, deposit, or play on 298win under any circumstances. The platform actively implements age verification measures as part of the registration and identity verification process.

If 298win has reason to believe that a registered account holder is under 18, the account will be suspended immediately pending age verification. If the account is confirmed to belong to a minor, it will be closed permanently, all transactions will be reversed where possible, and any balance will be forfeited.

298win does not knowingly collect personal data from individuals under 18. If a parent or guardian believes that a minor has registered on 298win, please contact the support team immediately so the account can be investigated and closed.

Parental controls: If you share a device with minors, we strongly recommend using device-level parental control settings to prevent access to gaming platforms. 298win cannot control access at the device level — that responsibility sits with the device owner.

11Changes to This Privacy Policy

298win may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable data handling practices, or for other operational or legal reasons. When updates are made, the revised policy will be published on this page with an updated "Last Updated" date at the top.

For changes that materially affect how your data is used — particularly changes that reduce your rights or introduce new categories of data sharing — 298win will provide advance notice through an in-platform notification or a message to your registered contact details before the change takes effect.

Continued use of the 298win platform after any policy update constitutes acceptance of the revised privacy practices. If you do not agree with the updated policy, you should stop using the platform and contact support to request account closure.

We recommend reviewing this page periodically to stay informed of any updates, particularly if you are an active player who deposits and withdraws regularly.

12Contact and Data Requests

For any questions about this Privacy Policy, or to submit a data access, correction, deletion, or portability request, please contact the 298win support team using one of the following methods:

Live chat: Available 24/7 directly within the 298win platform or the Android app. This is the fastest way to get a response for urgent queries.
Email: [email protected] — include your registered mobile number or account username so your request can be matched to your account efficiently.

For data subject requests, please specify clearly what you are requesting — access to a copy of your data, correction of specific information, deletion, or restriction — and include a brief description of the relevant data. You will be asked to verify your identity before any data is shared or deleted.

For responsible gaming concerns — including activating deposit limits or self-exclusion — the support team can assist you immediately through live chat without navigating through account settings yourself.

This Privacy Policy was last reviewed and updated in January 2026. If you are reading this after that date and the policy has not been updated, it remains current as stated.