245win Privacy Policy

245win ("we", "us", "our", or the "Platform") is committed to protecting the privacy and personal data of every individual who uses our online casino and sports betting services at 245win.app. This Privacy Policy ("Policy") sets out in full detail the manner in which 245win collects, processes, stores, shares and protects personal data in connection with the operation of the Platform.

This Policy applies to all registered Players, prospective users who browse the Platform without registering, and any individual who communicates with 245win through our customer support channels. It should be read alongside the 245win Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By accessing or using the 245win Platform — whether from Karachi, Lahore, Islamabad, Faisalabad or anywhere else — you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to close your account.

For the purposes of applicable data protection law, 245win is the data controller in respect of personal data collected through and in connection with the 245win Platform. As data controller, 245win determines the purposes for which and the manner in which personal data is processed.

All data protection enquiries, access requests and complaints should be directed to the contact details above. 245win will respond to all substantive data protection requests within 30 calendar days of receipt.

245win collects the following categories of personal data from Players and Platform users:

245win does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information, except where strictly required for responsible gaming assessments with your explicit consent.

245win collects personal data through the following means:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and behavioural data collected automatically as you interact with the 245win Platform, including through cookies, session tracking and server logs. See Section 8 for full details on cookies.
• Third-Party Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, SadaPay or USDT TRC20 network confirmations when you make a deposit or withdrawal through those providers.
• Identity Verification Partners: Where 245win uses a third-party KYC verification service, that service may return identity confirmation data — such as name match results and document validity status — to 245win following your CNIC submission.
• Fraud Prevention Services: Data from device fingerprinting and fraud screening tools used to identify and prevent multi-accounting, bonus abuse and payment fraud.

245win processes personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 245win — including account operation, payment processing, game delivery and customer support — is carried out on the basis that it is necessary to provide the services you have requested.
• Legal Obligation: Processing carried out to comply with 245win's legal obligations under its international gaming licence, including KYC verification, AML monitoring, age verification and record-keeping requirements mandated by the licensing authority.
• Legitimate Interests: Processing carried out for 245win's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring and product improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

245win uses the personal data we collect for the following purposes:

• Account Management: Creating and maintaining your 245win account, authenticating your identity at login, and enabling secure access to the Platform following 245win Login.
• KYC and Age Verification: Verifying your identity using your CNIC to confirm you are aged 21 or over and to satisfy our licensing authority's Know Your Customer requirements.
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay and USDT TRC20, reconciling transactions, and investigating payment disputes.
• Platform Delivery: Operating casino games, live dealer tables, slot machines, sports betting markets and all other 245win Platform features.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and activating responsible gaming alerts, limit interventions or outreach as appropriate.
• Fraud and Security: Detecting and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse and unauthorised account access.
• Customer Support: Responding to your enquiries, resolving disputes, providing account assistance and maintaining support quality standards.
• Legal Compliance: Maintaining records and making disclosures required by our licensing authority and applicable law.
• Platform Improvement: Analysing aggregated usage data to improve the 245win user experience, fix technical issues and develop new features.
• Marketing (with consent): Sending promotional offers, bonus notifications and relevant platform updates to players who have opted in to such communications.

245win shares your personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, SadaPay and USDT TRC20 processing services receive the transaction data necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own processing activities.
• KYC and Identity Verification Partners: Third-party identity verification services receive your CNIC data for the purpose of confirming your identity and age. These processors are contractually bound to use your data only for verification purposes.
• Game Content Providers: Casino and slot game providers may receive your player session data — such as a Player ID — to deliver game content and resolve game-related disputes. No unnecessary personal data is shared with game providers.
• Fraud Prevention and Security Services: Fraud screening and device fingerprinting service providers receive technical data to assist 245win in identifying fraudulent activity.
• Licensing and Regulatory Authorities: 245win's international gaming licence authority may require access to player records for audit, compliance review or investigation purposes. 245win is legally obligated to cooperate fully with such requests.
• Law Enforcement and Legal Process: 245win will disclose personal data to law enforcement agencies, courts or other government bodies where required to do so by applicable law, regulation, court order or legal process.
• Professional Advisors: Legal, accounting and compliance advisors may access limited personal data where strictly necessary for the provision of professional services to 245win, subject to confidentiality obligations.

All third-party processors engaged by 245win are required to process personal data only on 245win's documented instructions, to maintain appropriate technical and organisational security measures, and to return or delete personal data following the conclusion of their engagement.

245win uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform operation, including session management, security tokens, and maintaining your authenticated state after 245win Login. These cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: Collect anonymised data about how Players use the Platform — including which pages are visited and how long sessions last — to help 245win identify technical issues and improve performance.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience on return visits.
• Analytics Cookies: Used to gather aggregated statistical data about Platform usage patterns. This information is used internally for product development decisions.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the 245win Platform. 245win does not use third-party advertising cookies or tracking pixels for cross-site advertising purposes.

245win retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our licensing authority or applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of your active account relationship with 245win.
• KYC and Identity Records: Retained for a minimum of five (5) years following account closure, as required by our international gaming licence and AML compliance obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with gaming licence financial record-keeping requirements.
• Gaming History: Retained for a minimum of three (3) years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for two (2) years from the close of each support interaction, for quality assurance and dispute reference purposes.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years following its withdrawal, as evidence of the consent lifecycle.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

245win implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration or destruction. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 245win Platform is encrypted using industry-standard TLS protocols, including data entered during 245win Login and payment processes.
• Database Encryption: Sensitive data fields — including CNIC numbers and payment method identifiers — are encrypted at rest in 245win's databases.
• Access Controls: Access to personal data within 245win's systems is restricted to personnel who require it to perform their role, on a need-to-know basis, and is subject to role-based access controls and audit logging.
• Two-Factor Authentication: 245win supports two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to protect their account from unauthorised access.
• Security Monitoring: 245win's systems are monitored continuously for suspicious activity, intrusion attempts and anomalous access patterns.
• Incident Response: In the event of a personal data breach that poses a risk to Players, 245win will notify affected users and relevant authorities in accordance with applicable legal requirements.

As a data subject, you have the following rights in respect of personal data held by 245win. These rights may be subject to certain limitations and conditions under applicable law:

• Right of Access: You have the right to request a copy of the personal data 245win holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by 245win. You may update certain data directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected. This right is subject to 245win's legal data retention obligations under its gaming licence.
• Right to Restriction: You have the right to request that processing of your personal data be restricted in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to opt out of direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected]. 245win will respond within 30 days and may request reasonable identity verification before actioning your request.

If 245win becomes aware that personal data has been collected from an individual under 21 years of age, the relevant account will be immediately suspended, all associated funds will be returned to the depositing payment method (where fraud is not suspected), and the personal data of the minor will be permanently deleted from 245win's systems without undue delay.

If you believe that a minor may have registered on 245win, please notify us immediately at [email protected]. 245win takes the protection of minors from online gambling extremely seriously and will act on any credible notification promptly.

The 245win Platform may reference or be accessed through third-party payment services including JazzCash, EasyPaisa, HBL and UBL. These third-party services operate under their own separate privacy policies, which govern their independent data processing activities. 245win is not responsible for the privacy practices of these third-party services.

When you complete a JazzCash or EasyPaisa transaction in connection with a 245win deposit or withdrawal, you are interacting with those providers' own systems and should review their respective privacy policies. 245win receives only the transaction confirmation data necessary to credit your account or process your withdrawal.

245win does not embed third-party advertising networks, social media tracking pixels or cross-site analytics services on the Platform that would share your personal data with third parties for their independent advertising purposes.

245win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements or Platform services. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material, 245win will provide notice to registered Players via email or an on-platform notification prior to the changes taking effect. Your continued use of the 245win Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

If you do not agree with a revised Privacy Policy, you should cease using the Platform and may request account closure by contacting [email protected]. Your verified real-money balance will be returned to your payment method upon account closure in accordance with the Terms & Conditions.

For any privacy-related enquiries, data subject rights requests, or concerns regarding how 245win handles your personal data, please contact us through the following channels:

• Email (plain text — not clickable): [email protected]
• Live Chat: Available directly within the 245win Platform following 245win Login. Average response time: under 5 minutes.
• Availability: 24 hours a day, 7 days a week, including Pakistani public holidays.

When submitting a data subject rights request, please include your registered mobile number or email address and a description of your request. To protect your privacy, 245win may require identity verification before processing access or deletion requests. 245win will respond to all substantive privacy requests within 30 calendar days of receipt.

If you are dissatisfied with 245win's response to a privacy complaint, you may escalate the matter to the relevant regulatory authority under 245win's international gaming licence.