255win Privacy Policy

255win operates the online gaming and sports betting platform available at 255win.net. For the purposes of this Privacy Policy, 255win acts as the data controller in respect of all personal data collected from players and prospective players who access or use the Platform.

As data controller, 255win determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection standards consistent with the obligations of its international gaming licence.

255win collects the following categories of personal data from players and prospective players:

255win does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data beyond what is necessary for responsible gaming compliance purposes (for example, self-exclusion records).

255win collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting 255win support.
• Automated technical collection: Data gathered automatically when you visit or interact with the 255win Platform, including IP addresses, session data, and device information collected via server logs and cookies.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when you initiate a deposit or withdrawal.
• KYC service providers: Identity verification data returned by third-party KYC and AML screening providers used to fulfil 255win's licence obligations.
• Fraud prevention services: Risk signals and device fingerprinting data provided by fraud detection partners used to protect 255win accounts from unauthorised access.

255win processes your personal data for the following purposes:

• Account creation and management: Creating, maintaining, and securing your 255win player account, including authentication and password recovery.
• Payment processing: Processing deposits and withdrawals in PKR via supported Pakistani payment methods, including verification of payment source ownership.
• KYC and AML compliance: Verifying your identity and age (21+ requirement), screening against sanctions lists, and fulfilling anti-money laundering obligations under our international gaming licence.
• Platform provision: Delivering casino games, live dealer tables, sports betting markets, and all other features of the 255win Platform.
• Bonus and promotion administration: Determining eligibility, applying bonus credits, and monitoring wagering progress for 255win promotional offers.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour, applying deposit limits and self-exclusion measures, and maintaining exclusion records.
• Customer support: Responding to queries, resolving complaints, and maintaining records of communications for quality and compliance purposes.
• Fraud prevention and security: Detecting and preventing cheating, bonus abuse, multi-accounting, money laundering, and unauthorised account access.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and features of the 255win Platform.

255win processes personal data under the following legal bases:

• Contract performance: Processing necessary to provide the services set out in the 255win Terms and Conditions — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the contract between you and 255win.
• Legal obligation: KYC verification, AML screening, age verification, and responsible gaming record-keeping are carried out to comply with 255win's obligations under its international gaming licence and applicable financial regulations.
• Legitimate interests: Fraud detection, platform security, abuse prevention, and aggregated analytics are carried out on the basis of 255win's legitimate interests in operating a secure and fair gaming platform, where those interests are not overridden by your data protection rights.
• Consent: Marketing communications are sent only where you have expressly opted in to receive them. You may withdraw consent at any time by updating your notification preferences in Account Settings or by contacting support.

255win does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable financial regulations.
• KYC and AML service providers: Identity verification and sanctions screening providers receive identity documents and personal details necessary to complete the verification process mandated by our gaming licence.
• Game software providers: Casino game suppliers receive anonymised session data necessary to deliver game content and resolve technical disputes. Game providers do not receive your full identity data.
• Fraud prevention partners: Specialised fraud detection services receive device and behavioural signals to help 255win identify and prevent account abuse and financial crime.
• Regulatory and legal authorities: 255win may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by applicable law, regulatory instruction, or court order.
• Professional advisers: Legal, accounting, and auditing firms engaged by 255win may have access to personal data where strictly necessary for the relevant professional engagement, subject to confidentiality obligations.

255win uses cookies and similar tracking technologies to support Platform functionality, maintain session security, and improve user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functions including login session management, security token validation, and cashier operation. These cookies cannot be disabled without disrupting Platform functionality.
• Functional cookies: Store your language preferences, responsible gaming settings, and display preferences to personalise your 255win experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and interact with the 255win Platform. This data is used to identify usability improvements and performance optimisations.
• Security cookies: Support fraud detection by recording device characteristics and behavioural signals used to identify anomalous account activity.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the 255win Platform. Disabling analytics or functional cookies will not prevent Platform access but may affect your experience.

255win retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping requirements under our gaming licence.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the relevant transaction, consistent with financial regulatory obligations.
• Gaming activity data: Retained for up to 3 years from the date of each gaming session for responsible gaming monitoring, dispute resolution, and regulatory audit purposes.
• Support communications: Retained for up to 3 years from the date of the interaction to support quality assurance, complaint resolution, and regulatory review.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus a minimum of 5 years, to prevent re-registration in breach of exclusion terms.
• Marketing consent records: Retained for as long as a marketing relationship exists plus 2 years following opt-out, to demonstrate consent compliance.

255win implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and the 255win Platform is protected by TLS 1.3 with 256-bit SSL encryption. Your browser will display a padlock icon confirming the secure connection.
• Encryption at rest: Personal data stored on 255win servers is encrypted using AES-256 encryption. Database access requires multi-factor authentication from authorised personnel only.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. All access events are logged and subject to periodic audit.
• Intrusion detection: 255win operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Penetration testing: The 255win Platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Subject to applicable law and regulatory obligations, you have the following rights in respect of your personal data held by 255win:

• Right of access: You may request a copy of the personal data 255win holds about you. Requests will be fulfilled within 30 days of receipt.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For account details, many fields can be updated directly in Account Settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that 255win is required to retain certain data for legally mandated periods even after account closure.
• Right to restriction: You may request that 255win restricts processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contract, you may request a structured, machine-readable copy of the personal data you have provided to 255win.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately upon request.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request" and your registered account email address. 255win will acknowledge your request within 5 business days and fulfil it within 30 days, or notify you if a 30-day extension is required for complex requests.

The 255win Platform is strictly for players aged 21 years and older. 255win does not knowingly collect or process personal data belonging to individuals under 21 years of age.

Age verification is conducted as part of the KYC process for all registered accounts. Where 255win identifies or reasonably suspects that an account belongs to a person under 21 years of age, the account will be suspended immediately, all funds will be returned to the deposit source, and all personal data associated with the account will be deleted except where retention is required for regulatory reporting purposes.

As an internationally licensed gaming platform serving Pakistani players, 255win may transfer personal data to servers and service providers located outside Pakistan. Such transfers are made only where necessary to deliver the 255win Platform services and are subject to appropriate safeguards including contractual data protection obligations with all receiving parties.

Where personal data is transferred to payment processors for the purpose of PKR transactions via JazzCash, EasyPaisa, or Pakistani banking institutions, such transfers are to entities operating under Pakistan's own financial regulatory framework and subject to applicable local data protection standards.

255win sends marketing communications — including bonus offers, promotions, PSL betting highlights, and platform updates — only to players who have expressly opted in to receive such communications during registration or subsequently through Account Settings.

Marketing communications are delivered via email and, where consent has been provided, via SMS to your registered Pakistani mobile number. 255win does not use third-party advertising networks to target players across external websites or applications.

You may opt out of all marketing communications at any time by:

• Updating your notification preferences in Account Settings under the Marketing section.
• Clicking the unsubscribe link present in every 255win marketing email.
• Contacting 255win support via live chat or by emailing [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests are processed within 5 business days. Note that opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, KYC requests, or account security alerts — these are sent regardless of marketing preferences as they are necessary for account operation.

255win reviews this Privacy Policy regularly and updates it when our data practices change or when required by regulatory developments. Material changes — those that significantly affect how your personal data is used or your rights in relation to it — will be communicated to registered players by email at least 14 days before the changes take effect.

Minor clarifications and typographic corrections may be made without prior notice. The "Last Updated" date at the top of this document always reflects the most recently published version. Continued use of the 255win Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are available upon request by contacting 255win support at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 255win holds about you, please contact our team through the following channels. All privacy-related communications are handled with confidentiality.

255win does not have a dedicated Data Protection Officer in a statutory capacity; however, all data protection enquiries directed to [email protected] are escalated to a senior team member with data governance responsibility. We are committed to resolving all privacy concerns fairly, promptly, and in good faith.