399win Privacy Policy

399win is the operator of the online casino and sports betting platform available at 399win.org. Throughout this Privacy Policy, references to "399win", "we", "us", or "our" refer to the platform operator responsible for the collection and processing of personal data submitted by players and visitors to the 399win platform.

399win operates under an international gaming licence and is committed to handling all personal data in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

As the data controller, 399win determines the purposes and means by which personal data collected through the platform is processed. Where third-party service providers process personal data on our behalf, they do so as data processors under binding contractual agreements that restrict their use of that data to the specific purposes for which it was shared.

399win collects the following categories of personal data, depending on your interaction with the platform:

399win collects personal data through the following channels:

• Direct submission: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access or interact with the 399win platform, including through cookies, pixel tags, and server logs. See the Cookies section for full details.
• Third-party sources: Identity verification data received from our KYC and AML service providers; fraud signals from our payment processors; publicly available information used to verify identity or investigate suspicious activity.
• Device and browser signals: Data transmitted by your device or browser, including IP address, device fingerprint, and geolocation data (where you have granted permission), used for fraud detection and ensuring you are accessing the platform from a permissible location.

399win uses personal data collected from players for the following purposes:

• Account creation and management: To register your account, maintain your player profile, and provide you with access to 399win services.
• Identity and age verification: To verify that you are who you say you are and to confirm that you meet the minimum age requirement of 21 years. This is both a legal obligation and a core responsible gaming commitment.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other supported payment methods. Financial data is shared with payment processors only to the extent necessary to complete transactions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct. This includes automated risk-scoring of accounts and transactions.
• Regulatory and legal compliance: To fulfil obligations under our international gaming licence, including KYC, AML, responsible gaming, and record-keeping requirements. We may be legally required to share certain data with regulatory authorities or law enforcement.
• Customer support: To respond to your enquiries, resolve disputes, and provide you with technical assistance when needed.
• Platform improvement: To analyse how the platform is used, identify technical issues, and develop new features that improve the player experience for users across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan.
• Responsible gaming monitoring: To monitor player behaviour patterns and, where necessary, apply responsible gaming interventions such as deposit limit suggestions or self-exclusion prompts.
• Marketing communications: Where you have explicitly consented, to send you promotional offers, Eid and Ramadan seasonal promotions, PSL and cricket betting offers, and other marketing material relevant to your interests. You may withdraw consent at any time.

399win relies on the following legal bases for processing your personal data, consistent with internationally recognised data protection frameworks:

• Contract performance: Processing necessary to create and operate your 399win account, process payments, and deliver the services you have requested.
• Legal obligation: Processing required to comply with our obligations under applicable gaming licence conditions, AML regulations, and any order of a competent regulatory authority or court.
• Legitimate interests: Processing conducted to pursue the legitimate interests of 399win, including fraud prevention, platform security, and improving the quality of our services — where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain non-essential cookies, which is carried out only where you have given clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

399win does not sell, rent, or trade personal data to third parties. We may share your data with the following categories of recipient, strictly for the purposes described:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment providers, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify your identity documents, confirm your age, and screen against sanctions and PEP (Politically Exposed Person) lists as required by our licensing obligations.
• Gaming technology providers: Software providers who supply the casino games, sports betting engine, live dealer platform, and slot titles available on 399win. These providers may receive anonymised or aggregated usage data to maintain and support their products.
• Fraud and security services: Third-party risk management and fraud detection providers who assist us in identifying suspicious activity and protecting the integrity of the platform.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: We may disclose personal data to regulators, law enforcement agencies, courts, or other public authorities where we are legally required to do so or where disclosure is necessary to protect the rights and safety of 399win or other players.
• Professional advisers: Solicitors, accountants, auditors, and insurers, where necessary in the context of professional advice or dispute resolution, subject to applicable professional privilege and confidentiality obligations.

As an international online gaming platform, 399win's operations, servers, and third-party service providers may be located in jurisdictions outside Pakistan. Where personal data is transferred internationally, 399win takes appropriate steps to ensure that such transfers are conducted in accordance with applicable data protection requirements and that your data receives a level of protection equivalent to that afforded under international data protection standards.

Safeguards used for international transfers include standard contractual clauses incorporated into data processing agreements with service providers, and in some cases reliance on adequacy decisions or equivalent mechanisms recognised under applicable law.

399win retains personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of the account's active lifetime plus a minimum of five (5) years following account closure, in accordance with our licensing and AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of the player's last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support correspondence: Retained for three (3) years from the date of the most recent communication, or longer if the correspondence relates to an unresolved dispute.
• Marketing data: Retained until you withdraw consent to receive marketing communications, at which point your details are removed from active marketing lists. Suppression records may be retained to ensure the opt-out is honoured.
• Technical and usage data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

399win implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between player devices and 399win servers.
• Encryption of sensitive data at rest, including financial data and KYC documents, using industry-standard encryption standards.
• Role-based access controls ensuring that personal data is accessible only to 399win staff and processors who have a genuine need to access it.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Intrusion detection and continuous monitoring of platform infrastructure for anomalous activity.
• Staff training on data protection obligations and security best practices.

While 399win takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their 399win accounts and to enable two-factor authentication where available.

The 399win platform uses cookies and similar tracking technologies to improve your experience, maintain session security, and gather analytical data about platform usage. The following categories of cookies are used:

You may manage your cookie preferences at any time via the cookie settings panel accessible from the footer of the 399win website. Please note that disabling strictly necessary cookies may impair your ability to log in or use core platform features. Withdrawing consent for analytical or marketing cookies will not affect your ability to place bets or use account features.

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data that 399win holds about you. To exercise any of these rights, please contact our support team using the details in Section 15.

• Access: You may request a copy of the personal data 399win holds about you. We will provide this within 30 days of a valid request.
• Rectification: If any personal data held by 399win about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that identity data verified through the KYC process can only be amended via the formal identity correction process described in our Terms & Conditions.
• Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, we cannot delete AML-required records during the mandatory retention period.
• Restriction: You may request that 399win restricts processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Portability: You have the right to receive personal data you provided to 399win in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Object: You may object to the processing of your personal data where it is based on legitimate interests. You also have an absolute right to object to direct marketing at any time.
• Automated decisions: Where 399win makes decisions about you based solely on automated processing that have a significant effect — such as automated account suspension triggered by fraud detection systems — you have the right to request human review of that decision.

The 399win platform is strictly intended for adults aged 21 years and over. 399win does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory age verification as part of the KYC process.

If 399win becomes aware that personal data has been collected from a person under the age of 21, all such data will be permanently deleted and the associated account will be closed immediately. Any funds held in an underage account will be returned to the verified payment source used for deposit, with all winnings forfeited.

399win supports parental control tools and encourages parents to use web filtering software to restrict access to gambling websites for minors in their household.

399win may send you promotional communications including deposit bonus offers, PSL cricket betting promotions, Eid ul-Fitr and Eid ul-Adha seasonal campaigns, Ramadan-period offers, and other special promotions — but only where you have explicitly consented to receive such communications during account registration or at a later date via your account settings.

All Ramadan-period and Eid promotional communications are reviewed internally to ensure cultural sensitivity and respect for Pakistani values. We are committed to promoting our services in a way that is tasteful, appropriate, and in keeping with the spirit of these important occasions.

You may withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences in the 399win Account Settings panel.
• Clicking the "Unsubscribe" link included in any marketing email from 399win.
• Contacting our support team directly at [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests will be actioned within 48 hours. Please note that even after opting out of marketing communications, you will continue to receive transactional and account-related messages (such as deposit confirmations, withdrawal notifications, and security alerts), as these are necessary for the operation of your account.

399win reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — for example, a new category of data being collected, a new purpose for processing, or a new category of third-party recipient — 399win will notify registered players via email and/or via a prominent notice displayed on the platform prior to the change taking effect.

The "Last Updated" date displayed at the top of this page will always reflect the date on which the current version of this Privacy Policy came into effect. We encourage you to review this page periodically to remain informed of how 399win processes your personal data.

Your continued use of the 399win platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should cease using the platform and contact our support team to request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how 399win has handled your personal data, please get in touch with our support team using the details below:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request – [Your Username]"
• Subject Line for Privacy Complaints: "Privacy Complaint – [Your Username]"
• Live Chat: Available 24/7 via the 399win platform after login
• Response Time: Acknowledgement within 5 business days; full response within 30 days

If you are not satisfied with 399win's response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority in the jurisdiction in which 399win holds its international gaming licence . Details of the relevant supervisory authority will be provided upon request by contacting our support team.