22win Privacy Policy – How We Protect Your Data

22win is an online gaming and sports betting platform operating at 22win.st, serving players across Pakistan. The platform offers slots, fish games, live casino, and sports betting — all denominated in PKR and accessible via both the website and the 22win Android application.

This Privacy Policy applies to all personal data collected through 22win.st, the 22win app, and any related communications or services. When this policy refers to "22win", "we", "us" or "our", it refers to the platform and the team responsible for operating it.

By registering an account on 22win, you acknowledge that you have read this Privacy Policy and understand how your data is collected and used. If you have any questions before registering, our support team is available 24/7 via live chat.

We collect personal data in several ways — directly from you when you register or use the platform, automatically when you browse or play, and occasionally from third-party partners such as payment providers. Here is a breakdown of what we collect:

Every piece of data we collect is used for a specific, defined purpose. We do not use your data in ways that would surprise you or that go beyond what is reasonably necessary to operate the platform and keep it safe. The main purposes are:

• Account management — creating and maintaining your player account, processing logins, and keeping your profile information up to date.
• Processing transactions — handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfers, and other supported payment methods.
• Platform security and fraud prevention — monitoring for suspicious activity, detecting duplicate accounts, and protecting the platform from abuse, collusion or financial crime.
• Customer support — responding to your questions, resolving disputes, and maintaining records of past interactions so we can assist you more effectively over time.
• Responsible gaming — monitoring gameplay patterns to identify signs of problem gambling and, where appropriate, reaching out with information about our self-exclusion and deposit limit tools.
• Improving the platform — analysing aggregated usage data to understand which games and features are most popular and to make improvements to the overall player experience.
• Marketing communications — sending you bonus alerts, promotional offers and platform updates, but only if you have opted in and only via the channels you have agreed to. You can opt out at any time.
• Age verification and compliance — confirming that all players are aged 18 or above, and fulfilling any other compliance obligations that apply to the platform.

We do not use automated decision-making or profiling in ways that produce significant legal effects on players — for example, we do not automatically deny withdrawals based purely on algorithmic scoring without human review.

We process your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity — most of our processing is necessary to fulfil our agreement with you as a registered player. Without processing your data, we cannot operate your account, process your PKR deposits or withdrawals, or provide access to games.
• Legitimate interests — we process certain data in pursuit of our legitimate business interests, such as preventing fraud, maintaining platform security, and improving our service. We only rely on this ground where our interests do not override your rights and privacy interests.
• Consent — for marketing communications and the use of non-essential cookies, we rely on your consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Legal obligation — where we are required to process or retain data to comply with applicable obligations, such as anti-money laundering checks or record-keeping requirements, we do so on this basis.

22win does not sell, rent or trade your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors — JazzCash, Easypaisa, Raast, and other payment partners receive the transaction data they need to process your PKR deposits and withdrawals. They do not receive your gameplay history or any data beyond what is needed for the payment itself.
• Game providers — third-party game studios whose titles appear in the 22win lobby may receive limited technical data (such as a pseudonymous player ID and bet amounts) necessary to run the game and return results. They do not receive your name, contact details or financial information.
• Technical service providers — companies that provide hosting, security, analytics or customer support infrastructure may process data on our behalf, strictly under data processing agreements and for no other purpose.
• Fraud prevention and law enforcement — if we have reasonable grounds to suspect fraud, money laundering, or other illegal activity, we may share relevant data with appropriate parties as required. We may also disclose data in response to a valid legal request where we are obliged to do so.

22win uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. A cookie is a small text file stored on your device when you visit the site. We use the following types:

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in as you move between pages, and security cookies that help protect against cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies — remember your preferences, such as your preferred language or game category, so you do not have to set them again each visit.
• Analytics cookies — help us understand how players use the platform. We use aggregated, anonymised analytics data to identify which features are popular and where improvements are needed. You can opt out of analytics cookies through your browser settings or our cookie preference tool.
• Marketing cookies — only placed with your consent, these help us show relevant promotional content within the platform. You can withdraw consent at any time.

You can manage cookie preferences through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the platform — for example, you may be logged out more frequently or lose saved preferences.

Keeping your personal data secure is a core responsibility we take seriously. 22win implements a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration or destruction:

• TLS encryption on all data in transit between your device and our servers, ensuring that your login details, PKR transaction data and personal information cannot be intercepted.
• Encrypted storage for sensitive data at rest, including passwords (stored as salted hashes, never in plain text) and financial records.
• Access controls — only authorised personnel with a legitimate need can access player account data, and all internal access is logged and audited.
• Regular security reviews to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication available to players for additional account security — we strongly encourage all players to enable this feature.

No system is completely immune to security risks, but we work continuously to maintain strong defences. If you suspect your account has been accessed without your permission, contact our support team immediately so we can investigate and take protective action.

We retain your personal data for as long as your account is active and for a defined period afterwards, depending on the type of data and the reason it was collected:

• Account and identity data — retained for the lifetime of your account and for a period after closure to comply with our record-keeping obligations and to handle any post-closure disputes or queries.
• Financial transaction records — PKR deposit and withdrawal records are retained for a minimum period required by our financial compliance obligations. This is typically several years from the date of the transaction.
• Gameplay data — retained for the duration of your account and used in aggregated, anonymised form for analytics purposes after account closure.
• Customer support communications — retained for a reasonable period to maintain context for ongoing or future support interactions.
• Marketing preferences and consent records — retained for as long as needed to honour your preferences and to demonstrate consent where required.

When data is no longer needed for any of the above purposes and there is no legal obligation to retain it, we securely delete or anonymise it. You can request early deletion of your data in certain circumstances — see the Your Rights section below for details.

As a 22win player, you have meaningful rights over your personal data. Here is what you can ask for, and how to exercise each right:

To exercise any of these rights, contact our support team via live chat. We will respond promptly. Please note that some requests — particularly erasure — may not be fully fulfilled where we have a legal obligation to retain certain records.

22win is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their date of birth, and we carry out age verification checks where there is any reason to doubt a player's age.

If we discover that an account has been registered by someone under 18, we will immediately close the account, void any transactions, and securely delete the associated personal data in line with our data retention policy. If you believe a minor has registered on the platform, please contact our support team immediately so we can investigate.

We may update this Privacy Policy from time to time as our platform evolves, as we introduce new features, or as our obligations change. When we make meaningful changes, we will notify active players via email or through an in-platform notification before the updated policy takes effect.

The "Last updated" date at the top of this page reflects when the most recent revision was made. Minor clarifications that do not materially affect how we handle your data may be made without a formal notification, though the updated date will always be revised.

We encourage you to review this page periodically, particularly if you are using a new feature for the first time or before making a significant deposit. Continued use of 22win after a policy update indicates your acceptance of the revised terms.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, please get in touch. Our support team is available 24 hours a day, seven days a week.

• Live chat: Available directly within the 22win platform — the quickest way to get a response.
• Email: [email protected] (displayed for reference — please use the live chat for faster assistance).

When contacting us about a data rights request, please have your registered email address or username ready so we can locate your account quickly. We aim to acknowledge all privacy-related requests within two business days and to resolve them as promptly as possible.