538win Privacy Policy

1Who We Are

538win is an internationally licensed online gaming platform offering sports betting, live casino, slot games, lottery products, and related gaming services. The 538win platform is operated by 538win and is accessible to eligible players in Pakistan and other permitted jurisdictions via 538win.org.

For the purposes of data protection law, 538win is the data controller responsible for your personal data collected through the 538win platform. As data controller, 538win determines the purposes for which your personal data is processed and the means by which that processing takes place.

If you have any questions about how 538win handles your personal data, or if you wish to exercise any of the rights described in this Policy, please contact the 538win Data Protection team at [email protected].

2Data We Collect

538win collects personal data from you in the following categories. We collect only the minimum data necessary for the specific purpose for which it is required.

3How We Collect Your Data

538win collects your personal data through the following channels and methods:

• Direct provision by you: When you register a 538win account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey or promotion, you directly provide personal data to 538win.
• Automated technical collection: When you access the 538win platform, our servers automatically collect technical data including your IP address, browser type, device identifiers, and session activity logs. This data is collected via server logs, cookies, and similar technologies.
• Payment processors: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, SadaPay, Allied Bank, or USDT TRC20, the relevant payment processor may share limited transaction confirmation data with 538win to verify the transaction and credit or debit your 538win wallet accordingly.
• Identity verification services: Where 538win engages a licensed third-party KYC or AML screening service to assist with identity verification, that service may provide 538win with data verification results and risk screening outcomes.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, 538win may consult publicly available databases or sanction screening lists.

4How We Use Your Data

538win uses your personal data for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent.

• Account management: Creating, maintaining, and securing your 538win player account, including processing your registration, verifying your identity, and managing your login credentials.
• Transaction processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, Allied Bank, and USDT TRC20; maintaining an accurate record of your 538win wallet balance and transaction history.
• Legal and regulatory compliance: Complying with anti-money-laundering (AML) regulations, counter-terrorism financing (CTF) obligations, age verification requirements, and reporting obligations under our international gaming licence.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the 538win platform.
• Customer support: Responding to your enquiries, resolving disputes, investigating complaints, and providing technical support.
• Responsible gaming: Monitoring your betting patterns for signs of problem gambling behaviour and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where requested or required.
• Platform improvement: Analysing aggregated usage data to improve the 538win platform's functionality, game selection, and user experience for Pakistani players.
• Marketing communications: Sending you promotional offers, bonus notifications, and PSL or cricket betting alerts — but only if you have opted in to receive such communications. You may withdraw marketing consent at any time.

5Legal Basis for Processing

538win processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contract performance: Processing your data is necessary to perform the contract between you and 538win — specifically to operate your account, process deposits and withdrawals, and deliver gaming services to you.
• Legal obligation: Processing is required for 538win to comply with applicable legal obligations including AML/CTF requirements, age verification mandates, and gaming licence conditions.
• Legitimate interests: Processing is necessary for 538win's legitimate interests in preventing fraud, securing the platform, and improving platform performance, provided those interests are not overridden by your privacy rights.
• Consent: For non-essential processing activities — such as sending you marketing communications or placing non-essential cookies on your device — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Data Sharing & Third Parties

538win does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT TRC20 wallet infrastructure providers receive only the transaction data necessary to process your deposit or withdrawal request.
• Identity verification and KYC providers: Licensed third-party KYC service providers receive your identity document data solely for the purpose of verifying your identity and conducting AML/CTF screening on behalf of 538win.
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity service providers who process data on 538win's behalf under strict data processing agreements.
• Customer support platforms: Live chat and email support technology providers who access communication data solely to facilitate customer service delivery.
• Regulatory and law enforcement authorities: Where required by law, court order, or gaming licence obligation, 538win may disclose your personal data to competent regulatory bodies, law enforcement agencies, or gaming licensing authorities without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of 538win's business assets, your personal data may be transferred to a successor entity, subject to equivalent data protection commitments.

7Cookies & Tracking Technologies

538win uses cookies and similar tracking technologies on the 538win platform. A cookie is a small text file placed on your device by a website to store information about your visit. 538win uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential to enable you to navigate the 538win platform, maintain your login session, and use core features such as the cashier and bet slip. These cookies cannot be disabled without significantly impairing your ability to use 538win.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and bet layout — to provide you with a more personalised experience on 538win.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the 538win platform, including which pages are visited most frequently and where technical errors occur. This data helps 538win improve platform performance and reliability.
• Session security cookies: These cookies support 538win's fraud detection and account security systems by helping identify unusual login patterns or suspicious session activity.

538win does not deploy third-party advertising or behavioural tracking cookies. You can manage your cookie preferences via your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 538win platform.

8Data Security

538win implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes the following measures:

• 256-bit SSL/TLS encryption on all data transmissions between your device and 538win servers, ensuring that your login credentials, payment data, and personal information are never transmitted in readable form over the internet.
• Encrypted data storage: Sensitive personal data — including identity documents and financial transaction records — is stored in encrypted form on access-controlled servers.
• Access controls: Access to personal data within 538win's systems is restricted to authorised personnel on a strict need-to-know basis, with all access activity logged and audited.
• Regular security audits: 538win's platform and data infrastructure undergoes regular security assessments, penetration testing, and vulnerability scanning to identify and address potential security weaknesses before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, 538win will notify affected players and relevant authorities in accordance with applicable notification obligations.

9Data Retention

538win retains your personal data for different periods depending on the type of data and the purpose for which it was collected:

• Active account data: For as long as your 538win account remains open and active.
• Account closure data: Following closure of your 538win account, your identity, KYC, and transaction data is retained for a minimum of five (5) years in compliance with applicable AML/CTF regulations and gaming licence requirements.
• Customer support communications: Live chat transcripts and support email records are retained for three (3) years to support dispute resolution and quality assurance.
• Technical and usage data: Server logs and session data are retained for up to twelve (12) months for security monitoring and platform performance analysis, after which they are anonymised or deleted.
• Marketing consent records: Records of your marketing consent and opt-out history are retained for the life of your account plus three (3) years to demonstrate compliance.

When your personal data is no longer required for any lawful purpose, 538win will securely delete or irreversibly anonymise it so that it can no longer be associated with you as an individual.

10Your Privacy Rights

As a 538win player, you have the following rights with respect to your personal data. These rights apply regardless of whether you are based in Karachi, Lahore, Islamabad, Peshawar, or any other city across Pakistan:

• Right of access: You may request a copy of all personal data that 538win holds about you. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You can update many account details directly from your 538win account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests may be limited by our legal obligations to retain certain data for AML/CTF compliance.
• Right to restrict processing: In certain circumstances, you may request that 538win restricts the processing of your personal data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: Where processing is based on your consent or contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact the 538win support team via live chat or by emailing [email protected]. We will verify your identity before processing your request and will respond within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

11Children & Minors

The 538win platform is strictly intended for adults aged 21 years and above. 538win does not knowingly collect, process, or retain personal data from any individual under the age of 21.

If 538win discovers or has reason to believe that a registered player is under the minimum age of 21, that player's account will be immediately suspended, all associated personal data will be reviewed, and the account will be closed in accordance with 538win's age verification policy. Any funds in the account will be handled in accordance with our Terms & Conditions.

12International Data Transfers

As an internationally licensed gaming platform, 538win may transfer your personal data to servers or service providers located in jurisdictions outside Pakistan. Where such transfers occur, 538win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international data transfers include the following:

• Contractual data processing agreements with all international service providers that impose data protection obligations consistent with this Policy.
• Use of only service providers located in jurisdictions recognised as providing an adequate level of data protection, or where standard contractual clauses are in place.
• Encryption of all data in transit and at rest, regardless of the jurisdiction in which it is processed or stored.

You may request further information about the specific safeguards in place for any international data transfer by contacting [email protected].

13Policy Updates

538win may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made to this Policy, 538win will:

• Post the updated Policy on the 538win platform with a revised "Effective Date" at the top of the page.
• Where reasonably practicable, notify registered players of material changes via the email address associated with their 538win account.
• Where a change requires your fresh consent (for example, a new category of data processing), seek that consent separately before the new processing begins.

Your continued use of the 538win platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept any changes to this Policy, you must cease using the 538win platform and contact customer support to request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how 538win protects your personal data. The current version is always available at 538win.org/privacy-policy.

14Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how 538win handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the 538win platform. Average response time is 3–5 minutes.
• Email: [email protected] — responses within 24 hours for standard enquiries.

When submitting a privacy-related enquiry or complaint, please include your registered 538win username, a clear description of your concern, and any relevant reference numbers. This helps our team investigate and respond as quickly as possible.

If you are not satisfied with 538win's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or to the dispute resolution mechanism provided under 538win's gaming licence.