This Privacy Policy ("Policy") is issued by wln588 ("we", "us", "our") and applies to all personal data collected through the wln588 website and platform accessible at wln588.cam, including all associated mobile interfaces, applications, gaming services, betting markets and support channels (collectively, the "Platform" or "Services").
We are committed to handling your personal data with transparency, care and respect. This Policy sets out the categories of personal data we collect, the purposes for which we process that data, the lawful bases on which we rely, the circumstances under which data may be shared with third parties, the period for which data is retained, and the rights you hold as a data subject.
By registering an Account, accessing the Platform or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with our Terms and Conditions.
Scope: This Policy applies to all users of the Platform regardless of their location, including users accessing from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and elsewhere in Pakistan. Applicable data protection law is determined by the jurisdiction in which wln588 holds its operating licence; Pakistani users should note that Pakistan's Personal Data Protection Bill (as amended from time to time) may also impose relevant obligations and rights, to the extent it has legal force in their circumstances.
The following definitions apply throughout this Policy:
"Personal Data"
Any information that identifies or can identify a living individual, directly or indirectly, including names, contact details, identity documents, financial information and device identifiers.
"Processing"
Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion and destruction, whether automated or manual.
"Data Controller"
The entity that determines the purposes and means of processing Personal Data. wln588 is the Data Controller for the Platform.
"Data Processor"
A third party that processes Personal Data on behalf of the Data Controller, pursuant to documented instructions and a data processing agreement.
"Data Subject"
The living individual to whom Personal Data relates — in the context of this Policy, this means you as a registered or visiting user of the Platform.
"Cookie"
A small text file placed on your device by the Platform for the purposes described in Section 10 of this Policy.
"KYC Documents"
Identity and address verification documents submitted by users as part of the Know Your Customer process, including national identity cards, passports, driving licences and proof-of-address documents.
"Sensitive Personal Data"
A subset of Personal Data warranting heightened protection under applicable data protection law, including health data, biometric data and information relating to criminal history.
The Data Controller responsible for your Personal Data collected through the wln588 Platform is the legal entity operating wln588 under its applicable licence. All data-related enquiries, access requests and deletion requests may be directed to our support team using the contact details set out in Section 16 of this Policy.
Where wln588 engages third-party service providers to process Personal Data on its behalf (for example, identity verification vendors, payment processing intermediaries or analytics providers), those parties act as Data Processors and are contractually bound to process data only in accordance with our written instructions and to maintain appropriate technical and organisational security measures.
wln588 collects Personal Data through multiple channels: directly from you when you register an Account, deposit or withdraw funds, contact our support team or use interactive features; automatically through your use of the Platform (technical and usage data); and in some cases from authorised third parties (identity verification partners, fraud detection services and payment providers).
| Category |
Data Elements |
Source |
| Identity Data |
Full legal name, date of birth, nationality, gender, government-issued ID number |
Provided by you; KYC verification partner |
| Contact Data |
Email address, mobile number, residential address |
Provided by you at registration or in Account settings |
| KYC Documents |
Scanned or photographed identity documents, proof-of-address documents, selfie images used for liveness checks |
Provided by you; identity verification partner |
| Financial Data |
Deposit and withdrawal transaction records, payment method references (e.g., masked account details), PKR account balances, transaction history |
Generated on Platform; payment processor |
| Technical Data |
IP address, browser type and version, device identifiers, operating system, session tokens, time zone, screen resolution |
Automatically collected via Platform |
| Usage Data |
Pages visited, games played, bets placed, bet amounts, game session durations, feature interactions, search queries |
Automatically collected via Platform |
| Communications Data |
Content of support chat transcripts, emails sent to [email protected], survey responses, complaint records |
Provided by you via support channels |
| Marketing Preferences |
Opt-in/opt-out status for promotional communications, preferred language |
Provided by you; derived from Platform behaviour |
Note on Sensitive Data: wln588 does not intentionally collect Sensitive Personal Data such as health or biometric information except where strictly required for regulatory compliance (for example, responsible gambling self-assessment data, which is handled with heightened confidentiality). KYC liveness-check selfies are processed solely for identity verification and are not stored beyond the period required for regulatory recordkeeping.
Under applicable data protection law, every act of processing Personal Data must be supported by a lawful basis. wln588 relies on the following legal bases:
- Contractual Necessity: Processing required to perform the contract between wln588 and you — specifically, operating your Account, processing deposits and withdrawals, settling bets and delivering gaming services. Without this processing, we cannot provide the Services.
- Legal Obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, KYC obligations, tax reporting requirements and responsible gambling mandates imposed by our licensing jurisdiction.
- Legitimate Interests: Processing necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights. Examples include fraud detection, platform security, product analytics and abuse prevention. We conduct balancing tests to ensure legitimacy.
- Consent: Where processing is based on your freely given, specific, informed and unambiguous consent — most notably for non-essential cookies and optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Vital Interests: In exceptional circumstances, processing may be necessary to protect the vital interests of you or another natural person (for example, passing data to emergency services in a welfare situation).
wln588 uses your Personal Data for the following specific purposes:
- Account Management: Creating, maintaining and updating your registered Account; authenticating your identity at login; managing password resets and two-factor authentication.
- Service Delivery: Processing bets, settling markets, operating live casino games, crediting winnings, processing deposits and withdrawals in PKR or other supported currencies, and managing bonus activations.
- KYC and AML Compliance: Verifying your identity and address in accordance with anti-money laundering requirements; monitoring transactions for suspicious activity; filing regulatory reports as required by applicable law.
- Responsible Gambling: Monitoring account activity against self-imposed limits; administering self-exclusion requests; detecting patterns consistent with problem gambling behaviour; fulfilling obligations under our responsible gambling framework.
- Fraud Prevention and Security: Detecting and preventing fraud, bonus abuse, multi-accounting, unauthorised access and other prohibited conduct; protecting the security of the Platform and our users.
- Customer Support: Responding to your support queries, complaints and data access requests via live chat, email ([email protected]) and other support channels.
- Platform Improvement: Analysing aggregate, anonymised usage data to improve the performance, features and user experience of the Platform. This analysis does not involve decisions that produce legal effects based on your individual behaviour.
- Marketing Communications: Sending you promotional information about wln588 offers, bonuses and features, but only where you have opted in and subject to your ability to unsubscribe at any time.
- Legal Proceedings: Establishing, exercising or defending legal claims; complying with court orders or regulatory requests for information.
wln588 does not sell, rent or exchange your Personal Data with unaffiliated third parties for their independent marketing purposes. We may share your data with the following categories of recipient solely to the extent necessary for the purposes described in this Policy:
- Identity Verification Providers: Third-party KYC platforms that perform document verification and liveness checks on our behalf. These providers act as Data Processors and are contractually bound by data processing agreements.
- Payment Service Providers: Financial intermediaries involved in processing deposits and withdrawals. Their involvement is limited to the minimum data required to execute the transaction. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this context do not constitute endorsement of gambling by those providers.
- Technology and Hosting Providers: Cloud infrastructure, server hosting, CDN and cybersecurity providers who process data solely to operate and protect the Platform under contractual data processing obligations.
- Game Content Providers: Third-party gaming studios that power certain game titles on the Platform may receive minimal session data for the purpose of game functionality. No identity data is transferred beyond what is technically required.
- Regulatory Authorities: Law enforcement agencies, licensing regulators, financial intelligence units and courts where we are legally required to disclose data, including in connection with AML investigations.
- Professional Advisers: Auditors, lawyers and other professional advisers, subject to professional confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, corporate restructuring or asset sale, your Personal Data may be transferred as part of that transaction. We will notify registered users of any material change in data controller identity.
The wln588 Platform operates internationally and your Personal Data may be transferred to, stored in, or processed in countries outside Pakistan and outside the European Economic Area (EEA), including jurisdictions where data protection laws may differ from those applicable in your country of residence.
Where such transfers occur, wln588 implements appropriate safeguards to ensure that your Personal Data continues to receive an adequate level of protection. These safeguards may include standard contractual clauses approved by relevant data protection authorities, or transfer to jurisdictions that have received an adequacy determination, as applicable.
Pakistani Users: Data transferred outside Pakistan is handled in accordance with the privacy protections described in this Policy. We maintain contractual commitments with all service providers who receive your data internationally, requiring them to uphold equivalent standards of data protection.
We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following indicative retention periods apply:
| Data Category |
Retention Period |
Reason |
| Account & Identity Data |
Duration of account + 5 years after closure |
AML legal obligation; legal claims limitation periods |
| KYC Documents |
Duration of account + 5 years after closure |
Regulatory requirement under AML obligations |
| Transaction Records |
Minimum 5 years from transaction date |
AML reporting; tax compliance; dispute resolution |
| Support Communications |
3 years from last communication |
Complaint handling; legal claims |
| Marketing Preferences |
Until consent withdrawn + 1 year |
Evidence of lawful marketing consent |
| Technical / Usage Logs |
Up to 13 months from collection |
Security monitoring; platform analytics |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to backup schedules or technical constraints, it will be isolated and protected until deletion is technically practicable.
wln588 uses cookies and similar technologies (such as local storage objects and session tokens) to operate the Platform and deliver a secure, functional user experience. The following cookie categories are used:
- Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They manage your login session, maintain your authenticated state and protect against cross-site request forgery attacks. No consent is required for strictly necessary cookies.
- Functional Cookies: These cookies remember your preferences — such as your preferred language, game display settings and responsible gambling limit configurations — across sessions. They do not track activity across third-party sites.
- Analytics Cookies: We use aggregate, anonymised analytics to understand how the Platform is used, which pages are most visited and where performance improvements are needed. Individual user data is not shared with analytics providers for their own commercial use. These cookies are activated only with your consent.
- Security Cookies: Short-lived cookies used to detect and prevent fraudulent login attempts, bot traffic and account takeover activity. These are considered strictly necessary for security purposes.
Managing Cookies: You can control non-essential cookies through the cookie preference centre accessible via the settings icon on the Platform. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will impair or prevent your ability to use the Services. Detailed browser instructions for managing cookies are available in your browser's help documentation.
wln588 does not use third-party advertising cookies or cross-site behavioural tracking technologies for the purpose of serving targeted advertising on external platforms.
Subject to the applicable data protection law of the jurisdiction governing this Policy, you hold the following rights in relation to your Personal Data. You may exercise these rights by submitting a written request to [email protected]. We will respond to all verified requests within thirty (30) calendar days of receipt.
- Right of Access: You have the right to request a copy of the Personal Data we hold about you, including a description of how it is used and with whom it has been shared. We will provide this in a commonly used electronic format.
- Right to Rectification: You have the right to request correction of Personal Data that is inaccurate or incomplete. You may update some data directly through your Account settings panel without contacting support.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where processing is unlawful. This right is subject to our legal retention obligations — for example, AML recordkeeping requirements may prevent full erasure for a prescribed period after account closure.
- Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested or pending the outcome of an objection to processing.
- Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your Personal Data in a structured, commonly used machine-readable format and to transmit it to another controller without hindrance from us.
- Right to Object: You have the right to object at any time to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
- Right to Withdraw Consent: Where we rely on your consent as the lawful basis for processing, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
- Right Not to be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce significant legal effects, unless you have provided explicit consent or the decision is necessary for a contract.
Identity Verification for Rights Requests: To protect against fraudulent or mistaken requests, we will verify your identity before processing any data subject rights request. We may request documentation confirming your identity. We will not charge a fee for processing rights requests unless requests are manifestly unfounded, excessive or repetitive.
The wln588 Platform is strictly intended for adults aged eighteen (18) years or older — or the higher minimum age required by the operator/license jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.
If we discover or are notified that Personal Data has been collected from a person below the minimum age, we will take immediate steps to delete that data and close the associated Account. All winnings generated by an underage account are void and will not be paid out.
If you are a parent or guardian and believe that a minor under your care has registered an Account with wln588, please contact us immediately at [email protected] so that we can take appropriate action promptly.
18+ Only: Being 18 years of age does not make gambling lawful in Pakistan. Local laws in Pakistan — including the Prevention of Gambling Act, 1977 — significantly restrict gambling activities. Users are solely responsible for determining whether participation is lawful in their jurisdiction.
wln588 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
- Encryption in Transit: All data exchanged between your browser or application and our servers is protected using Transport Layer Security (TLS 1.2 or higher), ensuring that communications cannot be intercepted in transit.
- Encryption at Rest: Sensitive Personal Data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All access is logged and subject to regular audit review.
- Penetration Testing: We conduct regular security assessments and penetration testing of the Platform infrastructure to identify and remediate vulnerabilities.
- Breach Response: We maintain a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and — where required — affected data subjects within the applicable statutory timeframe.
While we apply rigorous security controls, no system is impenetrably secure. We encourage you to use a strong, unique password for your wln588 Account, enable two-factor authentication and notify us immediately if you suspect unauthorised access to your Account.
The wln588 Platform may contain references to third-party services, including payment provider names (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) provided as contextual payment references. These are references only — wln588 is not responsible for the privacy practices or data handling policies of any third-party provider.
If you access a third-party service from a reference on this Platform, you do so at your own risk and are subject to that third party's privacy policy. We recommend reviewing the privacy policies of any third-party service before submitting personal information to them.
wln588 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices or Platform functionality. The "Last Updated" date at the top of this page will be revised on each occasion that material changes are made.
Where changes are material — meaning they affect your rights or the way we process your data in a significant way — we will notify registered users via the email address associated with their Account and/or display a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of and agreement to the amended terms. We therefore encourage you to review this page periodically.
If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, wish to report a suspected data breach, or have a privacy-related complaint, please contact us using the details below. All privacy communications should clearly state your registered email address and describe your request or concern.
Privacy and Data Enquiries:
Email:
[email protected]
Please include "Privacy Request" in the subject line and your registered username.
Live Chat Support: Available in-platform 24/7, English and Urdu.
Response Time: We acknowledge privacy requests within two (2) business days and provide a substantive response within thirty (30) calendar days of receipt of a verified request.
If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction governing this Policy. Details of the applicable authority will be provided upon request.