299win Privacy
Policy

This Privacy Policy ("Policy") describes how 299win ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the 299win website at https://299win.pro and any associated services, including sports betting, live casino, slot games, account management, and customer support interactions.

299win is committed to protecting the privacy of all users, with particular regard for the security expectations of our player base in Pakistan. We operate in accordance with applicable data protection principles and endeavour to handle all personal information with transparency, fairness, and integrity.

This Policy should be read alongside the 299win Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 299win. By registering an account or continuing to use the 299win platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions about this Policy or the way your personal data is handled, please contact the 299win support team as described in Section 15 below.

299win collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable platform experience. The categories of personal data we may collect include:

299win does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, except where such data is voluntarily provided by the user or is strictly required by applicable law.

299win collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account profile.
• Automated technologies: Technical and usage data collected automatically as you navigate the 299win platform, via cookies, server logs, session tracking, and analytics tools. See Section 9 for full details on cookies.
• Third-party sources: Identity verification data from document authentication providers; payment confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processors; fraud and risk screening data from compliance service providers.
• Publicly available sources: In certain circumstances, 299win may cross-reference publicly available information to verify the accuracy of identity data provided during registration or to fulfil anti-money-laundering obligations.

299win processes your personal data only for specific, legitimate purposes. The primary purposes for which your data is used include:

• Account creation and management: To register your 299win account, verify your identity and age (21+ requirement), maintain your account settings, and communicate account-related information to you.
• Service delivery: To process deposits and withdrawals in PKR, settle bets, deliver casino game sessions, and provide the full range of 299win platform services to you.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering (AML) regulations, including Know Your Customer (KYC) checks, transaction monitoring, and suspicious activity reporting.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: To enforce age restrictions, manage self-exclusion records, apply deposit and loss limits, and otherwise support the responsible gaming obligations of the platform.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance and training purposes.
• Platform improvement: To analyse usage patterns, identify technical issues, improve the user interface, and develop new features and services that better serve our Pakistani player base.
• Marketing communications: To send you information about 299win promotions, bonuses, and new games — but only where you have provided valid consent to receive such communications. You may withdraw consent at any time.

The legal bases on which 299win relies to process your personal data are as follows:

• Contractual necessity: Processing required to perform the contract between you and 299win — including account registration, payment processing, and bet settlement — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal obligation: Processing carried out to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and age verification, is performed on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and internal analytics is carried out on the basis of 299win's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without penalty by updating your communication preferences in account settings or by contacting support.

Your personal data may be shared with the following categories of third parties:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing partners receive the minimum financial data required to process your deposit and withdrawal transactions securely.
• Identity verification providers: Specialist KYC and document authentication services receive identity data solely for the purpose of verifying your age and identity in compliance with regulatory requirements.
• Game software providers: Third-party casino and slot game suppliers receive session data necessary to deliver their games within the 299win platform environment. These providers are bound by contractual data processing obligations.
• Fraud and compliance services: Risk management and AML compliance providers may receive transaction and identity data to assist in detecting and preventing financial crime.
• IT and infrastructure providers: Cloud hosting and security service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or at the request of a competent regulatory authority, 299win may disclose personal data without prior notice to the user.

All third-party service providers engaged by 299win are contractually required to process personal data only for the specified purpose, to maintain appropriate security standards, and not to retain data beyond what is necessary for that purpose.

299win retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Active accounts: Personal data associated with an active 299win account is retained for the duration of the account's active status and for a minimum period thereafter as required by applicable law.
• Closed accounts: Upon closure of a 299win account — whether voluntarily or due to breach of Terms — identity, financial, and transaction records are typically retained for a minimum of five (5) years to comply with anti-money-laundering record-keeping requirements.
• Self-exclusion records: Records of self-exclusion requests and responsible gaming interventions are retained for the full duration of the exclusion period plus a minimum of five (5) years thereafter, to prevent re-registration in contravention of the exclusion.
• Support communications: Live chat transcripts and support email records are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of consent to receive marketing communications are retained for as long as the consent remains active and for a period following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its retention, 299win will securely delete or anonymise it in accordance with our internal data disposal procedures.

299win takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 299win platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted data storage: Sensitive personal and financial data stored within 299win systems is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data held by 299win is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job functions.
• Two-factor authentication: 299win supports and encourages the use of 2FA on all player accounts. Internal system access by staff also requires multi-factor authentication.
• Regular security audits: 299win conducts periodic security assessments of its platform infrastructure to identify and address potential vulnerabilities.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 299win will notify affected users and, where required, relevant authorities in accordance with applicable obligations.

While 299win takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you suspect that your account has been compromised, contact 299win support immediately via live chat.

299win uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. Cookies help the platform recognise your device on return visits, maintain your session, and remember your preferences.

The types of cookies used by 299win are as follows:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your language preferences, display settings, and account customisations to provide a more personalised experience on return visits.
• Analytics Cookies: Collect anonymised data about how users interact with the 299win platform — including pages visited, time spent, and features used — to help us improve the platform experience. This data is aggregated and does not identify individual users.

299win does not use advertising or third-party marketing cookies. We do not share browsing data with ad networks, social media tracking pixels, or any external marketing platforms.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect the functionality of the 299win platform. For full details, consult the help documentation of your browser.

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your personal data held by 299win:

• Right of Access: You may request a copy of all personal data 299win holds about you. We will provide this within a reasonable timeframe following verification of your identity.
• Right to Rectification: If any personal data held by 299win is inaccurate or incomplete, you have the right to request its correction. You may update basic account details directly from your account profile settings.
• Right to Erasure: In certain circumstances, you may request that 299win delete your personal data. This right is subject to exceptions where retention is required by law — for example, AML record-keeping obligations may require us to retain certain financial transaction records even after account closure.
• Right to Restriction of Processing: You may request that 299win restrict the processing of your personal data in specific circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact 299win support via live chat or by email at [email protected]. We will respond to all verifiable data subject requests within 30 days. Complex requests may require an additional 30-day extension, in which case we will notify you accordingly.

299win implements age verification checks at the point of registration and prior to processing any withdrawal. These checks are designed to prevent access to the platform by individuals who do not meet the minimum age requirement of 21 years.

If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has registered a 299win account or provided personal data to the platform, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action including account closure and secure deletion of any associated data.

Some of the third-party service providers engaged by 299win — including cloud infrastructure providers, KYC verification services, and game software suppliers — may process personal data in countries outside Pakistan. Where such international transfers occur, 299win takes steps to ensure that an adequate level of protection applies to your personal data consistent with the standards described in this Policy.

Safeguards employed for international data transfers include contractual data processing agreements that bind recipient organisations to data protection obligations equivalent to those applied by 299win, and selection of service providers operating in jurisdictions with recognised data protection frameworks.

By using the 299win platform, you acknowledge that your personal data may be transferred to, stored in, and processed in locations outside of Pakistan for the purposes described in this Policy.

The 299win platform may contain references to third-party game providers and payment services. While 299win carefully selects its service partners, we do not control the privacy practices of third-party organisations and are not responsible for the content or privacy policies of any third-party service.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of 299win. This Privacy Policy applies exclusively to personal data collected and processed by 299win directly.

299win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect the way in which your personal data is processed — 299win will provide notice to registered users via the email address on record, or through a prominent notice displayed on the platform, prior to the changes taking effect.

Your continued use of the 299win platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with a revised Policy, you should cease using the platform and contact support to request account closure.