2win Privacy Policy –
How We Protect Your Data

1.Introduction

This Privacy Policy explains how 2win collects, uses, stores and protects the personal data of users who access the platform at 2win.vin, through the 2win mobile app or through any other channel through which 2win services are provided.

When you register an account, make a PKR deposit, place a bet on cricket or PSL, play a casino game or contact support, you are sharing personal data with us. This policy tells you exactly what happens with that data — what we collect, why we need it, who can see it and how long we keep it.

By using the 2win platform, you acknowledge that you have read this Privacy Policy and understand how your data is handled. If you have any concerns about any aspect of this policy, please contact the 2win support team at [email protected] before continuing to use the platform.

This policy should be read alongside the Terms and Conditions, which govern the overall use of the 2win platform.

2.Data We Collect

The personal data 2win collects depends on how you interact with the platform. The main categories are set out below.

Registration Data

When you create a 2win account, we collect the information you provide during sign-up, including your full name, date of birth, email address, phone number and a username of your choice. This information is required to create and manage your account.

Identity Verification Data

Before your first withdrawal is processed, 2win requires identity verification. This may involve submitting a copy of a government-issued identity document such as a CNIC, passport or driving licence. This data is collected to confirm that you are who you say you are and to meet our obligations around fraud prevention.

Financial Data

When you make a PKR deposit or request a withdrawal, we collect data about the transaction — including the amount, the payment method used (JazzCash, Easypaisa, Raast or bank transfer) and the transaction reference. We do not store full card numbers. Payment details are handled with strict security controls.

Usage and Activity Data

We collect data about how you use the platform — the bets you place, the casino games you play, session lengths, the device and browser you use, your IP address and how you navigate the site. This data is used to improve the platform and to identify unusual activity that could indicate fraud or bonus abuse.

Communication Data

If you contact the 2win support team via email or live chat, we keep a record of that communication. This helps us follow up on your query, improve service quality and refer back to previous interactions when needed.

Data Category	Examples	Purpose
Registration	Name, email, date of birth, phone	Account creation and management
Verification	CNIC, passport, driving licence	Identity confirmation, fraud prevention
Financial	Transaction amounts, payment method, references	PKR deposits and withdrawals
Usage	Bets placed, games played, device, IP, session data	Platform improvement, fraud detection
Communications	Support emails, live chat transcripts	Customer service, quality review
Cookies	Session tokens, preference cookies, analytics	Login state, personalisation, performance

3.How We Use Your Data

The data 2win collects is used for specific, legitimate purposes. We do not use your data for anything beyond what is reasonably necessary to operate the platform and protect users. The main uses are:

• Account management — creating your account, maintaining your profile, updating your details and responding to account-related requests.
• Transaction processing — handling PKR deposits via JazzCash, Easypaisa, Raast and bank transfer, and processing withdrawal requests back to your registered payment method.
• Identity verification — confirming your identity before processing withdrawals and ensuring the account belongs to a real, eligible adult user.
• Fraud and abuse prevention — monitoring account activity for signs of bonus abuse, duplicate accounts, collusion or financial crime. Usage data and IP addresses help us spot patterns that require investigation.
• Platform improvement — understanding how users navigate 2win, which features are most used, where users encounter issues and what improvements would make the experience better for Pakistan users.
• Customer support — using your account history and previous communications to provide accurate, helpful support when you contact us.
• Responsible gaming — tracking usage patterns to identify users who may benefit from responsible gaming prompts, deposit limit reminders or self-exclusion options.
• Legal compliance — maintaining records as required to meet our legal and regulatory obligations, including anti-money laundering checks.

We do not use your personal data for automated decision-making that has a significant effect on you without providing you the opportunity to challenge that decision through human review.

4.Legal Basis for Processing

2win processes your personal data on the following legal bases:

• Contractual necessity — processing your registration data, financial transactions and account activity is necessary to deliver the 2win service you have signed up for. Without this processing, we cannot operate your account.
• Legitimate interests — analysing usage data to improve the platform, detecting fraud and monitoring for bonus abuse are activities we carry out in our legitimate interest as a platform operator, balanced against your privacy rights.
• Legal obligation — retaining identity verification documents and transaction records is required to meet our obligations around fraud prevention and financial crime.
• Consent — where we send you promotional communications or use non-essential cookies, we do so on the basis of your consent, which you can withdraw at any time.

5.Data Sharing

2win does not sell your personal data. We do not share your information with third parties for their own marketing purposes. However, there are limited circumstances where your data is shared with trusted parties in order to operate the platform:

• Payment processors — when you make a PKR deposit or withdrawal via JazzCash, Easypaisa, Raast or bank transfer, the relevant payment provider receives the transaction data needed to process that payment. These providers have their own privacy policies governing how they handle payment data.
• Casino game providers — third-party game suppliers who provide the slots, live casino and instant game content on the 2win platform may receive a player identifier in order to run the game session. They do not receive your full personal profile.
• Identity verification services — where we use a third-party service to assist with document verification, that provider receives only the data required to carry out the verification check.
• Analytics providers — we may use analytics tools to understand platform usage in aggregate. Where possible, data shared with analytics providers is anonymised or pseudonymised.
• Legal authorities — if we receive a lawful request from a relevant authority relating to suspected fraud or financial crime, we will cooperate and share the data required to comply with that request.

All third parties who receive data from 2win are required to handle that data securely and to use it only for the specific purpose for which it was shared. We do not permit third parties to use your data for their own unrelated purposes.

6.Cookies and Tracking

2win uses cookies — small text files stored on your device — to make the platform work properly and to improve your experience. The types of cookies used on 2win are:

• Essential cookies — these are required for the platform to function. They keep you logged in to your account during a session and remember your language and currency preferences. Without these cookies, core features of 2win would not work.
• Performance cookies — these collect anonymous data about how pages are used, which features are accessed most often and where errors occur. This information helps the team identify issues and prioritise improvements.
• Preference cookies — these remember choices you have made on the platform, such as your preferred sports market or casino category, so you do not have to set these each time you log in.
• Analytics cookies — used to understand overall usage patterns on the platform in aggregate. Data collected through analytics cookies does not identify you personally.

You can manage cookie settings through your browser. Blocking essential cookies will affect your ability to use the platform — for example, you may be logged out automatically or lose your session state. Blocking performance or preference cookies will not affect core functionality but may reduce personalisation.

7.Data Retention

2win retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our legal and operational obligations. The general retention periods we apply are:

• Account data — retained for the duration of your account plus a period after account closure to allow for dispute resolution and legal compliance.
• Transaction records — PKR deposit and withdrawal records are retained for an extended period in line with standard financial record-keeping requirements.
• Identity verification documents — retained for the period required to meet our fraud prevention and anti-money laundering obligations, then securely deleted.
• Support communications — email and live chat records are retained for a reasonable period to support quality review and to allow us to reference prior interactions if you contact us again.
• Usage and activity data — anonymised aggregate usage data may be retained indefinitely for platform analysis. Data that can identify you individually is deleted or anonymised after the relevant retention period.

When data is no longer required and the retention period has passed, it is deleted or anonymised securely. If you request deletion of your account and data, we will process that request and delete your personal information subject to any data we are legally required to retain for a specified period.

8.Data Security

2win takes the security of your personal data seriously. We have put in place a range of technical and organisational measures to protect the data we hold:

• SSL encryption — all data in transit between your device and the 2win platform is encrypted using SSL/TLS protocols. This applies to login, registration, deposits, withdrawals and all other data exchanges.
• Access controls — access to personal data within the 2win organisation is restricted on a need-to-know basis. Staff do not have unrestricted access to user account data.
• Secure storage — personal data is stored on secured servers with access controls and monitoring in place to detect and respond to any unauthorised access attempts.
• Payment security — financial data related to PKR transactions is handled with additional security measures. Full payment credentials are not stored in a recoverable format.
• Regular reviews — our security practices are reviewed periodically to ensure they remain appropriate and effective as the platform grows.

While we take all reasonable steps to protect your data, no online platform can guarantee complete immunity from security incidents. If you become aware of any security concern related to your 2win account — such as unexpected login activity or suspicious emails claiming to be from 2win — please contact support immediately.

9.Your Rights

As a user of the 2win platform, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data 2win holds about you. We will provide this within a reasonable timeframe after verifying your identity.
• Right to correction — if any of the personal data we hold about you is inaccurate or out of date, you can ask us to correct it. You can update basic account information yourself from within your account settings.
• Right to deletion — you can request that we delete your personal data. We will honour this request where we are not legally required to retain the data for a specified period. Note that deleting your data will result in your account being closed.
• Right to restriction — you can ask us to restrict how we use your data in certain circumstances, for example while a correction request is being resolved.
• Right to withdraw consent — where you have given consent for a specific type of data processing — such as receiving promotional emails — you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object — you can object to processing carried out on the basis of legitimate interests where you feel your personal rights and freedoms outweigh those interests.

To exercise any of these rights, contact the 2win support team at [email protected]. Please include your registered email address and a clear description of your request. We may ask for additional verification to confirm your identity before processing the request.

10.Children's Privacy

The 2win platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If a minor has registered on the platform by providing false information about their age, their account will be closed immediately upon discovery and any balance forfeited.

If you believe a minor has accessed or registered on the 2win platform, please contact us at [email protected] so we can investigate and take appropriate action promptly.

11.Changes to This Policy

2win may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in the services we offer or updates to our legal obligations. When changes are made, the revised policy will be published on this page with an updated date shown at the top.

For significant changes that materially affect how your data is used, 2win will make reasonable efforts to notify registered users via the email address on file. Continued use of the platform after a policy update constitutes your acknowledgement of the revised terms.

We encourage you to check this page periodically so you remain aware of how your data is being handled. If you disagree with any change to this policy, you should stop using the platform and contact us to request account closure and data deletion.

12.Contact Us

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or have a concern about how your personal data is being handled, please get in touch with the 2win team:

For questions about account rules and betting terms, see the Terms and Conditions. For tools to manage your gambling activity, visit the Responsible Gaming page.