Introduction
This Privacy Policy (the "Policy") sets out how 786win (referred to throughout this document as "786win", "we", "us" or "the Platform") collects, processes, stores, shares and protects personal data belonging to players, registered account holders, visitors and any other individuals who interact with the Platform accessible at https://786win.cam.
786win is committed to handling personal data responsibly, transparently and in accordance with applicable data protection law. We recognize that privacy is a fundamental concern for our users — particularly those accessing the Platform from Pakistan, where digital data practices are an increasingly prominent consideration under evolving regulatory guidance.
This Policy applies to all personal data processed in connection with your use of 786win, including data collected through the website, customer support channels, account registration and verification processes, payment transactions and marketing communications (where consent has been provided).
Definitions
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, date of birth, IP address, device identifiers, payment information and transactional data. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, transfer, restriction and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. 786win acts as Data Controller for the personal data described in this Policy. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller, acting under a contractual data processing agreement. |
| "User" / "Player" | Any individual who accesses the Platform, registers an account or interacts with 786win's services. |
| "KYC" | Know Your Customer — the identity verification procedures applied by 786win to confirm user identity, age and eligibility before processing withdrawals. |
| "Cookies" | Small data files placed on a user's device by the Platform to support functionality, analytics and, where consented to, personalization. |
Data Controller Identity
786win acts as the Data Controller in respect of all personal data collected from users of the Platform. As Data Controller, 786win is responsible for determining the purposes for which personal data is processed and for ensuring that processing is carried out in a lawful, fair and transparent manner.
The Platform is operated by 786win and is accessible at https://786win.cam. Questions and requests relating to the processing of personal data should be directed to our support team using the contact details set out in Section 16 of this Policy.
Data We Collect
786win collects personal data through several channels and at different stages of your interaction with the Platform. The categories of personal data we collect include:
- Full legal name as it appears on official identity documents
- Date of birth (for age verification purposes)
- Email address
- Username and encrypted account credentials
- Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and country
- Mobile phone number (where provided)
- Copies of government-issued identity documents (e.g., Pakistani CNIC, passport)
- Proof of residential address (e.g., utility statement, bank correspondence)
- Selfie or facial image for biometric comparison (where the KYC process requires it)
- Payment method ownership documentation (e.g., bank statement, mobile wallet screenshot)
- Deposit and withdrawal transaction records, including amounts, dates, methods and reference identifiers
- Payment method identifiers (partial card numbers, mobile wallet identifiers, bank account references) — full payment credentials are processed by payment providers and are not stored on 786win's servers
- Account balance history and bonus transaction records
- Currency information (accounts may display illustrative amounts in PKR)
- Betting history: markets wagered, stake amounts, outcomes and returns
- Casino session data: games played, session durations, spin/hand histories
- Bonus usage, wagering requirement progress and promotional participation records
- Responsible gambling tool usage (deposit limits set, self-exclusion periods, session reminders)
- IP address and geolocation data derived therefrom
- Device type, operating system version and browser type
- Session timestamps, page visit logs and navigation path data
- Cookie identifiers and similar tracking technologies (see Section 10)
- Content of customer support interactions via live chat, email and any other support channel
- Complaint and dispute records
- Responses to surveys or feedback requests (where participated in voluntarily)
Legal Basis for Processing
786win processes personal data on the following legal bases, depending on the specific processing activity:
| Legal Basis | When Applied |
|---|---|
| Contractual Necessity | Processing required to perform the contract between 786win and the Player — including account management, processing wagers, handling deposits and withdrawals, and providing customer support. |
| Legal Obligation | Processing required to comply with applicable law or regulatory obligations — including KYC/AML verification, age checks, responsible gambling obligations and responding to lawful authority requests. |
| Legitimate Interests | Processing necessary for 786win's legitimate business interests, including fraud prevention, security monitoring, platform improvement and analytics — where such interests are not overridden by the individual's rights. |
| Consent | Processing for marketing communications and non-essential cookies, where the Player has given clear, specific and freely withdrawable consent. Consent can be withdrawn at any time without affecting the lawfulness of prior processing. |
How We Use Your Data
Personal data collected by 786win is used exclusively for the purposes described below. We do not use your personal data for purposes incompatible with those for which it was originally collected without obtaining your prior consent.
- Account Creation and Management: To register, maintain and administer your Player Account, including verification of eligibility, management of account settings and enforcement of account-level responsible gambling tools.
- Identity and Age Verification (KYC/AML): To verify your identity, date of birth and eligibility to use the Platform in compliance with our operating framework and to prevent underage gambling and financial fraud.
- Transaction Processing: To process deposits, withdrawals, bonus credits and all other financial transactions associated with your Account, and to maintain accurate financial records.
- Customer Support: To respond to your queries, resolve complaints, process account restriction requests (including self-exclusion) and maintain records of support interactions.
- Responsible Gambling: To monitor account activity for indicators of problem gambling behavior, administer responsible gambling tools (deposit limits, loss limits, session timers, self-exclusion), and fulfil our obligations under the Platform's responsible gambling framework.
- Platform Security and Fraud Prevention: To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and any other prohibited conduct under the Terms & Conditions.
- Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from competent authorities and maintain records as required by our operating framework.
- Marketing Communications (with consent): To send promotional offers, bonus notifications and platform updates to Players who have provided explicit consent. Marketing communications can be opted out of at any time.
- Platform Improvement and Analytics: To analyse usage patterns, improve Platform functionality, optimize user experience and inform product development — using aggregated and anonymized data where possible.
Third-Party Sharing
786win does not sell, rent or trade your personal data to third parties for commercial marketing purposes. Personal data is shared with third parties only in the limited circumstances described below:
786win engages vetted third-party service providers to assist in delivering the Platform's services. These providers act as Data Processors under contractual data processing agreements and are permitted to process your data only for the specific purposes instructed by 786win. Categories of service providers include:
- Payment processors and gateway providers (handling deposit and withdrawal transactions)
- KYC and identity verification service providers
- Customer support platform providers
- Web hosting, cloud infrastructure and content delivery providers
- Analytics and platform performance monitoring providers
- Game software providers (who may receive anonymized session data for technical integration purposes)
References to payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and cryptocurrency networks (BTC, ETH, USDT) on the 786win Platform are for educational reference only. 786win does not represent that any named payment provider is affiliated with, endorses or supports online gambling services. Payment data processed through these channels is handled by the respective payment processor under their own privacy frameworks.
786win may disclose personal data to competent regulatory authorities, law enforcement bodies or judicial authorities where required by applicable law, court order or lawful regulatory request. 786win will, where legally permitted, notify the affected Player of any such disclosure.
In the event of a merger, acquisition, sale of assets or restructuring affecting 786win, personal data may be transferred as part of the transaction. Affected Players will be notified in advance where practically possible and the transferee will be required to honour the commitments set out in this Policy.
International Data Transfers
786win operates as an international online platform. Your personal data may be transferred to, stored in or processed in countries other than Pakistan, including countries where the Platform operator's infrastructure, data processors or service providers are located.
Where personal data is transferred internationally, 786win takes steps to ensure that appropriate safeguards are in place to protect the data, including contractual clauses in data processing agreements with service providers and selection of service providers in jurisdictions with adequate data protection standards.
Players located in Pakistan should be aware that Pakistani data protection law is evolving. The Personal Data Protection Bill (PDPB) has been under development in Pakistan. Until a comprehensive data protection framework is enacted and enforceable in Pakistan, 786win applies the standards described in this Policy as the applicable framework for data handling.
Data Retention
786win retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention obligations imposed by applicable law or regulatory requirements.
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of active Account plus a minimum of five (5) years following Account closure, as required by AML/KYC regulatory frameworks applicable to the operator's license jurisdiction. |
| KYC / Identity Documents | Minimum five (5) years from the date of Account closure or last transaction, in compliance with anti-money-laundering obligations. |
| Transaction Records | Minimum five (5) years from the date of each transaction, in compliance with financial record-keeping obligations. |
| Customer Support Records | Three (3) years from the date of the interaction, unless the record relates to a complaint, dispute or self-exclusion matter, in which case a longer period applies. |
| Self-Exclusion Records | Retained for the duration of the exclusion period plus five (5) years, to prevent re-registration during or after the exclusion period. |
| Marketing Consent Records | Until consent is withdrawn. Proof of consent is retained for three (3) years following withdrawal to demonstrate prior lawful processing. |
| Analytics / Session Data | Anonymized aggregated data may be retained indefinitely. Individually identifiable session data is retained for twelve (12) months. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.
Cookies & Tracking Technologies
786win uses cookies and similar tracking technologies to support Platform functionality, improve user experience and, where consent has been provided, to support analytics and personalization. The following types of cookies are used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential Cookies | Required for core Platform functionality, including session management, account authentication, security token maintenance and responsible gambling tool enforcement. Cannot be disabled without materially impairing the Platform's operation. | No — technically necessary |
| Functional Cookies | Remember user preferences such as language settings, display preferences and cached Platform configurations to improve usability across sessions. | Yes — optional |
| Analytics Cookies | Collect aggregated data on Platform usage, page performance, navigation flows and feature engagement to inform Platform improvements. Analytics data is aggregated and does not identify individual users in usage reports. | Yes — optional |
You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will impair Platform functionality. Withdrawing consent for functional or analytics cookies can be done at any time without affecting your ability to use the core Platform.
Data Security
786win implements technical and organizational security measures commensurate with the sensitivity of the personal data held and the risks associated with unauthorized access, loss, alteration or destruction of that data. Security measures in place include:
- Encryption in Transit: All data transmitted between your device and the 786win Platform is encrypted using Transport Layer Security (TLS) protocols.
- Encrypted Storage: Sensitive personal data fields, including authentication credentials and identity document data, are encrypted at rest.
- Access Controls: Personal data is accessible only to 786win personnel and authorized service providers who require access for the specific purposes described in this Policy. Access is granted on a need-to-know basis with role-based permission controls.
- Two-Factor Authentication: Account access is protected by optional two-factor authentication (2FA) and Users are strongly encouraged to enable this feature.
- Security Monitoring: 786win employs continuous monitoring of Platform systems for anomalous activity, unauthorized access attempts and potential security incidents.
- Incident Response: In the event of a personal data breach that presents a risk to individuals, 786win has procedures in place to investigate, contain and notify affected parties in accordance with applicable obligations.
Your Rights
Subject to applicable data protection law and the operator's legal retention obligations, you have the following rights in relation to your personal data held by 786win:
Right of Access
Request a copy of the personal data 786win holds about you and information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held about you without undue delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
Request that processing of your data be restricted in certain circumstances, such as while the accuracy of data is contested.
Right to Data Portability
Request your personal data in a structured, machine-readable format where processing is based on your consent or a contractual necessity.
Right to Object
Object to processing based on legitimate interests, including profiling, and to withdraw consent for marketing communications at any time.
To exercise any of the rights listed above, please contact the 786win data privacy team using the contact details provided in Section 16. We will acknowledge your request promptly and aim to fulfil it within thirty (30) calendar days, subject to identity verification requirements and any applicable legal exemptions. Requests that are manifestly unfounded or excessive may be declined or subject to an administrative fee.
Minors & Age Verification
786win strictly prohibits use of the Platform by individuals under the age of 18 years, or such higher minimum age as is required by the operator's license jurisdiction. We do not knowingly collect personal data from minors.
Age verification is a mandatory component of the KYC process. Where a Player is found to be under the applicable minimum age at any stage, their Account will be immediately suspended, access to Platform services will be terminated, and any personal data collected in connection with the underage Account will be handled in accordance with applicable law — which may involve retention for compliance purposes rather than immediate deletion.
If you believe that 786win has inadvertently collected personal data from a minor, please contact our support team immediately using the details in Section 16 so that we can investigate and take appropriate action without delay.
Pakistan-Specific Context
786win serves Pakistani players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and beyond. We recognize the specific data privacy landscape applicable to users in Pakistan and address several Pakistan-relevant considerations below.
Pakistan does not currently have a fully enacted comprehensive data protection law equivalent to the EU GDPR or similar frameworks. Legislative developments — including the Personal Data Protection Bill — are ongoing. 786win's Privacy Policy is designed to reflect robust international data protection standards and will be updated as Pakistani data protection law develops.
References to payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are included on the Platform for educational context only. When a Player uses a payment channel to make a deposit or withdrawal, any personal or financial data transmitted to that payment processor is handled by the processor under their own privacy and data security frameworks. 786win is not responsible for the data practices of third-party payment providers. Players should review the privacy policies of any payment provider they use.
786win does not proactively share user data with the PTA, SBP or any Pakistani government authority unless compelled by a lawful court order or other enforceable legal instrument. 786win will seek legal review of any such request before complying and will notify affected Players where permitted by law.
Policy Amendments
786win reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality or data processing practices. When material changes are made to this Policy, 786win will notify registered Players by email to their registered Account address or by a prominent notice on the Platform, with reasonable advance notice before the changes take effect.
The effective date at the top of this document indicates when the current version of the Policy entered into force. We recommend that you review this Policy periodically to remain informed of how 786win handles your personal data. Continued use of the Platform following any update to this Policy constitutes acceptance of the revised terms.
Contact Us
For any questions, concerns or requests relating to this Privacy Policy, your personal data or the exercise of your data rights, please contact the 786win team through the following channels:
Live Chat Support
Available 24 hours a day, 7 days a week via the support icon on the Platform. English and Urdu assistance available. For privacy-specific queries, identify your request as a data protection matter at the start of the chat.
Email — Data Privacy
Direct data protection queries to [email protected] — plain text address only; do not click a link as none is provided. Mark the subject line as "Data Privacy Request" for prioritized routing.
786win aims to acknowledge all data privacy requests within five (5) business days and to respond substantively within thirty (30) calendar days. Complex requests involving large volumes of data or legal review may require additional time, in which case we will communicate an extended timeline to you.