2win Privacy Policy

1 Who This Policy Covers

This Privacy Policy applies to all individuals who access or use the 2win platform — including the website at 2win.pro and the official 2win mobile application for Android and iOS. It applies from the moment you first visit the platform, whether or not you have a registered account.

By registering for a 2win account or continuing to use the platform after this policy has been updated and published, you acknowledge that you have read and understood how your personal data is handled as described here.

This policy should be read alongside the 2win Terms and Conditions, which governs the overall use of the platform and the relationship between 2win and its registered members.

2 Personal Data We Collect

We collect personal data in two ways: information you provide directly to us, and information collected automatically through your use of the platform.

Information you provide:

• Full legal name, date of birth and contact number provided at registration.
• Email address or other credential used to create your account.
• Identity documents submitted during KYC verification (such as CNIC, passport or driving licence).
• Payment details including mobile wallet numbers for JazzCash or Easypaisa, bank account details for Raast or bank transfer, and card details where applicable.
• Any information you share when contacting 2win customer support.

Information collected automatically:

• Device information including device type, operating system version and unique device identifiers.
• IP address and approximate geographic location derived from it.
• Session data including pages visited, time spent and features used within the platform.
• Log data related to transactions, game sessions and betting activity associated with your account.
• Cookie and tracking data as described in Section 7.

3 How We Use Your Personal Data

2win uses your personal data only for the purposes set out in this policy. The primary uses are:

• Account management: Creating and maintaining your 2win account, verifying your identity and keeping your account details up to date.
• Processing transactions: Handling deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer and cards. Transaction records are maintained for financial reconciliation purposes.
• Security and fraud prevention: Monitoring account activity to detect and prevent fraudulent behaviour, unauthorised access and potential abuse of the platform.
• Customer support: Responding to queries, resolving disputes and addressing technical issues related to your account.
• Legal compliance: Fulfilling identity verification and record-keeping obligations as required by applicable policy and legal frameworks.
• Platform improvement: Analysing anonymised or aggregated usage data to understand how the platform is used and to improve features, performance and the overall user experience.
• Responsible gaming monitoring: Reviewing account activity patterns to identify potential indicators of problem gaming, in line with our responsible gaming commitments.
• Marketing communications (opt-in only): Sending information about promotions, bonuses and new features to players who have opted in to marketing communications. You can opt out at any time.

4 Legal Basis for Processing

We process your personal data on one or more of the following legal bases depending on the specific purpose:

• Contract performance: Processing necessary to fulfil our obligations under the 2win Terms and Conditions — including running your account, processing transactions and providing access to the platform.
• Legal obligation: Processing required to comply with applicable legal requirements, including identity verification obligations and financial record-keeping.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security and improving the service, where our interests are balanced against your privacy rights and do not override them.
• Consent: For optional purposes such as marketing communications, we rely on your consent, which you may withdraw at any time.

5 Payments, KYC and Financial Data

Because 2win handles real-money transactions in PKR, we are required to collect and verify financial information and identity documentation before processing withdrawals. This is a standard practice across all legitimate online gaming and financial platforms — it is not unique to 2win.

When you make a deposit or withdrawal via JazzCash, Easypaisa, Raast or bank transfer, the relevant transaction data is shared with the payment provider involved in processing that specific transaction. These providers have their own privacy policies governing the data they receive.

Identity documents submitted during KYC verification — such as a copy of your CNIC or passport — are used solely for the purpose of confirming your identity and age. These documents are stored securely and are not shared beyond what is required for verification and legal compliance purposes.

6 Sharing With Third Parties

2win does not sell, rent or trade your personal data to third parties for marketing or commercial purposes. We share personal data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the data necessary to process your specific deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers may receive identity documents for the purpose of verifying your identity as part of the account verification process.
• Technology infrastructure providers: Cloud hosting, database and security vendors who process data strictly on 2win's behalf under confidentiality obligations.
• Legal and regulatory requirements: Where required by applicable law, court order or legal process, we may disclose personal data to the appropriate authorities.
• Business transfers: In the event of a merger, acquisition or sale of assets, personal data held by 2win may be transferred as part of that transaction, subject to equivalent privacy protections remaining in place.

All third parties with whom we share data are required to process it only for the specified purpose and to maintain appropriate security standards.

7 Cookies and Tracking Technologies

The 2win website and mobile app use cookies and similar tracking technologies to support platform functionality, maintain your logged-in session and collect anonymised usage analytics.

Types of cookies used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in as you navigate between pages. Disabling these will prevent normal use of the platform.
• Analytics cookies: Used to collect anonymised data about how visitors use the platform — which pages are visited most, where users drop off and how features are navigated. This data is used in aggregate to improve the platform.
• Preference cookies: Store your display preferences and settings to improve your experience on return visits.

You can manage your cookie preferences through your browser settings. Note that blocking essential cookies will affect your ability to use the platform normally. The 2win app manages session data through equivalent in-app storage mechanisms rather than browser cookies.

8 How Long We Keep Your Data

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. General retention principles:

• Active accounts: Personal and transaction data is retained for the duration of your active account relationship with 2win.
• Closed accounts: Following account closure, core identity and transaction records are retained for a minimum period as required for financial record-keeping and fraud prevention purposes. After this period, data is securely deleted or anonymised.
• KYC documents: Identity verification documents are retained for the period required under applicable identity verification standards, after which they are securely deleted.
• Analytics data: Anonymised and aggregated usage data may be retained indefinitely as it cannot be linked back to any individual.

9 Your Privacy Rights

As a 2win account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact 2win support through the platform.

10 Security Measures

2win takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration or destruction.

• Data transmitted between your device and the 2win platform is encrypted using industry-standard TLS protocols.
• Sensitive account and payment data is encrypted at rest using strong encryption algorithms.
• Access to personal data within 2win is restricted on a need-to-know basis. Team members with access to personal data are subject to confidentiality obligations.
• We conduct periodic reviews of our security practices and infrastructure.
• Suspicious account activity triggers automated alerts that are reviewed by our security team.

Despite these measures, no system connected to the internet can guarantee absolute security. In the unlikely event of a data breach that affects your personal data, we will notify you and take appropriate remedial steps in accordance with applicable requirements.

You also play a role in keeping your account secure. Use a strong, unique password for your 2win account, do not share it with anyone and log out of the app or website when using a shared device.

11 Children and Minors

The 2win platform is strictly intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has registered an account, that account will be closed immediately and any associated data deleted.

If you believe that a minor has created a 2win account, please contact our support team immediately so we can investigate and take appropriate action.

12 Updates to This Privacy Policy

2win may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable requirements. When we make material changes, the "Last Updated" date at the top of this page will be revised. For significant changes that affect how your data is used, we will notify registered account holders through the platform or via the contact details on their account.

Continued use of the 2win platform after an updated Privacy Policy has been published constitutes acceptance of the updated terms. We encourage you to review this policy periodically.

13 How to Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or have a concern about how your personal data has been handled, please reach out to us through the official support channels available within your 2win account dashboard.

You can also contact us by email at: [email protected] (plain text address — please copy and paste manually rather than clicking).

We aim to respond to all privacy-related enquiries within a reasonable timeframe. For complex requests such as data access or deletion, please allow additional processing time to allow us to verify your identity and gather the relevant information.