Data Protection & Privacy — we998 Official Policy
This Privacy Policy explains precisely how we998 collects, processes, stores, shares, and protects the personal information of Pakistani players who use our online casino and sports betting platform. We believe you have a fundamental right to understand exactly what happens with your data — this document is our commitment to that transparency.
These principles underpin every data decision we make — from the moment you register to the day you close your account.
we998 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your CNIC details, mobile number, and PKR transaction history remain strictly within the we998 ecosystem and authorised processing partners only.
Every byte of data transmitted between your device and we998 servers is protected by 256-bit TLS encryption. Your login credentials, payment details, and personal identifiers are never transmitted in plaintext at any point in the processing chain.
we998 players have the right to access, correct, restrict, port, and in applicable circumstances delete their personal data. These rights are exercisable by contacting we998 support. We acknowledge all data requests within 72 hours and resolve them within 30 calendar days.
we998 collects only the personal data strictly necessary for the stated purposes — account management, KYC compliance, payment processing, and responsible gaming monitoring. We do not collect data speculatively or beyond operational necessity.
Access to we998 player personal data within the organisation is strictly limited on a need-to-know basis. All staff with data access are bound by confidentiality obligations. We maintain comprehensive access logs and conduct regular internal audits of data access events.
In the unlikely event of a personal data breach that poses a risk to player rights, we998 is committed to notifying affected players without undue delay and no later than 72 hours after becoming aware of the breach, in accordance with applicable data protection obligations.
1.1 we998 is committed to protecting the privacy and personal data of all individuals who interact with our online casino and sports betting platform. This Privacy Policy sets out the principles and practices governing the collection, use, storage, disclosure, and protection of personal data in connection with the operation of we998 at we998.org.
1.2 This Policy applies to all we998 registered players located in Pakistan, persons who have submitted a registration application but not yet completed the process, visitors to the we998 website who have not registered, and any individual whose personal data we998 processes in connection with its platform operations.
1.3 This Policy does not apply to the privacy practices of third-party game studios, payment processors, or other external service providers whose own privacy notices govern their respective data processing activities. we998 encourages players to review the privacy policies of any third-party service they interact with independently of the we998 platform.
1.4 The we998 platform is operated exclusively in English and is intended for Pakistani users aged 21 and above. The platform operates in Pakistani Rupees (PKR) and integrates with Pakistani payment infrastructure including JazzCash, EasyPaisa, and domestic banking networks. This context is relevant to the categories of data we collect and process.
2.1 For the purposes of applicable data protection legislation, we998 acts as the Data Controller in respect of all personal data collected from players and website visitors in connection with the operation of the we998 platform. As Data Controller, we998 determines the purposes for which and the manner in which personal data is processed.
2.2 we998 is licensed under an internationally recognised online gaming regulatory framework. The terms of our gaming licence impose obligations on we998 regarding the handling of player personal data, including mandatory retention periods for AML compliance and responsible gaming records. These regulatory obligations take precedence over data deletion requests where applicable.
2.3 Any queries relating to this Privacy Policy or we998's data processing practices should be directed to the we998 data support contact at [email protected]. Please mark your communication with "Privacy / Data Request" in the subject line for expedited handling.
We998 collects the following categories of personal data in connection with the operation of its platform:
| Data Category | Specific Data Points | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC scan (front & back), photograph | Required |
| Contact Data | Pakistani mobile number, email address | Required |
| Financial Data | JazzCash/EasyPaisa mobile wallet identifiers, bank account details (where provided), PKR transaction history, deposit amounts, withdrawal amounts | Required |
| Gaming Activity Data | Game session logs, bet amounts, game outcomes, bet history, win/loss records, login timestamps, session durations | Required |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, network provider | Auto-collected |
| Responsible Gaming Data | Deposit limit settings, self-exclusion records, cooling-off period records, responsible gaming tool usage history | Where applicable |
| Communications Data | Customer support chat transcripts, email correspondence, complaint records | Where applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional SMS and email communications | Optional |
We998 collects personal data through the following channels and mechanisms:
We998 processes personal data only where there is a valid legal basis to do so. The following table sets out the primary purposes for which we process player personal data and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract |
| Identity and age verification (KYC) | Legal obligation (gaming licence / AML) |
| Processing PKR deposits and withdrawals | Performance of contract |
| Game session management and bet settlement | Performance of contract |
| Anti-money laundering monitoring and reporting | Legal obligation |
| Fraud prevention and platform security | Legitimate interest |
| Responsible gaming monitoring and tool provision | Legal obligation / legitimate interest |
| Customer support and complaint handling | Performance of contract / legitimate interest |
| Platform improvement and analytics | Legitimate interest |
| Sending promotional communications | Consent (freely given, withdrawable) |
| Regulatory record-keeping and audit | Legal obligation |
6.1 We998 does not sell, rent, or trade player personal data. We share personal data only where strictly necessary for operational, legal, or regulatory purposes, and only with the following categories of recipients:
We998 shares transaction-relevant personal data (mobile number, account identifiers) with JazzCash, EasyPaisa, and participating Pakistani banks (HBL, UBL, Meezan Bank, and 1LINK network members) solely for the purpose of processing PKR deposits and withdrawals. These partners process such data under their own privacy policies and applicable Pakistani financial regulations.
We998 shares limited player session data (player ID, stake amounts, game results) with licensed third-party game studios including but not limited to Pragmatic Play, Evolution Gaming, NetEnt, and Spribe, for the purpose of game delivery, session management, and jackpot calculation. These providers are contractually bound to process data only as necessary for service delivery.
We998 uses authorised third-party KYC verification services to assist in validating CNIC authenticity and confirming player age. These services process identity document data strictly for verification purposes under data processing agreements with we998.
We998 is required by its gaming licence and applicable AML obligations to disclose certain player data to gaming regulators, financial intelligence units, and law enforcement authorities upon lawful request. We998 does not notify players of such disclosures where doing so would constitute a "tipping off" offence under AML legislation.
7.1 The we998 website uses cookies and similar tracking technologies to ensure the proper operation of the platform, maintain login sessions, detect fraud, and collect aggregate analytics on platform usage. Cookies do not contain personally identifiable information in isolation but may be combined with other data we hold about you.
7.2 The categories of cookies used on the we998 platform are as follows:
7.3 Players may manage cookie preferences through their browser settings. Disabling strictly necessary cookies may impair login functionality and other essential platform features. we998 does not use third-party advertising or remarketing cookies.
8.1 We998 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to mandatory regulatory retention requirements. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC / identity documents | 5 years from account closure | AML legal obligation |
| Financial transaction records | 5 years from transaction date | AML / gaming licence obligation |
| Gaming session logs | 3 years from session date | Gaming licence obligation |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
| Customer support communications | 2 years from last communication | Legitimate interest / dispute resolution |
| Marketing opt-in records | Until consent withdrawn + 1 year | Consent management |
| Technical / server logs | 90 days (rolling) | Security / fraud prevention |
Upon expiry of the applicable retention period, we998 will securely delete or irreversibly anonymise the relevant personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for platform analytics and improvement purposes.
9.1 We998 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
10.1 In the course of providing its services, we998 may transfer certain player personal data to third-party service providers located outside Pakistan. Such transfers may occur in connection with game platform hosting, payment processing network infrastructure, and KYC verification services.
10.2 Where personal data is transferred internationally, we998 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under applicable data protection obligations. Such safeguards include contractual data processing agreements incorporating standard data protection clauses and, where applicable, transfers to jurisdictions with adequacy determinations from recognised data protection authorities.
10.3 We998 maintains a current record of all international data transfers and the safeguards in place for each. Players may request information about specific international transfers by contacting we998 data support.
11.1 Registration on the we998 platform by any person under 21 years of age is strictly prohibited. All players are required to undergo mandatory CNIC-based identity and age verification confirming they meet this minimum age requirement before full Account access and withdrawal functionality are enabled.
11.2 Where we998 discovers or has reasonable grounds to suspect that a registered Account belongs to a person under 21, we998 will immediately suspend the Account, notify relevant authorities where required, and permanently delete any personal data collected from the underage individual, subject only to mandatory regulatory retention requirements.
11.3 If you believe that a minor may have registered an Account on we998 or may be accessing your Account, please contact we998 support immediately at [email protected]. We998 will investigate all such reports as a priority matter and take appropriate remedial action.
12.1 Subject to applicable data protection legislation and regulatory restrictions, players whose personal data is processed by we998 have the following rights:
To exercise any of these rights, contact we998 data support at [email protected] with the subject line "Data Rights Request." We998 will acknowledge your request within 72 hours and resolve it within 30 calendar days, with notification of any extension where the request is complex.
13.1 We998 may send promotional communications — including information about bonuses, promotions, new games, and platform features — to players who have provided explicit opt-in consent to receive such communications. We998 does not send unsolicited marketing communications.
13.2 Marketing communications may be delivered via SMS to your registered Pakistani mobile number, email to your registered address, or in-Platform notification. Players may withdraw their marketing consent at any time by: unsubscribing via the link included in any marketing email; replying STOP to any marketing SMS; adjusting communication preferences in Account Settings; or contacting we998 support with a withdrawal request.
13.3 Withdrawal of marketing consent does not affect a player's ability to receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent as a necessary part of Account management.
13.4 We998 does not share player contact details with third-party marketing partners. All we998 marketing communications are sent directly by we998 using player contact information held within the we998 platform environment.
14.1 We998 processes gaming activity data — including bet frequency, stake amounts, session duration, loss patterns, and game type preferences — as part of its responsible gaming monitoring obligations under its gaming licence. This processing enables we998 to identify patterns potentially indicative of problem gambling behaviour and to deploy appropriate responsible gaming interventions.
14.2 Responsible gaming monitoring is conducted on the basis of legal obligation (gaming licence requirements) and legitimate interest (player protection). Players may not opt out of responsible gaming monitoring as it constitutes a non-negotiable condition of platform access.
14.3 Where responsible gaming monitoring identifies a player as potentially exhibiting problem gambling indicators, we998 may take proactive steps including: displaying responsible gaming messaging; prompting the player to review their deposit limits; or, in cases of serious concern, temporarily suspending the Account pending a responsible gaming review. These interventions are conducted in the player's interest.
14.4 Self-exclusion records are retained by we998 for the duration of the exclusion period plus five years to enable enforcement of the exclusion and to comply with gaming licence reporting requirements. Players who self-exclude cannot request deletion of their self-exclusion record during this period.
15.1 We998 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. The current version of this Policy is always accessible on the we998 platform at we998.org/privacy-policy.
15.2 Material amendments to this Privacy Policy will be notified to registered players via the email address associated with their Account no less than seven days prior to the amended Policy taking effect. The notification will summarise the key changes and link to the full updated Policy.
15.3 Continued use of the we998 platform following the effective date of an amended Privacy Policy constitutes the player's acknowledgement of and agreement to the updated Policy. Players who do not accept the amended Policy should cease using the Platform and contact we998 to close their Account.
16.1 For all privacy-related queries, data rights requests, or concerns regarding we998's data processing practices, please contact:
16.2 If you have submitted a privacy complaint to we998 and are dissatisfied with our response, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction in which we998 is licensed, or to seek independent adjudication through the dispute resolution body specified in our gaming licence documentation.
This Privacy Policy was last reviewed on 1 January 2026 (Version 2.1). It supersedes all previous versions of the we998 Privacy Policy.
All rights exercisable by contacting [email protected] with subject "Data Rights Request." we998 acknowledges within 72 hours.
we998 takes your privacy as seriously as your security. With CNIC-verified accounts, 256-bit encryption, and zero data selling, you can play in Pakistan's most trusted casino environment with confidence.