w33com Privacy Policy — How We Protect Your Personal Data & Uphold Your Rights

1Introduction & Data Controller

This Privacy Policy ("Policy") describes how w33com ("the Operator", "we", "us", "our") — the entity operating the online gaming platform at w33com.asia under its international gaming regulatory licence — collects, processes, stores, protects, and shares personal data relating to individuals ("Players", "Users", "you") who register an account, visit the website, use any w33com service, or otherwise interact with the w33com platform.

w33com acts as the Data Controller for personal data collected through the platform. This means w33com determines the purposes for which your personal data is processed and the means by which it is processed. Where w33com engages third-party processors (such as payment providers or KYC verification services), w33com ensures appropriate data processing agreements are in place.

This Policy is drafted in alignment with internationally recognised data protection principles including those articulated in the European Union's General Data Protection Regulation (GDPR) and applicable data protection frameworks in the jurisdictions where w33com operates. Pakistani players are afforded all substantive rights described in this Policy. By registering or using the w33com platform, you acknowledge that you have read and understood this Privacy Policy.

2Data We Collect

w33com collects only personal data that is necessary for the operation of a licensed online gaming platform in compliance with regulatory obligations. The categories of personal data we collect are set out below.

2.1 Account Registration Data

• Full Legal Name: As it appears on your Pakistani CNIC or equivalent government-issued identification document.
• Date of Birth: Required to verify compliance with the 21+ minimum age requirement.
• Pakistani Mobile Number: Your registered number, which may also be linked to JazzCash or EasyPaisa payment methods.
• Email Address: Used for account communications, security alerts, and optional marketing communications where consent is given.
• Username: Your chosen display identifier within the w33com platform.
• Password: Stored in hashed, salted form — never readable by w33com staff in plain text.

2.2 KYC & Identity Verification Data

• Government ID Documents: Copy of Pakistani CNIC (front and back) or alternative accepted government identification.
• Selfie Photographs: Used for liveness checks to confirm the document belongs to the registering person.
• Proof of Payment Method: Screenshots or statements confirming ownership of the JazzCash, EasyPaisa, or bank account used for w33com deposits.
• Source of Funds Documentation: Required for Players making deposits above defined thresholds, pursuant to anti-money laundering regulatory obligations.

2.3 Financial Transaction Data

• Deposit amounts, dates, and payment method references for all PKR transactions processed via w33com.
• Withdrawal requests, amounts, destination payment method identifiers, and processing status records.
• Transaction histories required to maintain regulatory financial audit trails under w33com's gaming licence obligations.

2.4 Gaming Activity Data

• Game participation records: titles played, bet amounts, outcomes, session duration, and timestamps for all w33com gaming activity.
• Sports betting records: markets wagered, stake amounts, odds accepted, and settlement outcomes.
• Bonus and promotion participation records.
• Responsible gaming data: self-imposed limits, self-exclusion records, and responsible gaming tool interactions.

2.5 Technical & Device Data

• IP address, approximate geolocation data, device type, operating system, browser type and version.
• Session logs including login timestamps, session duration, and logout events.
• Device fingerprinting data used for fraud detection and multi-account identification purposes.

3How We Collect Data

w33com collects personal data through the following mechanisms:

• Direct Submission: Information you actively provide during account registration, KYC document upload, payment method setup, and support interactions on the w33com platform.
• Automated Platform Collection: Technical and behavioural data collected automatically as you use the w33com website and gaming platform — including session activity, game choices, and device information gathered through the platform's operating systems.
• Cookies and Tracking Technologies: As described in Section 5 of this Policy, certain data is collected via cookies, local storage, and similar browser-based tracking technologies when you visit the w33com website.
• Third-Party Verification Services: During the KYC process, w33com works with regulated third-party identity verification providers who may independently retrieve and cross-reference data from public and official registers to confirm the accuracy of identity documents you submit.
• Payment Processors: Payment processing partners (JazzCash, EasyPaisa, bank transfer intermediaries) provide transaction reference data to w33com to facilitate deposit crediting and withdrawal processing. w33com does not receive or store complete card numbers or full payment credentials from any processing partner.

4Purposes & Legal Basis for Processing

w33com processes your personal data only where there is a valid legal basis for doing so. The purposes for which we process your data, along with the applicable legal basis, are:

• Account Creation & Platform Operation (Contractual Necessity): Processing your registration data, authentication credentials, and gaming activity records is necessary to provide you with the w33com gaming platform services described in our Terms & Conditions.
• KYC & Anti-Money Laundering Compliance (Legal Obligation): w33com is required under its international gaming regulatory licence to conduct identity verification and maintain transaction records. This processing is mandatory and cannot be opted out of while you hold a w33com account.
• Payment Processing (Contractual Necessity): Processing financial data is necessary to execute PKR deposits, withdrawals, and bonus credit transactions on your w33com account.
• Fraud Prevention & Security (Legitimate Interest): w33com processes technical, device, and behavioural data to detect multi-accounting, fraudulent payment activity, bonus abuse, and account security breaches. This processing is in the legitimate interests of w33com and its player community.
• Responsible Gaming Monitoring (Legitimate Interest / Legal Obligation): Gaming activity data is processed to monitor for problem gambling indicators and to enforce self-imposed player limits and self-exclusion requests. This is both a regulatory requirement and a legitimate interest of the Operator.
• Customer Support (Legitimate Interest): Account and communication data is processed by the w33com support team to investigate and resolve player queries, disputes, and technical issues.
• Marketing Communications (Consent): Where you have affirmatively opted in to marketing communications, w33com may process your contact data to send promotional offers, bonus notifications, and platform updates. This is processed on the basis of your explicit consent, which you may withdraw at any time.

5Cookies & Tracking Technologies

The w33com website uses cookies and similar tracking technologies to ensure core platform functionality, improve your user experience, and support fraud prevention and security measures. By continuing to use the w33com website, you consent to the use of cookies as described in this section.

5.1 Types of Cookies Used

• Essential Cookies: Strictly necessary for the w33com platform to function correctly — including maintaining your logged-in session, storing language preferences, and enabling secure payment flows. These cannot be disabled without significantly impairing platform functionality.
• Analytics Cookies: Used to understand aggregated patterns of how users navigate the w33com website — including pages visited, session duration, and technical errors encountered. This data is anonymised and used solely to improve the platform experience for Pakistani players.
• Security & Fraud Detection Cookies: Used to identify anomalous login patterns, detect bot activity, and support multi-account prevention systems. These are a legitimate security requirement for an internationally licensed gaming operator.
• Preference Cookies: Used to remember your w33com platform preferences between sessions — such as your preferred odds display format, language setting, and game lobby filters.

6Data Sharing & Disclosure

w33com does not sell, rent, or commercially trade your personal data. We share your data only with the categories of third parties listed below, and only to the extent strictly necessary for the specified purpose.

• KYC & Identity Verification Partners: Accredited third-party identity verification providers who process your CNIC and related documentation on w33com's behalf pursuant to regulatory KYC obligations. These providers are bound by data processing agreements and are not permitted to use your data for their own purposes.
• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing intermediaries receive the minimum data necessary to execute your requested PKR deposit or withdrawal transaction. They are independently regulated financial institutions with their own data protection obligations.
• Gaming Content Providers: Software providers whose games are available on the w33com platform (slot studios, live dealer studios, sportsbook data providers) may receive pseudonymised player session data for game integrity and technical support purposes. They do not receive directly identifying information.
• Regulatory Authorities: w33com may be required to disclose player data to its international gaming regulatory authority, financial intelligence units, or law enforcement agencies pursuant to legal obligations, court orders, or regulatory directions. w33com will only comply with requests from authorities with proper legal standing.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by w33com under strict confidentiality obligations where necessary for the operation of a licensed gaming business.

7International Data Transfers

As an internationally licensed online gaming operator, w33com's infrastructure and some third-party service providers may be located in jurisdictions outside Pakistan. Where personal data of Pakistani players is transferred internationally, w33com ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding the protections afforded under this Privacy Policy.

Safeguards for international data transfers may include: Standard Contractual Clauses (SCCs) as defined under applicable international data protection frameworks; binding corporate rules where transfers occur within a corporate group; or transfers to jurisdictions that are subject to adequacy decisions by recognised data protection supervisory authorities.

All KYC documentation — including copies of Pakistani CNICs — is processed on servers located in jurisdictions that maintain equivalent data protection standards to those described in this Policy. w33com's KYC verification partners are contractually prohibited from processing Pakistani players' identity documents for any purpose other than those specified in their data processing agreements with w33com.

8Data Security

w33com implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include but are not limited to:

• Encryption in Transit: All data transmitted between your device and w33com's servers is encrypted using TLS 1.3 — the current international gold standard for transport layer security, equivalent to the encryption standard used by major Pakistani banks and financial institutions.
• Encryption at Rest: Sensitive personal data including identity documents and payment references is encrypted at rest using AES-256 encryption on all w33com storage systems.
• Password Security: User passwords are stored using bcrypt hashing with per-user salt values. Plain-text passwords are never stored on w33com systems and cannot be retrieved by any w33com employee.
• Access Controls: Access to personal data within w33com's internal systems is restricted on a strict need-to-know basis using role-based access control (RBAC). Access to Pakistani players' identity documents is limited to KYC verification personnel with appropriate clearance.
• Security Monitoring: w33com's security operations function continuously monitors platform infrastructure for anomalous access patterns, intrusion attempts, and data exfiltration signals.
• Third-Party Security Audits: w33com's platform infrastructure undergoes regular independent security assessments as part of its international gaming licence compliance obligations.

9Data Retention

w33com retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active w33com account is retained for the full duration of the account relationship and for a minimum of 5 years following account closure, pursuant to anti-money laundering and gaming regulatory record-keeping requirements.
• KYC Documentation: Identity verification documents (CNIC copies, selfies, proof of payment method) are retained for a minimum of 5 years from the date of verification or account closure (whichever is later), as required by AML regulatory frameworks applicable to w33com's gaming licence.
• Financial Transaction Records: Complete records of all PKR deposits, withdrawals, and bonus transactions are retained for a minimum of 7 years from the date of the transaction for regulatory financial reporting purposes.
• Gaming Activity Logs: Individual game round records, bet histories, and session logs are retained for a minimum of 5 years from the date of the activity.
• Marketing Data: Where you have opted in to marketing communications, your contact preferences and marketing interaction history are retained until you withdraw your consent, after which marketing processing ceases within 30 days.
• Technical & Security Logs: IP address logs, login records, and security event logs are retained for up to 24 months, after which they are deleted or anonymised unless required for an ongoing investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

10Your Data Rights

As a w33com account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Officer at [email protected] — clearly stating your w33com User ID and the specific right you wish to exercise. w33com will respond to all valid data rights requests within 30 calendar days.

11Marketing & Communications

w33com may send you communications relating to the platform, your account, and promotional offers. The type of communication and the legal basis for sending it differs:

• Transactional Communications (No consent required): Account security alerts, deposit and withdrawal confirmations, KYC status notifications, password reset messages, responsible gaming alerts, and service announcements are sent to your registered email or mobile number as necessary for the operation of your w33com account. These cannot be opted out of while your account remains active.
• Marketing Communications (Consent required): Promotional emails, bonus offer notifications, and w33com newsletter communications are only sent where you have expressly opted in. During registration, you will be given a clear option to subscribe to marketing communications — this is not pre-ticked and requires affirmative action.
• Withdrawal of Marketing Consent: You may withdraw your consent to marketing communications at any time by updating your preferences in your w33com account settings, or by emailing [email protected] with an unsubscribe request. Marketing communications will cease within 5 business days of your withdrawal request.

12Minors & Age Verification

The w33com platform is strictly for adults aged 21 years or older. w33com does not knowingly collect or process personal data of individuals under 21 years of age. The KYC verification process, which requires submission of a Pakistani CNIC or equivalent government-issued identification, is specifically designed to verify that all registering users meet the minimum age requirement before they are permitted to deposit funds or participate in any w33com gaming activity.

If w33com discovers or reasonably suspects that personal data has been submitted by or on behalf of a person under 21 years of age, the associated Account will be immediately suspended, all gaming activity voided, and the matter will be escalated to the w33com compliance team. Any funds on the Account at the time of discovery will be returned to the originating payment method after identity and age investigation, in accordance with applicable regulatory requirements.

If you are a parent or guardian who believes that a minor may have submitted personal data to w33com, please contact our support team immediately at [email protected] — we will investigate and take all necessary action promptly.

13Third-Party Services

The w33com platform integrates with third-party services — including payment processors (JazzCash, EasyPaisa, HBL), identity verification providers, game content suppliers, and analytics infrastructure — each of which operates under their own privacy policies and data protection frameworks. w33com is not responsible for the privacy practices of these independent third parties beyond the scope of the data processing agreements we maintain with them.

Pakistani players using JazzCash or EasyPaisa to deposit or withdraw via w33com should note that their interactions with those payment platforms are also subject to JazzCash's and Telenor Microfinance Bank's / EasyPaisa's own data protection terms. w33com does not control or have visibility into how these payment providers handle data beyond the transaction reference information they share with us for payment reconciliation purposes.

The w33com website does not contain paid advertisements from third-party advertisers, and no advertising tracking pixels or third-party advertising cookies are deployed on w33com.asia. The only tracking technologies in use are those described in Section 5 of this Policy, operated by w33com or its platform infrastructure partners.

14Changes to This Privacy Policy

w33com reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the introduction of new platform features. All material changes to this Policy will be communicated to registered w33com Users via email notification or a prominent in-platform notice no fewer than 14 calendar days before the changes take effect.

The revised Policy will be published at w33com.asia/privacy-policy with an updated "Last Revised" date at the top. Continued use of the w33com platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated data processing terms. If you do not accept the revised terms, you must close your account before the effective date and withdraw any remaining PKR balance.

15Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by w33com, please contact our Data Protection function using the following channels:

• Email: [email protected] — Subject line: "Data Privacy Request — [Your w33com User ID]"
• In-Platform Live Chat: Available 24/7 — request to be transferred to the compliance or data privacy team. Average initial response time: under 10 minutes.
• Response Timeline: All data privacy requests are acknowledged within 5 business days and substantively resolved within 30 calendar days, with a possible extension of up to 90 days for complex requests.

15.1 Regulatory Complaints

If you are not satisfied with w33com's response to a data privacy request or complaint, you have the right to escalate your complaint to the relevant supervisory authority under w33com's international gaming licence jurisdiction. w33com will cooperate fully with any supervisory authority investigation and comply with any binding determination issued.