Privacy Policy

This Privacy Policy ("Policy") is published by 299win ("we", "us", "our", "the Platform") and governs the collection, use, storage, sharing and protection of personal data submitted by users ("you", "Player", "User") who access or interact with the 299win website at https://299win.cam and all associated services.

299win is committed to handling personal data responsibly and transparently. This Policy is intended to give you a clear, complete picture of our data practices so that you can make informed decisions about your engagement with the Platform.

By registering an Account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, national identity number, contact details, financial data and online identifiers.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, 299win acts as the Data Controller.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller, under contractual instruction and with appropriate data protection safeguards in place.
• "KYC Data" — identity verification documents and related information collected during Know Your Customer verification procedures.
• "Cookies" — small text files stored on your device by a web browser, used to retain session information, preferences and analytical data.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

299win collects the following categories of personal data in connection with the provision of its services:

3.1 Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth
• National identity document number (CNIC or passport number)
• Copies of government-issued photo identification submitted for KYC

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city, province and postal code)

3.3 Financial Data

• Bank account or mobile wallet account details used for deposits and withdrawals (where applicable, including references to methods commonly used in Pakistan such as Easypaisa, JazzCash, Raast or bank accounts held at institutions such as HBL, UBL, Meezan Bank or Bank Alfalah)
• Transaction history including deposit amounts, withdrawal requests and bet settlement records
• PKR balance information and bonus credit records

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from it
• Browser type, version and operating system
• Device identifiers and mobile network information
• Pages visited, session duration and navigation patterns within the Platform
• Referring URLs and exit pages

3.5 Communications Data

• Records of correspondence with our support team, including Live Chat transcripts and email communications
• Feedback, complaints and dispute correspondence

We collect personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, filling in support forms or communicating with our team.
• Automated Collection: Technical data collected automatically when you access the Platform, through server logs, cookies, web beacons and similar tracking technologies.
• Third-Party Sources: Identity verification data may be cross-referenced against third-party identity verification service providers and fraud prevention databases as part of our KYC and anti-money laundering processes.
• Payment Processors: Transaction confirmation data received from payment processors when you complete a deposit or withdrawal. Note that 299win does not store full payment card numbers or mobile wallet PINs.

299win processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — including account management, transaction processing, KYC verification and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, responsible gambling requirements and financial record-keeping requirements.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, service improvement and internal analytics, provided such interests are not overridden by your fundamental rights.
• Consent: Processing for specific purposes where we have obtained your explicit consent, such as sending you promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

299win processes your personal data for the following specific purposes:

1. Account Management: Creating, maintaining and administering your Account, including processing login authentication, account settings changes and balance management.
2. Identity Verification (KYC): Verifying your identity, age and payment method ownership as required by our operating standards and applicable anti-money laundering frameworks.
3. Transaction Processing: Facilitating PKR deposits and withdrawals through available payment methods, including those referenced in the Pakistani market such as bank transfers and mobile wallet transactions.
4. Service Delivery: Providing access to betting markets, casino games, live dealer products, bonuses and all other Platform features.
5. Fraud Prevention and Security: Detecting, investigating and preventing fraudulent transactions, account takeover attempts, bonus abuse and other security threats.
6. Responsible Gambling: Monitoring account activity for patterns indicative of problematic gambling behaviour and administering responsible gambling tools including deposit limits, loss limits, session controls and self-exclusion.
7. Customer Support: Responding to your queries, resolving disputes and processing complaints in English, with Urdu-language support available during specified hours.
8. Marketing Communications: Sending you promotional offers, bonus notifications and platform updates where you have consented to receive such communications or where permitted under applicable law.
9. Legal and Regulatory Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities and maintaining required records.
10. Platform Improvement: Analysing usage data in aggregate to improve the Platform's functionality, performance and user experience.

299win does not sell your personal data. We may share your data with the following categories of recipient in the circumstances described:

• Payment Processors: Financial data is shared with payment processing partners solely to facilitate deposit and withdrawal transactions. These partners are bound by contractual data protection obligations.
• Identity Verification Providers: KYC documents and identity data may be shared with accredited third-party identity verification services for age and identity confirmation purposes.
• Fraud Prevention Services: Transaction and behavioural data may be shared with fraud detection platforms to identify and prevent financial crime on the Platform.
• Technology Service Providers: Data may be processed by Platform hosting providers, database administrators and software-as-a-service vendors who act as Data Processors under appropriate data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies or courts where required by applicable law or in response to a valid legal order. We will, where legally permissible, notify you of such a disclosure.
• Professional Advisers: Legal counsel, auditors and compliance consultants may access personal data on a strictly need-to-know basis under confidentiality obligations.

299win operates globally and your personal data may be transferred to, stored in or processed in countries other than Pakistan. Such countries may have data protection laws that differ from, or offer less protection than, those applicable in Pakistan.

Where we transfer personal data internationally, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with the principles set out in this Policy. These safeguards may include:

• Standard contractual clauses or equivalent contractual data protection terms with data recipients
• Data processing agreements with service providers that impose equivalent data protection obligations
• Transfer to jurisdictions that maintain recognised adequacy standards for data protection

You may request further information about international transfer safeguards applicable to your data by contacting our support team.

299win retains personal data for as long as is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years in accordance with applicable financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the period required by the Platform's operating jurisdiction's KYC regulations, typically five (5) years post-Account closure.
• Communication Records: Support correspondence and dispute records are retained for three (3) years from the date of the relevant interaction, unless a longer period is required for ongoing legal proceedings.
• Technical and Usage Data: Anonymised or aggregated analytics data may be retained indefinitely for platform improvement purposes. Individually identifiable technical data is retained for up to twenty-four (24) months.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account relationship and for a reasonable period thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard methods or irreversibly anonymised such that it can no longer be linked to an identifiable individual.

299win uses cookies and similar tracking technologies to operate the Platform effectively, enhance your experience and analyse usage patterns. By accessing the Platform, you consent to our use of cookies as described below.

You can manage cookie preferences through your browser settings. Note that disabling essential or fraud prevention cookies may prevent you from accessing certain Platform features or impair account security protections.

Subject to applicable law and certain exceptions, you hold the following rights with respect to your personal data held by 299win. You may exercise any of these rights by contacting our support team using the details provided in Section 15.

We will respond to valid data rights requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days with notice to you. We may need to verify your identity before processing your request.

The 299win Platform is strictly intended for use by adults who are at least 18 years of age, or the higher minimum age required by the operator's licence jurisdiction or any applicable local law. We do not knowingly collect personal data from individuals under the minimum required age.

If we discover or have reasonable grounds to believe that an Account belongs to a person below the minimum required age, we will immediately close the Account, void all associated balances and securely delete all personal data associated with that Account, subject to any mandatory retention obligations.

If you are aware that a minor has registered an Account or provided personal data to the Platform, please contact our support team immediately so that we can take appropriate action.

299win implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data stored at rest, including KYC documents and financial records
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Multi-factor authentication for administrative system access
• Regular security assessments and penetration testing of Platform infrastructure
• Incident response procedures for managing data breaches, including notification protocols
• Secure data disposal procedures for physical and digital media

While we take all reasonable precautions to protect your data, no internet-based service is completely immune to security risks. You are responsible for maintaining the security of your Account credentials. If you suspect your Account has been compromised, contact our support team immediately.

299win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or operational requirements. The most current version of this Policy is always available on this page, with the effective date displayed prominently.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will provide advance notice via email or a prominent notice on the Platform prior to the changes taking effect. For non-material changes, the updated Policy will take effect upon publication.

We encourage you to review this Policy periodically to remain informed of our current data practices. Continued use of the Platform following the publication of an updated Policy constitutes your acknowledgement of the changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a data protection concern, please contact the 299win team through the following channels:

When submitting a data rights request, please include your registered Account email address and a clear description of your request. We may need to verify your identity before processing the request.

If you believe that we have failed to handle your personal data in accordance with this Policy or applicable law and you are not satisfied with our response to your complaint, you may have the right to lodge a complaint with a relevant data protection supervisory authority in the jurisdiction applicable to you.