w345 Privacy Policy

01 Introduction & Scope

This Privacy Policy ("Policy") describes how w345 ("w345", "we", "us", "our") collects, uses, discloses, and safeguards the personal information of individuals ("you", "Player", "User") who access or use the w345 online gaming platform at w345.app and all associated subdomains, mobile interfaces, and services.

This Policy applies to all personal data processed by w345 in connection with your registration, use of the w345 Login system, deposits and withdrawals, gameplay activity, customer support interactions, and any marketing communications you have opted into. It applies regardless of the device or network you use to access the platform.

This Policy should be read in conjunction with the w345 Terms & Conditions, which govern the overall contractual relationship between you and w345.

02 Data Controller

For the purposes of applicable data protection law, w345 is the data controller in respect of the personal information collected and processed through the w345 platform. As data controller, w345 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where w345 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and hosting infrastructure partners — those parties act as data processors under contract with w345 and are bound by strict data protection obligations. They may not use your personal data for any purpose beyond the specific service they provide to w345.

03 Personal Data We Collect

w345 collects personal data from you directly when you interact with the platform, and automatically through your use of the platform. The categories of personal data we collect include:

04 How We Use Your Personal Data

w345 uses the personal data it collects solely for the following stated purposes. We do not use your data in any manner that is incompatible with the purpose for which it was collected without first obtaining your consent or establishing a separate lawful basis.

• Account Creation & Management: To register and maintain your w345 account, verify your identity through the KYC process, and manage the w345 Login system securely.
• Service Delivery: To provide you with access to cricket betting markets, live casino games, slot titles, the Super Wheel, Monkey King Fishing, and all other w345 platform features.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records for your account.
• Legal & Regulatory Compliance: To fulfil our obligations under our international gaming licence, including KYC verification, anti-money laundering (AML) screening, and responsible gaming requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, and unauthorised access to w345 accounts.
• Responsible Gaming: To monitor gameplay patterns and identify indicators of problem gambling, enabling us to offer appropriate responsible gaming interventions in line with our licensing obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email in both Urdu and English.
• Platform Improvement: To analyse aggregate usage data and improve the performance, design, and feature set of the w345 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receive such communications. You may opt out at any time.

05 Legal Basis for Processing

w345 processes your personal data only where a valid legal basis exists for doing so under applicable data protection law. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to perform the contract between you and w345 — including account registration, deposit and withdrawal processing, and gameplay service delivery.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and data retention requirements imposed by our gaming licence.
• Legitimate Interests: Processing carried out for w345's legitimate business interests — such as fraud detection, platform security, and aggregate analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Sharing Your Personal Data

w345 does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial and identity data required to process your deposits and withdrawals in PKR. These providers are independently regulated financial institutions.
• KYC & AML Verification Partners: Specialist identity verification providers process your identity documents and screen your details against sanctions lists and PEP databases as required by our licensing obligations.
• Technology & Hosting Infrastructure: Cloud hosting, database, and content delivery partners who store and process platform data on our behalf, under contractual data processing agreements.
• Regulatory & Licensing Authorities: Our international gaming licensing authority and relevant regulatory bodies may require access to player data as part of compliance audits, dispute resolution, or ongoing licensing oversight.
• Law Enforcement & Legal Process: Where required by a valid court order, law enforcement request, or other legal process, w345 may disclose personal data to the relevant authority. We will notify you of such a disclosure where legally permissible to do so.
• Business Transfers: In the event that w345 undergoes a merger, acquisition, or sale of business assets, your personal data may be transferred to the successor entity — subject to the same privacy protections described in this Policy.

07 Cookies & Tracking Technologies

w345 uses cookies and similar tracking technologies to operate the platform securely and to provide a consistent, personalised experience. A cookie is a small text file placed on your device when you access the w345 platform. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These are required for the platform to function. They maintain your w345 Login session, remember your authentication state, and protect against cross-site request forgery. These cookies cannot be disabled without impairing the core functionality of the platform.
• Functional Cookies: These remember your display preferences, selected language (Urdu or English), and regional settings such as PKR currency display. They are not used for tracking across other websites.
• Analytics Cookies: w345 uses aggregated, anonymised analytics data to understand how players navigate the platform and to identify areas for improvement. No individual player is identified in this data.

w345 does not use third-party advertising cookies, cross-site tracking pixels, or social media retargeting cookies on this platform. You may adjust your browser settings to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will affect your ability to use the w345 Login system and other core platform features.

08 Data Security

w345 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the w345 platform is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data stored on w345 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within w345's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training.
• Two-Factor Authentication: The w345 Login system supports SMS-based two-factor authentication (2FA), which we strongly recommend all players enable.
• Penetration Testing & Audits: w345 engages independent security specialists to conduct periodic penetration testing and security audits of the platform.
• Incident Response: w345 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights or freedoms, we will notify the relevant regulatory authority and affected players within the timeframe required by applicable law.

Whilst w345 takes all reasonable precautions to protect your personal data, no security system is entirely impenetrable. You remain responsible for maintaining the security of your w345 Login credentials and for notifying us immediately of any suspected unauthorised access to your account.

09 Data Retention

w345 retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, including compliance with our legal, regulatory, and licensing obligations. The primary retention periods that apply to your data are as follows:

• Account & Identity Data: Retained for the duration of your w345 account and for a minimum of five (5) years following account closure, as required by our gaming licence and AML obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping requirements.
• Customer Support Records: Live chat transcripts and support email records are retained for three (3) years from the date of the interaction.
• Technical & Log Data: Server logs and technical session data are retained for up to twelve (12) months, after which they are automatically purged or anonymised.
• Marketing Preferences: Records of your marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, your personal data is securely deleted from active systems. Where immediate deletion is not operationally feasible, data is anonymised such that it can no longer be attributed to you as an individual.

10 Your Privacy Rights

Subject to applicable law and our obligations under our gaming licence, you have the following rights in relation to the personal data w345 holds about you:

• Right of Access: You may request a copy of the personal data w345 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by w345 is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that w345 delete your personal data. Note that this right is subject to our overriding legal obligations to retain data under our licensing and AML requirements.
• Right to Restrict Processing: You may request that w345 restrict the processing of your personal data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability: You may request that w345 provide your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to w345 demonstrating compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of these rights, please contact the w345 support team via live chat or at [email protected]. We will verify your identity before processing any data rights request.

11 Children & Minors

The w345 platform is strictly intended for adults aged 21 years and above. w345 does not knowingly collect personal data from individuals under the age of 21. Registration by minors is expressly prohibited under the w345 Terms & Conditions.

If w345 becomes aware — through age verification, KYC review, or any other means — that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account and delete the associated personal data, subject to any legal obligation to retain records of the underage access incident.

If you have reason to believe that a minor has registered a w345 account or provided personal data to w345, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

12 International Data Transfers

As w345 operates under an international gaming licence and engages service providers located in multiple jurisdictions, your personal data may be transferred to, stored in, and processed in countries outside of Pakistan. Where such transfers occur, w345 ensures that appropriate safeguards are in place to protect your personal data to the standard described in this Policy.

Appropriate safeguards for international transfers may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with the receiving party.
• Transfers to recipients in jurisdictions that provide an adequate level of data protection as recognised by applicable law.
• Binding corporate rules, where applicable to intra-group transfers.

You may contact our support team to request further information about the specific safeguards in place for any particular international transfer of your personal data.

13 Changes to This Privacy Policy

w345 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. When we make material changes to this Policy, we will notify registered players via the email address or mobile number on file, or via a prominent notice on the w345 platform, at least 7 days before the changes take effect.

The "Last Reviewed" date at the top of this Policy will be updated to reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how w345 protects your personal data. Your continued use of the w345 platform following the effective date of any updated Policy constitutes your acceptance of the changes.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which w345 processes your personal data, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on the w345 platform in Urdu and English.
• Support Hours: 24/7, Pakistan Standard Time (PKT, UTC+5). Average live chat response time is 3–5 minutes.

w345 takes all privacy complaints seriously and will respond to your complaint within 30 calendar days of receipt. If you are not satisfied with our response to your complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body designated by our licensing authority.