Privacy Policy — w5678 Online Gaming Pakistan

w5678 is an online gaming platform serving players across Pakistan. When you register an account, make a deposit, place a bet or simply browse the platform, certain information about you is collected and processed. This policy explains all of that in plain language — not in legal boilerplate designed to confuse you.

We are the data controller for all personal data collected through w5678. That means we determine how and why your data is used, and we are responsible for keeping it safe. We take that responsibility seriously because the trust Pakistani players place in w5678 is something we work hard to earn and maintain every day.

This Privacy Policy applies to the w5678 website (https://w5678.app), its mobile-optimised version and all services provided under the w5678 brand. It does not apply to any third-party websites, payment processors or game studios that may be linked from or integrated into the platform — those organisations have their own privacy policies which govern their handling of any data passed to them.

w5678 collects personal data in several ways: directly from you when you register or interact with the platform, automatically during your use of the site, and in limited cases from third-party sources such as payment processors. Here is a full breakdown:

We do not collect sensitive personal data such as your precise GPS location, religious beliefs, political opinions or biometric data, except where identity verification requirements specifically require it (such as a facial match during KYC). In those cases, you will be informed explicitly before any such data is collected.

Every piece of data w5678 collects has a specific, legitimate purpose. We do not collect data we don't need, and we do not use data in ways you wouldn't reasonably expect given the nature of the platform. Here is how your data is used:

• Account management: To create and maintain your w5678 account, verify your identity, manage login security and personalise your experience on the platform.
• Transaction processing: To accept deposits, process withdrawals and maintain accurate financial records for your account. This includes sharing transaction identifiers with Easypaisa, JazzCash, NayaPay, SadaPay and other payment partners as needed to complete transfers.
• Gameplay and platform delivery: To serve game content, record bet outcomes, calculate winnings, and ensure the platform functions correctly on your device.
• Fraud prevention and security: To detect and prevent unauthorised access, duplicate accounts, money laundering, bonus abuse and other prohibited activities. Device and IP data is particularly important for this purpose.
• Regulatory compliance: To fulfil Know Your Customer (KYC) obligations, maintain records required by our licensing agreement, and respond to lawful requests from Pakistani regulatory or law enforcement authorities.
• Responsible gaming: To monitor for patterns associated with problem gambling and to enforce any deposit limits, self-exclusion or cooling-off periods you have set on your account.
• Customer support: To handle your queries, resolve disputes and improve the quality of our support service over time.
• Marketing communications: To send you information about promotions, bonuses and new features on w5678, but only where you have opted in or where we have a legitimate interest to do so. You can opt out at any time.
• Platform analytics and improvement: To understand how players use w5678 and to make decisions about future features, layout changes and game additions.

w5678 processes your personal data on the following legal grounds:

• Contract performance: Processing your registration data, financial transactions and gameplay history is necessary to deliver the service you signed up for. Without this processing, w5678 could not operate your account.
• Legal obligation: KYC verification, transaction record-keeping and responding to regulatory enquiries are required by the terms of our operating licence and applicable law.
• Legitimate interests: Fraud detection, platform security, analytics and service improvement are carried out under w5678's legitimate interest in operating a safe and well-functioning platform. These interests are balanced against your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only with your explicit consent, which you can withdraw at any time without affecting other aspects of your account.

w5678 does not sell your personal data. We do not share your information with advertisers, data brokers or any organisation that would use it for purposes unrelated to your use of the platform. Data is shared only in the following specific and necessary circumstances:

• Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay and banking partners strictly to process your deposits and withdrawals. These organisations are bound by their own privacy obligations and may not use your data for any other purpose.
• Game studios and providers: Gameplay data is shared with the studios that supply our games as needed for game operation, outcome verification and technical support. Game providers cannot use your data for independent marketing purposes.
• Identity verification services: Where KYC verification is required, your identity documents may be processed by a licensed third-party verification provider. These providers are contractually required to handle your data securely and only for verification purposes.
• Regulatory and legal authorities: w5678 will disclose personal data to Pakistani law enforcement, regulatory bodies or courts when required to do so by a lawful order or where we have a good-faith belief that disclosure is necessary to prevent fraud or protect the safety of players.
• Business operations: In the event of a merger, acquisition or change of ownership of w5678, player data would be transferred to the acquiring entity as part of the transaction. Players would be notified before any such transfer takes effect.

All third parties who receive personal data from w5678 are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

w5678 uses cookies and similar technologies to make the platform work properly and to understand how players use it. Here is what we use and why:

You can manage your cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in to your w5678 account. Blocking other cookie categories will not affect core platform functionality.

Keeping your data secure is not optional at w5678 — it's fundamental to how the platform operates. We implement multiple layers of technical and organisational security controls:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and w5678 servers is encrypted in transit. This applies to login, registration, transactions and all other communications.
• Encrypted storage: Sensitive data at rest — including identity documents and verification records — is stored using strong encryption. Passwords are stored as salted hashes and are never stored in plaintext.
• Payment security: w5678 does not store full payment card numbers on its servers. Card payments are tokenised by PCI-DSS compliant processors, meaning we retain only a non-sensitive token that identifies your payment method without exposing your actual card data.
• Access controls: Internal access to player data is restricted to staff who need it for specific operational purposes. All internal data access is logged and audited.
• Intrusion detection: w5678 operates continuous monitoring systems that detect and alert on unusual access patterns or potential security incidents.
• Security testing: The platform undergoes regular penetration testing and security assessments by qualified third parties to identify and address vulnerabilities before they can be exploited.

While no system can guarantee absolute security, w5678's approach to data security significantly exceeds the minimum standards expected for an online gaming platform. If a data breach occurs that affects your personal data, we will notify you within the timeframe required by applicable law.

w5678 does not keep your personal data indefinitely. Retention periods are set based on the purpose for which data was collected and any applicable legal requirements:

• Account data: Retained for as long as your account is active and for a period of 5 years after closure to satisfy legal and audit obligations.
• Transaction records: Financial transaction history is retained for 7 years in line with financial record-keeping requirements.
• Identity verification documents: KYC documents are retained for 5 years following account closure or the last transaction, whichever is later.
• Support communications: Chat logs and email correspondence are retained for 2 years and then deleted unless they relate to an unresolved dispute.
• Cookie and analytics data: Analytics data is anonymised after 13 months. Session cookies expire at the end of each browsing session.

When data is no longer required for its original purpose and no legal obligation exists to retain it, w5678 securely deletes or anonymises it so that it can no longer be linked to you as an individual.

As a w5678 player, you have the following rights with respect to your personal data. These rights can be exercised at any time by contacting our support team:

• Access: You can request a copy of all personal data w5678 holds about you. We will provide this within 30 days of a verified request.
• Rectification: If any data we hold about you is inaccurate or incomplete, you can ask us to correct it. For minor updates like a phone number change, you can do this directly in your account settings.
• Erasure ("right to be forgotten"): You can request deletion of your personal data. We will honour this request where there is no legal obligation to retain the data. Note that transaction records have mandatory retention periods that cannot be overridden by a deletion request.
• Restriction: In certain circumstances — for example if you dispute the accuracy of data we hold — you can ask us to restrict processing while the matter is resolved.
• Portability: You can request your personal data in a structured, machine-readable format so that you can take it to another service.
• Objection: You can object to processing based on legitimate interests, including profiling for marketing purposes.
• Withdraw consent: Where processing is based on your consent (such as marketing emails), you can withdraw that consent at any time with immediate effect.

To exercise any of these rights, contact the w5678 support team via live chat or at support@w5678.app. We will verify your identity before processing any request that involves accessing or modifying your data.

w5678 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires a date of birth, and accounts where the submitted date of birth indicates the user is under 18 are not activated.

If we discover or have reason to believe that a person under 18 has registered on w5678 — whether by submitting an incorrect date of birth or through any other means — the account will be immediately suspended. Any deposits made will be returned to the original payment method and any winnings will be voided. The account and all associated data will be securely deleted.

If you are a parent or guardian and believe your child may have accessed w5678, please contact us immediately at support@w5678.app and we will take action without delay.

w5678 reviews this Privacy Policy regularly to ensure it remains accurate and reflects how the platform actually operates. When we make changes, the "Last Updated" date at the top of this page will be revised.

For material changes — those that meaningfully affect your privacy rights or how we use your data — registered players will receive advance notice of at least 7 days via their registered contact information before the changes take effect. This gives you the opportunity to review the changes and, if you disagree with them, close your account and withdraw your balance before the new terms apply.

Minor changes — such as clarifications of existing practices or corrections of typographical errors — may be published without individual notification but will always be reflected in the updated page and the revised "Last Updated" date.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a complaint about how w5678 has handled your personal data, please get in touch:

• Email: support@w5678.app
• Live Chat: Available 24/7 via the chat button on any page of the w5678 platform
• Response time: Privacy-related queries are given priority handling. We aim to respond within 24 hours and to resolve substantive requests within 30 days.
• Languages: Our support team handles privacy queries in both Urdu and English.

If you raise a complaint with us and feel it has not been adequately resolved, you have the right to escalate your complaint to the relevant data protection authority. Our support team can provide guidance on the appropriate escalation path based on your specific concern.