w657 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how w657 ("w657", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with your use of the w657 website at w657.bet and all related services including casino games, sports betting, payment processing, and customer support ("Services").

This Policy applies to all registered players, visitors who browse the platform without registering, and any other individuals whose personal data we process in connection with the operation of w657. By accessing the w657 platform or registering an account, you acknowledge that you have read and understood this Policy.

02 Data Controller

For the purposes of applicable data protection law, w657 is the data controller responsible for personal data collected through the w657 platform. As data controller, w657 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out in compliance with applicable privacy laws and regulations.

If you have any questions about how your personal data is handled, or wish to exercise any of your data rights described in Section 10 of this Policy, you may contact our data protection team using the details set out in Section 16.

03 Data We Collect

3.1 Registration Data

When you create a w657 account, we collect the following information:

• Full legal name as it appears on your CNIC
• Date of birth (for age verification — 21+ requirement)
• Valid email address
• Pakistani mobile number (used for account verification and, optionally, 2FA)
• Preferred account currency (PKR)
• Self-declared city of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad)

3.2 KYC Verification Data

Before your first withdrawal is processed, and at any point required by our compliance obligations, we collect:

• Copy of your CNIC (both sides)
• Proof of address (utility bill, bank statement, or similar document no older than 3 months)
• Selfie photograph for liveness verification
• Payment method verification documents (e.g., screenshot of JazzCash or EasyPaisa account showing your name and mobile number)

3.3 Transaction Data

We record all financial transactions conducted on the w657 platform including deposit amounts, withdrawal requests, payment methods used, transaction reference numbers, timestamps, and transaction statuses. This data is retained for regulatory compliance and anti-money laundering (AML) purposes.

3.4 Gaming Activity Data

We collect records of all gaming activity on your account including games played, bet amounts, game outcomes, session durations, and responsible gaming tool activations. This data is used to operate the platform, detect problem gambling behaviour, and comply with our regulatory obligations.

3.5 Technical & Device Data

When you access w657, our systems automatically collect certain technical information including:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referring URL and pages visited on w657
• Session timestamps and duration

This data is used for security monitoring, fraud detection, and platform optimisation.

3.6 Communications Data

When you contact w657 customer support via live chat or email, we retain records of those communications including the content of messages, the date and time of contact, and the resolution of any support issues raised. These records help us maintain service quality and resolve any future disputes.

04 How We Use Your Data

w657 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your w657 account, verifying your identity, and enabling you to access the platform's full range of services.
• Age Verification: Confirming that you meet the 21+ age requirement before granting access to real-money gaming activities.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard, and processing withdrawal requests to your verified payment method.
• Regulatory Compliance: Meeting our anti-money laundering (AML) obligations, KYC requirements, and any reporting obligations imposed by our operating licence or applicable law.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing account limits and self-exclusion instructions, and delivering responsible gaming communications.
• Security & Fraud Prevention: Detecting and investigating suspicious account activity, preventing unauthorised access, and protecting the integrity of the w657 platform.
• Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game offerings, and optimise the platform experience for Pakistani players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications (see Section 13).

05 Legal Basis for Processing

w657 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing your registration data, KYC documents, and transaction records is necessary to perform the contract between you and w657 as set out in our Terms & Conditions.
• Legal Obligation: Processing related to AML compliance, age verification, and regulatory reporting is required by the laws and regulations applicable to our operations.
• Legitimate Interests: Processing for fraud detection, security monitoring, and platform analytics is carried out on the basis of w657's legitimate interest in maintaining a safe, fair, and functional platform.
• Consent: Processing for marketing communications and non-essential cookies is carried out only where you have given clear, informed, and freely withdrawable consent.

06 Data Sharing

w657 does not sell your personal data. We share your data only in the following limited circumstances, and always under contractual data protection obligations:

6.1 Payment Service Providers

Transaction data is shared with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to the extent necessary to process deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations as licensed financial service providers in Pakistan.

6.2 KYC & Identity Verification Providers

KYC documents including CNIC copies and selfie photographs are processed by our contracted identity verification service provider. This provider acts as a data processor under a strict data processing agreement and may not use your data for any purpose other than providing identity verification services to w657.

6.3 Game Software Providers

Where games on the w657 platform are operated by third-party software providers, limited technical data (such as session tokens and bet amounts) may be shared with those providers for the purpose of operating the game. No personally identifiable information beyond what is technically necessary is shared.

6.4 Regulatory & Law Enforcement Authorities

w657 may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, including money laundering and fraud.

07 International Data Transfers

w657 operates under an international gaming licence, and some of our data processing operations — including our KYC verification provider and certain game software providers — may involve the transfer of personal data to servers or processing facilities located outside Pakistan.

Where such transfers occur, w657 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards include contractual data protection clauses, data processing agreements, and — where applicable — transfers only to jurisdictions that provide an adequate level of data protection.

08 Data Retention

w657 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by our legal and regulatory obligations. The following retention periods apply:

• Account & Registration Data: Retained for the duration of your account and for a period of 5 years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Transaction Records: Retained for 7 years from the date of the transaction for financial regulatory compliance purposes.
• Gaming Activity Logs: Retained for 3 years from the date of the gaming session for responsible gaming and dispute resolution purposes.
• Customer Support Communications: Retained for 3 years from the date of the support interaction.
• Technical & Device Data: Retained for 12 months and then anonymised or deleted.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

09 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the w657 website. They allow the platform to recognise your device, maintain your session, and remember certain preferences. w657 also uses similar technologies including local storage and session tokens.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations. These improve your experience but are not essential to core functionality.
• Analytics Cookies: With your consent, we use anonymised analytics data to understand how Pakistani players use the w657 platform and where we can improve the experience. This data is aggregated and not linked to your individual account.

9.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging into your w657 account. Your cookie preferences for non-essential cookies can be managed through the cookie preference centre accessible from the footer of the w657 platform.

10 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data w657 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Basic account details such as your email address and mobile number can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where we no longer have a lawful basis to retain it. Note that certain data — particularly KYC documents and transaction records — must be retained for regulatory compliance periods as described in Section 8, and erasure requests cannot override these legal obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances, for example while we investigate a dispute about the accuracy of your data.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, and you have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact our data protection team as described in Section 16. We may need to verify your identity before processing your request. We will respond within 30 days, and will notify you if a longer period is required for complex requests.

11 Children's Privacy

The w657 platform is strictly intended for individuals aged 21 years and above. w657 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted at the registration stage and again during KYC verification before any withdrawal is processed.

If w657 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all winnings will be voided, any deposited principal will be returned via the original payment method, and all personal data associated with the minor will be deleted from our systems as soon as legally permissible.

12 Security Measures

w657 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Transport Encryption: All data transmitted between your device and the w657 platform is encrypted using TLS 1.2 or higher with 256-bit encryption.
• Database Encryption: Personal data and KYC documents stored in our databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within w657 is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations and undergo regular data protection training.
• Intrusion Detection: Our systems are monitored 24/7 for suspicious activity, with automated alerts and response procedures for potential security incidents.
• Penetration Testing: w657 commissions regular third-party security penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their accounts for an additional layer of protection beyond password-based login.

While we take every reasonable precaution, no system is completely immune to security risks. In the event of a breach affecting your personal data, we will notify you in accordance with Section 12 of this Policy and our breach notification obligations.

13 Marketing Communications

With your consent, w657 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game launches, PSL cricket betting promotions, and other w657 offers relevant to Pakistani players.

You may withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link at the bottom of any marketing email
• Updating your communication preferences in the notifications section of your w657 account settings
• Contacting our support team via live chat and requesting removal from our marketing list

Withdrawal of marketing consent does not affect transactional communications — w657 will continue to send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts, as these are necessary for the operation of your account.

14 Third-Party Services

The w657 platform integrates with third-party game software providers, payment processors, and analytics tools to deliver the full range of services available to players. These third-party integrations may involve the processing of certain data as described in Section 6.

w657 is not responsible for the privacy practices of third-party service providers operating their own platforms independently of w657. Where relevant, we encourage you to review the privacy policies of payment providers such as JazzCash and EasyPaisa, which govern how those providers handle your financial data on their own systems.

The w657 website does not contain links to external third-party websites. Where internal links to game or betting pages exist, these remain within the w657 platform and are governed by this Privacy Policy.

15 Updates to This Policy

w657 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to their registered address and/or via a prominent notice on the w657 platform at least 14 days before the changes take effect.

The "Last updated" date at the top of this Policy reflects when the most recent version came into effect. We encourage you to review this Policy periodically to stay informed about how w657 protects your personal data. Your continued use of the w657 platform following the effective date of any revision constitutes your acknowledgement of the updated Policy.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way w657 handles your personal data, please contact our data protection team through the following channels:

• Live Chat: Available 24/7 via the chat icon on the w657 platform — select "Privacy & Data" as your query type for priority routing to our data protection team
• Email: [email protected] — include "Privacy Request" in the subject line
• Response Time: Data rights requests are responded to within 30 calendar days. We will notify you if a complex request requires additional time, up to a maximum of 60 days.

If you are not satisfied with how we have handled your data protection concern after raising it with us directly, you have the right to escalate the matter to the relevant data protection authority or the dispute resolution mechanism associated with w657's international gaming licence. w657 cooperates fully with regulatory investigations and takes all data protection complaints seriously.