Privacy Policy

This Privacy Policy ("Policy") is published by w678 ("w678", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://w678.cam (the "Platform"). This Policy describes how w678 collects, uses, discloses, stores and protects the personal data of users ("you", "Player", "User") who access, register with or use the Platform in any capacity.

w678 is committed to handling personal data responsibly and transparently. We treat data protection not as a compliance box to tick but as a genuine obligation to the players who trust us with their information — whether they are based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere. This Policy is written in plain English to ensure every player can understand their rights and our obligations.

By registering an Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

w678 collects only the personal data that is necessary and proportionate to deliver the Platform's services, meet our legal obligations and protect the welfare of our players. The table below sets out the categories of data we collect and their primary purpose:

w678 does not collect unnecessary Sensitive Data. Where financial vulnerability indicators are detected through responsible gambling monitoring, such data is used solely to protect player welfare and is handled with the highest standard of discretion.

w678 collects personal data through the following means:

• Direct Collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support or submitting feedback.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons and server logs when you access the Platform.
• Third-Party Sources: Identity verification data obtained from third-party KYC and AML service providers during the verification process. Payment transaction data received from payment processors in connection with deposit and withdrawal operations.
• Responsible Gambling Monitoring: Behavioural data derived from your betting and gaming activity on the Platform, used to identify indicators of potential gambling-related harm.

w678 processes personal data for the following defined purposes only. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected:

• Account Management: Creating, maintaining and administering your w678 Account, including password resets, contact detail updates and Account closure.
• Identity & Age Verification: Conducting KYC checks to verify your identity, confirm minimum age eligibility (18+ or the applicable operator/jurisdiction minimum) and satisfy anti-money-laundering obligations.
• Payment Processing: Facilitating deposits, processing withdrawal requests and maintaining accurate transaction records.
• Platform Security: Detecting, preventing and investigating fraud, multi-accounting, bonus abuse, unauthorised access and other security threats.
• Responsible Gambling: Monitoring gaming and betting behaviour to identify indicators of potential harm and to support the delivery of responsible gambling tools including deposit limits, self-exclusion and cooling-off periods.
• Customer Support: Responding to enquiries, resolving disputes and maintaining support records for quality assurance and compliance purposes.
• Legal & Regulatory Compliance: Meeting obligations under applicable operator licensing conditions, anti-money-laundering requirements and other legal frameworks.
• Platform Improvement: Analysing anonymised usage data to improve Platform performance, user experience and product development.
• Marketing Communications: Sending promotional offers and Platform updates where you have provided consent. You may withdraw marketing consent at any time through your Account settings or by contacting support.

w678 processes personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform the contract between you and w678 — including Account registration, payment processing and service delivery.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations, responsible gambling regulations and record-keeping requirements imposed by the applicable operator licence.
• Legitimate Interests: Processing necessary for w678's legitimate business interests, including fraud prevention, Platform security, responsible gambling monitoring and analytics — provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, specifically for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

w678 does not sell, rent or trade your personal data to third parties for marketing purposes. We share personal data only in the following circumstances and with the following categories of recipient:

• KYC & Identity Verification Providers: Third-party providers engaged to perform identity, age and document verification on our behalf, under strict data processing agreements.
• Payment Processors: Service providers facilitating deposit and withdrawal transactions. Only the data necessary to process a specific transaction is shared.
• Fraud Prevention Services: Third-party providers engaged to detect and prevent fraudulent activity, multi-accounting and other Platform abuse.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or regulatory instruction, w678 may disclose personal data to competent authorities. We will only make such disclosures where legally required or permitted.
• Group Entities: Where w678 operates as part of a corporate group, personal data may be shared with affiliated entities for the purposes of centralised account management, compliance and support operations, subject to equivalent data protection standards.
• Professional Advisers: Legal, accounting and compliance advisers who are bound by professional confidentiality obligations, where necessary for the operation of our business.

All third-party Data Processors engaged by w678 are contractually obligated to process personal data only on w678's instructions and to maintain appropriate technical and organisational security measures.

The Platform is operated internationally and your personal data may be transferred to, stored in, or processed in jurisdictions outside Pakistan. Where personal data is transferred internationally, w678 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data in accordance with the standards described in this Policy.

These safeguards may include contractual protections with Data Processors, transfers to jurisdictions with recognised data protection frameworks, or other equivalent mechanisms as appropriate. By using the Platform, you acknowledge that your personal data may be transferred and processed outside Pakistan.

w678 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation.

• Active Accounts: Personal data is retained for the duration of your Account's active status and for a reasonable period thereafter to support any pending transactions, open disputes or regulatory enquiries.
• KYC & AML Records: Identity verification and transaction records may be retained for a minimum of five years following Account closure, or such longer period as required by the applicable operator licence and anti-money-laundering regulations.
• Responsible Gambling Records: Self-exclusion requests and associated records are retained for a minimum period to ensure that exclusions are respected and to assist any future reinstatement assessment.
• Marketing Data: Where processing is based on consent, data is retained until consent is withdrawn or becomes inactive. Withdrawal of marketing consent does not affect other data retained for contractual or legal purposes.
• Support Communications: Support correspondence is retained for a reasonable period for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

The Platform uses cookies and similar tracking technologies to deliver and improve its services. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised information about how players use the Platform, including pages visited, time spent and features used. This data helps w678 improve the Platform experience.
• Responsible Gambling Cookies: Used to track session duration and support the delivery of responsible gambling tools, including session time reminders and limit controls.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality or performance of the Platform.

Subject to applicable law and the specific legal basis for processing your data, you hold the following rights in respect of your personal data held by w678. To exercise any of these rights, please contact us at [email protected].

Please note that some rights are subject to limitations. For example, the right to erasure does not apply where retention is required by law, such as KYC and AML record-keeping obligations. Where a right cannot be fully exercised, w678 will explain the applicable limitation in its response.

The Platform is strictly an adults-only service. w678 does not knowingly collect personal data from individuals under the age of 18, or such higher minimum age as required by the applicable operator or licence jurisdiction. Age verification is a mandatory component of the Account registration process.

If w678 becomes aware that personal data has been collected from a minor without appropriate verification, the relevant Account will be suspended immediately, any associated data will be deleted or anonymised, and any winnings generated will be forfeited. If you believe that a minor has registered an Account on the Platform, please notify us immediately at [email protected].

w678 implements technical and organisational security measures appropriate to the risk level associated with the personal data we process. These include:

• SSL / TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Personal data is accessible only to authorised personnel who require it to perform their role. Access rights are reviewed and updated regularly.
• Two-Factor Authentication: w678 offers optional two-factor authentication for Player Accounts to reduce the risk of unauthorised access.
• Secure Infrastructure: The Platform's technical infrastructure is hosted in secured environments with appropriate physical and logical access controls.
• Incident Response: w678 maintains internal procedures for identifying, assessing and responding to data security incidents, including notification obligations where applicable.
• Third-Party Security Standards: All Data Processors engaged by w678 are required to maintain equivalent technical and organisational security measures as a condition of their engagement.

While w678 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed as completely secure. Players are encouraged to use strong, unique passwords and to enable two-factor authentication where available.

The Platform may reference third-party services, including payment providers and other infrastructure, in an informational context. Such references do not constitute endorsement of those services, and w678 is not responsible for the privacy practices of any third-party service provider.

Where you interact with a third-party service provider in connection with a Platform transaction (such as initiating a deposit or withdrawal through a payment channel), that interaction is governed by the privacy terms of the relevant third party. w678 encourages Players to review the privacy policies of all third-party services they interact with.

w678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform operations. Material changes will be communicated to active Players through the Platform interface or via registered contact details before taking effect. The "Last Reviewed" date at the top of this page indicates when the most recent review was conducted.

Continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with an amended Policy, you should close your Account and cease use of the Platform.

For all privacy-related enquiries, data rights requests or concerns regarding our data processing practices, please contact the w678 support team using the details below. We are committed to responding to all privacy enquiries promptly and substantively.

To process a data rights request efficiently, please include your registered Account email address and a brief description of your request in your communication. Identity verification may be required before certain requests can be actioned, to protect against unauthorised access to personal data.