Privacy Policy – 22wim Online Gaming Pakistan

1. Who We Are

22wim is an online gaming platform operating at 22wim.vin, providing live casino games, slots, fish games, sports content and related entertainment services to adult players. When this Privacy Policy refers to "22wim", "we", "us" or "our", it refers to the platform and the team responsible for its operation.

This Privacy Policy applies to all interactions you have with 22wim — including visiting the website, using the 22wim mobile app, registering an account, making deposits or withdrawals in PKR, playing games, contacting customer support and receiving promotional communications.

By using the 22wim platform, you confirm that you have read and understood this Privacy Policy and that you agree to the data practices described within it. If you do not agree, please do not create an account or use the platform.

2. What Personal Data We Collect

22wim collects personal data through several channels — registration, account activity, payment processing, support interactions and your use of platform features. The categories of data we collect are outlined below.

We do not collect sensitive categories of personal data such as health records, political opinions or biometric identifiers unless legally required to do so for identity verification purposes.

3. How We Use Your Personal Data

22wim uses the personal data collected from you for the following specific purposes:

• Account Management: To create and maintain your player account, authenticate your identity on login and manage your account settings and preferences.
• Payment Processing: To process PKR deposits via JazzCash, Easypaisa, Raast, bank transfer and supported debit cards, and to facilitate withdrawal requests to your registered payment method.
• Identity Verification: To verify your age and identity as required by our responsible gaming obligations. Players must be 18 or older to hold an account on 22wim.
• Customer Support: To respond to your queries, investigate complaints, process account restriction requests and provide assistance through live chat or email.
• Responsible Gaming: To monitor for signs of problem gaming, enforce deposit limits and self-exclusion settings and send responsible gaming reminders where appropriate.
• Platform Security: To detect and prevent fraud, account takeovers, collusion, bonus abuse and other prohibited activity as described in the Terms and Conditions.
• Promotions and Bonuses: To determine your eligibility for offers, credit bonuses correctly and track wagering progress where you have opted into a promotional offer.
• Platform Improvement: To analyse usage patterns, test new features and improve the overall performance and user experience of the 22wim platform — including the game lobby, deposit flow and app experience.
• Marketing Communications: If you have opted in, to send you promotional emails or push notifications about new games, Cricket and PSL-season promotions, bonuses and platform updates. You can opt out at any time.

4. Legal Basis for Processing

22wim processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the agreement between you and 22wim — including running your account, processing deposits and withdrawals and providing access to the game lobby.
• Legitimate Interests: Processing carried out in 22wim's legitimate interest to operate a secure, fair and sustainable platform — including fraud detection, security monitoring and platform analytics.
• Legal Obligation: Processing required to comply with applicable legal requirements, including identity verification and anti-money laundering checks.
• Consent: Processing based on your explicit opt-in, specifically for marketing communications. You may withdraw this consent at any time through your account settings or by contacting support.

5. Data Sharing and Third Parties

22wim does not sell your personal data to any third party. We share data only where it is strictly necessary for the operation of the platform, and only with the categories of recipients listed below:

• Payment Providers: When you make a deposit or withdrawal, the relevant transaction details are shared with the payment provider you select — such as JazzCash, Easypaisa, Raast or your bank. These providers process the transaction under their own privacy terms and security standards.
• Game Providers: The games available in the 22wim lobby are supplied by third-party game studios. When you launch a game, your player session data — such as a session token and bet history for that session — is processed by the game provider under their own data terms. No personally identifiable information beyond what is required for the game session is shared.
• Identity Verification Services: Where identity verification is required, we may share document images and personal details with a third-party verification provider. This data is used solely for the purpose of confirming your identity and age.
• Technical Service Providers: We use third-party providers for hosting, content delivery, analytics and customer support tooling. These providers act as data processors on our behalf and are contractually bound to process your data only on our instructions and to maintain appropriate security standards.
• Legal and Regulatory Bodies: We may disclose your personal data to law enforcement agencies or other authorities where we are legally required to do so, or where disclosure is necessary to protect the security of the platform or its users.

All third-party partners who access your data are required to handle it securely and in accordance with applicable data protection standards. We do not transfer your data to parties outside of this list for any commercial purpose.

6. Cookies and Tracking Technologies

22wim uses cookies and similar tracking technologies on the website and in the app to ensure the platform functions correctly and to improve your experience. The types of cookies we use are as follows:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences — such as language settings, preferred deposit method and notification preferences — so you do not have to set them again on each visit.
• Analytics Cookies: Used to collect anonymised data about how players use the platform — which pages are visited, how long sessions last and where users drop off in key flows. This data helps us improve the platform experience over time.
• Marketing Cookies: Used only if you have opted into marketing communications. These help us understand which promotional messages are relevant to you based on your activity on the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the 22wim platform normally. For analytics and marketing cookies, you may opt out at any time without affecting your core account access.

7. How Long We Keep Your Data

22wim retains your personal data for as long as it is necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the full duration your account remains open and active on the platform.
• Closed Account Data: Where an account is closed at your request or by 22wim, core account records — including identity verification documents and transaction history — are retained for a minimum of five years from the date of closure to satisfy legal and anti-fraud obligations.
• Transaction Records: All deposit and withdrawal records in PKR are retained for a minimum of five years from the date of the transaction.
• Support Communications: Live chat transcripts and email records are retained for up to two years from the date of the interaction unless a longer period is required due to an ongoing complaint or legal matter.
• Marketing Data: If you opt out of marketing communications, your opt-out preference is recorded and retained indefinitely to ensure we do not contact you again in error.
• Technical Logs: Server and access logs are retained for up to 90 days and then deleted unless retained for an active security investigation.

When data is no longer required for any lawful purpose, it is securely deleted or anonymised in a manner that ensures it cannot be linked back to you.

8. How We Protect Your Data

22wim takes the security of your personal data seriously. We implement a combination of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration or destruction.

• Encryption in Transit: All data transmitted between your browser or app and the 22wim platform is protected using TLS encryption. This applies to login sessions, game activity, deposit flows and all API communications.
• Encryption at Rest: Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within the 22wim organisation is restricted on a strict need-to-know basis. Staff access is logged and audited. No employee has unrestricted access to the full player database.
• Payment Security: Sensitive payment credentials — such as full card numbers or mobile wallet PINs — are never stored by 22wim. Payment data flows directly between you and the relevant payment provider over an encrypted channel.
• Incident Response: In the event of a data breach affecting your personal information, 22wim will notify affected users promptly and take immediate steps to contain and investigate the incident.

While we apply all reasonable measures to protect your data, no system connected to the internet can guarantee absolute security. You are responsible for keeping your 22wim login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

9. Your Data Rights

As a 22wim player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the support team via live chat or email and we will respond within a reasonable timeframe:

• Right to Access: You may request a copy of the personal data 22wim holds about you at any time. We will provide this in a clear, readable format.
• Right to Correction: If any personal data we hold about you is inaccurate or out of date, you have the right to request that we correct it. You can update basic account details directly from your account settings.
• Right to Deletion: You may request that we delete your personal data. This right is subject to our legal data retention obligations — for example, we are required to retain transaction records for a minimum period and cannot delete these on request. Where deletion is not possible in full, we will explain why and delete what we are permitted to.
• Right to Restrict Processing: You may ask us to suspend the use of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Object to Marketing: You have the right to opt out of marketing communications at any time, without giving a reason. Update your preferences in account settings or ask the support team to remove you from all marketing lists.
• Right to Data Portability: You may request a copy of the personal data you provided to 22wim in a structured, machine-readable format where technically feasible.

Please note that exercising your data rights does not affect the validity of your account or your ability to access the platform, unless the exercise of a right — such as a deletion request — necessarily results in account closure.

10. Children's Privacy

22wim is strictly an adult platform. No person under the age of 18 is permitted to register an account, deposit funds or participate in any game offered on the platform. We do not knowingly collect personal data from anyone under the age of 18.

During registration, players are required to confirm their date of birth. Where there is reasonable suspicion that a player may be under 18, 22wim will suspend the account pending identity and age verification. If it is confirmed that the account holder is under 18, the account will be permanently closed and any funds returned to the source payment method where possible.

If you are a parent or guardian and believe that someone under your care has registered on 22wim, please contact the support team immediately. We will investigate and take appropriate action without delay.

11. Updates to This Privacy Policy

22wim may update this Privacy Policy from time to time to reflect changes in data practices, platform features or applicable legal requirements. When updates are made, the revised policy will be published on this page with an updated effective date shown at the top of the document.

Where changes are material — meaning they meaningfully affect how your data is used or your rights as a data subject — we will notify registered players via an on-login notification or an email to the address on file. It is your responsibility to review this page periodically to stay informed of any updates.

Continued use of the 22wim platform after an updated Privacy Policy has been published and notified constitutes your acceptance of the revised terms. If you disagree with any changes, please stop using the platform and contact support to request account closure.

12. How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights or want to raise a concern about how 22wim handles your personal information, please reach out to the support team through any of the following channels:

• Live Chat: Available 24/7 on the website and within the 22wim app. This is the fastest way to get a response.
• Email: [email protected] — for written privacy-related requests and formal data subject access requests.

For data access or deletion requests, please include your registered email address and a brief description of your request so we can process it efficiently. We aim to acknowledge all privacy-related requests within 48 hours and to resolve them within a reasonable timeframe from receipt.