twin68 Privacy Policy —
How We Handle Your Personal Data

1. Introduction & Scope of This Policy

twin68 is an online gaming platform serving players in Pakistan and other jurisdictions. As part of operating this platform, twin68 processes personal data belonging to registered Account holders and, in limited circumstances, visitors who interact with the Platform without registering an Account.

This Privacy Policy applies to all personal data collected through the twin68 website at twin68.lat, through our customer support channels (Live Chat, WhatsApp, Telegram, and email), through our payment processing flows (including transactions via Easypaisa, JazzCash, SadaPay, and bank transfers), and through the technical operation of our gaming services.

This policy does not apply to the data practices of third-party service providers or game developers whose software appears on the twin68 Platform. Those parties operate under their own privacy policies, which twin68 cannot control. We encourage you to review the privacy policies of any third-party game providers whose products you use on twin68.

2. Personal Data We Collect

twin68 collects the following categories of personal data from Pakistan players and Account holders. We collect only what is necessary for the purposes described in this policy.

twin68 does not collect sensitive categories of personal data — such as health data, racial or ethnic origin, religious beliefs, or political opinions — unless these are voluntarily disclosed to our Responsible Gaming team in the context of a support interaction and are processed solely for the purpose of providing appropriate assistance.

3. How We Collect Your Data

twin68 collects personal data through the following channels:

• Direct Provision: Data you provide directly when registering a twin68 Account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you access the twin68 Platform, including IP address, device identifiers, session data, and cookie-derived data described in Section 7.
• Payment Provider Data: Transaction reference information provided by Easypaisa, JazzCash, SadaPay, or your bank when you initiate a deposit or withdrawal. This data is limited to what is necessary to confirm transaction completion and match payments to the correct twin68 Account.
• KYC Document Review: Identity and age data extracted from documents you submit during the KYC verification process, including CNIC, passport, and proof of address documents.
• Customer Support Interactions: Notes and records generated by our support team from Live Chat, WhatsApp, Telegram, and email interactions with your Account.

4. Legal Basis for Processing Your Data

twin68 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the twin68 service under the Terms & Conditions agreement you enter when registering an Account — including Account management, payment processing, game delivery, and withdrawal facilitation.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and fraud prevention requirements — including identity verification and transaction monitoring.
• Legitimate Interests: Processing carried out for twin68's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, platform security monitoring, responsible gaming analysis, and improving the Platform experience.
• Consent: Where twin68 requests your consent for optional data processing activities — such as marketing communications — we will ask for your explicit agreement. You may withdraw consent at any time by contacting twin68 support.

5. How twin68 Uses Your Personal Data

twin68 uses your personal data for the following specific purposes:

• Account Creation and Management: Creating, maintaining, and securing your twin68 Account, including processing login authentication, two-factor SMS verification, and session management.
• KYC & Age Verification: Verifying that you are at least 18 years of age and that your identity matches the details provided at registration. This is a legal and operational requirement — no Account can proceed to real-money gaming without a verified identity.
• Payment Processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, and bank transfers, including matching payment confirmations to the correct Account and verifying payment method ownership.
• Fraud Prevention & AML Compliance: Monitoring transactions and gaming activity for indicators of fraudulent behaviour, money laundering, or third-party account use. Unusual patterns may trigger additional verification requests.
• Customer Support: Responding to your support requests via Live Chat, WhatsApp, Telegram, or email. Support records are retained to provide context-aware assistance in future interactions.
• Responsible Gaming: Using your gaming activity data and Account history to identify potential problem gaming patterns and, where appropriate, proactively offering responsible gaming tools or initiating welfare check-ins.
• Platform Improvement: Using aggregated and anonymised technical and gameplay data to improve Platform performance, game library curation, and user experience — with no individual Player being identifiable in this analysis.
• Promotional Communications (with consent only): Where you have consented, sending personalised twin68 promotional offers and bonus notifications to your registered Pakistan mobile number or email. You may opt out at any time.

6. Sharing Your Personal Data

twin68 does not sell, rent, or trade your personal data to any third party. Data sharing is strictly limited to the following categories of recipients, each of whom is bound by data processing agreements and confidentiality obligations:

• Payment Processing Partners: Easypaisa, JazzCash, SadaPay, and Pakistan banking partners receive the minimum data required to process your PKR deposit or withdrawal transaction. These providers are regulated financial service providers operating under applicable Pakistan financial regulations.
• KYC & Identity Verification Providers: Third-party identity verification service providers who assist twin68 in verifying KYC documents. These providers process your identity data only for verification purposes and are contractually prohibited from using it for any other purpose.
• Game Providers: Where you play a game provided by a third-party developer (such as a live casino provider or slot game studio), a minimal dataset — typically a session token and stake amount — is passed to that provider to run the game session. Game providers are prohibited from using this data for purposes beyond delivering the game.
• Fraud Prevention Services: Anti-fraud and anti-money-laundering technology providers who help twin68 identify fraudulent activity across the Platform. Data shared is limited to transaction and behavioural signals, not full identity profiles.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or legitimate regulatory request, twin68 may disclose Account holder data to relevant authorities. twin68 will notify the Account holder of such requests wherever legally permitted to do so.

7. Cookies & Tracking Technologies

The twin68 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file placed on your device when you visit twin68.lat. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your twin68 Account during a session, security tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled without making the Platform unusable.
• Functional Cookies: Remember your preferences — such as language settings and device type — to improve your experience on subsequent visits to twin68.lat.
• Analytics Cookies: Collect anonymised and aggregated data about how users interact with the twin68 Platform — including which pages are visited most frequently and where users encounter difficulties. This data helps twin68 improve the Platform experience. Individual players are not identified in this analysis.
• Security & Fraud Prevention Cookies: Used by twin68's fraud detection systems to identify unusual access patterns or device fingerprints that may indicate Account compromise or fraudulent activity.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to and using your twin68 Account. Blocking functional or analytics cookies will not prevent Platform access but may reduce the quality of your experience.

8. Data Security Measures

twin68 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security architecture is reviewed and updated on a continuous basis.

• Transport Layer Security: All data transmitted between your device and twin68 servers is encrypted using 256-bit SSL/TLS encryption — the same standard used by major Pakistan banking platforms including SadaPay and HBL digital banking.
• Data Encryption at Rest: Sensitive personal data — including CNIC details, financial records, and identity documents — is encrypted in storage using industry-standard encryption algorithms.
• Access Controls: Access to your personal data within twin68 is restricted to staff who require it to perform their role. All access is logged, audited, and subject to strict need-to-know principles.
• Two-Factor Authentication: twin68 Account logins support SMS-based two-factor authentication, protecting your Account even if your password is compromised.
• Fraud Monitoring: Real-time monitoring of login events, transactions, and gameplay patterns by automated fraud detection systems flags anomalies for review before they can affect your Account.
• Incident Response: twin68 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses risk to Account holders, affected users will be notified without undue delay.

9. Data Retention Periods

twin68 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal, regulatory, and audit requirements. Specific retention periods are as follows:

• Active Account Data: Retained for the full duration of your twin68 Account and for a period of 5 years following permanent Account closure, to meet our legal obligations under anti-money laundering regulations.
• Transaction Records (PKR deposits, withdrawals, bet history): Retained for a minimum of 5 years following the date of the transaction in compliance with financial record-keeping requirements.
• KYC Documents: Retained for 5 years following the closure of the associated twin68 Account or the date of the last significant transaction, whichever is later.
• Customer Support Records: Retained for 3 years following the support interaction, to provide context-aware assistance in subsequent contact and to support dispute resolution.
• Responsible Gaming & Self-Exclusion Records: Self-exclusion records are retained indefinitely to prevent re-registration by self-excluded individuals, even after Account closure.
• Technical & Log Data: System logs and access data are retained for up to 12 months for security and fraud monitoring purposes, then deleted or anonymised.

When personal data is no longer required beyond its retention period, it is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical analysis.

10. Your Rights Over Your Personal Data

As a twin68 Account holder, you have the following rights with respect to your personal data. You can exercise any of these rights by contacting twin68 support as described in Section 15:

• Right of Access: You have the right to request a copy of the personal data twin68 holds about you. We will provide this within 30 days of your verified request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. For Account registration data, corrections can be made via Account Settings or by contacting support with supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data. Note that twin68 may be required to retain certain data for legal, regulatory, or fraud prevention reasons even after an erasure request — in such cases we will inform you of what data must be retained and why.
• Right to Restriction of Processing: You may request that twin68 restrict the processing of your data in specific circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible and legally applicable.
• Right to Withdraw Consent: Where twin68 processes your data based on consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to the withdrawal.
• Right to Object: You have the right to object to twin68 processing your personal data on the basis of legitimate interests, in which case we will assess whether our legitimate interests override your privacy rights in the specific context.

11. Children's Privacy — 18+ Policy

The twin68 Platform is strictly intended for adults aged 18 years and above. twin68 does not knowingly collect or process personal data from anyone under the age of 18. If twin68 discovers — through KYC verification or any other means — that an Account has been registered by or operated on behalf of a person under 18, the Account will be immediately suspended, all real-money deposits will be returned to the originating payment source, and all associated data will be handled in accordance with our legal obligations.

If you have reason to believe that a person under 18 has registered a twin68 Account, please contact us immediately at [email protected]. We take underage gambling prevention extremely seriously and will investigate all such reports promptly.

12. International Data Transfers

In operating the twin68 Platform, your personal data may be processed by servers or service providers located outside Pakistan. Where such international data transfers occur, twin68 ensures that appropriate safeguards are in place to maintain the protection of your data at a standard equivalent to that described in this Privacy Policy.

Safeguards for international transfers may include contractual data protection clauses, technical security controls, and binding operational commitments from receiving parties. twin68 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate protective measures.

The primary data processing servers for the twin68 Platform are located in jurisdictions with robust data protection infrastructure. Payment processing data related to Pakistan mobile wallets (Easypaisa, JazzCash, SadaPay) and bank transfers is processed in compliance with applicable Pakistan financial regulations.

13. Third-Party Links & Services

The twin68 Platform may contain links to or integrations with third-party services — including game providers, payment processors, and customer communication tools. These third parties operate under their own independent privacy policies, which twin68 does not control.

twin68 is not responsible for the privacy practices of third-party game developers whose products appear in the twin68 game lobby. We recommend that you review the privacy policies of any third-party service you interact with via the twin68 Platform. For questions about data processed directly in the course of a game session by a third-party provider, please contact that provider directly.

14. Changes to This Privacy Policy

twin68 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes — particularly changes that affect your rights or our data-sharing practices — we will notify registered Account holders via their registered Pakistan mobile number or via a prominent notice on the twin68 Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the twin68 Platform after any update to this Privacy Policy constitutes your acknowledgement of the revised policy.

15. Contact Us & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or twin68's handling of your personal data, please contact our support team using the details below. All data-related requests will be acknowledged within 5 business days and substantively responded to within 30 calendar days.

• Email: [email protected] — for formal data subject access requests and written privacy inquiries.
• Live Chat: Available directly on the twin68 Platform, 24 hours a day, 7 days a week. For urgent Account security concerns, Live Chat is the fastest response channel.
• WhatsApp & Telegram: Available 24/7. Contact details are displayed in the Support section of the twin68 Platform.
• Availability: twin68 support operates on Pakistan Standard Time, 24 hours a day, 7 days a week.