58com Privacy Policy — How We Handle Your Personal Data

58com ("We," "Us," "Our," or "the Company") operates the online gaming platform accessible at 58com.bio. For the purposes of data protection obligations, 58com acts as the Data Controller in respect of personal data collected from Users of the Platform.

This Privacy Policy applies to all personal data collected by 58com through:

• Account registration and the KYC (Know Your Customer) verification process;
• Ongoing use of the 58com Platform, including gaming, deposits, withdrawals, and support interactions;
• Communications between the User and 58com including live chat, email correspondence, and feedback submissions;
• Cookies, analytics tools, and similar technologies deployed on the Platform;
• Any other channel through which a User provides personal information to 58com.

This Policy should be read alongside the 58com Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By using the 58com Platform, you acknowledge that you have read and understood this Privacy Policy.

58com collects personal data in two primary ways: information that Users provide directly, and information that is collected automatically through your use of the Platform. The categories of data we collect are outlined in the table below.

58com uses your personal data strictly for the following defined purposes. We do not use personal data for any purpose other than those listed below without first obtaining your explicit consent or establishing an alternative lawful basis for processing.

• Account Management: Creating, maintaining, and managing your 58com account, including login authentication, account settings, and profile updates;
• Service Delivery: Processing deposits and withdrawals in PKR via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or debit card), and delivering gaming services;
• Identity & Age Verification (KYC): Verifying that all Users are at least 21 years of age and confirming identity to comply with our licensing obligations and anti-money laundering requirements;
• Regulatory Compliance: Meeting obligations imposed by our international gaming license, anti-money laundering regulations, and any applicable legal requirements;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account takeover, money laundering, bonus abuse, and other prohibited conduct;
• Customer Support: Responding to support queries, complaints, and account issues submitted via live chat or email;
• Responsible Gaming: Monitoring gaming activity for signs of problematic behaviour and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests;
• Platform Improvement: Analysing aggregated, anonymised usage patterns to improve Platform performance, navigation, game selection, and User experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Users who have explicitly opted in to receive such communications;
• Legal Claims: Establishing, exercising, or defending legal claims relating to the Platform or User conduct.

58com processes personal data only where it has a lawful basis to do so. The applicable legal bases for our processing activities are as follows:

58com may share your personal data with the following categories of third parties solely to the extent necessary for the defined purpose:

• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing networks solely to process deposits and withdrawals. Each payment processor operates under their own data protection obligations;
• Identity Verification Providers: KYC document data may be shared with licensed identity verification service providers for the purposes of age and identity verification;
• Game Content Providers: Aggregated, non-personally-identifiable session data may be shared with game software providers to facilitate game delivery and RNG certification. No directly identifiable personal data is shared without necessity;
• Regulatory and Law Enforcement Authorities: 58com may be required to disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies pursuant to legal obligation or court order. Such disclosures are made only to the extent strictly required;
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by 58com may have access to personal data strictly within the scope of professional instructions and subject to confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or transfer of all or part of 58com's business, User data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom 58com shares personal data are required to process that data in accordance with applicable data protection standards and under binding agreements that restrict use to the specified purpose.

58com uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly, remember your preferences, and analyse how the Platform is used.

58com implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 58com's servers is encrypted using bank-grade 256-bit SSL/TLS protocols. This applies to every login session, deposit transaction, withdrawal request, and support interaction;
• Encrypted Data Storage: Personal and financial data stored on 58com's infrastructure is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Access to personal data within 58com's internal systems is restricted on a strict need-to-know basis. All staff with access to User data are subject to confidentiality agreements and regular security training;
• Intrusion Detection: 58com's systems are monitored continuously for suspicious activity, unauthorised access attempts, and anomalous transaction patterns;
• Two-Factor Authentication: 58com offers optional two-factor authentication (2FA) for User accounts to provide an additional layer of login security beyond username and password;
• Regular Security Audits: 58com engages independent security specialists to conduct periodic audits and penetration testing of Platform infrastructure.

58com retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and no longer than required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active Account relationship, and for a minimum period of 5 years following Account closure, in compliance with anti-money laundering regulatory requirements;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial record-keeping obligations under our gaming license;
• Gaming Activity Data: Retained for a minimum of 3 years from the date of each gaming session, after which data is anonymised for aggregated statistical analysis purposes;
• KYC Verification Documents: Retained for a minimum of 5 years from the date of submission, after which they are securely destroyed unless a longer retention period is mandated by regulatory requirements;
• Support Communications: Retained for 2 years from the date of the interaction unless the communication relates to an ongoing complaint or legal matter;
• Marketing Preferences and Consent Records: Retained for the duration of the active Account relationship and for 1 year following Account closure or consent withdrawal.

At the conclusion of applicable retention periods, personal data is securely and permanently deleted or anonymised in accordance with 58com's internal data destruction procedures.

Subject to applicable law, you have the following rights in relation to the personal data 58com holds about you:

• Right of Access: You may request a copy of the personal data 58com holds about you. We will respond to verified access requests within 30 days;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your 58com Account. Many details can be updated directly through your Account settings;
• Right to Erasure: In certain circumstances, you may request that 58com delete your personal data. This right is subject to exceptions where data must be retained to fulfil legal or regulatory obligations, including our AML and gaming license compliance requirements;
• Right to Restriction of Processing: You may request that 58com restrict processing of your data where you contest its accuracy, object to processing, or require it for legal claims;
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that 58com provide your data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests. 58com will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights;
• Right to Withdraw Consent: Where processing is based on consent (principally marketing communications and non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact 58com Support at [email protected] with the subject line "Data Rights Request" and include your registered email address and Account ID. 58com will verify your identity before processing any rights request. All rights requests are processed free of charge.

Where 58com becomes aware that personal data has been collected from a person under the age of 21 — whether through the registration process, KYC verification, or any other means — all such data will be promptly deleted, the associated Account will be closed, and any funds held in the Account will be returned to the payment source from which they originated.

58com encourages parents and guardians in Pakistan to maintain awareness of the gaming platforms accessible to minors in their household, and to make use of parental control tools available through device operating systems and internet service providers to restrict access to age-restricted online content.

58com's Platform infrastructure and data processing systems may be located in jurisdictions outside Pakistan. When personal data is transferred internationally — for example to data centres, cloud hosting providers, or licensed game content suppliers located in other countries — 58com takes appropriate steps to ensure that such transfers are carried out lawfully and that personal data receives equivalent protection in the destination jurisdiction.

Safeguards applied to international transfers include:

• Contractual data transfer agreements with receiving entities that impose equivalent data protection obligations;
• Transfer to jurisdictions that offer an adequate level of data protection as assessed by relevant international standards;
• Technical and organisational security measures applied consistently across all data processing locations regardless of jurisdiction.

Users with questions regarding international data transfers may contact 58com at [email protected] with the subject "International Data Transfer Enquiry."

58com will only send you marketing communications — including promotional bonus offers, new game announcements, and platform updates — where you have explicitly opted in to receive such communications at the time of registration or subsequently through your Account settings.

Marketing communications from 58com may be delivered by email, SMS, or in-Platform notification. You may unsubscribe from any marketing communication category at any time by:

• Updating your communication preferences in the Notifications section of your 58com Account settings;
• Clicking the unsubscribe link included in any marketing email from 58com;
• Contacting 58com Support and requesting removal from marketing communications.

Withdrawal of marketing consent will take effect within 48 hours. Please note that withdrawal of marketing consent does not affect your receipt of service communications — such as deposit confirmations, withdrawal notifications, security alerts, and account verification requests — which are sent on the basis of contractual necessity and cannot be opted out of while your Account is active.

The 58com Platform may occasionally contain references to third-party services — for example, payment processors or identity verification providers — that have their own privacy policies. 58com is not responsible for the privacy practices or data handling procedures of any third-party service providers or websites.

Users who interact with third-party platforms in connection with 58com services — including their JazzCash or EasyPaisa applications, or their online banking portals with HBL, UBL, or Meezan Bank — should review the relevant privacy policies of those third-party providers independently. 58com accepts no responsibility or liability for data processed by third parties outside of the 58com Platform environment.

If you believe that 58com has failed to handle your personal data in accordance with this Privacy Policy or applicable data protection obligations, we encourage you to contact us in the first instance to allow us the opportunity to investigate and resolve the matter directly.

To submit a privacy complaint, please contact 58com Support at [email protected] with the subject line "Privacy Complaint" and include your Account ID, a clear description of the concern, and any relevant dates or reference numbers. 58com will acknowledge all privacy complaints within 5 business days and will endeavour to resolve the matter within 28 calendar days.

If you are not satisfied with 58com's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority of the jurisdiction under which 58com's gaming license is issued, or to any other competent authority as provided for under applicable law.

58com reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing practices, Platform functionality, legal requirements, or regulatory guidance. The version date displayed at the top of this document indicates when the current Policy came into effect.

Where updates are material — meaning they meaningfully change how we process your personal data or affect your rights — 58com will notify registered Users by email to the address associated with their Account and by posting a prominent notice on the Platform prior to the changes taking effect. Minor updates that do not materially affect User rights may be implemented without individual notification.

Continued use of the 58com Platform following notification of a material update to this Privacy Policy constitutes acceptance of the updated Policy. If you do not agree to a material update, you should cease using the Platform and contact support to close your Account.

For all privacy-related enquiries, data rights requests, or questions about how 58com handles your personal data, please contact our support team using the details below. All privacy correspondence is handled by designated staff with appropriate data protection responsibilities.

This Privacy Policy, together with the 58com Terms & Conditions and Responsible Gaming Policy, constitutes the complete data protection framework governing your relationship with the 58com Platform. Thank you for taking the time to read and understand how 58com protects and respects your personal information.