winpk Privacy Policy

01 Introduction

This Privacy Policy ("Policy") explains how winpk ("winpk", "we", "us", "our"), the operator of the online gaming and sports betting platform at winpk.bet, collects, uses, stores, shares, and protects the personal data of users ("Player", "User", "you") who access the Platform.

winpk is committed to protecting your privacy and ensuring that your personal data is handled responsibly, transparently, and in accordance with applicable data protection laws and our international gaming licensing obligations. We want you to be fully informed about how your data is used — not just in a legal sense, but in a practical, day-to-day sense as you use the winpk platform.

By registering an account with winpk or by continuing to access the Platform after updates to this Policy have been communicated, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue use of the Platform and contact our support team to close your account.

02 Personal Data We Collect

winpk collects personal data in the following categories. We collect only what is necessary for the stated purposes.

2.1 Identity & Registration Data

• Full legal name as it appears on your CNIC or government-issued identification
• Date of birth (to verify the 21+ age requirement)
• Gender (optional, for personalisation purposes)
• CNIC number (for KYC verification purposes only)
• Nationality and city of residence in Pakistan (e.g. Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi)

2.2 Contact Data

• Personal email address
• Pakistani mobile number registered in your name
• Residential address (required at withdrawal verification stage)

2.3 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet number
• Bank account details for HBL, UBL, or Meezan Bank transfers
• Cryptocurrency wallet addresses
• Deposit and withdrawal transaction records denominated in PKR
• Payment method verification documentation (e.g. screenshot of registered mobile wallet)

2.4 Gaming Activity Data

• Bet history, game session records, and wagering activity
• Win and loss records, account balance history
• Bonus activations, wagering requirement progress, and promotional participation
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and platform interaction logs
• Cookies and similar tracking technologies (see Section 7)

2.6 Communications Data

• Records of live chat conversations with winpk support
• Email correspondence sent to or received from winpk
• Feedback, complaint, and dispute records

03 How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data winpk holds is provided directly by you during the registration process, KYC verification, deposit and withdrawal transactions, responsible gaming tool activation, and communications with our customer support team.

3.2 Data Collected Automatically

When you access the winpk Platform, our systems automatically collect certain technical data including your IP address, device identifiers, browser type, session duration, and pages or games accessed. This data is collected passively and is used for security monitoring, fraud prevention, and platform performance optimisation.

3.3 Data From Third Parties

winpk may receive data about you from regulated third-party service providers including identity verification agencies (for KYC purposes), payment processors (for transaction verification), and fraud prevention services. Any data received from third parties is used solely in accordance with this Policy and the purpose for which it was shared.

04 How We Use Your Personal Data

The table below summarises the primary purposes for which winpk processes your personal data:

winpk does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you, except where such processing is required to fulfil our responsible gaming or fraud prevention obligations.

05 Legal Basis for Processing

winpk processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide you with the winpk gaming and betting services you have registered for.
• Legal Obligation: Processing required to comply with KYC/AML regulations, responsible gaming obligations, and reporting requirements under winpk's international gaming licence.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and platform analytics where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given clear, freely withdrawable consent.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact our support team via live chat or update your communication preferences in your account settings.

06 Sharing Your Personal Data

6.1 Who We Share With

winpk does not sell your personal data. We may share it only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• KYC and Identity Verification Providers: Regulated third-party agencies used to verify your identity and CNIC documentation in compliance with our licensing obligations.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners — solely to process your deposits and withdrawals in PKR.
• Fraud Prevention and Security Services: Specialist providers who help detect, prevent, and investigate fraudulent activity on the Platform.
• Game Content Providers: Where game providers need session data to deliver their titles, only the minimum necessary technical data is shared under data processing agreements.
• Regulatory and Licensing Authorities: Where required by our international gaming licence or by applicable law, winpk may be required to disclose player data to regulatory bodies.
• Legal and Law Enforcement: Where required by a valid legal order, court order, or to protect the rights, safety, or property of winpk, its users, or the public.

6.2 Data Processing Agreements

All third parties who process personal data on winpk's behalf are required to enter into Data Processing Agreements that bind them to the same standards of data protection as winpk itself. We conduct due diligence on all data processors before engagement.

07 Cookies & Tracking Technologies

7.1 Types of Cookies Used

winpk uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your winpk session. These cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players navigate the Platform — which game categories are most visited, where players drop off during registration, and how page load times can be improved. Data collected is aggregated and anonymous.
• Functional Cookies: Remember your Platform preferences such as language settings, preferred payment method display, and responsible gaming reminder frequency.
• Marketing Cookies (Opt-In Only): Used only where you have given explicit consent to receive personalised promotional communications. You can withdraw consent at any time via account settings.

7.2 Managing Your Cookie Preferences

You can manage non-essential cookie preferences through the cookie settings panel accessible in your winpk account. You may also manage cookies through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality. winpk does not respond to Do Not Track browser signals at this time, but we respect your cookie consent choices made within the Platform.

08 Data Retention

winpk retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and licensing obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of activity.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn plus 1 year for record-keeping purposes.
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active exclusion period.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in such a way that it can no longer be attributed to you.

09 Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by winpk:

1. Right of Access: You may request a copy of all personal data winpk holds about you. We will respond within 30 days.
2. Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (e.g. email address updates) can be made directly in your account settings.
3. Right to Erasure: You may request deletion of your personal data where we no longer have a lawful basis for retaining it. Note that data subject to legal retention obligations (e.g. AML records) cannot be erased before the applicable retention period expires.
4. Right to Restriction: You may request that we restrict processing of your data while a rectification or objection request is being assessed.
5. Right to Data Portability: You may request a copy of data you have provided to winpk in a structured, machine-readable format.
6. Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time via account settings or by contacting support.

To exercise any of these rights, contact winpk's support team via live chat (available 24/7) or via the email address at Section 14. We will acknowledge your request within 72 hours and complete it within 30 days. We may need to verify your identity before processing a data rights request.

10 Children & Minors

winpk strictly prohibits access to the Platform by persons under the age of 21. We do not knowingly collect, process, or retain the personal data of individuals under 21. If you are a parent or guardian and believe that a minor has registered a winpk account or provided their personal data to the Platform, please contact us immediately via live chat. Upon confirmation, we will delete all associated data without delay and close the account.

winpk employs age verification checks as part of the registration and KYC process to help prevent underage access. We support national and international initiatives aimed at protecting minors from the potential harms of online gambling.

11 Data Security

winpk implements a multi-layered approach to data security designed to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. Our security measures include:

• Transport Encryption: All data transmitted between your device and winpk's servers is encrypted using TLS 1.2 or higher.
• Storage Encryption: Sensitive personal data and financial records stored in winpk's databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within winpk's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training.
• Intrusion Detection: winpk employs continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Password Security: Passwords are stored as salted hashes and are never stored in plaintext. winpk staff cannot view your password.
• Two-Factor Authentication: winpk supports two-factor authentication (2FA) for player accounts. We strongly encourage all players to enable 2FA in their account security settings.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winpk will notify affected players without undue delay and in accordance with applicable notification requirements.

12 International Data Transfers

winpk operates under an international gaming licence, and some of the third-party service providers we use — such as KYC verification agencies, cloud infrastructure providers, and fraud prevention services — may be based outside Pakistan or the country in which winpk is licensed. When personal data is transferred internationally, winpk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable. If you would like further information about the specific safeguards applied to any particular international transfer, please contact winpk's support team.

13 Updates to This Privacy Policy

winpk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory standards. When material changes are made — meaning changes that affect how your personal data is used in a significant way — we will notify you via the email address associated with your account and by displaying a prominent notice on the Platform.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how winpk protects your data. Your continued use of the Platform following notification of an updated Policy constitutes acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data held by winpk, please contact our support team through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the winpk Platform. Our team responds in both English and Urdu.
• Email (plain text — not clickable): [email protected]

All data rights requests and privacy-related queries will be acknowledged within 72 hours and resolved within 30 days. For urgent responsible gaming matters — including self-exclusion requests — our team is available around the clock and will act immediately upon receipt.