winpk Privacy Policy

Who We Are

winpk operates the online casino and sports betting platform accessible at winpk.club (the "Platform"). winpk is the data controller responsible for the personal data of players who register and use the Platform. References to "winpk", "we", "us", or "our" in this Privacy Policy refer to the legal entity operating the winpk Platform.

winpk is committed to handling personal data responsibly, transparently, and in compliance with internationally recognised data protection principles. The Platform is designed to serve English-speaking Pakistani players. If you have any questions about this policy or about how winpk processes your personal data, please contact us at the details provided in Section 14 of this document.

Data We Collect

winpk collects the following categories of personal data in connection with your use of the Platform:

• Registration data: Full name, date of birth, email address, and any other information you provide when creating your winpk Account.
• Identity verification data (KYC): Government-issued identity documents such as a copy of your CNIC (Computerised National Identity Card), and documentation evidencing ownership of your payment method. This data is collected prior to processing withdrawals and in connection with anti-money laundering obligations.
• Financial data: Payment method details (e.g., JazzCash account reference, Easypaisa wallet number, bank account information for HBL, UBL, Meezan Bank, or Bank Alfalah), transaction amounts, deposit and withdrawal history, and PKR balance records.
• Gaming data: Bet history, game session records, wager amounts, win and loss records, bonus usage, and any in-play activity on the winpk sportsbook or casino.
• Technical data: IP address, browser type and version, device type, operating system, and session identifiers collected automatically when you access the Platform.
• Communication data: Records of correspondence between you and winpk support, including chat logs, emails, and any complaint or dispute communications.
• Responsible gaming data: Records of any self-exclusion requests, deposit or loss limits set, cooling-off periods requested, and any other responsible gaming tool interactions on your winpk Account.

How We Collect Data

winpk collects personal data through the following means:

• Directly from you when you register an Account, deposit or withdraw funds, contact winpk support, or use any feature of the Platform that requires you to submit information.
• Automatically through cookies, server logs, and similar tracking technologies when you access the Platform. See Section 7 for further information about winpk's use of cookies.
• From third parties including payment service providers (such as JazzCash, Easypaisa, and banking partners) who provide winpk with transaction confirmation and fraud-screening data, and from identity verification service providers used during KYC processes.

Legal Basis for Processing

winpk processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and winpk — including Account management, processing deposits and withdrawals in PKR, and providing access to Games and the Sportsbook.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) obligations, KYC verification requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out in winpk's legitimate interests, including the prevention and detection of fraud, platform security, responsible gaming monitoring, and improving Platform services — provided those interests are not overridden by your rights and interests.
• Consent: Where winpk relies on your consent to process personal data (such as for non-essential cookies or certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

winpk uses the personal data it collects for the following purposes:

• To create, verify, and manage your winpk Account, including processing your winpk login credentials securely.
• To process PKR deposits and withdrawals through JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other supported payment methods.
• To conduct KYC identity verification prior to processing withdrawal requests.
• To provide access to casino Games, the Sportsbook, and all other Platform features available after winpk login.
• To detect, investigate, and prevent fraudulent activity, money laundering, underage access, and breaches of winpk's Terms & Conditions.
• To administer bonuses, promotions, and loyalty programmes where applicable.
• To operate winpk's responsible gaming programme, including monitoring for indicators of problem gambling and facilitating self-exclusion and limit requests.
• To respond to player support queries, complaints, and dispute submissions.
• To send transactional notifications related to your Account (e.g., deposit confirmations, withdrawal updates, security alerts). Marketing communications are subject to separate consent.
• To improve the winpk Platform through technical analysis of usage data, session behaviour, and game performance metrics.

Data Sharing & Disclosure

winpk does not sell your personal data to third parties. winpk may share your personal data with third parties only in the following circumstances:

• Payment service providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment processors receive the minimum data necessary to process your PKR transactions.
• Identity verification providers: Third-party KYC service providers receive identity document data solely for the purpose of verifying your identity prior to withdrawal processing.
• Game software providers: Third-party game studios whose products are hosted on winpk may receive anonymised session and technical data to support game performance and RNG certification compliance.
• Regulatory and law enforcement authorities: winpk will disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction.
• Fraud prevention and AML screening: winpk may share data with third-party fraud prevention and anti-money laundering screening services where there is a legitimate basis to do so under applicable law.

All third-party processors engaged by winpk are required to process personal data only for the specified purpose and in accordance with data protection obligations equivalent to those applied by winpk.

Cookies & Tracking Technologies

winpk uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your winpk login session, managing security tokens, and preserving Account state between pages. These cookies cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect anonymised data about how players use the winpk Platform, including pages visited, session duration, and device type, to enable winpk to identify technical issues and improve the player experience.
• Functional cookies: Used to remember your preferences, such as language settings, preferred payment method, and responsible gaming limit display preferences.

On your first visit to the winpk Platform, you will be presented with a cookie consent notice. You may accept or decline non-essential cookies at that stage. You may also adjust your browser settings to refuse or delete cookies; however, disabling essential cookies will prevent the Platform from functioning correctly, including the ability to complete winpk login.

Data Retention

winpk retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five years from the date of Account closure to satisfy anti-money laundering record-keeping obligations.
• KYC identity documents: Retained for a minimum of five years from the date of verification, consistent with applicable AML regulatory requirements.
• Support and communication records: Retained for a minimum of three years from the date of the communication, to support dispute resolution and regulatory audits.
• Technical and session data: Retained for up to 24 months for analytical and fraud prevention purposes, after which it is anonymised or deleted.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

Data Security

winpk implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption across all pages of the Platform, including the winpk login page and all transaction pages.
• Encrypted storage of passwords. winpk stores only hashed, salted representations of Account passwords — the plaintext password is never stored and cannot be retrieved by winpk staff.
• Two-factor authentication (2FA) available to all Account holders to provide an additional layer of security beyond winpk login credentials.
• Access controls limiting internal employee access to personal data on a strict need-to-know basis.
• Regular security assessments and monitoring of Platform infrastructure for vulnerabilities.

While winpk takes all reasonable measures to protect your data, no internet transmission or data storage system is entirely secure. If you suspect a security incident affecting your winpk Account, please contact winpk support immediately.

Your Rights

Depending on applicable data protection laws, you may have the following rights in relation to the personal data winpk holds about you:

• Right of access: The right to request a copy of the personal data winpk holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to winpk's legal retention obligations (see Section 8).
• Right to restriction of processing: The right to request that winpk limits the processing of your personal data in certain circumstances.
• Right to data portability: The right to receive a copy of your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact winpk using the details in Section 14. winpk will respond to all valid data rights requests within 30 days of receipt, subject to identity verification.

Children's Privacy

The winpk Platform is strictly for adults aged 18 years and above. winpk does not knowingly collect personal data from any individual under the age of 18. If winpk discovers that personal data has been collected from a person under 18, the associated Account will be immediately closed, the data will be deleted, and any balance will be returned to the depositing payment method subject to verification.

If you have reason to believe that a minor has registered a winpk Account or provided personal data to the Platform, please notify winpk support immediately.

International Data Transfers

The winpk Platform serves players in Pakistan. In the course of providing its services, winpk may transfer personal data to servers, processors, or service providers located outside Pakistan. Where such transfers occur, winpk takes steps to ensure that the recipient provides a level of data protection consistent with the principles described in this Privacy Policy, including through the use of data processing agreements and equivalent contractual safeguards.

Changes to This Privacy Policy

winpk may update this Privacy Policy from time to time to reflect changes in its data practices, operational requirements, or applicable legal obligations. Where changes are material, winpk will notify registered players via the email address associated with their Account and will display a prominent notice on the Platform. The date of the most recent revision is displayed at the top of this document. Continued use of the winpk Platform following any revision constitutes acceptance of the updated Privacy Policy.

Contact

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how winpk processes your personal data, you may contact winpk's support team.

Contact email: [email protected]

winpk aims to respond to all privacy-related queries within five business days. For formal data rights requests, a response will be provided within 30 days of receipt and identity verification.