winpk Privacy Policy

1. Introduction

winpk ("winpk", "we", "our", "us") operates the online cricket betting and casino platform accessible at winpk.co (the "Platform"). As part of operating the Platform for Pakistani players, winpk processes personal data. This Privacy Policy ("Policy") describes how winpk collects, uses, stores, and protects that data, and explains the rights available to Users in relation to their personal data.

By registering for a winpk account or using the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside winpk's Terms & Conditions and Responsible Gaming Policy.

winpk is committed to handling personal data responsibly and in accordance with applicable data protection principles. If you have questions about this Policy, please contact winpk at [email protected].

2. Personal Data We Collect

winpk collects personal data in the following categories:

2.1 Registration and Identity Data

When you create a winpk account, we collect: full name; date of birth; Pakistani mobile number; email address; residential address; and, where required for identity verification, copies of identity documents such as CNIC (Computerised National Identity Card), passport, or other government-issued identification.

2.2 Financial Data

To process deposits and withdrawals, winpk collects information relating to your payment methods. For JazzCash and Easypaisa transactions, this includes the mobile wallet number associated with your payments. For bank transfers (HBL, Meezan Bank, Bank Alfalah, UBL), this includes bank account details necessary to process the transaction. winpk does not store full card numbers for Visa or Mastercard payments — card data is handled by certified payment processors.

2.3 Transactional Data

winpk maintains records of all financial transactions made through your account, including deposit amounts, withdrawal amounts, payment methods used, transaction dates and times, and transaction reference numbers.

2.4 Betting and Gaming Activity

winpk records all betting and gaming activity associated with your account: bets placed (sport, market, stake, odds), game sessions (game title, session duration, wagers, outcomes), bonus usage, and self-exclusion or responsible gaming tool activations.

2.5 Technical and Device Data

winpk's systems automatically collect certain technical data when you access the Platform: IP address; device type and operating system; browser type and version; session timestamps; and pages or features accessed. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

2.6 Communications Data

When you contact winpk support via live chat or email, winpk retains a record of that communication, including your messages and our responses.

3. How winpk Uses Your Personal Data

winpk uses the personal data collected for the following purposes:

• Account management: Creating and maintaining your winpk account; processing your login credentials securely; enabling access to betting and casino products.
• Payment processing: Processing PKR deposits via JazzCash, Easypaisa, bank transfer, and card; processing withdrawal requests to your registered payment method.
• Identity verification (KYC): Verifying that you are who you say you are and that you meet the 18+ age requirement, in compliance with applicable compliance and anti-money laundering requirements.
• Responsible gaming: Monitoring account activity to identify indicators of problem gambling; administering deposit limits, session limits, cooling-off periods, and self-exclusion requests.
• Fraud prevention and security: Detecting and investigating suspicious activity; preventing multiple account abuse; protecting the integrity of winpk's betting markets.
• Customer support: Responding to your queries, complaints, and responsible gaming requests.
• Legal and regulatory compliance: Meeting applicable legal obligations including transaction record-keeping and responding to lawful requests from authorities.
• Platform improvement: Analysing aggregated usage patterns to improve winpk's features, interface, and performance — particularly for Pakistani mobile users on 4G networks in cities including Karachi, Lahore, Islamabad, and Rawalpindi.

4. Legal Basis for Processing

winpk processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between winpk and the User — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws and regulations — including identity verification, transaction record-keeping, and anti-money laundering compliance.
• Legitimate interests: Processing carried out in winpk's legitimate interests where those interests are not overridden by User rights — including fraud prevention, responsible gaming monitoring, and platform security.
• Consent: Where winpk processes data on the basis of consent (such as optional marketing communications), Users may withdraw that consent at any time by contacting winpk support.

5. Data Sharing and Disclosure

winpk shares personal data with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and USDT processing providers receive the minimum data necessary to process your financial transactions.
• Identity verification providers: winpk uses third-party KYC providers to verify identity documents. These providers are contractually bound to handle your data securely and only for verification purposes.
• Game providers: Casino and slot game studios (PG Soft, Pragmatic Play, JDB, CQ9, etc.) may receive session-level data necessary to operate games within your winpk account.
• Legal and regulatory authorities: winpk will disclose personal data to regulatory bodies, law enforcement, or courts where required to do so by applicable law.
• Business transfers: In the event of a merger, acquisition, or asset sale, personal data held by winpk may be transferred to the acquiring entity, subject to the same data protection commitments in this Policy.

All third-party processors who handle winpk User data on winpk's behalf are subject to data processing agreements that restrict their use of the data to the purposes for which it was shared.

6. Cookies and Tracking Technologies

winpk uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function — including maintaining your login session and remembering your account preferences.
• Analytics cookies: Used to understand how Players navigate the Platform so winpk can improve the user experience. Analytics data is aggregated and does not identify individual Users.
• Security cookies: Used for fraud detection and to identify unusual access patterns.

You may adjust cookie preferences in your browser settings. Disabling essential cookies will impair the functionality of the winpk Platform, including the ability to maintain a logged-in session.

7. Data Retention

winpk retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal retention requirements. Specifically:

• Account registration and KYC data is retained for the lifetime of the account and for a minimum of five years after account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records are retained for a minimum of five years from the date of the transaction.
• Betting and gaming activity logs are retained for a minimum of three years.
• Customer support communications are retained for a minimum of two years.

After the applicable retention period, data is securely deleted or anonymised.

8. Data Security

winpk implements technical and organisational security measures appropriate to the risk level of the data processed. These measures include:

• TLS/SSL encryption for all data transmitted between your device and winpk's servers.
• Encryption of sensitive data at rest, including payment-related information.
• Access controls limiting winpk staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the winpk Platform.
• Two-factor authentication options available to all winpk account holders.

No system is completely immune to security risks. In the event of a data breach that poses a material risk to Users, winpk will notify affected Users and relevant authorities as required by applicable law.

9. Your Rights

Depending on the laws applicable in your jurisdiction, you may have the following rights in relation to your personal data held by winpk:

• Right of access: The right to request confirmation of whether winpk holds personal data about you and, if so, a copy of that data.
• Right to rectification: The right to request correction of inaccurate personal data held about you.
• Right to erasure: The right to request deletion of your personal data, subject to winpk's legal retention obligations.
• Right to restriction: The right to request that winpk restrict its processing of your personal data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where processing is based on your consent or a contract.
• Right to object: The right to object to processing based on winpk's legitimate interests.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact winpk support at [email protected]. winpk will respond to verified requests within the timeframe required by applicable law. Note that certain rights are subject to exceptions — for example, winpk cannot erase transaction records that it is legally required to retain.

10. Children's Privacy

The winpk Platform is strictly for users aged 18 and over. winpk does not knowingly collect personal data from individuals under the age of 18. If winpk becomes aware that personal data has been collected from a person under 18, that account will be closed and the data deleted promptly. Parents or guardians who believe a minor has registered on winpk should contact [email protected] immediately.

11. International Data Transfers

winpk may process or store personal data on servers located outside Pakistan. Where personal data is transferred internationally, winpk ensures that appropriate safeguards are in place — including contractual data protection clauses with third-party processors — to protect your data to a standard equivalent to that required under applicable data protection principles.

12. Updates to This Policy

winpk may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or data processing practices. Where changes are material, winpk will notify registered Users via email or in-platform notification. The effective date at the top of this Policy will be updated accordingly. Continued use of the winpk Platform after an updated Policy takes effect constitutes acceptance of the revised Policy.

13. Contact and Data Queries

For any questions, requests, or concerns relating to this Privacy Policy or winpk's handling of your personal data, please contact: