winpkr Privacy Policy – How We Collect and Protect Your Data

1. Introduction and Scope

winpkr ("winpkr", "we", "us", "our") is committed to protecting the privacy of all individuals who use the winpkr platform at winpkr.im. This Privacy Policy ("Policy") describes how winpkr collects, uses, discloses, stores, and protects personal information obtained from registered users and visitors to the Platform.

This Policy applies to all winpkr services, including the sportsbook (cricket betting, baseball, tennis, and other markets), live casino, slots, and all account management functions. By registering a winpkr account or using any part of the Platform, you acknowledge that you have read and understood this Policy.

2. Data Controller

winpkr acts as the data controller in respect of personal data collected through the Platform. For the purposes of this Policy, "data controller" means the entity that determines the purposes and means of processing personal data. Questions or requests relating to your personal data held by winpkr should be directed to our support team using the contact information provided in Section 15 of this Policy.

3. Personal Data We Collect

winpkr may collect the following categories of personal data from users of the Platform:

3.1 Registration and Account Data

• Full legal name;
• Date of birth (required for age verification — users must be 18 or older);
• Email address;
• Mobile phone number (including JazzCash and Easypaisa registered numbers);
• Username and encrypted password;
• Country and city of residence.

3.2 Identity Verification (KYC) Data

• CNIC number and copies of CNIC or other government-issued identity documents;
• Proof of address documentation where required;
• Selfie or biometric verification images where required for enhanced KYC.

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts and timestamps;
• Payment method identifiers (JazzCash account reference, Easypaisa reference, bank account details — but not full card numbers);
• PKR account balance history and transaction ledger.

3.4 Platform Usage Data

• Betting history, game selections, and stake amounts;
• Login timestamps and session durations;
• Device type, operating system, and browser information;
• IP address and approximate geolocation.

3.5 Communications Data

• Records of communications with winpkr support, including chat logs and email correspondence;
• Responses to surveys or feedback requests.

4. How We Collect Your Data

winpkr collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact support, or respond to communications;
• Automatically — through cookies, server logs, and analytics tools when you browse or use the Platform;
• From third parties — including identity verification providers used for KYC, payment processors handling JazzCash and Easypaisa transactions, and fraud detection services.

5. Purposes and Legal Bases for Processing

winpkr processes your personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for the performance of the contract between you and winpkr;
• Payment processing — necessary for contractual performance and compliance with financial obligations;
• Identity and age verification (KYC) — necessary for compliance with applicable legal and regulatory obligations;
• Fraud prevention and security — legitimate interests of winpkr in maintaining a secure and fair platform;
• Responsible gaming monitoring — legitimate interests in the protection of users' welfare, including detection of problematic gambling patterns;
• Platform improvement and analytics — legitimate interests in developing and improving the Platform's features and performance;
• Customer support — necessary for the performance of the contract and legitimate interests in resolving user issues;
• Marketing communications — based on your consent, which may be withdrawn at any time.

6. Disclosure of Personal Data to Third Parties

winpkr does not sell your personal data to third parties. We may share your data with third parties only in the following limited circumstances:

• Service providers — trusted third-party vendors who assist winpkr in operating the Platform, including payment processors, KYC identity verification providers, fraud detection services, and cloud hosting providers. These providers are contractually bound to process your data only on winpkr's instructions and to maintain appropriate security standards;
• Legal and regulatory requirements — where winpkr is required by law, court order, or regulatory direction to disclose personal data;
• Anti-money laundering compliance — financial intelligence disclosures required under applicable anti-money laundering regulations;
• Business transfers — in the event of a merger, acquisition, or sale of winpkr's business assets, personal data may transfer to the acquiring entity, subject to the same privacy protections.

7. Payment Data and Financial Information

winpkr takes the security of financial information seriously. JazzCash and Easypaisa transactions are processed through the respective mobile wallet platforms' secure APIs — winpkr does not store your JazzCash PIN or Easypaisa PIN on its servers at any point. Similarly, bank transfer details are used solely for the purpose of processing the relevant transaction and are not retained beyond the period required for reconciliation and regulatory record-keeping.

All financial transactions conducted on winpkr are denominated in Pakistani Rupees (PKR). Your transaction history is retained for the minimum period required by applicable financial regulations and responsible gaming record-keeping obligations.

8. KYC and Identity Verification

As part of winpkr's obligations to maintain a secure platform and comply with applicable requirements, registered users are required to complete Know Your Customer (KYC) verification before processing their first withdrawal. KYC documentation — including CNIC copies — is collected and stored in encrypted, access-controlled storage systems. Access to KYC documents is restricted to authorised personnel on a strict need-to-know basis.

KYC data will not be used for any purpose other than identity verification, age verification, and compliance with applicable regulatory or legal obligations. winpkr uses reputable third-party identity verification providers who are subject to their own data protection obligations.

9. Cookies and Tracking Technologies

winpkr uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — required for the Platform to function correctly, including session management and login state;
• Analytics cookies — used to understand how users interact with the Platform, helping winpkr improve performance and user experience;
• Preference cookies — used to remember your settings and preferences across sessions.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Platform. winpkr does not use cookies to serve third-party advertising on behalf of external advertisers.

10. Data Retention

winpkr retains your personal data for as long as your account remains active and for a reasonable period thereafter, as required by applicable legal, regulatory, and financial record-keeping obligations. Specific retention periods are as follows:

• Account and transaction data — retained for a minimum period following account closure as required by applicable financial regulations;
• KYC documents — retained for the period required by applicable anti-money laundering regulations;
• Support communications — retained for up to three years after the last interaction, unless a longer period is required by law;
• Analytics data — aggregated and anonymised data may be retained indefinitely for platform improvement purposes.

When data is no longer required, winpkr applies secure deletion procedures appropriate to the sensitivity of the data involved.

11. Data Security

winpkr implements technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit TLS/SSL encryption for data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel, regular security assessments and monitoring, and two-factor authentication availability for all user accounts.

While winpkr takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your winpkr login credentials and for notifying us promptly of any suspected unauthorised account access.

12. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of your personal data held by winpkr:

• Right of access — to request a copy of the personal data winpkr holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to winpkr's legal and regulatory retention obligations;
• Right to restriction of processing — to request that winpkr limit the way it uses your data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, commonly used format where technically feasible;
• Right to withdraw consent — where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact winpkr support using the email address listed in Section 15. winpkr will respond to all valid data subject requests within a reasonable timeframe, and no later than 30 days from receipt of the request.

13. Responsible Gaming and Data

winpkr processes certain data about your gambling activity — including bet frequency, deposit patterns, and session durations — for responsible gaming purposes. This processing is carried out in winpkr's legitimate interests and in the interests of user welfare, to identify patterns that may indicate problematic gambling behaviour and to facilitate appropriate interventions such as account limits or self-exclusion.

Data processed for responsible gaming purposes is not used for any commercial or marketing purpose. winpkr is an 18+ platform. For more information about the responsible gaming tools available to you, please visit our Responsible Gaming page.

14. Changes to This Privacy Policy

winpkr reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via their registered email address or through a prominent notice on the Platform. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy.

15. Contact and Data Enquiries

For all privacy-related queries, data subject access requests, or concerns regarding winpkr's handling of your personal data, please contact the winpkr support team. Support is available daily during Pakistan Standard Time (PST/UTC+5) hours. Contact details are available in the footer of this page.

winpkr is committed to resolving privacy concerns promptly. All data-related enquiries will be acknowledged within 48 hours and addressed substantively within 30 days of receipt.