winpkp Privacy Policy

This Privacy Policy ("Policy") describes how winpkp ("winpkp", "we", "us", "our"), the operator of the online betting and casino platform at winpkp.com, collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access and use the winpkp platform.

winpkp is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all personal data processed in connection with your registration, use of betting and casino services, payment transactions, customer support interactions, and marketing communications involving the winpkp platform.

This Policy should be read alongside the winpkp Terms & Conditions and Responsible Gaming Policy, both of which form part of the broader legal framework governing your relationship with winpkp.

winpkp collects the following categories of personal data from Players:

winpkp does not collect or process special categories of sensitive personal data — such as biometric data, health information, religious beliefs, or political opinions — unless specifically required by applicable law and with your explicit prior consent.

winpkp collects personal data through the following channels:

• Direct provision: Data you provide when registering your winpkp account, completing KYC, making deposits or withdrawals, contacting customer support, or responding to surveys;
• Automated collection: Technical and usage data collected automatically as you interact with the winpkp platform, including through cookies, log files, and analytics tools;
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners when you make a deposit or withdrawal;
• Identity verification providers: Results and risk scores from third-party KYC and AML screening services used to verify your identity and assess transaction risk;
• Third-party fraud prevention services: Device fingerprinting and behavioural analytics data from fraud prevention partners used to protect the platform and its Players.

winpkp uses your personal data for the following purposes:

• Account creation and management: To register your winpkp account, maintain your profile, process login requests, and manage your session security;
• KYC and age verification: To verify that you are at least 21 years of age and to confirm your identity and residential address as required under our licensing obligations;
• Payment processing: To process PKR deposits and withdrawals via your chosen payment method and to maintain accurate financial records of all transactions;
• Service delivery: To provide access to cricket betting, PSL markets, sports betting, live casino, slot games, Lucky Dice, and all other winpkp platform features;
• Responsible gaming: To monitor betting patterns, identify indicators of potential problem gambling, and apply responsible gaming tools including deposit limits and self-exclusion where appropriate;
• Fraud prevention and AML: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover, and other prohibited activities;
• Customer support: To respond to enquiries, resolve disputes, and manage complaints raised through the winpkp support channels;
• Legal compliance: To meet our obligations under applicable gaming, AML, data protection, and tax regulations;
• Platform improvement: To analyse usage patterns and identify opportunities to improve the winpkp user experience, platform performance, and product offering;
• Marketing: Where you have given your explicit consent, to send you personalised promotional offers, bonus notifications, and news about winpkp products via email or SMS.

winpkp processes your personal data on the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform the winpkp Player Agreement, including account management, bet settlement, payment processing, and KYC verification;
• Legal obligation: Processing required to comply with applicable gaming regulations, AML laws, tax reporting obligations, and regulatory instructions from competent authorities;
• Legitimate interests: Processing carried out in winpkp's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your rights and interests;
• Consent: Processing for marketing communications and optional analytics, where you have given your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

winpkp does not sell your personal data to third parties. winpkp may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners, for the purpose of processing your PKR deposits and withdrawals;
• KYC and identity verification providers: Third-party services engaged to perform CNIC verification, document authenticity checks, and AML screening;
• Fraud prevention and security partners: Third-party providers of device fingerprinting, behavioural analytics, and fraud scoring tools used to protect the platform;
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on winpkp's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where winpkp is legally required or permitted to disclose data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies;
• Professional advisers: Lawyers, auditors, and compliance consultants engaged to provide legal, financial, or regulatory advice to winpkp, subject to professional confidentiality obligations.

winpkp uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and — with your consent — analyse platform usage. The categories of cookies used by winpkp are:

• Essential cookies: Strictly necessary for the platform to function, including session management, login state, and security tokens. These cannot be disabled without breaking the platform;
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming limit choices across sessions;
• Analytics cookies: Used with your consent to collect anonymised data about how Players navigate and use the winpkp platform, helping us identify areas for improvement;
• Fraud prevention cookies: Used to collect device and behavioural signals that help winpkp identify and prevent fraudulent account activity.

You can manage your cookie preferences through the winpkp cookie settings panel. Withdrawing consent for non-essential cookies will not affect your ability to use the core platform features.

winpkp retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the duration of your winpkp account and for a minimum of five years following account closure, to meet AML and gaming regulatory record-keeping requirements;
• KYC documents: Retained for a minimum of five years from the date of submission, in line with AML regulatory obligations;
• Financial transaction records: Retained for a minimum of five years from the date of the transaction;
• Customer support records: Retained for three years from the date of the last interaction, or for the duration of any ongoing dispute;
• Marketing consent records: Retained for the duration of your marketing consent and for two years following withdrawal of consent, as evidence of prior consent;
• Technical and usage logs: Retained for up to 12 months for security and fraud prevention purposes, after which they are anonymised for aggregate analytics.

winpkp implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the winpkp platform;
• Hashed and salted storage of all account passwords — winpkp staff cannot view your password in plain text;
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• Segregated data environments with firewalls, intrusion detection systems, and continuous security monitoring;
• Secure data deletion protocols applied when data reaches the end of its retention period.

As a winpkp Player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the winpkp privacy team at [email protected]. winpkp will respond within 30 days.

If you are a parent or guardian and believe that a minor has registered a winpkp account using false information, please contact us immediately at [email protected]. winpkp will promptly investigate and, where confirmed, close the account and securely delete the associated data, returning any deposited funds to the originating payment method.

winpkp may send you marketing communications about new betting markets, PSL promotions, bonus offers, new games, and platform features — but only where you have expressly opted in to receive such communications. Marketing preferences can be managed at any time from your winpkp account settings.

winpkp sends marketing communications via email and SMS only. We do not engage in unsolicited telephone marketing calls. Each marketing message includes a clear and easy unsubscribe mechanism. Opting out of marketing communications does not affect your ability to receive service and transactional messages relating to your account, bets, and payments.

Players who have activated self-exclusion through winpkp's responsible gaming tools are automatically removed from all marketing lists for the duration of their exclusion period.

winpkp's platform infrastructure and some of its third-party service providers operate outside Pakistan. Where personal data is transferred to jurisdictions outside Pakistan, winpkp ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include contractual data protection clauses, data processing agreements, and adequacy assessments of the recipient jurisdiction's data protection framework.

winpkp reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where a material change is made to this Policy, winpkp will notify you by email or via a prominent in-platform notification at least 14 days before the change takes effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the winpkp platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, you should close your winpkp account before the effective date.

For all privacy-related enquiries, data subject rights requests, or concerns about how winpkp handles your personal data, please contact the winpkp privacy team:

If you believe winpkp has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction in which winpkp holds its gaming licence. Details of the applicable supervisory authority are available on request from the winpkp privacy team.

winpkp encourages you to contact us directly before escalating a complaint to a supervisory authority, as we are committed to resolving privacy concerns promptly and fairly.