Privacy Policy – WinPKR Pakistan Online Betting Platform

1. Who We Are

WinPKR is an online sports betting and live casino platform operated at winpkr.click, serving registered players in Pakistan. When this Privacy Policy refers to "WinPKR", "we", "us" or "our", it means the operator of the WinPKR platform.

WinPKR acts as the data controller for all personal information collected through the WinPKR website, mobile app and any associated services. This means WinPKR is responsible for deciding how and why your personal data is used, and is accountable for keeping it secure.

This Privacy Policy applies to all personal data collected from users who visit winpkr.click, register an account, deposit funds, place bets, use live casino products, contact WinPKR support or interact with WinPKR in any other way. It applies whether you access WinPKR on a desktop browser, mobile browser or through the WinPKR mobile app.

2. Data We Collect

WinPKR collects only the data that is genuinely necessary to operate the platform, meet legal obligations and provide you with a good service. The categories of personal data WinPKR may hold about you include:

WinPKR does not collect sensitive personal data categories (such as health data, religious beliefs or biometric data) except where a user voluntarily discloses such information in a support communication, in which case it will be treated with particular care and not stored beyond what is necessary to resolve the matter.

3. How We Collect Your Data

WinPKR collects personal data through several channels. Understanding each channel helps you see clearly where your information enters the platform:

• Direct submission: When you complete the WinPKR registration form, you directly provide identity and contact data. When you initiate a deposit or withdrawal, you provide or confirm your payment details. When you contact WinPKR support by email or live chat, you provide communications data.
• Automated collection: When you visit winpkr.click or use the WinPKR app, technical and usage data is collected automatically through server logs, cookies and similar technologies. This happens on every visit, whether you are logged in or not. See Section 8 for full details on cookies.
• Payment providers: When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer or Visa/Mastercard, WinPKR receives transaction confirmation data from the payment provider. The full payment credentials remain with the payment provider — WinPKR only stores a reference identifier and the transaction amount in PKR.
• Verification services: If WinPKR uses a third-party identity verification service to check documents you submit, that service may return a verification result to WinPKR. The underlying document images are processed by the verification service under their own privacy terms.
• Publicly available sources: In limited circumstances (for example, fraud screening), WinPKR may cross-reference information you provide against publicly available records. This is done only to the extent necessary to meet legal obligations.

4. Why We Use Your Data

WinPKR uses your personal data for specific, defined purposes. We do not use your data for any purpose that goes beyond what is described below:

• Account creation and management: Your identity and contact data are used to create and maintain your WinPKR account, authenticate your logins, and communicate account-related information such as transaction confirmations, security alerts and policy updates.
• Processing transactions: Your financial data is used to process deposits and withdrawals in PKR, verify that payment methods belong to you, and maintain accurate records of your WinPKR balance and transaction history.
• Providing betting and gaming services: Your betting data is used to place, track and settle your bets across all WinPKR products — cricket, PSL, football, esports, virtual sports and live casino. It is also used to display your bet history in your account.
• Responsible gaming: WinPKR uses your betting data and session data to monitor for patterns associated with problem gambling. If WinPKR's responsible gaming team identifies concerning patterns, they may proactively contact you to offer support. Your data is also used to apply deposit limits, session limits, cooling-off periods and self-exclusion settings you have chosen.
• Fraud prevention and security: Technical data, IP addresses and transaction data are used to detect and prevent fraud, money laundering, bonus abuse, account compromise and other security threats.
• Legal and regulatory compliance: WinPKR uses identity, financial and betting data to meet Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations and any reporting requirements under applicable law.
• Customer support: Communications data is used to respond to your queries, resolve complaints and improve WinPKR's support processes.
• Platform improvement: Anonymised and aggregated usage data is used to understand how players use WinPKR and to improve the platform's features, layout and performance.
• Marketing communications: With your consent, WinPKR may use your contact data to send you information about promotions, new features and PSL or cricket season offers. See Section 12 for your opt-out rights.

5. Legal Basis for Processing

WinPKR processes your personal data on the following legal grounds, depending on the purpose:

• Contractual necessity: Processing your identity, contact, financial and betting data is necessary to fulfil WinPKR's contractual obligations to you under the Terms and Conditions. Without this processing, WinPKR cannot operate your account.
• Legal obligation: WinPKR is required to process certain data — particularly identity and financial data — to comply with KYC, AML and other applicable legal requirements. This processing occurs regardless of your consent because it is a legal requirement.
• Legitimate interests: WinPKR processes technical data, usage data and betting patterns data to protect the security and integrity of the platform, prevent fraud and improve WinPKR's services. WinPKR's legitimate interest in maintaining a secure, fair platform is balanced against your privacy interests.
• Consent: Marketing communications are sent only with your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal. See Section 12 for details.

6. Sharing Your Data

WinPKR does not sell your personal data to third parties. WinPKR shares data only in the following limited and controlled circumstances:

• Payment service providers: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, banking partners (for IBFT transfers) and card payment networks (Visa/Mastercard) to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and their own data protection obligations.
• Identity verification providers: If WinPKR uses a third-party KYC verification service, your submitted identity documents may be passed to that provider solely for the purpose of verifying your identity. The provider is contractually obligated to process your data only for this purpose.
• Analytics and platform providers: Anonymised and aggregated data may be shared with platform analytics providers to help WinPKR understand usage patterns. No individually identifiable data is included in these analytics shares.
• Legal authorities: WinPKR will share data with law enforcement, regulatory authorities or courts when legally required to do so — for example, in response to a valid court order, or as part of an anti-money laundering investigation. WinPKR will notify you of such sharing where legally permitted to do so.
• Business transfers: If WinPKR's business is transferred, merged or acquired, your personal data may be transferred as part of that transaction. You will be notified via the contact details on file before your data is transferred and becomes subject to a different privacy policy.

7. Payments & Financial Data

All transactions on WinPKR are processed in Pakistani Rupees (PKR). WinPKR applies particular care to financial data because of its sensitivity.

When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay or bank transfer (IBFT), WinPKR receives a payment confirmation from the provider containing the transaction reference, amount in PKR and the sending account identifier. WinPKR stores this information to maintain your account balance and transaction history. Full access credentials to your mobile wallet or bank account are never transmitted to WinPKR.

For card payments (Visa/Mastercard), payment processing is handled by a certified payment gateway. WinPKR stores only the last four digits of your card number and the card expiry date for reference purposes. Full card numbers and CVV codes are never stored on WinPKR systems at any point in the transaction process.

WinPKR's financial data records are retained for a minimum of five years from the date of your last transaction to comply with financial record-keeping obligations. These records may be accessed by WinPKR's compliance team in the course of audits or regulatory inquiries.

You may request a copy of your WinPKR transaction history at any time by contacting support. This data will be provided in a readable format and will include all deposits, withdrawals and bet settlements on your account.

8. Cookies & Tracking Technologies

WinPKR uses cookies and similar tracking technologies on winpkr.click and in the WinPKR app. Cookies are small text files stored on your device that help WinPKR recognise your session, remember your preferences and understand how you use the platform.

WinPKR uses the following categories of cookies:

• Essential cookies: These are necessary for the WinPKR platform to function. They maintain your login session, remember your language preference and enable the bet slip to function correctly. You cannot opt out of essential cookies without also opting out of using WinPKR.
• Functional cookies: These remember your choices on WinPKR — such as your preferred sports display order, your live betting layout preference and whether you have dismissed informational banners. They improve your experience but are not strictly necessary.
• Analytics cookies: These collect anonymised data about how visitors use WinPKR — which pages are most visited, where users spend the most time, and at what point they leave. This data is used only in aggregate form to improve the platform.
• Security cookies: These help WinPKR detect and prevent automated attacks, credential stuffing and other security threats. They are strictly necessary for platform security.

WinPKR does not use third-party advertising cookies or tracking pixels that report your WinPKR activity back to social media platforms or advertising networks.

You can manage cookie preferences in your browser settings. Clearing cookies will log you out of your WinPKR session. Most modern browsers allow you to block specific categories of cookies — note that blocking essential cookies will prevent WinPKR from functioning correctly.

9. Data Retention

WinPKR retains your personal data for as long as is necessary for the purposes described in this Privacy Policy, or as required by law. The following retention periods apply:

• Active account data: Identity, contact and account settings data is retained for the full duration of your WinPKR account and for a period of five years after account closure, to comply with legal record-keeping obligations.
• Financial and transaction data: Retained for a minimum of five years from your last transaction, in line with financial services record-keeping requirements.
• Betting history: Retained for five years from each bet's settlement date. You may access your full betting history at any time within this period.
• Identity verification documents: CNIC scans and verification photographs are retained for the duration of the account plus five years. Copies are not shared beyond the verification process.
• Support communications: Support chat logs and email correspondence are retained for two years from the date of the communication, except where they relate to an ongoing compliance matter.
• Technical and usage data: IP logs and session data are retained for 90 days for security purposes, then deleted or anonymised.
• Self-excluded users: Where a user self-excludes, WinPKR retains sufficient data to prevent re-registration for an indefinite period. This is a responsible gaming requirement.

When data reaches the end of its retention period, WinPKR deletes or anonymises it securely. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical analysis of platform usage trends.

10. Data Security

WinPKR takes the security of your personal data seriously. The platform applies layered security measures designed to protect your data against unauthorised access, accidental loss, disclosure or destruction.

• Encryption in transit: All data transmitted between your device and WinPKR's servers is encrypted using TLS (Transport Layer Security). This applies to the website, the mobile app and all API communications with payment providers.
• Encryption at rest: Sensitive data stored on WinPKR's servers — including identity documents, financial data and passwords — is encrypted at rest using industry-standard encryption.
• Access controls: Access to your personal data within WinPKR is limited to staff and systems that require it to perform their function. Administrative access is protected by multi-factor authentication and is logged and audited.
• Password security: WinPKR stores only a hashed version of your password. WinPKR staff cannot view your password. If you forget your password, you will go through a secure reset process — your original password cannot be retrieved by anyone.
• Security monitoring: WinPKR's systems are monitored continuously for unusual activity patterns that may indicate a security incident. Automated alerts are in place for suspicious login attempts, unusual withdrawal patterns and data access anomalies.

Despite these measures, no online platform can guarantee absolute security. WinPKR will notify affected users promptly in the event of a data breach that poses a risk to their rights or interests, as required by applicable data protection standards.

11. Your Data Rights

As a WinPKR user, you have the following rights over the personal data WinPKR holds about you. To exercise any of these rights, contact WinPKR using the details in Section 15:

• Right of access: You may request a copy of all personal data WinPKR holds about you. WinPKR will provide this in a readable format, typically within 30 days of the request.
• Right to rectification: If any personal data WinPKR holds about you is inaccurate or incomplete, you may request a correction. For identity data, you may need to provide supporting documentation.
• Right to erasure: In certain circumstances you may request that WinPKR delete your personal data. Note that WinPKR may need to retain certain data to comply with legal obligations (see Section 9), and erasure requests for such data may be declined with an explanation.
• Right to restrict processing: You may request that WinPKR restricts how it uses your data while a dispute about accuracy or processing legality is being resolved.
• Right to data portability: You may request your personal data in a structured, machine-readable format to transfer to another service provider, where this is technically feasible.
• Right to object: You may object to WinPKR processing your data on the basis of legitimate interests. WinPKR will consider your objection and cease the relevant processing if your interests override WinPKR's legitimate interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

WinPKR will respond to all data rights requests within 30 days. Complex requests or high volumes of simultaneous requests may require an extension of up to 90 days, in which case WinPKR will notify you within the initial 30-day period.

12. Marketing Communications

WinPKR may send you promotional communications about new features, upcoming PSL markets, cricket season offers, bonus promotions and other WinPKR products. These communications are sent by SMS to your registered Pakistani mobile number, by email to your registered email address, or by push notification through the WinPKR app.

WinPKR will only send marketing communications where you have explicitly opted in during registration or subsequently through your account settings. Opting in is not a condition of using WinPKR — you can register and use the full platform without consenting to marketing communications.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the WinPKR account settings panel under "Notifications".
• Contacting WinPKR support and requesting removal from marketing communications.
• Clicking the unsubscribe link in any WinPKR marketing email.

Opting out of marketing communications does not affect essential account communications — you will continue to receive transaction confirmations, security alerts and any legally required notices regardless of your marketing preference.

13. Minors

WinPKR is strictly an 18+ platform. WinPKR does not knowingly collect, store or process personal data from anyone under 18 years of age.

During the registration process, users are required to confirm they are 18 or older and to provide a date of birth. WinPKR may request CNIC verification to confirm age. Any account found to belong to a minor will be closed immediately, any balance returned to the depositing payment method, and all associated personal data deleted from WinPKR's systems as soon as practicable.

Parents and guardians who are concerned that a minor may be accessing WinPKR should contact WinPKR support immediately with relevant details. WinPKR will investigate promptly. WinPKR also recommends that parents and guardians use device-level parental control software to restrict access to betting platforms on shared devices.

14. Updates to This Privacy Policy

WinPKR may update this Privacy Policy periodically to reflect changes in how the platform operates, new legal requirements, or improvements to data protection practices. When material changes are made, WinPKR will:

• Update the "Last Updated" date at the top of this page.
• Notify registered WinPKR users by email or in-platform notification before the changes take effect, where the changes are material to your privacy rights.
• In some cases, request fresh consent where the change introduces a new processing purpose that requires it.

WinPKR recommends bookmarking this page and reviewing it at least once per PSL or cricket season, as seasonal promotional activities may involve updated data uses that are reflected here.

Your continued use of WinPKR after an updated Privacy Policy takes effect constitutes your acknowledgement of the new version. If you disagree with any update, you may close your account and request data deletion under the rights described in Section 11.

15. Contact WinPKR About Privacy

If you have a question about this Privacy Policy, want to exercise a data right, or have a concern about how WinPKR handles your personal information, please contact WinPKR's privacy team using the following details:

WinPKR treats all privacy concerns seriously and will investigate and respond to every query regardless of its complexity. You will receive a clear, plain-language response — not a template reply pointing you back to this page.