WinPKR Privacy Policy — Your Data, Your Rights

1Introduction

WinPKR ("we", "us", "the Platform") is an online sports betting and casino platform serving players in Pakistan. This Privacy Policy sets out how WinPKR collects, uses, stores and protects personal information when you register an account, make deposits or withdrawals in PKR, place bets on cricket, PSL or other sports, play casino games, or interact with our platform in any other way.

We take privacy seriously — not as a legal formality, but because we understand that Pakistani players trust us with real personal and financial information. That trust is something we intend to keep. This policy is written in straightforward language so you actually know what is happening with your data, rather than burying important points in dense legal text.

This Privacy Policy applies to all WinPKR services, including the main website at winpkr.bar, the Android and iOS mobile apps, and any related services or features accessed through those channels. It should be read alongside our Terms and Conditions, which are available at /terms-conditions.

2Data We Collect

2.1 Registration Data

When you create a WinPKR account, we collect the information you provide during registration. This includes your full legal name, date of birth, Pakistani mobile number, email address and the username and password you choose. This information is necessary to create and maintain your account and to verify that you meet the age requirement of 18 years or older.

2.2 Identity Verification Data

To comply with our identity verification requirements, we may ask you to submit a copy of a government-issued ID (such as a CNIC) and, in some cases, a selfie or proof of address. This is collected when required for account verification, withdrawal processing or when unusual account activity is detected. Submitted documents are handled securely and retained only for as long as necessary.

2.3 Financial and Transaction Data

We collect records of all financial transactions conducted through your account. This includes deposit and withdrawal amounts, payment methods used (JazzCash, Easypaisa, Raast, bank transfer, cards), transaction timestamps, reference numbers and your PKR account balance history. We need this data to process payments, handle disputes and maintain accurate account records.

2.4 Betting and Gaming Activity

We record your betting and gaming history on WinPKR. This includes bets placed on cricket, PSL matches, T20 games, football, esports and any other markets, along with casino game sessions, results, stakes and returns. This data is used to operate your account, calculate winnings, handle disputes and identify unusual or potentially problematic gambling patterns for responsible gaming purposes.

2.5 Device and Technical Data

When you access WinPKR, our systems automatically collect certain technical information. This includes your IP address, device type (mobile, desktop, tablet), operating system, browser type and version, and general geographic location derived from your IP address. This data is used for platform security, fraud detection and improving the technical performance of the platform.

2.6 Communications Data

If you contact WinPKR support through live chat, email or any other channel, we retain a record of that communication. This helps us track issue resolution, improve support quality and refer back to previous conversations when needed.

Data Category	Examples	Why Collected
Registration	Name, DOB, email, mobile	Account creation & age verification
Identity	CNIC copy, selfie	Verification & fraud prevention
Financial	PKR deposits, JazzCash records	Payment processing & records
Gaming Activity	Bets, casino sessions	Account operation & responsible gaming
Technical	IP address, device type	Security & fraud detection
Communications	Support chat logs	Issue resolution & quality

3How We Use Your Data

WinPKR uses your personal data only for the purposes described below. We do not use it for anything beyond what is necessary to run the platform and maintain your account.

• Account operation — Processing your deposits, withdrawals and bets; displaying your account balance and history; sending transactional notifications about your account activity.
• Identity and age verification — Confirming you are who you say you are and that you meet the minimum age requirement of 18 years.
• Fraud and security — Detecting suspicious login attempts, unusual transaction patterns, duplicate accounts or any activity that suggests misuse of the platform.
• Responsible gaming — Monitoring betting patterns to identify signs of problematic gambling and, where appropriate, making responsible gaming tools available to you.
• Customer support — Resolving account queries, payment issues and betting disputes, and maintaining records of those interactions.
• Platform improvement — Understanding how players navigate and use WinPKR so we can fix problems and improve the experience over time.
• Marketing communications — Sending promotional emails or SMS messages about offers, PSL promotions and new features, but only if you have opted in to receive them.
• Compliance — Meeting any applicable record-keeping or reporting obligations.

4Who We Share Data With

WinPKR does not sell your personal data. We share it only in the limited circumstances described below, and only to the extent necessary for each purpose.

4.1 Payment Processors

To process your PKR transactions, we share the necessary payment information with the relevant payment provider — JazzCash, Easypaisa, Raast, your bank or your card issuer. These providers receive only what is needed to process the specific transaction. They operate under their own privacy policies and are bound by applicable financial data protection requirements.

4.2 Identity Verification Partners

When identity verification is required, we may use a third-party verification service to assist with document checks. These partners process your submitted documents solely for verification purposes and are contractually prohibited from using your data for any other purpose.

4.3 Technology and Hosting Providers

WinPKR uses third-party technology infrastructure to host the platform, store data and deliver services. These providers act as data processors on our behalf and are bound by contractual obligations to protect your data and use it only as directed by WinPKR.

4.4 Game Software Providers

Casino and live casino games on WinPKR are powered by third-party game studios. These providers may receive anonymised or limited session data necessary to deliver game functionality. They do not receive your full personal profile or financial details beyond what is technically required for game operation.

4.5 Legal and Regulatory Disclosures

We may disclose your data if required to do so by a valid legal obligation, court order or where we have a genuine good-faith belief that disclosure is necessary to prevent fraud, protect the safety of users, or comply with applicable requirements. We will notify you of such disclosures where we are legally permitted to do so.

5Payment Data & Security

All PKR transactions on WinPKR — whether you are depositing via JazzCash, withdrawing through Easypaisa, sending a Raast transfer or using a bank card — are processed through encrypted, secure payment channels. WinPKR does not store your full payment card numbers or mobile wallet PINs on our servers. Payment credentials are tokenised and handled by the payment provider directly.

Your transaction history (amounts, timestamps, method used, reference IDs) is retained in your account records as part of normal financial record-keeping. This history is visible to you in your account dashboard and is used by our support team to help with payment queries and disputes.

If you believe an unauthorised transaction has occurred on your WinPKR account, contact support immediately. We will investigate and, where appropriate, work with the relevant payment provider to trace and resolve the issue.

6Cookies & Tracking

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website or use an app. WinPKR uses cookies and similar tracking technologies to keep your session active, remember your preferences, and understand how the platform is being used.

6.2 Types of Cookies We Use

• Essential cookies — Required for the platform to function. These keep you logged in during your session, remember your bet slip and maintain basic security settings. You cannot opt out of these without stopping use of the platform.
• Performance cookies — Collect anonymised data about how players navigate WinPKR — which pages are visited, how long sessions last, and where errors occur. This helps us improve the platform. No personally identifiable information is collected by performance cookies.
• Functional cookies — Remember your preferences such as language settings, preferred sports view, or whether you have dismissed a particular notification. These improve your experience but are not strictly essential.
• Marketing cookies — Used to track whether you have visited WinPKR after clicking a promotional link, to measure the effectiveness of our campaigns. These are only active if you have consented to marketing communications.

6.3 Managing Cookies

You can manage non-essential cookies through the cookie settings panel available on the platform. You can also configure your browser to block or delete cookies, though doing so may affect the functionality of WinPKR — in particular, blocking essential cookies will prevent you from staying logged in.

7How Long We Keep Your Data

WinPKR retains your personal data for as long as your account is active and for a reasonable period after account closure. Specific retention periods depend on the type of data:

• Account and registration data — Retained for the duration of your account plus a period following closure to handle any outstanding queries or disputes.
• Financial transaction records — Retained for the period required to meet standard financial record-keeping obligations, which is typically several years from the date of the transaction.
• Identity verification documents — Retained for the period required by applicable verification obligations. Once no longer needed, documents are securely deleted.
• Support communications — Retained for a reasonable period to allow us to refer back to prior conversations if the same issue recurs.
• Betting and gaming history — Retained as part of your account record for the duration of your account and for a period after closure sufficient to resolve any potential disputes.

When data is no longer needed and retention is no longer justified, it is securely deleted or anonymised so it can no longer be linked back to you.

8Your Rights

As a WinPKR player, you have the following rights in relation to your personal data. To exercise any of these rights, contact WinPKR support with your account details and a description of your request.

• Right to access — You can request a copy of the personal data WinPKR holds about you. We will provide this within a reasonable timeframe.
• Right to correction — If any of your personal data is inaccurate or incomplete, you can request that we correct it. For basic profile information, you may also be able to update it directly through your account settings.
• Right to deletion — You may request that we delete your personal data. We will honour this request where we are not legally required to retain the data — for example, financial transaction records must be kept for a minimum period regardless of a deletion request.
• Right to restrict processing — In certain circumstances, you can request that we limit how we use your data while a dispute is being resolved.
• Right to withdraw consent — Where we process your data based on consent (such as for marketing communications), you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

WinPKR will respond to data rights requests within a reasonable period. We may need to verify your identity before processing a request to ensure we are disclosing or acting on data for the correct person.

9Minors & Age Protection

WinPKR is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we discover or have reasonable grounds to believe that an account has been registered by or for a minor, we will close that account immediately and delete the associated data.

If you are a parent or guardian and believe your child has registered a WinPKR account, contact our support team immediately. We take these reports seriously and will act on them promptly.

We strongly encourage parents and guardians to use device-level parental controls and to have open conversations with young people about responsible internet use and the risks of gambling. WinPKR will not be used by anyone under 18 with our knowledge or consent.

10Marketing Communications

WinPKR sends marketing communications — including promotional offers, PSL season specials, casino bonuses, free bet offers and platform updates — only to players who have opted in to receive them at registration or through their account settings.

If you no longer wish to receive marketing communications, you can opt out at any time by:

• Updating your communication preferences in your WinPKR account settings
• Clicking the unsubscribe link in any marketing email
• Contacting WinPKR support and requesting removal from marketing lists

Please note that opting out of marketing does not stop transactional messages. You will still receive notifications about deposits, withdrawals, account verification requests and other messages directly related to the operation of your account.

11Security Measures

WinPKR implements a range of technical and operational security measures to protect your personal data from unauthorised access, disclosure, alteration or loss. These include:

• SSL/TLS encryption on all data transmitted between your device and our servers
• Encrypted storage of sensitive account data at rest
• Access controls that restrict which staff members can view specific categories of player data
• Continuous monitoring for suspicious login activity and account access from unrecognised devices
• Two-factor authentication options available to players for additional account security
• Regular internal review of data handling practices and security configurations

While we do everything reasonably practicable to protect your data, no online platform can guarantee absolute security against all possible threats. We encourage you to use a strong, unique password for your WinPKR account and to enable two-factor authentication where available. If you suspect your account has been accessed without your permission, contact support immediately.

12Policy Updates

WinPKR may update this Privacy Policy from time to time to reflect changes in how we operate, changes in technology, or to clarify existing practices. When we make material changes, we will notify you via the platform — typically through a notification banner on the website or app — before the updated policy takes effect.

The "Last Updated" date at the top of this page shows when the most recent revision was made. We encourage you to review this policy periodically so you are always aware of how your data is being handled. The current version of this policy is always available at winpkr.bar/privacy-policy.

Continuing to use WinPKR after a policy update has taken effect means you accept the revised Privacy Policy. If you disagree with an update, you should stop using the platform and contact support to close your account.

13Contact Us

If you have a question about this Privacy Policy, want to exercise one of your data rights, or have a concern about how your personal information is being handled, please get in touch with the WinPKR support team. We aim to acknowledge privacy-related queries within two business days and resolve them within ten business days.

You can reach us through the live chat feature on the platform or by email. Our support team is trained to handle data and privacy queries properly, not just bounce them back to a template response.

WinPKR support email: [email protected] (plain text — copy manually to your email client; not a clickable link).