Win PKR Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to all users of the Win PKR platform — the website at winpkr.cash, its mobile interface, and all services operated under the Win PKR brand. When we say "Win PKR", "we", "our", or "us" throughout this policy, we mean the legal entity that operates the Win PKR platform.

Win PKR is an online sports betting and casino platform built specifically for Pakistani players. The vast majority of our users are located in Pakistan and interact with Win PKR using mobile devices and local payment methods like Easypaisa and JazzCash. We have written this Privacy Policy with that audience in mind — in plain English that reflects how our Pakistani users actually read and interpret information, not in the kind of dense corporate language that makes privacy policies impossible to get through.

By registering a Win PKR account or by using the platform in any way, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not agree, you should not register or use Win PKR.

Win PKR is the data controller for all personal data collected through the Win PKR platform. This means Win PKR is the entity responsible for determining the purposes and means by which your personal data is processed.

If you have any questions about how Win PKR processes your data, or wish to exercise any of the rights described in Section 10, please contact us at:

• Email: support@winpkr.cash
• Website: winpkr.cash

For privacy-specific requests, please use the subject line "Privacy Request" in your email so our team can route it to the right person promptly.

Win PKR collects personal data that falls into the categories below. We collect only what is necessary for the purposes described in this policy — we do not collect data just because we can.

Win PKR collects personal data through the following channels:

• Direct registration: When you create a Win PKR account, you provide your name, date of birth, phone number, and email address directly.
• Account activity: Every transaction, bet, game session, and account setting change on Win PKR generates data associated with your account.
• Payment processing: When you make a deposit or withdrawal, your payment method details are collected to process the transaction.
• Identity verification: When Win PKR requests verification documents — typically before allowing larger withdrawals — you upload documents directly to our secure verification system.
• Cookies and tracking technologies: Win PKR uses cookies and similar technologies to collect technical data about your device and browsing session. See Section 9 for full details.
• Third-party data providers: In limited cases, Win PKR may receive data about you from third-party identity verification services to confirm the accuracy of information you have provided.
• Customer support interactions: When you contact Win PKR support by email or live chat, the content of those interactions is stored as part of your account record.

Win PKR processes your personal data for the following purposes. For each purpose, we identify the legal basis that permits us to process your data in that way.

• Operating your account — creating and maintaining your Win PKR account, processing bets and casino wagers, crediting winnings to your balance. Legal basis: contract performance.
• Processing payments — handling deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa, and Mastercard. Legal basis: contract performance.
• Identity verification and KYC compliance — verifying that you are who you say you are, that you meet the age requirement (18+), and that your account is not being used for money laundering or fraud. Legal basis: legal obligation.
• Responsible gaming monitoring — tracking betting patterns to identify members who may be showing signs of problem gambling and intervening appropriately. Legal basis: legal obligation and legitimate interests.
• Fraud and security — detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and cheating. Legal basis: legitimate interests.
• Customer support — responding to queries, complaints, and account issues. Legal basis: contract performance and legitimate interests.
• Platform improvement — analysing aggregate and anonymised behavioural data to improve Win PKR's products, user interface, and performance. Legal basis: legitimate interests.
• Marketing communications — sending promotional emails and platform notifications about Win PKR offers. You can opt out of these at any time from your account settings or by emailing support@winpkr.cash. Legal basis: consent.

Win PKR does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment processors: To process your deposits and withdrawals, Win PKR shares relevant financial data with payment processors (for example, Easypaisa's operator, JazzCash's operator, bank partners for IBFT, and the card payment gateway for Visa/Mastercard). These processors are bound by their own regulatory obligations and data security requirements.
• Identity verification providers: Win PKR uses third-party identity verification services to confirm member identities. These providers receive only the data needed for the specific verification task — typically your name, date of birth, and CNIC number.
• Fraud prevention services: Win PKR shares limited technical data (device fingerprints, IP addresses, session data) with fraud detection providers to identify suspicious activity.
• IT infrastructure providers: Win PKR's platform is hosted on third-party cloud infrastructure. These providers process data on Win PKR's behalf under contractual data processing agreements and do not use your data for their own purposes.
• Legal and regulatory authorities: Win PKR will disclose personal data to law enforcement, regulatory bodies, or courts when legally required to do so — for example, in response to a lawful court order or a regulatory inquiry.

Win PKR retains personal data for as long as it is necessary for the purposes described in this policy and for as long as required by applicable legal and regulatory obligations. The following general periods apply:

• Active account data — retained for the lifetime of your Win PKR account plus a minimum of 5 years after account closure, in accordance with standard financial record-keeping requirements.
• Transaction records (deposits, withdrawals, bet history) — retained for a minimum of 5 years from the date of each transaction.
• Identity verification documents — retained for a minimum of 5 years from account closure or from the date the document was submitted, whichever is later.
• Support communications — retained for 2 years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or legal matter.
• Marketing preferences and consent records — retained for 3 years from the last time you interacted with a Win PKR marketing communication, or until you withdraw consent, whichever comes first.

After the applicable retention period expires, Win PKR will securely delete or anonymise the relevant data. Anonymised data (data that cannot be traced back to any individual) may be retained indefinitely for statistical and analytical purposes.

Win PKR applies a layered approach to data security. The following measures are in place to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS/SSL encryption on all data transmitted between your device and Win PKR's servers. Your login credentials, payment details, and account data never travel in plain text.
• Encryption at rest for sensitive data categories including payment information and identity documents stored on Win PKR's servers.
• Password hashing — Win PKR does not store your password in plain text. Your password is stored as a one-way hash using industry-standard algorithms. Even Win PKR's own staff cannot see your password.
• Two-factor authentication (2FA) — available for Win PKR accounts and strongly recommended for all members. You can enable 2FA from your account security settings.
• Access controls — access to Win PKR's data systems is restricted to staff who require it for their role. Access is logged and regularly reviewed.
• Regular security audits — Win PKR conducts periodic security reviews and penetration tests of its platform infrastructure.

Despite these measures, no internet-based platform can guarantee absolute security. If you suspect your Win PKR account has been compromised, contact support@winpkr.cash immediately and change your password.

Win PKR uses cookies and similar tracking technologies when you visit the platform. A cookie is a small text file stored on your device that helps the platform recognise you and remember your preferences.

The following types of cookies are used on Win PKR:

You can manage non-essential cookies through your browser settings. Note that disabling some cookies may affect how Win PKR functions on your device. For most mobile users in Pakistan accessing Win PKR through Chrome on Android, cookie settings are available under Chrome Settings > Privacy and security.

Win PKR recognises the following rights for members in relation to their personal data. To exercise any of these rights, email support@winpkr.cash with the subject line "Privacy Request" and describe what you are requesting. We will respond within 30 days.

Win PKR is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If Win PKR becomes aware that a minor has registered an account, that account will be immediately closed and any associated data deleted except where retention is required for legal compliance.

If you are a parent or guardian and believe a minor has registered a Win PKR account, please contact us immediately at support@winpkr.cash so we can investigate and take appropriate action.

Win PKR's age verification process is designed to detect under-age registrations. We reserve the right to request proof of age (CNIC or equivalent document) from any member at any time. Accounts that cannot pass age verification will be suspended pending review.

Win PKR may update this Privacy Policy from time to time. The most current version will always be published at winpkr.cash/privacy-policy with the "Last Updated" date shown at the top of the page.

Where an update is significant — meaning it materially changes how Win PKR collects or uses your personal data — we will notify you by email to your registered address at least 14 days before the change takes effect. Minor updates such as clarifications, typo corrections, or formatting changes may be made without advance notice.

Your continued use of Win PKR after the effective date of any updated Privacy Policy constitutes acceptance of the new version. If you do not accept the changes, you should close your Win PKR account before the effective date and contact support@winpkr.cash to request deletion of your data.