winpkr18 Privacy Policy

1. Who We Are

winpkr18 ("the Company", "we", "us", "our") operates the online sports betting and casino platform accessible at winpkr18.bet. winpkr18 is the data controller responsible for the personal data of its registered players and website visitors. Our platform serves players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Peshawar.

For the purposes of this Privacy Policy, "personal data" means any information that can identify you directly or indirectly as a natural person — including your name, CNIC number, email address, mobile number, financial information, and device identifiers. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

winpkr18 operates under an international gaming licence. Our data handling practices are designed to align with internationally recognised data protection standards, including the principles set out in the General Data Protection Regulation (GDPR), which we voluntarily adopt as a baseline for all players regardless of geography.

2. Categories of Personal Data We Collect

The following table summarises the categories of personal data winpkr18 collects, with the associated purpose for each category:

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC / passport number, photograph	Account registration, KYC verification, age verification
Contact Data	Email address, Pakistani mobile number, residential address	Account communications, support, notifications
Financial Data	JazzCash / EasyPaisa wallet ID, bank account details (HBL, UBL, Meezan Bank, Raast), transaction history	Deposits, withdrawals, AML compliance
Gaming Data	Bet history, game logs, session duration, win/loss records, PSL and cricket betting activity	Service delivery, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser, operating system, login timestamps	Security, fraud prevention, platform optimisation
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support, dispute resolution, quality assurance
Marketing Preferences	Opt-in/opt-out choices, promotional response history	Targeted communications (where consent is given)

3. How We Collect Your Data

winpkr18 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you visit winpkr18.bet, including cookies, server logs, and device fingerprinting tools used for fraud detection and platform security.
• Third-party sources: Identity verification data received from KYC service providers; fraud and AML screening data from financial intelligence providers; payment confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast.
• Publicly available sources: In limited circumstances, winpkr18 may reference publicly available information (such as sanctions lists or court records) as part of its AML and fraud screening obligations.

4. How We Use Your Personal Data

winpkr18 uses collected personal data for the following purposes:

• Registering and maintaining your winpkr18 account.
• Verifying your identity and age (21+ requirement) through KYC procedures.
• Processing deposits and withdrawals in PKR via your chosen payment method.
• Providing, personalising, and improving the winpkr18 sports betting and casino experience.
• Monitoring gaming activity for responsible gaming purposes and identifying signs of problem gambling behaviour.
• Detecting, investigating, and preventing fraud, money laundering, match-fixing, and other prohibited activities.
• Complying with our legal obligations under applicable gaming licensing conditions and financial regulations.
• Sending transactional communications, including account confirmations, deposit receipts, withdrawal notifications, and security alerts.
• Sending marketing communications about winpkr18 promotions, PSL betting offers, and casino bonuses — but only where you have explicitly consented.
• Handling customer support enquiries and resolving disputes.
• Conducting internal analytics to improve platform performance, game offerings, and user experience.

5. Legal Basis for Processing

winpkr18 relies on the following legal bases when processing your personal data, in accordance with internationally recognised data protection standards:

• Contractual necessity: Processing required to fulfil our agreement with you — including account registration, KYC verification, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions — including AML screening, record-keeping, and regulatory reporting.
• Legitimate interests: Processing necessary for our legitimate business interests where these are not overridden by your rights — including fraud prevention, platform security, and internal analytics.
• Consent: Processing based on your explicit consent — specifically, the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

winpkr18 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only where necessary and proportionate:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive only the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify your identity documents and date of birth in compliance with our KYC obligations.
• AML and fraud screening providers: Services used to screen transactions and player profiles against sanctions lists and fraud databases.
• IT and platform infrastructure providers: Cloud hosting, data storage, and cybersecurity vendors who process data only under strict contractual obligations and may not use it for their own purposes.
• Regulatory and law enforcement authorities: Where required by our gaming licence conditions, court order, or valid legal process.
• Professional advisers: Lawyers, auditors, and insurers, subject to confidentiality obligations.

All third-party processors engaged by winpkr18 are bound by data processing agreements requiring them to implement appropriate technical and organisational security measures and to process data only in accordance with winpkr18's documented instructions.

7. Cookies & Tracking Technologies

winpkr18 uses cookies and similar tracking technologies on the winpkr18.bet website. Cookies are small text files stored on your device that help us deliver a functional and personalised experience. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the winpkr18 platform — including maintaining your logged-in session, remembering your language preference, and enabling secure payment flows. These cookies cannot be disabled.
• Functional cookies: Remember your preferences and settings (such as bet slip preferences or favourite sports categories) to improve your experience on repeat visits.
• Analytics cookies: Help winpkr18 understand how players interact with the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymised.
• Security and fraud detection cookies: Used to identify suspicious login patterns, bot activity, and potential account compromise attempts. These are essential to platform integrity.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the winpkr18 platform.

8. Data Retention

winpkr18 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial transaction data: Retained for a minimum of five (5) years following the transaction date, in compliance with financial record-keeping requirements.
• Gaming and betting history: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for two (2) years following the resolution of the relevant enquiry.
• Marketing preference data: Retained until you withdraw consent or close your account.
• Technical and log data: Retained for twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9. Data Security

winpkr18 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and winpkr18 servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication requirements for all winpkr18 staff with access to player data systems.
• Role-based access controls ensuring that staff can only access the minimum data necessary for their specific job function.
• Regular independent penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• Comprehensive incident response procedures, including notification protocols in the event of a data breach affecting player data.

10. Your Data Rights

As a winpkr18 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our data team at the email address provided in Section 15.

• Right of access: You may request a copy of all personal data winpkr18 holds about you, along with information about how it is used and shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by winpkr18.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restrict processing: You may request that winpkr18 pause the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. winpkr18 will cease such processing unless it can demonstrate compelling legitimate grounds.

winpkr18 will respond to all valid data rights requests within thirty (30) calendar days. Where a request is complex or numerous, this period may be extended by a further two months, with prior notification provided.

11. International Data Transfers

winpkr18 operates internationally, and your personal data may be transferred to and processed in countries outside Pakistan. In all cases, winpkr18 ensures that such transfers are carried out in compliance with applicable data protection standards, using one or more of the following safeguards:

• Transfer to countries recognised as providing an adequate level of data protection.
• Implementation of standard contractual clauses approved by relevant data protection authorities.
• Transfer to service providers who have implemented appropriate technical and organisational safeguards and who are bound by contractual obligations equivalent to those described in this Privacy Policy.

You may request further information about the specific safeguards applied to any particular international transfer by contacting winpkr18 at the details provided in Section 15.

12. Children & Minors

The winpkr18 platform is strictly intended for adults aged 21 years and above. winpkr18 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If you are under 21 years of age, you must not register an account or use the winpkr18 platform under any circumstances.

If winpkr18 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and refund any deposits made, subject to verification. Parents and guardians who believe their child may have accessed winpkr18 are encouraged to contact us immediately at the details in Section 15.

winpkr18 recommends that parents and guardians in Pakistan use internet filtering and parental control software to prevent minors from accessing online gambling platforms.

13. Third-Party Links

The winpkr18 website may contain references to third-party content, such as payment provider logos or gaming software provider names. winpkr18 is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you interact with independently of the winpkr18 platform.

14. Updates to This Privacy Policy

winpkr18 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date displayed at the top of this page will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how your data is used or your rights under this policy — winpkr18 will notify registered players via the email address associated with their account prior to the changes taking effect. For minor, non-material updates, the revised policy will be posted on this page with an updated effective date.

Your continued use of the winpkr18 platform after any revised Privacy Policy has been published and, where required, communicated to you, constitutes your acceptance of those changes. If you do not accept the revised policy, you must discontinue use of the platform and may request account closure in accordance with the winpkr18 Terms & Conditions.

15. Contact Us & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by winpkr18, our data team is available to assist you. You can reach us via live chat 24/7 on the winpkr18 platform, or by email at:

[email protected]

Please mark the subject line of your email with "Data Privacy Request" so that our team can route your enquiry to the appropriate department without delay. winpkr18 targets a response time of two (2) to four (4) hours for all data-related enquiries received during business hours (Pakistan Standard Time, 24/7). For formal Subject Access Requests or erasure requests, winpkr18 will respond in full within thirty (30) calendar days.