Privacy Policy – winpak Data Protection Commitment

This Privacy Policy ("Policy") applies to all users ("User", "Player", "you") of the winpak platform accessible at winpak.vip. By registering an account or otherwise using winpak, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy must be read together with winpak's Terms & Conditions.

1. Scope & Data Controller

This Policy applies to all personal data processed by winpak in connection with the operation of the winpak online gaming and sports betting platform, including data collected through the website winpak.vip, related mobile interfaces, customer support channels, and payment processing interactions.

winpak acts as the data controller in respect of personal data collected from players. For questions about data processing or to exercise your rights under this Policy, please contact us at [email protected].

2. Personal Data We Collect

winpak collects the following categories of personal data from players:

• Identity Data: Full name, date of birth, CNIC (Computerised National Identity Card) number or other government-issued identification number, nationality;
• Contact Data: Pakistani mobile number (e.g., JazzCash or Easypaisa registered number), email address, city and province of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad);
• Account Data: winpak username, account ID, account creation date, login history, device and browser information;
• Financial Data: Deposit and withdrawal records denominated in PKR, payment method identifiers (mobile wallet numbers, masked bank account details), transaction timestamps;
• Gaming Activity Data: Bets placed, games played, wagering history, bonus redemption records, session durations;
• KYC Documentation: Copies of CNIC, proof of address, selfie or liveness check images as required during identity verification;
• Communications Data: Records of support interactions, live chat transcripts, email correspondence with winpak;
• Technical Data: IP address, device type, operating system, browser type, screen resolution, approximate geolocation derived from IP.

3. How Personal Data Is Collected

winpak collects personal data through the following means:

• Direct Provision: Information you provide when registering a winpak account, completing KYC, making a deposit or withdrawal, or contacting support;
• Automated Collection: Technical data collected automatically when you access winpak.vip, including via cookies, server logs, and analytics tools;
• Third-Party Sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance service providers; payment confirmation data from JazzCash, Easypaisa, and banking partners.

4. Purposes of Processing

winpak processes your personal data for the following purposes:

• To register and maintain your winpak account;
• To verify your identity and age in accordance with responsible gaming obligations (you must be 18 or older);
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, and other supported payment methods;
• To operate and improve the winpak gaming and betting platform, including cricket betting, live casino, slots, and fishing game features;
• To detect, prevent, and investigate fraud, money laundering, and other prohibited conduct;
• To comply with applicable legal obligations including anti-money laundering ("AML") and know-your-customer ("KYC") requirements;
• To provide customer support and respond to your queries;
• To send you service communications such as transaction confirmations, account security alerts, and policy update notifications;
• To send promotional communications about winpak offers, bonuses, and new features where you have opted in to receive such communications;
• To monitor responsible gaming compliance, including enforcing deposit limits and self-exclusion arrangements.

5. Legal Basis for Processing

winpak processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the winpak account agreement, including account management, payment processing, and game access;
• Legal Obligation: Processing required to comply with AML, KYC, age verification, and other regulatory obligations;
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and service improvement where these interests are not overridden by your rights;
• Consent: Marketing communications and non-essential cookies, where you have given clear affirmative consent. You may withdraw consent at any time.

6. Data Sharing & Third Parties

winpak does not sell your personal data to any third party. winpak may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency settlement partners require transaction data to process deposits and withdrawals;
• KYC & Compliance Providers: Identity verification, document authentication, and sanctions screening service providers;
• IT & Hosting Providers: Cloud hosting and infrastructure providers who process data on our behalf under data processing agreements;
• Regulators & Law Enforcement: Where winpak is legally required to disclose data to a regulatory body, law enforcement agency, or court order;
• Game Providers: Aggregated, pseudonymised game activity data may be shared with winpak's licensed game suppliers for technical support and RTP auditing purposes.

All third-party processors engaged by winpak are required to implement appropriate technical and organisational security measures and are prohibited from using your data for their own purposes.

7. Data Retention

winpak retains personal data for as long as your winpak account is active and for a period thereafter as required by applicable legal, regulatory, and tax obligations. In practice, financial transaction records and KYC documentation are typically retained for a minimum of five years following account closure to comply with AML obligations.

Gaming activity data and support communication records are retained for a minimum of three years. Technical log data (IP addresses, session logs) is retained for up to 12 months unless required for ongoing investigation.

Where you request account closure and no legal hold applies, winpak will delete or anonymise personal data within a reasonable period following satisfaction of all outstanding retention obligations.

8. Security Measures

winpak implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your browser and winpak.vip;
• Encrypted storage of sensitive personal and financial data at rest;
• Access controls limiting winpak staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the winpak platform;
• Multi-factor authentication requirements for administrative system access.

Notwithstanding the above, no internet transmission or electronic storage method is 100% secure. winpak cannot guarantee the absolute security of data transmitted to or from the platform. You are responsible for keeping your winpak login credentials confidential.

9. Cookies & Tracking Technologies

winpak uses cookies and similar tracking technologies on winpak.vip. Cookies are small text files stored on your device that help us provide a functional and personalised experience. winpak uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the winpak platform to function correctly, including session management, login persistence, and security verification. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Store your preferences such as language settings and display options;
• Analytics Cookies: Help winpak understand how players navigate and use the platform so we can improve it. Data collected is aggregated and pseudonymised;
• Marketing Cookies: Used only where you have consented, to deliver relevant promotional content related to winpak offers.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using winpak but may affect certain personalisation features.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by winpak:

• Right of Access: Request a copy of the personal data winpak holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where winpak has no legal obligation to retain it;
• Right to Restriction: Request that winpak restrict processing of your data in certain circumstances;
• Right to Portability: Request a structured, machine-readable copy of personal data you have provided to winpak;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact winpak at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. Requests may require identity verification before being actioned.

11. Minors

winpak does not knowingly collect personal data from individuals under the age of 18. The winpak platform is strictly for adults. If winpak discovers that personal data has been collected from a minor, the relevant account will be closed and data deleted without undue delay. If you believe a minor has registered on winpak, please contact us immediately at [email protected].

12. Changes to This Policy

winpak may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. The "Last Updated" date at the top of this page indicates when the current version took effect. Material changes will be communicated to registered players via their registered contact details or by notice on the winpak platform. Continued use of winpak following notification of changes constitutes acceptance of the updated Policy.

13. Contact & Complaints

For privacy-related enquiries, data rights requests, or to raise a concern about winpak's data handling practices, please contact our privacy team at [email protected]. Please include "Privacy" in the subject line of your email. winpak will acknowledge receipt of all privacy enquiries within 72 hours and aim to fully resolve them within 30 days.