Data Protection · Transparency · Your Rights
This Privacy Policy ("Policy") sets out how winpkr collects, stores, uses, shares, and protects personal information relating to registered users and visitors to the winpkr Platform. We take the privacy of every Pakistani player seriously — your data is handled with the same care we bring to securing your funds. Please read this Policy in full before registering an account or using any winpkr service.
Our Privacy Commitments
winpkr collects only the personal data that is strictly necessary to provide the Platform services, verify your identity, process payments, and comply with regulatory obligations. We do not collect data speculatively or beyond what is required for a stated, documented purpose.
Data collected by winpkr is used only for the purposes for which it was collected, as described in this Policy. winpkr does not repurpose your data for unrelated commercial activities without your explicit consent. Your JazzCash number is a payment detail — not a marketing channel unless you opt in.
All personal data processed by winpkr is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to identifiable personal data is restricted on a need-to-know basis through role-based access controls within winpkr's internal systems.
winpkr recognises and upholds your rights over your personal data — including the right to access, correct, port, and in certain circumstances erase data we hold about you. Requests are processed within 30 days and you will never be penalised for exercising a data right.
winpkr maintains a clear, plain-language record of every data category collected, every purpose for collection, and every third party to whom data may be disclosed. There are no hidden data practices at winpkr. What you see in this Policy is exactly what happens.
winpkr retains personal data only for as long as is necessary to fulfil the original collection purpose, meet legal retention obligations (typically five years for financial records), or resolve active disputes. Data beyond the retention period is securely deleted or anonymised.
winpkr ("we," "us," "the Company," or "winpkr") is the operator of the online casino and sports betting platform accessible at winpkr.vu and its subdomains (the "Platform"). winpkr is licensed and regulated by the relevant international gaming authority under whose licence the Platform operates. For the purposes of this Privacy Policy, winpkr acts as the data controller in respect of all personal data processed in connection with the Platform and its services.
This Privacy Policy applies to all persons who access the winpkr Platform, register an account, make deposits, place bets, participate in promotional activities, or contact winpkr's support team — regardless of the device, browser, or location from which access is made. By using the winpkr Platform in any capacity, you acknowledge that your personal data will be handled as described in this Policy.
winpkr is committed to handling personal data in a manner consistent with internationally recognised data protection principles, including those reflected in the EU General Data Protection Regulation (GDPR), which winpkr adopts as a baseline standard of data protection practice regardless of the User's geographic location.
winpkr collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the principal data categories collected:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, CNIC scan/photograph | Registration; KYC verification |
| Contact Data | Pakistani mobile number (Jazz/Zong/Ufone/Telenor/Warid), email address, province/city (e.g., Lahore, Karachi, Islamabad) | Registration; account updates |
| Financial Data | JazzCash account number, EasyPaisa account number, HBL/UBL/Meezan bank account details, USDT TRC20 wallet address, transaction history, deposit and withdrawal amounts | Deposit/withdrawal processing |
| Gaming & Betting Data | Game session records, bet history, wager amounts, game outcomes, bonus usage, PSL / cricket betting selections, live casino session logs | Platform usage |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, login timestamps, device fingerprint | Automatic collection on access |
| Responsible Gaming Data | Self-exclusion status, deposit/loss limit settings, cooling-off period history, responsible gaming tool usage logs | Account settings; monitoring |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Support interactions |
| Marketing Preferences | Opt-in/opt-out status for SMS, email, and on-platform promotional communications | Registration; preference updates |
winpkr does not collect sensitive personal data (such as biometric data, religious beliefs, or political opinions) beyond what is strictly required for regulatory identity verification purposes.
The majority of personal data winpkr holds about you is provided directly by you during the following interactions: account registration, KYC verification document submission, deposit and withdrawal transactions, contact with the winpkr support team, participation in promotional offers, and updates to your account settings or preferences.
When you access the winpkr Platform — whether on a desktop browser in Islamabad or a mid-range Android phone in Faisalabad — technical data is automatically collected by winpkr's infrastructure. This includes your IP address, device identifiers, browser characteristics, session timestamps, pages visited, and game session data. This automated collection is necessary for Platform security, fraud detection, and to ensure consistent service delivery across device types.
For the purposes of identity verification and age confirmation, winpkr may receive confirmation data from third-party CNIC verification service providers who cross-reference submitted identity documents against authoritative records. winpkr may also receive fraud risk signals from payment processors and anti-fraud intelligence services in connection with deposit and withdrawal transactions.
When you complete a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or a cryptocurrency payment processor, the relevant payment service provider transmits transaction confirmation data to winpkr necessary to credit your account or process your withdrawal. The data received is limited to what is required for payment reconciliation.
winpkr processes personal data for the following documented purposes only:
winpkr processes personal data only where a valid legal basis exists. The principal legal bases relied upon are as follows:
Processing of identity data, contact data, financial data, and gaming data is necessary for winpkr to perform its contractual obligations to you under the winpkr Terms and Conditions. This includes creating your account, processing deposits and withdrawals, and delivering Platform services.
KYC data, AML-related transaction records, and age verification documentation are processed by winpkr pursuant to its obligations under the conditions of its international gaming licence and applicable anti-money laundering regulations. winpkr cannot operate lawfully without conducting these checks — they are not optional.
Technical data and communications data are processed on the basis of winpkr's legitimate interests in maintaining Platform security, preventing fraud, investigating abuse, improving the Platform, and providing effective customer support. winpkr has conducted a legitimate interests assessment and determined that these interests are not overridden by Users' fundamental rights and freedoms.
Marketing communications (promotional SMS and email) are sent only where you have given winpkr your explicit, freely given, and informed consent to receive them. You may withdraw this consent at any time by updating your communication preferences in Account Settings or by contacting support.
winpkr does not sell your personal data to third parties. winpkr shares personal data with third parties only in the following limited circumstances, and only to the minimum extent necessary for the stated purpose:
Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency payment processors to the extent necessary to process your deposit or withdrawal. These providers are contractually bound to use shared data solely for payment processing purposes.
CNIC and identity documentation may be shared with third-party KYC verification service providers for the purpose of authenticating your identity and confirming your age. These providers act as data processors under winpkr's instruction and are contractually prohibited from using your data for any purpose other than verification.
Aggregated, pseudonymised session data may be shared with third-party game providers (including but not limited to Pragmatic Play, Evolution Gaming, Ezugi, and Hacksaw Gaming) for the purposes of technical support, game audit, and regulatory compliance. Personally identifiable data is not shared with game providers beyond what is technically necessary for session authentication.
winpkr will disclose personal data to the competent regulatory authority, licensing body, law enforcement agency, or court when legally required to do so — for example, in response to a valid court order, regulatory investigation, or anti-money laundering enquiry. winpkr will notify the affected User of such disclosure where permitted by law.
Technical data and financial transaction data may be shared with specialist fraud prevention and anti-money laundering intelligence services to detect and prevent fraudulent activity on the Platform. These services are engaged under strict data processing agreements.
No Sale of Data: winpkr strictly prohibits the sale, rental, or commercial exchange of personal data with any third party for marketing, profiling, or any purpose other than those listed above. Your data is yours.
winpkr operates under an international gaming licence and its technical infrastructure may involve the processing of personal data in jurisdictions outside Pakistan. Where such international data transfers occur, winpkr ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by internationally recognised data protection principles, including:
You may request details of the specific safeguards in place for any particular international transfer by contacting winpkr's data protection contact at [email protected].
Cookies are small text files placed on your device when you access a website. winpkr uses cookies and similar tracking technologies (including local storage and session tokens) to ensure the Platform functions correctly, to maintain your login session, to remember your preferences, and to gather aggregated analytics data about Platform usage patterns.
You can control cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your winpkr account and using core Platform features. Disabling other cookie categories may reduce Platform functionality. winpkr's cookie preferences tool (accessible from the Platform footer) allows you to manage non-essential cookie categories without affecting Platform access.
winpkr retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Documentation | 5 years after account closure | AML/CTF regulatory obligation |
| Financial Transaction Records | 5 years after transaction date | Gaming licence & AML obligation |
| Gaming & Betting History | 5 years after last account activity | Regulatory audit requirement |
| Technical / Session Logs | 12 months from collection date | Security & fraud investigation |
| Customer Support Records | 3 years from last interaction | Dispute resolution; legal claims |
| Marketing Preferences | Until consent withdrawn or account closed | Consent |
| Self-Exclusion Records | Indefinitely (to prevent re-registration) | Responsible gaming obligation |
On expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.
Subject to applicable law and certain exceptions, you have the following rights in respect of the personal data winpkr holds about you. To exercise any of these rights, contact winpkr at [email protected] with your registered mobile number or email address and a description of the right you wish to exercise. winpkr will respond within 30 days.
You have the right to request a copy of the personal data winpkr holds about you, together with information about the purposes for which it is processed, the categories of data held, the recipients with whom it has been shared, and the retention period applied.
If personal data winpkr holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Certain data corrections (such as name or CNIC corrections) require supporting documentation to be submitted for verification purposes.
You may request that winpkr erase personal data it holds about you where: the data is no longer necessary for the purpose for which it was collected; you have withdrawn consent and no other legal basis exists; or the data has been unlawfully processed. This right is subject to winpkr's legal retention obligations — financial and KYC records that must be retained for five years under regulatory requirements cannot be erased on request during that period.
You may request that winpkr temporarily restrict the processing of your personal data where you contest its accuracy, object to its processing, or where winpkr no longer needs the data but you require it for a legal claim.
Where winpkr processes your personal data on the basis of consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.
You have the right to object to winpkr's processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, winpkr will cease that processing immediately. Where you object to other legitimate-interests processing, winpkr will assess the objection against its documented legitimate interests and respond within 30 days.
Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. To withdraw consent for marketing SMS or email, update your preferences in Account Settings or contact support.
winpkr will never penalise you for exercising a data right. Your access to Platform services will not be restricted or degraded as a result of making a data rights request, except where the exercise of a right (such as erasure) necessarily affects winpkr's ability to continue providing the service to you (for example, if the erased data was your registered mobile number).
winpkr implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
Despite these measures, no digital system can guarantee absolute security. If you suspect that your winpkr account has been accessed without your authorisation, contact winpkr support immediately via live chat or at [email protected]. The team will take immediate action to secure your account.
winpkr strictly prohibits the use of the Platform by persons under the age of 21 years. winpkr does not knowingly collect or process personal data belonging to persons under 21 years of age.
All account registrations are subject to CNIC-based age verification. Where winpkr discovers that personal data has been submitted by or on behalf of a person under 21 years of age — whether through the registration process, KYC review, or any other means — winpkr will immediately:
If you are a parent or guardian and believe that a person under 21 in your care has registered a winpkr account, please contact winpkr support immediately at [email protected].
winpkr sends promotional communications — including bonus offers, new game announcements, PSL season betting promotions, and Platform updates — only to Users who have actively opted in to receive them. Marketing communications from winpkr are delivered via SMS to your registered Pakistani mobile number and/or via email to your registered email address.
You may opt in to winpkr marketing communications during registration by selecting the relevant preference checkbox, or at any time thereafter by updating your notification settings within Account Settings.
You may opt out of any winpkr marketing communication channel at any time by: (a) updating your notification preferences in Account Settings; (b) replying STOP to any winpkr marketing SMS; or (c) clicking the unsubscribe link in any winpkr marketing email. Opt-out requests take effect within 48 hours of receipt. Note that opting out of marketing communications does not affect transactional or account security communications (such as deposit confirmations and withdrawal OTPs), which will continue to be sent as necessary for Platform operation.
winpkr does not share your contact details with third-party marketers. Your mobile number and email address are used solely for winpkr's own direct communications with you, payment processing, and essential account security notifications.
winpkr reserves the right to amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, Platform functionality, or data processing practices. Where material changes are made to this Policy, winpkr will notify registered Users via an on-Platform notification and/or email to the registered address. The updated Policy will be published on this page with a revised effective date and version number.
Your continued use of the winpkr Platform following notification of any amendment to this Policy constitutes your acknowledgement of and agreement to the revised Policy. If you do not accept any revised Privacy Policy, you must cease using the Platform and may request Account closure in accordance with the winpkr Terms and Conditions.
The current version of this Privacy Policy is Version 2.4, effective as of January 2026. This version supersedes all previous versions of the winpkr Privacy Policy.
For any questions, concerns, or formal requests relating to this Privacy Policy or winpkr's handling of your personal data, please contact us through the following channels. winpkr is committed to responding to all data-related enquiries within a reasonable period and in no case more than 30 days from receipt of a formal data rights request.
winpkr's data protection contact reviews all formal data rights requests personally and will acknowledge receipt of your request within five (5) business days of receipt.
For your protection, winpkr will require you to verify your identity before processing any data rights request. This is to ensure that personal data is not disclosed to, amended for, or deleted on the request of anyone other than the genuine Account Holder. Identity verification for data rights requests is conducted via your registered winpkr login credentials or, where account access is unavailable, via CNIC documentation.
Your Data Is Safe · 256-bit SSL · 21+ Platform
winpkr protects your privacy the same way it protects your funds — with the highest available technical standards and a zero-tolerance policy on misuse. Sign in and experience Pakistan's most trusted casino platform. 21+ only.