winpks Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how winpks ("winpks," "we," "us," "our") collects, processes, stores, and protects the personal data of individuals ("you," "the player," "the user") who access or use the winpks platform, including the website at winpks.net, any associated mobile applications, and all related services.

winpks is committed to handling your personal data in accordance with applicable data protection legislation and the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability. This Policy applies to all personal data collected from players in Pakistan, including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, and all other locations across the country.

This Policy should be read alongside the winpks Terms and Conditions and the Responsible Gaming Policy. In the event of any conflict between this Policy and those documents specifically regarding data processing matters, this Policy shall take precedence.

2 Personal Data We Collect

winpks collects personal data across several categories depending on your interactions with the platform:

2.1 Registration & Identity Data

When you create a winpks account, we collect: full legal name, Pakistani CNIC number, date of birth, residential address, mobile phone number, and email address. This data is essential for account creation, identity verification, and KYC compliance.

2.2 Financial & Transaction Data

When you make deposits or withdrawals, we collect: payment method identifiers (JazzCash account numbers, EasyPaisa numbers, bank account details), transaction amounts in PKR, timestamps, and transaction reference numbers. We do not store full card numbers or complete bank account credentials.

2.3 Gaming & Betting Activity Data

We collect records of your betting history, game sessions, wager amounts, win/loss outcomes, bonus activity, and session durations. This data is used for account management, dispute resolution, fraud prevention, and responsible gaming monitoring.

2.4 Technical & Device Data

When you access the winpks platform, we automatically collect: IP address, device type and model, operating system, browser type and version, screen resolution, language settings, and session timestamps. This data helps us maintain platform security, detect fraud, and optimise user experience.

2.5 Communications Data

We retain records of your communications with the winpks customer support team, including live chat logs, email correspondence, and support ticket history. These are retained for quality assurance, dispute resolution, and legal purposes.

2.6 KYC Documentation

During the KYC verification process, we collect copies of identity documents (CNIC front and back), proof of address documents, and proof of payment method ownership. These are stored securely and processed only for identity verification and regulatory compliance purposes.

3 How We Use Your Data

winpks uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your winpks player account.
• Service Delivery: Providing access to casino games, sports betting, slot games, and other platform features.
• Identity Verification: Conducting KYC checks to verify your identity, age (21+), and eligibility to use the platform.
• Financial Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
• Fraud & Crime Prevention: Detecting and preventing fraudulent activity, money laundering, terrorist financing, and match-fixing.
• Responsible Gaming: Monitoring gaming behaviour to identify at-risk players and administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Customer Support: Responding to enquiries, resolving disputes, and managing complaints.
• Legal Compliance: Meeting obligations under applicable AML, KYC, gambling, and data protection legislation.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance and user experience.
• Marketing: Sending promotional communications about winpks offers and new features, where you have provided consent or where permitted under applicable law.

4 Legal Basis for Processing

winpks processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and winpks — including account creation, game access, and payment processing.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML regulations, KYC requirements, and gambling licensing conditions.
• Legitimate Interests: Processing carried out for winpks's legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. Consent may be withdrawn at any time.

5 Data Sharing & Disclosure

winpks does not sell your personal data. We may share your data with the following categories of recipients, solely for the purposes described in this Policy:

5.1 Service Providers

We share data with carefully vetted third-party service providers who assist in delivering the winpks platform, including: payment processors (JazzCash, EasyPaisa, banking partners), KYC and identity verification providers, cloud hosting providers, fraud detection and cybersecurity partners, customer support software providers, and email and SMS communication services. All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond what is specified.

5.2 Game Providers

winpks works with third-party game software providers. These providers may receive anonymised session and outcome data for the purposes of game auditing, fairness verification, and jackpot management. No personally identifiable information is shared with game providers beyond what is strictly necessary.

5.3 Regulatory Authorities

winpks may be required to share player data with regulatory authorities, law enforcement agencies, financial intelligence units, or courts in connection with legal investigations, AML obligations, or regulatory compliance. winpks will notify affected players where legally permitted to do so.

5.4 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of winpks's assets, player data may be transferred to the acquiring entity. Affected players will be notified via email in advance of any such transfer, with the opportunity to close their accounts if they do not consent.

6 Cookies & Tracking Technologies

winpks uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the winpks website.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for platform operation — login sessions, security tokens, and load balancing. Cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and last visited game category.
• Analytics Cookies: Collect anonymised data about how players interact with the platform to help winpks improve its services. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotions and track the effectiveness of campaigns. Used only with your explicit consent.

6.2 Managing Cookies

You may manage your cookie preferences through the cookie settings panel available on the winpks platform. You may also configure your browser to block or delete cookies, though this may affect the functionality of certain features. Disabling strictly necessary cookies will prevent you from logging in to your account.

7 Data Retention

winpks retains your personal data for as long as necessary to fulfil the purposes for which it was collected, meet our legal obligations, and resolve any disputes that may arise.

The following general retention periods apply:

• Active Account Data: Retained for the duration of your winpks account plus a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five years in accordance with applicable financial regulation.
• Support Communications: Retained for three years from the date of last communication.
• Marketing Consent Records: Retained until consent is withdrawn, and for one year thereafter as evidence of the consent having been obtained.

When retention periods expire, winpks securely destroys or anonymises personal data in accordance with its data disposal procedures.

8 Your Data Subject Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by winpks:

• Right of Access: You may request a copy of all personal data winpks holds about you (a "Subject Access Request").
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For certain data fields, you can update information directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where winpks no longer has a lawful basis to retain it. Note that AML and regulatory obligations may require us to retain certain data irrespective of a deletion request.
• Right to Restriction: You may request that we restrict processing of your data while a correction or objection request is being assessed.
• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. Note that we may continue processing where we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9 Data Security

winpks implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including CNIC records and payment identifiers
• Multi-factor authentication for player accounts and all internal admin systems
• Regular penetration testing and vulnerability assessments by independent security firms
• Role-based access controls ensuring that staff can only access data necessary for their specific function
• Comprehensive audit logging of all access to sensitive player data
• 24/7 intrusion detection and prevention system monitoring
• Regular staff training on data protection and information security best practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, winpks will notify the relevant supervisory authority within 72 hours and affected players without undue delay, in accordance with applicable data protection legislation.

10 Minors & Age Verification

winpks is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process using CNIC documentation, which displays the holder's date of birth.

If you believe that a minor may have registered an account on the winpks platform, please contact us immediately at [email protected] so that we can take prompt action.

11 Third-Party Services

The winpks platform integrates with third-party services including payment gateways, game studios, analytics providers, and customer support tools. Each of these third parties operates under its own privacy policy and is responsible for its own data handling practices.

winpks conducts due diligence on all third-party service providers prior to engagement and requires them to demonstrate compliance with applicable data protection standards through contractual data processing agreements. However, winpks cannot be held responsible for the independent privacy practices of third parties beyond the scope of these agreements.

Players are advised to review the privacy policies of any third-party service they interact with directly — for example, when making a deposit via JazzCash or EasyPaisa — as those interactions are governed by the respective provider's terms.

12 Marketing Communications

winpks may send you promotional communications about bonuses, new games, special events, and platform updates via email, SMS, and push notifications. We will only send you marketing communications where you have opted in during registration or subsequently through your account settings.

You may opt out of marketing communications at any time by: updating your communication preferences in your winpks account settings; clicking the "unsubscribe" link in any marketing email; or contacting support at [email protected] and requesting removal from marketing lists.

winpks does not engage in unsolicited bulk marketing. Players who have self-excluded from the platform will be removed from all marketing lists immediately upon self-exclusion taking effect and will not receive promotional communications for the duration of their exclusion.

13 Changes to This Policy

winpks reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your privacy rights or how we process your data — will be communicated to registered players via email notification to the address on file, with at least 14 days' notice prior to the changes taking effect.

Non-material updates (such as corrections to typographical errors, clarifications of existing practices, or changes in contact details) will be reflected in the updated Policy without separate notification, though the "Last Updated" date at the top of the page will always be revised to reflect the most recent amendment.

Your continued use of the winpks platform following notification of material changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any change, you may request account closure by contacting our support team before the changes take effect.

14 Contact & Data Protection Officer

winpks has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. The DPO is the primary point of contact for all data protection matters, including Subject Access Requests, data breach notifications, and privacy complaints.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how winpks processes your personal data, please contact us using the details below:

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or regulatory body in your jurisdiction.