winpkr18 Privacy Policy

winpkr18 is an online gaming and sports betting platform operated for players in Pakistan. As a platform that handles financial transactions and personal account information on behalf of its registered players, winpkr18 takes data privacy seriously. This Privacy Policy explains how we act as a responsible data processor for the personal information that passes through our systems.

This policy covers the personal data you provide to us directly — such as the details you enter during account registration — as well as data we collect automatically through your use of the platform, such as device information and session activity. It also covers data we may receive about you from third parties in limited circumstances, such as payment processors confirming a transaction.

winpkr18 does not sell personal data to third parties for their own independent marketing purposes. We do not profile users for advertising purposes beyond the basic personalisation of the winpkr18 experience itself. The data we collect is used to operate the platform, verify identities, process transactions, prevent fraud, fulfil responsible gaming obligations, and improve the product for Pakistani players.

winpkr18 collects personal data in three ways: directly from you when you register and use the platform, automatically through your device and browsing session, and occasionally from third-party services that support platform operations such as payment processing and identity verification.

Data You Provide Directly

• Account registration: Full legal name, email address, Pakistani mobile phone number, date of birth, and chosen username and password.
• Identity verification (KYC): Government-issued ID document (such as your CNIC or passport), selfie or photograph for facial verification, and proof of address where required.
• Payment information: Mobile wallet identifiers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details (handled via our PCI-compliant payment processor — winpkr18 does not store full card numbers).
• Communication data: Messages sent to winpkr18 via support chat or email, including the content of your queries and our responses, are retained for service quality and dispute resolution purposes.
• Responsible gaming data: Any self-reported information provided when setting deposit limits, cooling-off periods, or requesting self-exclusion.

Data Collected Automatically

• Device and browser data: Device type, operating system version, browser type and version, screen resolution, and IP address.
• Session activity: Pages visited on winpkr18, time spent on each section, features used, bets placed and their outcomes, game sessions, and navigation paths through the platform.
• Transaction logs: A complete record of all deposits, withdrawals, bets, and game rounds associated with your account, including timestamps and transaction reference numbers.
• Cookies and similar technologies: Session cookies, persistent cookies, and web analytics data as described in Section 6 of this policy.

Data from Third Parties

• Payment confirmation data from Easypaisa, JazzCash, and banking partners, confirming that a transaction was successfully initiated from the registered payment account.
• Identity verification results from KYC service providers confirming whether submitted documents match the identity claimed.
• Fraud screening data from anti-fraud service providers that analyse transaction patterns to flag potentially suspicious activity.

winpkr18 uses the personal data collected from registered players for the following specific purposes. We do not use personal data for purposes beyond those listed here without first obtaining consent or having a clear legal basis to do so.

• Account management: Creating and maintaining your winpkr18 account, verifying your identity, enabling login via OTP, and managing account changes such as password resets and contact information updates.
• Payment processing: Processing deposits from and withdrawals to your registered payment methods in PKR. Transaction data is shared with payment processors only to the extent necessary to complete the transaction.
• Sports betting and gaming services: Recording and settling bets, calculating and paying winnings, managing game sessions, and providing the full range of winpkr18 services including cricket betting, PSL markets, poker, slots, crash games, and football betting.
• Identity and age verification: Confirming that account holders are at least 18 years of age and that the identity information provided matches the payment accounts used for transactions.
• Fraud prevention and security: Analysing transaction patterns, device fingerprints, and account behaviour to identify and prevent fraudulent activity, account takeover attempts, and money laundering.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour. winpkr18 uses session data to enforce self-set deposit limits and self-exclusion requests.
• Customer support: Responding to queries, resolving disputes, and maintaining a record of support interactions for training and quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players navigate the platform and where improvements can be made to the winpkr18 user experience.
• Marketing communications: Sending promotional emails and SMS messages about winpkr18 offers and PSL season promotions — only to players who have opted in. You can opt out of marketing at any time via your account settings or by emailing support@winpkr18.biz.

winpkr18 processes personal data on the basis of one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing your name, contact details, payment information, and transaction history is necessary to deliver the winpkr18 gaming services you signed up for. Without this data, the service cannot function.
• Legal obligation: Identity verification (KYC), anti-money laundering checks, age verification, and the retention of certain financial records are required by applicable law regardless of your consent preferences.
• Legitimate interests: Fraud prevention, platform security, and improving the winpkr18 product are carried out on the basis of legitimate interests. We ensure these interests are balanced against your privacy rights.
• Consent: Marketing communications and non-essential cookies are only sent or placed where you have given explicit consent. You can withdraw consent at any time without affecting any other aspect of your account.

winpkr18 does not sell your personal data to third parties. We share personal data with external parties only in the circumstances listed below, and only to the extent necessary for the specific purpose stated.

• Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners solely to process deposits and withdrawals. These providers handle your payment data under their own privacy and security standards and are not permitted to use it for any other purpose.
• Identity verification providers: During KYC checks, identity document data and verification requests are processed by specialist third-party identity verification services. These providers confirm document authenticity and identity matching only — they do not retain full copies of your documents beyond the verification process.
• Fraud and security providers: Technical data including device identifiers, IP addresses, and transaction patterns may be shared with fraud detection service providers to identify and block suspicious activity.
• Legal and regulatory authorities: winpkr18 may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure where permitted to do so.
• IT and infrastructure providers: Server hosting, database management, and technical support providers may have limited access to personal data as a necessary consequence of maintaining the winpkr18 platform infrastructure. These providers are bound by confidentiality obligations and data processing agreements.

winpkr18 uses cookies and similar web technologies to ensure the platform functions correctly, to keep your session secure, and to understand how the platform is being used so that we can improve it. Below is an overview of the types of cookies we use.

You can control and delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect your ability to log in and use the winpkr18 platform. Disabling analytics or preference cookies will not prevent you from using the service but may mean your preferences are not remembered between sessions.

winpkr18 retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable legal, regulatory, or accounting obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus five years following account closure. This period is required to satisfy financial record-keeping and anti-money laundering obligations.
• Transaction and betting history: Retained for a minimum of five years from the date of each transaction to meet financial regulatory requirements and to enable dispute resolution during that period.
• Identity verification documents: Retained for five years from the date of verification or from account closure, whichever is later, in compliance with applicable due diligence requirements.
• Support communications: Retained for two years from the date of the communication for quality assurance and dispute resolution purposes.
• Marketing preferences and opt-out records: Retained indefinitely to ensure that opt-out requests are honoured and not accidentally reversed in future.
• Technical and session logs: Retained for 12 months for security monitoring and fraud detection, after which they are deleted or anonymised.

When personal data is no longer required for any of the above purposes, winpkr18 deletes or anonymises it securely. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product analysis purposes.

winpkr18 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed on the platform. These measures are designed to protect against unauthorised access, accidental loss, disclosure, alteration, or destruction of personal data.

• Encryption in transit: All data transmitted between your device and the winpkr18 platform is encrypted using TLS (Transport Layer Security). This means that data exchanged during login, deposit, and account management cannot be intercepted by third parties on the network.
• Encrypted data storage: Sensitive personal data stored in winpkr18 systems — including identity documents and payment identifiers — is encrypted at rest using industry-standard encryption.
• Access controls: Access to personal data within winpkr18's internal systems is restricted on a strict need-to-know basis. Staff access is logged and monitored. Departing employees have access revoked immediately.
• Payment security: Card payment data is processed via PCI DSS-compliant payment processors. winpkr18 does not store full card numbers on its own servers at any point.
• Two-factor authentication: OTP-based verification is required for login and for significant account actions such as withdrawal requests, providing an additional layer of protection against unauthorised account access.
• Regular security reviews: winpkr18 conducts periodic reviews of its security practices, access logs, and data handling procedures to identify and address vulnerabilities.

As a winpkr18 player, you have a number of rights over your personal data. These rights can be exercised by contacting our support team at support@winpkr18.biz. winpkr18 will respond to all data rights requests within 30 days of receipt.

winpkr18 is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18 years. Age verification is a required step in the winpkr18 account registration process, and additional identity verification may be requested where there is any doubt about a player's age.

If winpkr18 becomes aware that personal data has been collected from a person under the age of 18 — whether through a registration that bypassed age verification controls or through information received from a third party — the account will be immediately suspended, any funds will be returned to the originating payment method, and the personal data of the minor will be deleted as quickly as technically feasible.

If you are a parent or guardian and believe your child may have registered an account on winpkr18, please contact us immediately at support@winpkr18.biz. We will investigate and resolve the matter urgently.

winpkr18 reviews and updates this Privacy Policy periodically to reflect changes in the platform, the data we process, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

When material changes are made to this policy — changes that significantly affect how your personal data is used or your rights as a data subject — winpkr18 will provide advance notice. This notification will be delivered via a banner on the winpkr18 platform and/or by email to your registered address, with a reasonable period for you to review the changes before they take effect.

Your continued use of the winpkr18 platform following notification of a policy update constitutes your acknowledgement of the changes. If you disagree with any material change, you have the right to close your account and request deletion of your personal data as described in Section 9.

For any questions, requests, or concerns relating to this Privacy Policy or the personal data winpkr18 holds about you, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 days.