winpkr2 Privacy Policy

This Privacy Policy ("Policy") describes how winpkr2 ("winpkr2", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "Player") who access or use the winpkr2 website, mobile interface, and associated gaming and betting services (collectively, the "Platform").

winpkr2 operates as an internationally licensed online gaming operator serving players primarily based in Pakistan. As a licensed operator, we are subject to data protection obligations imposed by our gaming license jurisdiction. We take these obligations seriously and are committed to handling your personal data with transparency, integrity, and the highest standards of security.

By registering an account on winpkr2 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside the winpkr2 Terms & Conditions and Responsible Gaming policy.

winpkr2 acts as the data controller in respect of all personal data collected from players through the Platform. As data controller, winpkr2 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is processed, or wish to exercise any of your data rights described in this Policy, you may contact the winpkr2 Data Protection team directly. Contact details are provided in Section 14 of this Policy.

winpkr2 collects several categories of personal data depending on how you interact with the Platform. The following table provides a complete breakdown of the data categories we collect and the purpose for each:

winpkr2 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming self-disclosures), or biometric data beyond what is required for KYC identity verification purposes.

winpkr2 collects personal data through the following channels:

• Direct registration: When you create a winpkr2 account, you provide identity and contact data directly through the registration form.
• KYC document uploads: When you submit documents for identity verification, we collect the data contained within those documents.
• Deposits and withdrawals: When you make financial transactions on the Platform, your payment method details and transaction records are captured by our payments infrastructure.
• Platform usage: As you use the Platform — browsing games, placing bets, accessing your account dashboard — technical and gaming activity data is automatically generated and recorded.
• Customer support interactions: When you contact winpkr2 support via live chat or email, communications data is collected and stored for quality assurance and dispute resolution purposes.
• Cookies and tracking technologies: winpkr2 uses cookies and similar technologies to collect technical data about your device, browser, and session. See Section 10 of this Policy for full details.
• Third-party verification services: winpkr2 may receive identity verification data from third-party KYC and AML screening services where required to fulfil our regulatory obligations.

winpkr2 uses personal data for the following purposes:

• Account management: Creating and maintaining your winpkr2 player account, managing your login credentials, and processing account-related requests.
• Service delivery: Enabling you to access and use the full range of winpkr2 gaming and betting services, including cricket betting, PSL markets, live casino, and slots.
• Payment processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, GrabPay, and USDT Crypto, and facilitating withdrawal requests to your designated payment account.
• KYC and AML compliance: Verifying your identity and age in accordance with our international gaming license obligations, and screening transactions for anti-money laundering and counter-terrorism financing compliance.
• Responsible gaming: Monitoring gaming activity patterns to identify players who may be experiencing problem gambling behaviour, and facilitating responsible gaming tools such as deposit limits and self-exclusion.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, and other security threats to the Platform.
• Customer support: Responding to your support queries, resolving disputes, and managing complaints.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the Platform's performance, content, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Regulatory reporting: Fulfilling mandatory reporting obligations to our gaming license authority, including player activity reports and AML/CFT filings.

winpkr2 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between winpkr2 and you as a registered player — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with winpkr2's obligations under its international gaming license, including KYC/AML requirements, age verification, and regulatory reporting.
• Legitimate interests: Processing carried out for winpkr2's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

winpkr2 does not sell, rent, or trade your personal data. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) receive the financial data necessary to process your deposit and withdrawal transactions.
• KYC and AML service providers: Third-party identity verification and screening services that assist winpkr2 in meeting its regulatory obligations. These providers are contractually bound to use your data solely for the verification purposes for which it is shared.
• Game content providers: Licensed third-party game studios and platform providers may receive limited technical data (such as player session identifiers) necessary to deliver their games on the winpkr2 Platform.
• Regulatory authorities: winpkr2's gaming license authority and, where legally required, law enforcement or financial intelligence authorities may receive player data as part of regulatory reporting or lawful investigation processes.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and IT service providers who process data on behalf of winpkr2 under strict data processing agreements and who have no independent right to use the data.
• Fraud prevention networks: winpkr2 may share fraud indicators (such as device fingerprints associated with confirmed fraudulent accounts) with industry fraud prevention networks to protect the integrity of the online gaming ecosystem.

winpkr2 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by our gaming license obligations and applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your registered player account with winpkr2, and for a minimum of five (5) years following account closure, in accordance with AML/CFT regulatory requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by anti-money laundering regulations applicable under our gaming license.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• Customer support records: Retained for three (3) years from the date of the relevant support interaction, for dispute resolution and quality assurance purposes.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.
• Technical and session data: Log data retained for up to twelve (12) months for security and fraud prevention purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, winpkr2 will securely delete or anonymise your personal data. Where anonymisation is used, the anonymised data may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to any individual.

winpkr2 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the winpkr2 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encrypted data storage: Personal and financial data stored on winpkr2 servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within winpkr2 is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Regular security audits: winpkr2 conducts periodic internal and third-party security assessments, including penetration testing, to identify and remediate vulnerabilities.
• Multi-factor authentication: Internal system access by winpkr2 staff requires multi-factor authentication, reducing the risk of unauthorised internal access.
• Incident response plan: winpkr2 maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, we will notify affected players within 72 hours of becoming aware of the incident.

While winpkr2 takes all reasonable steps to protect your data, no system of internet-based data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying winpkr2 immediately if you suspect your account has been compromised.

winpkr2 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and collect technical data for security and analytics purposes. The following categories of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function. These include session cookies that keep you logged in and cookies that support secure payment flows. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and previously visited game categories to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players interact with the Platform, including which pages are visited most frequently and where players encounter technical issues. This data is used exclusively for internal Platform improvement purposes.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection, device fingerprinting for fraud prevention, and CSRF (Cross-Site Request Forgery) protection tokens.

winpkr2 does not use advertising or third-party marketing cookies. You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform and may prevent you from accessing your account or completing transactions.

As a player on the winpkr2 Platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact the winpkr2 Data Protection team using the details in Section 14. winpkr2 will respond to all valid data rights requests within 30 days:

• Right of access: You have the right to request a copy of the personal data winpkr2 holds about you, along with information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to rectification: You have the right to request that winpkr2 correct any inaccurate or incomplete personal data we hold about you. For account profile corrections, you may also update certain data directly through your account dashboard.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to winpkr2's legal and regulatory data retention obligations, which may require us to retain certain data for a minimum period.
• Right to restriction: You have the right to request that winpkr2 temporarily restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: You have the right to receive a copy of the personal data you provided to winpkr2 in a structured, commonly used, machine-readable format, and to request that this data be transferred to another data controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of winpkr2's legitimate interests. winpkr2 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

winpkr2 strictly enforces a minimum age requirement of 21 years for all registered players. The Platform is not directed at individuals under the age of 21 and winpkr2 does not knowingly collect personal data from minors. Age verification is a mandatory component of the KYC process for all players.

If winpkr2 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data, return any deposits made, and forfeit any winnings in accordance with our Terms & Conditions. Where required by law or our gaming license obligations, such cases may be reported to relevant authorities.

winpkr2 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or regulatory requirements. Where changes are material, winpkr2 will provide notice to registered players via email or on-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the winpkr2 Platform after any revised Policy has taken effect constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how winpkr2 is protecting your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way winpkr2 handles your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 through the winpkr2 Platform — our fastest response channel for privacy and data queries.
• Email: [email protected] — please include "Privacy / Data Request" in the subject line so your query is routed to the Data Protection team promptly.

winpkr2 is committed to addressing all privacy-related queries and data rights requests in a timely and transparent manner. We aim to respond to all requests within 30 days of receipt. For complex or high-volume requests, we may extend this period by a further 30 days, in which case we will inform you of the extension within the initial 30-day window.