WinPKR Privacy Policy – How We Protect Your Data in Pakistan

1Who We Are

This Privacy Policy is issued by WinPKR ("we", "us", "our"), the operator of the online gaming platform available at winpkr.run. WinPKR is a Pakistan-focused platform offering real-money games including Crash Games, Poker, Roulette, Ludo, and an Online Casino, along with a five-tier VIP Club loyalty programme. All services operate entirely in Pakistani Rupees.

In the context of data privacy, WinPKR acts as the data controller — meaning we determine what personal data is collected, for what purpose, and how it is handled. This Policy applies to all personal data collected through the WinPKR website, mobile browser interface, and any communication channels we operate including email, Live Chat, WhatsApp, and Telegram support.

By registering an account on WinPKR or using any part of the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how WinPKR handles your data, you should not register or continue using the platform. You can contact us at any time at support@winpkr.run with privacy-related questions.

2Data We Collect

WinPKR collects only the personal data that is necessary to operate the platform, process payments, verify identity, and comply with applicable obligations. The following table sets out the categories of personal data we collect and what each category includes.

WinPKR does not collect sensitive personal data such as biometric information, political opinions, religious beliefs, or health data. If verification documents are submitted, they are processed solely for identity confirmation purposes and are not used for any other purpose.

3How We Collect Your Data

WinPKR collects personal data through three primary channels: information you provide directly, data generated automatically through your use of the platform, and in limited cases, information received from payment processors or identity verification partners.

• Direct provision: When you register an account, submit identity documents, make a deposit or withdrawal, contact support, or update your account settings, you directly provide WinPKR with personal data.
• Automated collection: As you use the WinPKR platform, technical data including your IP address, device identifiers, session duration, and gameplay activity is automatically recorded in our systems. This is standard for any online platform and is necessary for the platform to function correctly.
• Payment processor data: When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, the payment processor confirms transaction status to WinPKR. We receive only the data necessary to match the payment to your account — we do not receive your full card number or mobile banking PIN.
• Cookies and tracking technologies: WinPKR uses cookies and similar technologies to maintain session state, remember your preferences, and improve platform performance. See Section 8 for full details on how WinPKR uses cookies.

4Why We Use Your Data

WinPKR uses your personal data for specific, clearly defined purposes. We do not use your data in ways that are incompatible with why it was originally collected. The following explains each purpose and what data it involves.

• Account creation and management: Your identity and contact data is used to create your WinPKR account, verify your identity, maintain your account settings, and communicate important account-related information to you.
• Payment processing: Transaction data and payment method identifiers are used to process your deposits and withdrawals accurately and to maintain your PKR wallet balance on WinPKR.
• Game provision and platform operation: Account activity data is used to deliver the games you play, record results, calculate your VIP Club XP, apply cashback, and maintain the integrity of multiplayer games such as poker.
• Fraud prevention and security: Technical data, payment data, and account activity data are used to detect and investigate potential fraud, collusion, bonus abuse, and other security threats to the WinPKR platform and its players.
• Responsible gaming: Account activity data is monitored to identify patterns that may indicate problem gambling behaviour. This is done to fulfil WinPKR's commitment to player welfare — it is not used for any commercial purpose.
• Customer support: Communications data is used to handle your support queries, complaints, and disputes, and to maintain records of interactions for quality and training purposes.
• Marketing (opt-in only): If you have opted in to receive promotional communications from WinPKR, your contact data and activity data are used to send relevant bonus offers, promotions, and VIP Club updates. You can withdraw this consent at any time.
• Platform improvement: Aggregated, anonymised technical and activity data is used to analyse platform performance and improve the WinPKR user experience. This analysis does not involve individual player identification.

5Legal Basis for Processing

WinPKR processes your personal data on the following legal bases, depending on the specific purpose of each processing activity.

• Contractual necessity: Processing your identity data, contact data, and payment data to create and manage your WinPKR account and process transactions is necessary for WinPKR to fulfil its obligations to you under the Terms and Conditions.
• Legitimate interests: WinPKR processes technical data for fraud prevention, security monitoring, and platform improvement based on its legitimate interest in protecting the platform and all players from harm. Where legitimate interests are used, we balance them against your privacy rights and only proceed where the interests are not overridden by those rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have given clear, informed, freely given consent. You can withdraw consent at any time without negative consequences to your account.
• Legal obligation: Identity verification and transaction record retention may be required to comply with applicable anti-money laundering and identity verification requirements. Where this is the case, WinPKR is obliged to process and retain relevant data regardless of any withdrawal of consent.

6Sharing Your Data

WinPKR does not sell, rent, or commercially share your personal data with any third party. We share your data only in the following limited and necessary circumstances.

• Payment processors: When you make a deposit or withdrawal, WinPKR shares the minimum necessary transaction data with the relevant payment service provider (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card processor) to execute the transaction. Each of these providers operates under its own data protection obligations.
• Identity verification partners: Where identity verification is required, WinPKR may use a trusted third-party verification service. Any data shared for this purpose is transmitted securely and used solely for verification.
• Game software providers: Game outcomes and related session data are processed by WinPKR's game software providers to deliver the games you play. These providers do not receive your personal identity or payment information.
• Legal and regulatory obligations: WinPKR may be required to disclose personal data to law enforcement or regulatory authorities in response to a lawful request or court order. WinPKR will notify you of such a request where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and given the opportunity to request deletion of your data if the transfer involves a change in data controller.

7How Long We Keep Your Data

WinPKR retains your personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The following retention periods apply to the main categories of data WinPKR holds.

• Account data: Retained for the duration of your active WinPKR account and for a period of five years following account closure, to allow for the resolution of any disputes, chargebacks, or regulatory inquiries that may arise after closure.
• Payment and transaction records: Retained for a minimum of five years following each transaction to comply with anti-money laundering and financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account and for five years after closure. Scanned copies of documents are deleted once verification is confirmed unless retention is required by law.
• Game play history: Retained for three years from the date of each session to allow for dispute resolution and VIP Club calculations.
• Support communications: Retained for two years from the date of the last interaction, to support quality review and dispute resolution.
• Marketing preferences and consent records: Retained for as long as your account is active, and for two years following account closure or consent withdrawal, as evidence of your marketing preferences history.

When data is no longer required for any applicable purpose, WinPKR securely deletes or anonymises it. Anonymised data — which cannot be used to identify you — may be retained indefinitely for statistical analysis and platform improvement.

8Cookies and Tracking Technologies

WinPKR uses cookies and similar technologies to provide and improve the platform. Cookies are small text files stored on your device when you visit a website. They allow WinPKR to remember your session, settings, and preferences across visits.

WinPKR uses the following categories of cookies:

• Essential cookies are necessary for the WinPKR platform to function. They maintain your logged-in session, remember your account preferences within a session, and ensure that the platform security features work correctly. You cannot opt out of essential cookies while using WinPKR.
• Performance cookies collect anonymised information about how players use the WinPKR platform — for example, which pages load most slowly or where players encounter errors. This data helps WinPKR improve platform performance. No personally identifiable information is collected via performance cookies.
• Functional cookies remember your preferences such as language settings, preferred game categories, and notification settings between sessions, so you do not have to reconfigure them every time you log in.
• Marketing cookies are only placed if you have explicitly opted in to receive marketing communications from WinPKR. They help WinPKR understand which promotions are most relevant to your activity. You can withdraw consent for marketing cookies at any time from your account settings.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent WinPKR from functioning correctly. Disabling other cookie categories will not prevent you from using the platform but may affect your experience.

9Security

WinPKR takes the security of your personal data seriously. We implement a layered security approach that covers data in transit, data at rest, and access controls within our systems.

• All data transmitted between your device and the WinPKR platform is encrypted using 256-bit SSL/TLS encryption. The padlock icon in your browser confirms this encryption is active.
• Stored personal data — including account records, transaction histories, and identity documents — is encrypted at rest on WinPKR servers.
• Payment processing on WinPKR is handled in compliance with PCI-DSS standards. WinPKR does not store full card numbers, CVV codes, or mobile banking PINs on its systems at any point.
• Access to player data within the WinPKR team is strictly role-based. Only staff members whose specific job function requires access to personal data can access it, and all access is logged and auditable.
• WinPKR conducts periodic security reviews of its systems, including testing for vulnerabilities and reviewing third-party service providers' security standards.
• In the event of a data breach that is likely to result in a risk to your rights, WinPKR will notify affected players and take all appropriate remedial action without undue delay.

No online system can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong password, keeping your mobile number and contact details up to date on WinPKR, and logging out of the platform when using shared devices. If you suspect unauthorised access to your WinPKR account, contact support immediately at support@winpkr.run.

10Your Rights Over Your Personal Data

As a WinPKR player and data subject, you have meaningful rights over your personal data. WinPKR respects these rights and has a clear process for handling requests. To exercise any of the rights below, email support@winpkr.run with the subject line "Data Rights Request" — no legal formality is needed, a plain-language email is sufficient.

WinPKR will respond to all data rights requests within 14 days. In complex cases we may extend this to 30 days, in which case we will notify you of the extension. Exercising your data rights will never affect your WinPKR account status, VIP Club tier, or bonus eligibility.

11Children and Minors

WinPKR is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If WinPKR becomes aware that personal data has been collected from a minor, the account is closed immediately, any funds held are returned to a verified adult account holder, and all personal data associated with the minor's account is deleted.

If you believe that a minor may have created a WinPKR account, please contact us immediately at support@winpkr.run so that we can investigate and act promptly. Protecting minors from exposure to real-money gambling is a priority for WinPKR and is supported by our age verification procedures and Responsible Gaming policy.

12Third-Party Links

The WinPKR platform does not contain links to external websites. All pages and features within winpkr.run are operated directly by WinPKR. This Privacy Policy applies exclusively to data collected through the WinPKR platform itself.

WinPKR's game software providers and payment processors are separate organisations with their own privacy policies. When you interact with their systems — for example, when completing an Easypaisa payment — your data is subject to that provider's own privacy practices for the duration of that interaction. WinPKR recommends reviewing the privacy policies of your payment provider for further information.

13Updates to This Privacy Policy

WinPKR may update this Privacy Policy from time to time to reflect changes in how we handle data, updates to applicable law, or changes to the platform's features. The "Last Updated" date at the top of this page always reflects the most recent version.

Where updates are material — meaning they meaningfully change your rights or how your data is handled — WinPKR will notify you via in-app notification or email to your registered contact at least 14 days before the changes take effect. Minor updates such as clarifications or corrections may take effect immediately and are reflected in the updated date only.

Continued use of WinPKR after an update to this Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any update, you may request account closure and deletion of your personal data (subject to legally required retention) by contacting support@winpkr.run.

14Contact WinPKR About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or how WinPKR handles your personal data, please get in touch using the details below. All privacy-related communications are handled confidentially by the WinPKR data team.

WinPKR is committed to resolving privacy concerns directly with players. If you feel that a concern has not been adequately addressed after contacting WinPKR, you have the right to escalate it through appropriate channels. Details of the applicable escalation process are available on request from support@winpkr.run.