Privacy Policy — winpr Online Casino & Sportsbook

1.1 This Privacy Policy ("Policy") is published by winpr ("winpr," "we," "us," "our"), the operator of the online gaming and sports betting platform accessible at winpr.bet. This Policy governs the collection, processing, storage, sharing, and protection of personal data relating to all individuals who access or use the winpr platform ("you," "the Player," "the User").

1.2 winpr is committed to handling all personal data with the highest standards of care, transparency, and security. We collect only what is genuinely necessary, use it only for legitimate purposes, and protect it with robust technical and organisational security measures. Your trust is something we take seriously — not something we treat as a compliance box to tick.

1.3 This Policy applies to all personal data that winpr processes in connection with: the creation and management of player accounts; the provision of gaming and sports betting services; financial transactions including deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; player support interactions; and marketing communications where consented.

1.4 By registering a winpr account or using any of winpr's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue your use of the winpr platform.

2.1 winpr collects the following categories of personal data from players. The specific data collected depends on the nature and depth of your interaction with the Platform:

2.2 winpr does not knowingly collect, store, or process any Special Category data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless strictly required for a specific, lawful regulatory purpose — in which case explicit consent will be sought separately.

3.1 Directly From You. The majority of personal data winpr holds about you is information you provide directly. This includes data entered during account registration, KYC document uploads, payment transaction details, support communications, and any updates you make to your account profile or responsible gaming settings.

3.2 Automatically During Platform Use. When you access winpr — whether on a mobile browser in Karachi, a laptop in Lahore, or any other device anywhere in Pakistan — our systems automatically collect certain technical data including your IP address, browser information, device identifiers, session duration, pages visited, and game interaction data. This automatic collection uses cookies and similar technologies as described in Section 7.

3.3 From Payment Processors. When you make a deposit or withdrawal using JazzCash, EasyPaisa, or a bank transfer, our payment processing partners share with winpr the transaction reference, payment status, and wallet/account confirmation data necessary to complete and record the transaction.

3.4 From Identity Verification Services. For KYC verification, winpr may use third-party identity verification services to cross-check the documents and information you provide. These services may confirm identity data against official records and return a verification result to winpr.

3.5 From Fraud Prevention Databases. As part of our anti-fraud and anti-money laundering obligations, winpr may check certain player data against third-party fraud prevention and sanctions screening databases.

winpr processes personal data only where a valid lawful basis exists. The primary legal bases on which winpr relies are:

• Contractual Necessity: Processing your identity, contact, financial, and gaming data is necessary for winpr to fulfil its contractual obligations to you as a registered player — including account management, game provision, payment processing, and dispute resolution.
• Legal Obligation: winpr is required by international gaming regulatory and anti-money laundering frameworks to collect and retain identity documents, transaction records, and gaming activity data. Compliance with these obligations is not optional.
• Legitimate Interests: winpr processes certain technical and behavioural data on the basis of its legitimate interests in operating a secure, fair, and commercially sustainable gaming platform — including fraud detection, platform security, and responsible gaming monitoring. We apply a balancing test to ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where winpr sends you marketing communications by email or SMS, it does so only on the basis of your express, opt-in consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

5.1 winpr uses your personal data for the following specific purposes:

• Account Creation and Management: Creating, verifying, and maintaining your winpr player account; processing your registration details; enabling winpr Login access; managing account security and authentication including two-factor authentication.
• Service Delivery: Providing access to winpr's full game library including slots, live casino, cricket betting markets, PSL betting, video poker, and crash games; processing bets and settling outcomes; crediting winnings to your PKR account balance.
• Payment Processing: Processing deposits from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; processing withdrawal requests to your registered payment method; maintaining complete transaction records for your account history.
• KYC and Regulatory Compliance: Verifying your identity and age (21+ requirement) in accordance with international gaming standards; conducting AML checks; fulfilling mandatory record-keeping obligations under applicable regulatory frameworks.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; enabling and enforcing player-set limits, cooling-off periods, and self-exclusion; sending responsible gaming communications where appropriate.
• Fraud and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and multiple account registrations; maintaining the integrity and fairness of the winpr platform for all Pakistani players.
• Customer Support: Responding to your support queries, complaints, and dispute submissions; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify and implement platform improvements; testing new features; optimising the mobile experience for Pakistani players.
• Marketing (Consent-Based Only): Sending promotional emails and SMS messages about winpr bonuses, new games, and special offers — only where you have given explicit opt-in consent and only until you withdraw that consent.

6.1 winpr does not sell, rent, or trade your personal data. However, in order to operate its platform and comply with regulatory obligations, winpr shares specific data with carefully selected third-party service providers. All such providers are contractually required to process your data only as instructed by winpr, for the specified purpose only, and with adequate security safeguards in place.

6.2 Categories of third parties with whom winpr shares data include:

• Payment Processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank): Transaction data necessary to process deposits and withdrawals.
• Game Software Providers: Game session data shared with licensed game providers to operate certified RNG games and live dealer tables.
• Identity Verification (KYC) Providers: Identity and document data for age and identity verification against official records.
• Fraud Prevention Services: Relevant transaction and identity data for AML screening and fraud detection.
• IT Infrastructure & Hosting Providers: Technical access to data as necessary to operate the platform's servers and databases securely.
• Regulatory Authorities: winpr will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by law or where winpr determines in good faith that disclosure is reasonably necessary to protect against fraud, illegal activity, or harm.

6.3 winpr will never share your personal data with advertisers, social media companies, or any third party for marketing purposes without your explicit prior consent.

7.1 winpr uses cookies and similar tracking technologies (including local storage and session identifiers) on its platform. Cookies are small data files stored on your device that help the platform function correctly and improve your experience.

7.2 winpr uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your winpr account, security cookies that protect against cross-site request forgery, and cookies that store your account preferences. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming configuration, and notification preferences. These cookies improve your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the winpr platform — including which games are most popular, how long sessions last, and which features are most used. This data is used solely to improve the platform for Pakistani players.
• Security and Fraud Prevention Cookies: Used to detect unusual login patterns, identify suspicious activity, and protect your winpr account from unauthorised access.

7.3 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your winpr account and using the platform's core features.

8.1 winpr retains personal data for as long as is necessary for the purpose for which it was collected, subject to applicable regulatory minimum retention requirements. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, personal data will be securely and irreversibly deleted or anonymised in accordance with winpr's data disposal procedures.

9.1 winpr implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and winpr's servers — including login credentials, payment data, and personal information — is encrypted using bank-grade SSL/TLS protocols. Unencrypted transmission of sensitive data is not permitted under any circumstance.
• Password Hashing: winpr never stores player passwords in plain text. All passwords are stored as one-way cryptographic hashes using industry-standard algorithms. winpr's own staff cannot read your password.
• Access Controls: winpr's internal systems operate on a strict least-privilege access model. Staff members are granted access only to the personal data categories required to perform their specific job function. Access to sensitive player data is logged and audited.
• Data Segregation: Player personal data and player funds are held in systems segregated from winpr's operational infrastructure.
• KYC Document Security: Identity documents submitted for KYC verification are stored in encrypted form with access restricted to authorised verification personnel only.
• Regular Security Audits: winpr conducts regular security reviews and vulnerability assessments of its platform infrastructure to identify and remediate security risks before they can be exploited.
• Two-Factor Authentication (2FA): winpr supports optional player-side 2FA via OTP sent to your registered Pakistani mobile number, providing an additional authentication layer protecting account access.

9.2 Data Breach Response. In the event of a personal data breach that poses a risk to players' rights and interests, winpr will notify affected players and the applicable regulatory authority within a reasonable timeframe in accordance with international data protection standards.

10.1 As a winpr player, you have the following rights regarding your personal data. These rights are exercisable by contacting winpr at [email protected] with a written request identifying yourself and the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data winpr holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data winpr holds about you. You can update basic contact information directly in your account settings at any time.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to winpr's legal obligations to retain certain data categories for regulatory compliance purposes as described in Section 8. Erasure requests received during or after a pending regulatory investigation may be deferred.
• Right to Restriction of Processing: You may request that winpr restricts its processing of your data in specific circumstances — for example, while the accuracy of the data is being contested, or where you believe processing is unlawful but prefer restriction over deletion.
• Right to Data Portability: You may request that winpr provides your personal data in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contract.
• Right to Object: You have the right to object to winpr's processing of your data where processing is based on legitimate interests. winpr will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time through your account settings or by emailing support. Withdrawal of consent does not affect the lawfulness of prior consent-based processing.

10.2 winpr will respond to all valid data rights requests within 30 calendar days of receipt. For complex or multiple requests, this period may be extended by up to a further 60 days, with notification of the extension provided within the initial 30-day period.

11.1 winpr sends promotional communications — including bonus offers, new game announcements, PSL betting promotions, and platform news — only to players who have expressly opted in to receive such communications during registration or subsequently through their account settings.

11.2 You may opt out of winpr marketing communications at any time by: (a) updating your notification preferences in your winpr account settings; (b) clicking the unsubscribe link included in every marketing email; or (c) contacting [email protected] with an opt-out request. Opt-out requests are processed within 5 business days.

11.3 Please note that opting out of marketing communications does not affect the receipt of transactional and account-related messages — such as deposit confirmations, withdrawal status updates, KYC verification notices, responsible gaming alerts, and security notifications. These are sent on the basis of contractual and legal necessity, not marketing consent, and cannot be opted out of while your account remains active.

11.4 winpr does not send marketing communications to players who have activated a self-exclusion or cooling-off period on their account, regardless of prior marketing consent status.

12.1 The winpr platform is strictly restricted to individuals who are 21 years of age or older. winpr does not knowingly collect or process personal data from any person under the age of 21.

12.2 If winpr discovers — through its age verification process or any other means — that personal data has been collected from a person under the age of 21, winpr will immediately close the associated account, void any balances or winnings, and permanently delete all associated personal data within a reasonable timeframe.

12.3 Parents and guardians who have reason to believe that a minor has accessed or registered on the winpr platform should contact [email protected] immediately. winpr will investigate and take appropriate action, including data deletion, as quickly as possible.

12.4 winpr strongly encourages the use of parental control software on devices that may be accessed by minors. Please visit our Responsible Gaming page for further guidance on preventing underage access to online gaming content.

13.1 winpr reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in the law, changes in winpr's data processing practices, or improvements to how we explain our privacy commitments to Pakistani players.

13.2 When material changes are made to this Policy, winpr will notify registered players by email to their registered address and/or by displaying a prominent notice on the Platform for a minimum of 30 days following the change. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

13.3 Continued use of the winpr platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept the updated Policy should contact winpr to arrange account closure and data handling in accordance with their rights under Section 10.

13.4 Historical versions of this Privacy Policy are available on request by contacting [email protected].

14.1 winpr welcomes questions, concerns, and feedback regarding this Privacy Policy or the way in which your personal data is handled. If you have any privacy-related queries, please contact the winpr Data Protection team at:

📧 Email: [email protected]
🕐 Response Time: Within 5 business days for routine queries; within 30 days for formal data rights requests

14.2 If you are not satisfied with winpr's response to a privacy concern, you have the right to lodge a complaint with the applicable regulatory authority in your jurisdiction. winpr will cooperate fully with any regulatory investigation arising from a player complaint.

14.3 Before escalating a privacy complaint to a regulatory body, winpr encourages players to use the internal complaints process — in our experience, direct contact with the winpr team resolves the vast majority of concerns quickly, without the need for formal regulatory escalation.