Win Pak Privacy Policy – How We Protect Your Data

1. Overview and Scope

This Privacy Policy applies to all users of the Win Pak platform — whether you are browsing the site without an account, in the process of registering, or an active member. It covers how Win Pak collects, processes, stores, and protects personal information across the website and the Win Pak mobile app.

By registering an account with Win Pak, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. This policy should be read alongside the Terms and Conditions and Responsible Gaming guidelines, both of which are incorporated by reference.

If you have any questions about how Win Pak handles your personal data that are not answered by this policy, you can get in touch via the contact details provided in Section 12.

2. What Data We Collect

Win Pak collects personal data in three main ways: directly from you when you register or use the platform, automatically through your device and browser when you visit the site, and from third-party payment providers when you make a deposit or withdrawal.

Data You Provide Directly

• Registration details: Full name, date of birth, email address, mobile number, and a username and password of your choosing.
• Identity verification documents: CNIC number, scanned copy of CNIC or passport, and proof of address if requested during verification.
• Payment method details: JazzCash account number, Easypaisa account number, Raast ID, bank account details for IBFT, or card details for debit/credit card deposits. Full card numbers are never stored on Win Pak servers — see Section 4.
• Communications: Any messages you send to Win Pak's support team, feedback you submit, or responses to surveys.

Data Collected Automatically

• Device and browser information: Device type, operating system version, browser type and version, screen resolution, and language settings.
• IP address and approximate location: Used for security checks, to detect unusual login activity, and to ensure that our service is being accessed from a supported region.
• Usage and session data: Pages visited, time spent on each page, games played, bet amounts, session duration, and features used.
• Cookies and similar technologies: As described in Section 5.

3. How We Use Your Data

Win Pak uses your personal data for the following specific purposes. We do not use your data for any purpose that is not listed here without first updating this policy and informing you of the change.

Win Pak does not use your personal data for targeted advertising on external platforms, and we do not build advertising profiles based on your gaming activity. Any promotional communications from Win Pak relate specifically to your account and platform offers — not third-party advertising.

4. Payment and Transaction Data

When you make a deposit or withdrawal on Win Pak using JazzCash, Easypaisa, Raast, bank transfer, or a debit or credit card, the transaction is processed through a secure third-party payment gateway. Win Pak does not store full card numbers, CVV codes, or complete bank account credentials on its own servers.

What Win Pak does retain is a record of each transaction: the date and time, the PKR amount, the payment method type used (e.g., JazzCash), the last four digits of a card if applicable, the transaction reference number, and whether the transaction was a deposit or withdrawal. These records are kept for account management and any necessary dispute resolution.

Payment Method Verification

Win Pak may ask you to verify that a payment method belongs to you before processing a withdrawal. This is a security measure to protect against unauthorised use of payment accounts. If you are asked for verification, you may be required to provide a screenshot or statement confirming ownership of the JazzCash, Easypaisa, or bank account linked to your Win Pak profile.

5. Cookies and Tracking Technologies

Win Pak uses cookies and similar tracking technologies on its website and mobile app. These are small data files stored on your device that help the platform function correctly and allow us to understand how the site is being used. The cookies Win Pak uses fall into the following categories:

• Essential cookies: Required for core platform functionality — keeping you logged in, maintaining your session, and remembering your language preferences. These cannot be disabled without affecting how the platform works.
• Analytics cookies: Used to understand how players use the platform — which pages are visited most, how long sessions last, and where users typically drop off during registration. This data is aggregated and anonymised.
• Security cookies: Help detect unusual activity, prevent unauthorised login attempts, and protect your account from being accessed from unfamiliar devices.
• Preference cookies: Store display preferences and notification settings so you do not have to reset them each time you visit.

Win Pak does not use third-party advertising cookies. You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform normally.

6. Sharing and Third Parties

Win Pak does not sell, rent, or trade your personal data to any third party. There are, however, limited circumstances in which data is shared with trusted partners in order to operate the platform:

• Payment processors: Transaction data is shared with our payment gateway partners (including those facilitating JazzCash, Easypaisa, and Raast payments) to process deposits and withdrawals. These partners are contractually bound to process your data only for payment purposes.
• Identity verification providers: When enhanced identity verification is required, your CNIC details may be shared with a trusted KYC (Know Your Customer) verification partner. These providers operate under strict data handling agreements.
• Cloud hosting and infrastructure: Win Pak uses third-party cloud infrastructure to host the platform. Server and data storage providers have no access to your personal data beyond what is technically necessary to operate the hosting environment.
• Fraud and security services: Anonymised device and behavioural data may be shared with fraud detection partners to protect the integrity of the platform and all player accounts.

Win Pak may disclose personal data if required to do so by a valid legal process or court order, or where disclosure is necessary to protect the safety of a player or another individual.

7. How Long We Keep Your Data

Win Pak retains personal data only for as long as necessary for the purposes it was collected, or as required to meet legal and operational obligations. The following general retention periods apply:

• Active account data: Retained for as long as your account remains open and active on the platform.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for five years following account closure.
• Support communications: Retained for two years following the resolution of each query.
• Usage and session data: Retained in anonymised and aggregated form for up to two years for platform analytics purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an individual player. If you request account closure, your active account data will be removed from Win Pak's live systems within 30 days, subject to the retention requirements above for transaction and verification records.

8. Data Security

Win Pak takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, or misuse:

• Encryption in transit: All data transmitted between your device and Win Pak's servers is encrypted using TLS (Transport Layer Security).
• Encrypted storage: Sensitive data — including identity documents and payment records — is encrypted at rest in Win Pak's data storage systems.
• Access controls: Access to personal data within Win Pak's systems is limited to staff who genuinely need it to perform their role. All internal access is logged and audited.
• Account security: Player accounts are protected by password hashing, session timeouts, and optional two-factor verification via mobile number.
• Regular security reviews: Win Pak conducts periodic reviews of its security practices and infrastructure to identify and address vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. If you have reason to believe that your Win Pak account has been compromised, contact support immediately. Win Pak will investigate and, where a data breach has occurred that affects your personal data, notify you as promptly as possible.

9. Your Rights

As a Win Pak player, you have a number of rights regarding your personal data. These rights can be exercised by contacting Win Pak's support team using the details in Section 12. Win Pak aims to respond to all valid data rights requests within 30 days.

Please note that some of these rights are subject to conditions — for example, the right to erasure does not apply where Win Pak is required by law to retain certain records, such as financial transaction data. Where a request cannot be fulfilled in full, Win Pak will explain why and what steps can be taken instead.

10. Minors and Under-18 Protection

Win Pak is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Registration requires users to confirm that they are 18 or over, and Win Pak carries out age verification checks as part of the standard account verification process.

If Win Pak becomes aware that personal data has been collected from a minor — whether through a false declaration of age at registration or any other means — the account will be suspended immediately, the data will be securely deleted, any deposits made will be returned to the originating payment method, and any winnings accumulated will be voided.

11. Changes to This Policy

Win Pak may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes — such as new categories of data being collected, new third-party sharing arrangements, or changes to your rights — registered players will be notified via the in-app notification centre at least seven days before the updated policy takes effect. We encourage all players to review this page periodically to stay informed about how their data is being handled.

Continued use of the Win Pak platform following the effective date of any updated Privacy Policy constitutes acceptance of those changes. If you do not agree with an updated policy, you may request account closure by contacting the support team.

12. Contact and Data Queries

If you have a question about this Privacy Policy, want to exercise any of your data rights, or wish to report a concern about how your personal data has been handled, please contact Win Pak's support team. Our team is available seven days a week and aims to respond to all privacy-related queries within five business days.

You can reach the Win Pak support team at:

• Email: [email protected] (plain text — not a clickable link)
• In-platform support: Via the Help section in your Win Pak account after logging in.

When submitting a data rights request, please include your registered email address and, where possible, the account username associated with your Win Pak profile. This helps the team locate your records and process your request as quickly as possible.

For general questions about your account, bonuses, deposits, or withdrawals, the FAQ page covers most common topics and is often the fastest way to find an answer.