Section 1
Who We Are
winpke is an online gaming and sports betting platform accessible at winpke.com, offering cricket betting, live casino games, jackpot slots, arcade games, and related gambling entertainment products to registered users. winpke operates under an international gaming licence and serves a primarily Pakistani user base with full PKR support and localised payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT.
For the purposes of this Privacy Policy, winpke is the data controller responsible for the personal information you provide when registering an Account, using the Platform, or communicating with our support team. We determine the purposes for which your personal data is processed and the means by which that processing takes place.
If you have any questions about this Privacy Policy or about how winpke handles your personal information, please contact our Data Protection team at [email protected].
Section 2
Scope of This Policy
This Privacy Policy applies to all personal data collected, processed, stored, and transmitted by winpke in connection with your use of the winpke Platform, including:
- Browsing or accessing any part of the winpke website at winpke.com, whether or not you hold a registered Account.
- Registering a winpke Account and completing the KYC (Know Your Customer) identity verification process.
- Making PKR deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT.
- Placing bets on cricket, PSL, or any other sports market available on winpke.
- Playing any casino game, slot, or arcade product on the winpke Platform.
- Contacting winpke's customer support team via live chat, email, or any other communication channel.
- Subscribing to winpke promotional communications or participating in any winpke promotional offer.
This Policy does not apply to third-party websites, payment processors, or services that may be accessible via links from the winpke Platform. winpke is not responsible for the privacy practices of third-party providers and encourages Users to review those providers' own privacy policies independently.
Section 3
Data We Collect
winpke collects the following categories of personal data from Users. The specific data points collected may vary depending on the features and services you access:
| Category |
Data Points Collected |
When Collected |
| Identity Data |
Full legal name, CNIC number, date of birth, gender, photograph (for KYC) |
Account registration & KYC |
| Contact Data |
Mobile number, email address, city of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad) |
Account registration |
| Financial Data |
JazzCash/EasyPaisa number, bank account details (IBAN/account number for HBL, UBL, Meezan), USDT wallet address, transaction history, deposit and withdrawal records |
Deposits & withdrawals |
| KYC Documents |
CNIC front and back copy, proof of address, source of funds documentation (where requested) |
KYC verification |
| Technical Data |
IP address, browser type and version, device type, operating system, screen resolution, time zone |
Every Platform visit |
| Usage Data |
Pages visited, games played, bet history, session duration, feature interactions, search queries within Platform |
Active Platform use |
| Communications Data |
Live chat transcripts, support email correspondence, complaint records |
Customer support interactions |
| Marketing Preferences |
Promotional opt-in/opt-out status, preferred communication language (Urdu/English), bonus history |
Account settings & promotions |
winpke does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for CNIC-based age and identity verification under KYC obligations.
Section 4
How We Collect Your Data
winpke collects personal data through the following channels and mechanisms:
- Direct submission: Information you actively provide during Account registration, KYC document upload, deposit/withdrawal requests, support ticket submission, or promotional participation.
- Automated collection: Technical and usage data collected automatically via server logs, cookies, web beacons, and similar tracking technologies each time you access the winpke Platform.
- Payment providers: Transaction confirmation and status data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency wallet services when you initiate a deposit or withdrawal.
- KYC verification partners: Identity verification data received from third-party KYC service providers engaged by winpke to validate CNIC authenticity and confirm age eligibility.
- Fraud and AML screening: Risk-scoring data received from third-party anti-money laundering and fraud detection services integrated with the winpke Platform.
- Customer support channels: Information you share when you contact winpke via live chat, email to [email protected], or any other support channel.
Section 5
How We Use Your Data
winpke uses the personal data it collects for the following purposes. Each purpose is linked to a legitimate processing basis described in Section 6:
- Account management: Creating, maintaining, and administering your winpke Account, including processing PKR deposits and withdrawals and maintaining your bet and transaction history.
- Identity and age verification: Confirming that you are who you say you are and that you meet winpke's strict 21+ age requirement through CNIC-based KYC verification.
- Platform delivery: Providing you with access to cricket betting markets, live casino games, slots, Captain Fisher, Dino Hunter, and all other winpke gaming products.
- Regulatory compliance: Meeting winpke's obligations under its international gaming licence, including anti-money laundering (AML) checks, transaction monitoring, and reporting requirements.
- Fraud prevention: Detecting, investigating, and preventing fraudulent activity, collusion, bonus abuse, and money laundering on the winpke Platform.
- Customer support: Responding to your enquiries, resolving complaints, and providing account assistance in both Urdu and English.
- Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and facilitating access to deposit limits, cool-off periods, and self-exclusion tools.
- Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.
- Platform improvement: Analysing usage data in aggregated, anonymised form to improve the winpke Platform's performance, features, and user experience.
winpke does not use your personal data for automated decision-making that produces legal or similarly significant effects on you — such as permanent Account bans — without human review. All material account decisions involve a member of winpke's compliance team.
Section 6
Legal Basis for Processing
winpke processes your personal data under the following legal bases, each applicable to the corresponding processing activities described in Section 5:
- Contractual necessity: Processing required to perform the contract between you and winpke — specifically, operating your Account, processing your PKR transactions, and providing access to gaming products.
- Legal obligation: Processing required for winpke to comply with applicable law, including KYC/AML obligations under our international gaming licence conditions, age verification mandates, and regulatory reporting duties.
- Legitimate interests: Processing conducted for winpke's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your data protection rights.
- Consent: Processing of your data for direct marketing communications, where you have given clear, affirmative consent at the time of Account registration or via your Account notification preferences. You may withdraw this consent at any time by contacting [email protected].
Section 7
Cookies & Tracking Technologies
winpke uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage, and deliver a personalised experience. The following categories of cookies are used:
- Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
- Functional cookies: Used to remember your preferences such as display language (Urdu or English), previously selected payment method, and responsible gaming notification settings.
- Analytics cookies: Used in aggregated, anonymised form to understand how Users navigate the winpke Platform, which game categories are most popular, and where the checkout or deposit flow may be improved.
- Session cookies: Temporary cookies that expire when you close your browser, used to maintain your logged-in state during a single Platform session.
winpke does not use third-party advertising or retargeting cookies to track your activity across other websites. Our cookie usage is limited to Platform-specific operational and analytical purposes only.
You may manage cookie preferences via your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Disabling functional and analytics cookies will not affect your ability to place bets or make transactions.
Section 8
Data Sharing & Disclosure
winpke does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes under any circumstances. Your personal data may be shared with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data processing agreements:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT wallet providers receive the minimum transaction data necessary to process your PKR deposits and withdrawals.
- KYC verification providers: Third-party identity verification services engaged by winpke receive your CNIC details and related documents solely for the purpose of confirming your identity and age.
- AML and fraud screening services: Risk management providers receive transaction data and behavioural signals for the purpose of detecting money laundering and fraudulent activity.
- Game content providers: Third-party game studios whose content is hosted on the winpke Platform may receive anonymised session data for game performance and RTP monitoring purposes only. No identifiable personal data is shared with game content providers.
- Regulatory and law enforcement authorities: winpke will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction — including disclosures required under our gaming licence conditions.
- Professional advisors: Legal counsel, accountants, and auditors engaged by winpke may have access to personal data where strictly necessary for the delivery of their professional services, subject to professional confidentiality obligations.
winpke will never share your CNIC details, bank account information, or KYC documents with any party other than licensed identity verification providers and regulatory authorities. Your financial data is never disclosed to game content providers, marketing agencies, or analytics platforms.
Section 9
International Data Transfers
winpke operates under an international gaming licence, and certain data processing activities — including KYC verification and fraud screening — may involve transferring your personal data to service providers located outside Pakistan. Where such transfers take place, winpke ensures that appropriate safeguards are in place, including:
- Standard contractual clauses or equivalent data transfer agreements with all third-party processors located in jurisdictions outside Pakistan.
- Assessment of the data protection laws and practices of the recipient jurisdiction prior to any transfer being authorised.
- Limitation of transferred data to the minimum necessary for the specific processing purpose.
Your PKR wallet data, transaction records, and Account balance information are stored on servers protected by 256-bit SSL encryption. winpke does not transfer financial transaction data to any jurisdiction that does not maintain adequate data protection standards.
Section 10
Data Retention
winpke retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required under our gaming licence obligations. The following retention periods apply:
| Data Category |
Retention Period |
Basis |
| Account & Identity Data |
Duration of Account + 5 years post-closure |
Gaming licence & AML obligations |
| KYC Documents (CNIC copies) |
Duration of Account + 5 years post-closure |
Regulatory & legal obligation |
| Financial & Transaction Records |
7 years from transaction date |
AML / tax compliance |
| Bet History & Gaming Records |
5 years from bet date |
Dispute resolution & compliance |
| Support & Complaint Records |
3 years from ticket closure |
Dispute resolution |
| Marketing Preference Records |
Until opt-out + 1 year |
Consent management |
| Technical & Usage Logs |
13 months on a rolling basis |
Security & fraud prevention |
Upon expiry of the applicable retention period, winpke will securely delete or anonymise your personal data in accordance with its internal data destruction policy. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.
Section 11
Your Rights
As a winpke User, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact winpke's Data Protection team at [email protected] with the subject line "Data Rights Request":
- Right of access: You have the right to request a copy of all personal data winpke holds about you. winpke will respond to access requests within 30 days of receipt.
- Right to rectification: If any personal data winpke holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Note that changes to KYC-verified identity data may require re-submission of supporting documents.
- Right to erasure: In certain circumstances, you may request that winpke delete your personal data. This right is subject to winpke's legal and regulatory retention obligations — data required for AML compliance, gaming licence conditions, or active dispute resolution cannot be deleted on request.
- Right to restrict processing: You may request that winpke restrict the processing of your data in specific circumstances, such as while a data accuracy dispute is under investigation.
- Right to data portability: You may request that winpke provide a copy of the personal data you have provided to us in a structured, machine-readable format.
- Right to withdraw consent: Where winpke processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Right to object: You may object to winpke's processing of your data where that processing is based on legitimate interests, unless winpke can demonstrate compelling legitimate grounds that override your interests.
winpke will respond to all data rights requests within 30 calendar days. In complex cases, this may be extended by a further 60 days, in which case winpke will notify you of the extension and its reason within the initial 30-day period.
Section 12
Children & Minors
winpke operates a strict 21+ age policy across all Platform products and services without exception. The winpke Platform is not intended for, directed at, or accessible to individuals under the age of 21.
winpke does not knowingly collect personal data from any individual under the age of 21. All Account registrations are subject to mandatory CNIC-based KYC verification, which includes confirmation of date of birth as part of the identity check.
If winpke discovers or is notified that a registered Account belongs to a User under 21 years of age, that Account will be immediately suspended, all pending transactions will be cancelled, and the matter will be handled in accordance with winpke's responsible gaming protocols and applicable regulatory obligations. Any deposits made by an underage User will be refunded to the payment source minus any bonus amounts already utilised.
If you are a parent or guardian and believe your child has registered an Account on winpke, please contact us immediately at [email protected] and we will take prompt action.
Section 13
Security Measures
winpke takes the security of your personal data seriously and has implemented a layered set of technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure, or destruction:
- 256-bit SSL/TLS encryption: All data transmitted between your device and the winpke Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Our SSL certificate is renewed and audited regularly.
- Encrypted data storage: Personal and financial data held in winpke's databases is stored in encrypted form. Encryption keys are managed through a separate, access-controlled key management system.
- Access controls: Internal access to personal data is strictly limited on a need-to-know basis. All winpke staff with data access undergo background screening and regular data protection training.
- Multi-factor authentication (MFA): MFA is available and strongly recommended for all winpke User Accounts. winpke's internal systems require MFA for all staff accessing sensitive User data.
- Intrusion detection and monitoring: winpke operates 24/7 automated monitoring of its systems to detect and respond to security incidents in real time.
- Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, winpke will notify affected Users and relevant regulatory authorities within 72 hours of becoming aware of the breach.
Whilst winpke implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. winpke will never ask for your password via email, live chat, or any other channel.
Section 14
Third-Party Services
The winpke Platform integrates with a number of third-party service providers to deliver its full range of features. These providers process limited personal data strictly as data processors acting on winpke's documented instructions:
- Game content studios: Third-party developers whose games are hosted on winpke receive anonymised session data for game performance monitoring. No identifiable personal data is shared.
- Live casino feed providers: Live dealer game providers receive only the session token and anonymised game interaction data required to stream live tables to your device.
- Payment gateways: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT providers receive the transaction data necessary to process your PKR payments under their own published privacy terms.
- KYC / identity verification providers: Third-party CNIC verification services process your identity documents under strict contractual data processing obligations and may not use that data for any purpose other than winpke's identity verification request.
All third-party data processors engaged by winpke are subject to written data processing agreements that require them to process data only on winpke's instructions, maintain appropriate security measures, and delete or return data upon the conclusion of the processing engagement.
Section 15
Changes to This Policy
winpke reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform services. When material changes are made, winpke will:
- Display a prominent notice on the winpke Platform homepage and within your Account dashboard upon your next login following the update.
- Send an email notification to the address registered on your Account summarising the key changes and their effective date.
- Update the "Effective" and "Last Reviewed" dates at the top of this Privacy Policy page.
Continued use of the winpke Platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised terms. If you do not agree with a material change to this Policy, you should discontinue use of the Platform and contact [email protected] to request Account closure prior to the effective date.
We recommend that all winpke Users review this Privacy Policy periodically to stay informed about how your personal data is being protected.
Section 16
Contact & Data Enquiries
For all privacy-related queries, data rights requests, or concerns about how winpke handles your personal information, please contact our Data Protection team using the following details:
- Email: [email protected] — please use the subject line "Privacy / Data Rights" for all data-related enquiries.
- Live Chat: Available 24/7 within your winpke Account dashboard. For data rights requests requiring formal documentation, email is preferred.
- Response time: winpke aims to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 calendar days.
When submitting a data rights request, please include your registered winpke username, the email address associated with your Account, a clear description of your request (e.g. access, rectification, erasure), and a copy of your CNIC for identity verification purposes. This enables winpke to process your request accurately and securely.
winpke is committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with winpke's response to a data rights request, you retain the right to escalate the matter to the data protection supervisory authority of the applicable jurisdiction.