Privacy Policy – How WinPRK Protects Your Data in Pakistan

Welcome to WinPRK. This Privacy Policy describes how WinPRK ("we," "us," "our," "WinPRK") collects, processes, stores and protects the personal information of registered players and visitors to the WinPRK platform. WinPRK is Pakistan's dedicated online gaming platform covering cricket betting, PSL wagering, live Andar Bahar, poker, jackpot slots and all related services — all conducted in Pakistani Rupees (PKR).

We take the privacy of our players seriously. The platform is used by hundreds of thousands of Pakistani players who trust WinPRK with their personal and payment information. That trust is not something we take lightly. This policy sets out exactly what we do with the data you share with us — clearly, in plain English, without burying important information in paragraphs of legalese.

By registering a WinPRK account, using the platform or visiting the WinPRK website, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your information as described here. This Privacy Policy is incorporated into WinPRK's Terms and Conditions by reference.

WinPRK collects personal information in two ways: information you provide directly to us, and information collected automatically as you use the platform. We only collect what is genuinely necessary for operating a safe, fair and compliant gaming platform.

Information you provide directly:

• Registration data: Your full name, Pakistani mobile number, date of birth, email address and any other information submitted when creating your WinPRK account.
• Identity verification documents: A copy of your CNIC (Computerised National Identity Card) or other acceptable identity document if requested during the account verification process. These are collected strictly for anti-money laundering (AML) and know-your-customer (KYC) compliance.
• Payment information: Details of the payment methods you use to deposit and withdraw on WinPRK — including mobile wallet identifiers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers and masked card details for Visa/Mastercard transactions. Full card numbers are never stored on WinPRK's servers.
• Communication records: Messages you send to WinPRK through live chat, email or any other support channel. These are retained to maintain a record of your support history and to improve our service.
• Responsible gaming preferences: Any deposit limits, loss limits, session reminders or self-exclusion settings you apply through your WinPRK account settings.

Information collected automatically:

• Device and technical data: Your device type, operating system, browser type, screen resolution and device identifier. This helps WinPRK optimise the platform experience for Pakistani Android and iOS users.
• Usage data: Pages and sections of the WinPRK platform you visit, betting markets you view, games you play, session duration and navigation patterns. This data is used to improve the platform and personalise your experience.
• Connection data: Your IP address and approximate geographic location. This is used for security monitoring, fraud prevention and ensuring WinPRK's services are delivered correctly.
• Cookies and tracking data: As described in detail in Section 5 below.

WinPRK uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without your explicit consent.

• Account management: To create and maintain your WinPRK player account, manage your login credentials, process account settings changes and communicate essential account information to you.
• Service delivery: To make cricket betting markets, PSL wagering, Andar Bahar tables, poker rooms, jackpot slots and all other WinPRK services available and functional for you.
• Payment processing: To process deposits and withdrawals in PKR through your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card. Payment data is handled securely and shared only with the specific payment provider required to complete the transaction.
• Identity verification and AML compliance: To verify your identity in line with standard know-your-customer requirements and to meet anti-money laundering obligations. This is a legal requirement, not optional.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to make responsible gaming tools available to you, and to enforce any limits, time-outs or self-exclusions you have set on your account.
• Platform improvement: To analyse usage patterns, identify technical issues, improve the user interface and develop new features that serve Pakistani players better.
• Security and fraud prevention: To detect, investigate and prevent fraudulent activity, account takeover attempts, bonus abuse and any other behaviour that breaches WinPRK's Terms and Conditions.
• Marketing communications: To send you information about WinPRK promotions, PSL season offers, cricket betting enhancements and new features — but only where you have opted in to receive such communications. You can opt out at any time.
• Legal compliance: To comply with applicable laws, regulations and lawful requests from competent authorities.

Given that WinPRK processes all financial transactions in Pakistani Rupees through local payment infrastructure, this section specifically addresses how your PKR payment data is handled.

WinPRK accepts deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and Pakistani Visa/Mastercard. Each of these methods involves your payment provider processing part of the transaction, and WinPRK shares only the minimum information necessary with each provider to complete the transaction.

Card payments: Full card numbers are never stored on WinPRK's servers. Card transactions use tokenisation through our payment gateway — meaning your actual card details are replaced with a secure token that can only be used for subsequent transactions on your WinPRK account. WinPRK stores only the last four digits of your card number and the card type for your reference.

Mobile wallets: Easypaisa and JazzCash transactions involve sharing your registered mobile number with the relevant wallet provider to authenticate and process the transaction. Your full wallet PIN or password is never shared with or stored by WinPRK.

IBFT bank transfers: Your bank account details provided for IBFT transactions are stored in encrypted form and used only to process your specific deposit or withdrawal request. WinPRK does not use stored bank details for any purpose other than processing your explicitly requested transactions.

WinPRK uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

WinPRK uses the following categories of cookies:

• Essential cookies: These are strictly necessary for the WinPRK platform to function. They maintain your login session, remember your language and display preferences, and ensure that the betting interface works correctly. These cannot be disabled without breaking core platform functionality.
• Performance cookies: These collect anonymised data about how players use the WinPRK platform — which pages load slowly, where errors occur, and how navigation flows are used. This data is used purely to improve the platform and is never linked to your personal identity.
• Functional cookies: These remember your preferences and settings — such as your preferred display options or your last viewed cricket market — so you do not have to reset them every time you log in.
• Analytics cookies: WinPRK uses internal analytics to understand platform usage patterns in aggregate. This data is anonymised and used for product development decisions only.

WinPRK does not use advertising or third-party marketing cookies that track you across other websites. The cookies used on WinPRK serve the platform itself, not external advertising networks.

You can manage cookie settings through your browser. Note that disabling essential cookies will affect the functionality of the WinPRK platform — in particular, you may not be able to maintain a login session or place bets without essential cookies enabled.

WinPRK does not sell, rent or trade your personal information to any third party for their marketing purposes. Full stop. Your data belongs to you and is used by WinPRK to operate its platform and comply with legal obligations — nothing more.

WinPRK may share your data with the following categories of third party in specific, limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card payment gateways receive the minimum information required to process your specific transaction. Each provider is contractually required to handle this data in accordance with applicable data protection standards.
• Identity verification providers: Where WinPRK uses a third-party KYC or identity verification service, your identity documents may be shared with that provider for the purpose of verification only. Such providers are contractually bound to handle this data securely and not to use it for any other purpose.
• Technology and infrastructure providers: Cloud hosting, content delivery and platform technology providers who host or support the WinPRK platform may have access to data as part of their service. All such providers are assessed for data security standards before engagement and are contractually required to maintain appropriate protections.
• Responsible gaming organisations: Where WinPRK is required to share information about a self-excluded player with an industry-wide self-exclusion scheme to prevent that player from accessing other gaming platforms, we may do so. This is done to protect the player, not to penalise them.
• Law enforcement and regulatory authorities: WinPRK will disclose personal data to law enforcement, financial intelligence bodies or regulatory authorities when required to do so by a lawful order, subpoena or legal obligation. We will notify you of such a disclosure where we are legally permitted to do so.

WinPRK takes the security of your personal and financial data seriously and maintains a comprehensive set of technical and organisational measures to protect it. These include:

• SSL/TLS encryption: All data transmitted between your device and WinPRK's servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection to WinPRK is encrypted.
• Data encryption at rest: Personal and payment data stored in WinPRK's databases is encrypted at rest using AES-256 encryption. This means that even if a database were accessed without authorisation, the stored data would not be readable without the encryption keys.
• Payment tokenisation: As described in Section 4, full card numbers and sensitive payment credentials are never stored in raw form on WinPRK's servers.
• Access controls: Access to personal data within WinPRK's internal systems is restricted to employees who have a genuine operational need for that access. All internal access is logged and monitored.
• Two-factor authentication: WinPRK offers two-factor authentication for player accounts and requires it for sensitive internal administrative actions.
• Security monitoring: WinPRK's systems are monitored continuously for suspicious activity, attempted intrusions and unusual access patterns. Security incident response procedures are in place for rapid containment and player notification if a breach were to occur.
• Regular security reviews: WinPRK conducts periodic security assessments to identify and address vulnerabilities before they can be exploited.

No platform can guarantee absolute security against all possible threats. If you become aware of any security concern related to your WinPRK account or any suspected data breach, please contact us immediately at support@winprk.com.

WinPRK retains your personal data for as long as your account is active and for specified periods after account closure, in accordance with legal and operational requirements:

• Active accounts: All personal, identity and transaction data associated with an active WinPRK account is retained for the lifetime of that account.
• Transaction and financial records: All deposit, withdrawal and bet transaction records are retained for a minimum of five years following the date of each transaction. This is a standard financial record-keeping requirement.
• Identity verification documents: CNIC copies and other identity documents submitted for KYC purposes are retained for five years from the date of submission or from the date of account closure, whichever is later.
• Communications and support records: Support interactions, live chat logs and email correspondence are retained for three years to maintain a history of your support interactions and to resolve any disputes that may arise.
• Responsible gaming records: Records of self-exclusions, deposit limits and other responsible gaming settings are retained for the full duration of any self-exclusion and for a period afterward to ensure that re-registration requests are reviewed appropriately.
• Closed accounts: Following account closure at a player's request, WinPRK retains the data categories above for the required legal periods, after which personal data is securely deleted or anonymised. Data retained after closure is not used for any active marketing or commercial purpose.

Where data is no longer required and its retention period has expired, WinPRK securely deletes or anonymises it in line with standard data disposal practices.

As a WinPRK player, you have meaningful rights over your personal data. WinPRK is committed to honouring these rights fully and promptly. Your rights include:

To exercise any of these rights, contact WinPRK at support@winprk.com using the email address registered to your account. We may need to verify your identity before processing your request. WinPRK will respond to all data rights requests within 30 days. Where a request is complex or relates to a large volume of data, we may extend this by a further 30 days with notice to you.

WinPRK is strictly for adults aged 18 and over. We do not knowingly collect, process or store personal data relating to persons under the age of 18. If WinPRK becomes aware that a user under 18 has registered an account, that account will be immediately and permanently closed and all associated data handled in accordance with applicable child data protection standards.

If you are a parent or guardian and you believe your child has registered a WinPRK account, please contact us immediately at support@winprk.com. We will investigate promptly and close any confirmed underage account within one business day of receiving a verified report.

WinPRK recommends the use of parental control software by all parents and guardians to prevent underage access to online gaming and betting platforms. Age verification is conducted as part of the WinPRK registration and KYC process, but parental controls provide an additional layer of protection on the device level.

WinPRK may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or changes in applicable law. The date at the top of this page shows when the policy was last updated.

Where changes to this policy are material — meaning they significantly affect how your data is collected, used or shared — WinPRK will notify active players through one or more of the following channels:

• An in-platform notification displayed when you next log in to WinPRK.
• A notification sent to your registered mobile number or email address.

Your continued use of WinPRK after a policy update constitutes your acceptance of the updated policy. If you do not accept changes to this policy, you may request closure of your WinPRK account by contacting support@winprk.com. Your account balance will be returned to your registered payment method following standard processing.

We recommend reviewing this Privacy Policy periodically. The full version is always available on this page at winprk.com/privacy-policy.

If you have any questions about this Privacy Policy, how WinPRK handles your data, or if you wish to exercise any of your data rights, please contact us through any of the following channels:

• Email: support@winprk.com — For all privacy-related queries and data rights requests, please use the email address registered to your WinPRK account and include "Privacy" in the subject line.
• Live Chat: Available 24/7 within your logged-in WinPRK account. For data rights requests, email is preferred as it provides a written record.

WinPRK will acknowledge all privacy-related communications within 2 business days and provide a full response within 30 days. If your request is complex, we will notify you of the extended timeline within the initial 30-day period.

If you are not satisfied with WinPRK's response to a privacy concern or data rights request, you have the right to raise the matter with the relevant data protection authority in your jurisdiction. WinPRK encourages players to contact us directly in the first instance so that we have the opportunity to resolve any issue promptly and fairly.