At winapk, your privacy is not a checkbox — it is a core commitment. This policy explains exactly what personal data we collect from Pakistani players, why we collect it, how we protect it, and the rights you hold over your own information.
Six principles that govern how winapk handles every piece of your personal data
All data transmitted between your device and winapk servers is protected by TLS 1.3 encryption. Stored sensitive data — including CNIC copies and payment records — is encrypted at rest using AES-256.
winapk does not sell, rent, or barter your personal information to third-party marketers, data brokers, or advertisers. Your data is used solely to operate and improve your gaming experience.
We follow a data minimisation principle — collecting only what is strictly necessary for account operation, KYC compliance, and payment processing. No unnecessary profiling or data harvesting takes place.
You have the right to request a complete summary of the personal data winapk holds about you at any time. Requests are processed within 30 days and provided free of charge for the first request each calendar year.
Subject to regulatory retention requirements (AML records must be kept for a minimum of five years), you may request deletion of your personal data upon account closure. Requests are honoured within 60 days.
Identity documents collected for KYC verification are stored in an isolated, access-controlled environment. Only authorised compliance personnel may access KYC files, and all access is logged and audited.
A plain-language summary of every data category winapk processes
| Data Category | Examples | Purpose | Retention Period |
|---|---|---|---|
| Identity Data | Full name, date of birth, CNIC/NICOP number, passport scan | Account creation, KYC verification, age verification | Duration of account + 5 years post-closure |
| Contact Data | Email address, mobile number (Pakistani network) | Account notifications, OTP delivery, support communication | Duration of account + 2 years post-closure |
| Financial Data | JazzCash/EasyPaisa wallet ID, bank account last 4 digits, transaction history | Payment processing, withdrawal verification, AML compliance | 7 years (regulatory requirement) |
| Technical Data | IP address, device type, browser, operating system, session tokens | Security monitoring, fraud prevention, platform optimisation | 13 months rolling |
| Usage Data | Games played, bet amounts, session duration, feature interactions | Responsible gaming monitoring, personalisation, bonus eligibility | Duration of account + 1 year post-closure |
| Cookie Data | Session cookies, preference cookies, analytics identifiers | Platform functionality, session management, aggregate analytics | Session cookies: deleted on browser close. Persistent: up to 12 months |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Support quality, dispute resolution, compliance records | 3 years from date of communication |
As a winapk member, you hold these rights over your personal data at all times
Request a full copy of all personal data winapk holds about you. We will provide this in a structured, readable format within 30 days.
If any data we hold about you is inaccurate or incomplete, you have the right to request correction at any time via live support.
Request deletion of your personal data upon account closure, subject to mandatory regulatory retention obligations under AML law.
Ask us to temporarily halt processing of your data while a dispute or correction request is being resolved by our compliance team.
Receive your personal data in a machine-readable format (JSON or CSV) so you can transfer it to another service provider if you wish.
Object to processing of your data for direct marketing or profiling purposes. Your objection will be honoured within 72 hours.
Request human review of any decision made about your account solely by automated systems, such as fraud flags or bonus eligibility checks.
Withdraw marketing consent at any time by emailing [email protected] or updating your notification preferences in account settings.
1.1 winapk is Pakistan's premier online casino and sports betting platform, accessible at winapk.vip. We are committed to protecting the privacy and personal data of every member who registers on our platform. This Privacy Policy ("Policy") describes how we collect, use, store, and share personal information in connection with our services.
1.2 This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. Together, these documents form the complete agreement governing your relationship with winapk.
1.3 winapk operates under an international gaming licence. Our data handling practices are designed to comply with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
2.1 winapk collects personal data across the following categories. We collect only what is necessary to provide a safe, compliant, and high-quality gaming experience to our Pakistani members.
This includes your full legal name, date of birth, CNIC or NICOP number, passport number (if applicable), nationality, and scanned copies of the above documents submitted during KYC verification. This data is mandatory for all members who wish to process withdrawals.
Your email address, Pakistani mobile number, chosen username, and account preferences. This data is collected at registration and may be updated by you at any time through your account dashboard.
Details of deposits and withdrawals, including the payment method used (JazzCash wallet ID, EasyPaisa number, HBL/UBL/Meezan bank account reference, Visa/Mastercard last four digits, or USDT TRC20 wallet address), transaction amounts in PKR, timestamps, and reference numbers. We do not store full card numbers or complete bank account details on our servers.
Your IP address, device type and model, operating system and version, browser type and version, screen resolution, unique device identifiers, and time zone. This data is collected automatically when you access the winapk platform.
Information about how you interact with winapk — including which games you play (slots, Mahjong Ways 2, poker, cricket betting), session duration, bet sizes, feature usage, and navigation paths. This data supports responsible gaming monitoring and helps us identify members who may need assistance.
3.1 Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
3.2 Automatically: Through cookies, server logs, and similar tracking technologies when you browse or use the winapk platform. See Section 7 for full cookie details.
3.3 From third parties: From our KYC verification partner (who cross-references your CNIC/NICOP against Pakistani national identity databases), from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard), and from fraud prevention services that provide risk signals associated with your device or IP address.
4.1 winapk processes your personal data for the following purposes, each of which has a defined legal basis:
5.1 winapk does not sell your personal data. We share data only in the following limited, necessary circumstances:
5.2 All third-party service providers engaged by winapk are contractually required to handle your personal data in accordance with internationally recognised data protection standards and to use it solely for the purposes for which it was shared.
6.1 winapk implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These measures include:
6.2 In the event of a personal data breach that poses a risk to your rights and freedoms, winapk will notify affected members within 72 hours of becoming aware of the breach, in accordance with our obligations under applicable data protection law.
7.1 winapk uses cookies and similar technologies to operate the platform, remember your preferences, and maintain session security. The following categories of cookies are in use:
7.2 You may manage cookie preferences through your browser settings. Please note that disabling functional or security cookies may degrade your experience on the winapk platform. Strictly necessary cookies cannot be disabled via browser settings as they are essential to service delivery.
8.1 winapk retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The key retention periods are:
8.2 Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Deletion requests submitted by members are processed within 60 calendar days, subject to overriding legal retention obligations.
9.1 To exercise any of the rights described in this Policy — access, rectification, erasure, restriction, portability, objection, or withdrawal of consent — please contact our Data Protection team via:
9.2 We will respond to all privacy rights requests within 30 calendar days of receipt. For complex requests, we may extend this period by an additional 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window.
9.3 winapk will not charge a fee for processing privacy rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will inform you of any such fee before proceeding.
9.4 To protect your privacy, we may need to verify your identity before processing a request. This typically involves confirming your registered email address and, for sensitive requests, providing a copy of your CNIC or NICOP.
10.1 winapk is strictly a platform for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Any account found to belong to a person below the minimum age will be closed immediately and all associated data purged, except where retention is required by law.
10.2 Age verification is conducted at registration and reinforced during KYC. If our systems detect indicators that an account holder may be underage, the account will be suspended pending documentary verification.
10.3 If you are a parent or guardian and believe your child has created an account on winapk, please contact us immediately at [email protected]. We will investigate and close the account within 24 hours of a verified report.
11.1 As winapk operates under an international gaming licence, some of your personal data may be transferred to, stored, or processed in countries outside Pakistan. This may include our hosting infrastructure, KYC verification partners, and live casino game providers.
11.2 Where such transfers occur, winapk ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and, where applicable, adequacy decisions — to ensure that your data receives a standard of protection equivalent to that described in this Policy.
12.1 With your explicit consent at registration, winapk may send you promotional emails, SMS notifications (to your Pakistani mobile number), and in-platform messages about bonuses, new games, PSL cricket betting promotions, and special offers.
12.2 You may withdraw your marketing consent at any time by:
12.3 Withdrawing marketing consent will not affect transactional communications — you will still receive essential account notifications such as deposit confirmations, withdrawal approvals, and security alerts.
13.1 winapk reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify registered members via email to their registered address and display a prominent notice on the winapk platform for a minimum of 14 days before the changes take effect.
13.2 The "Effective Date" at the top of this document indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the winapk platform after the effective date of any revision constitutes your acceptance of the updated Policy.
13.3 All previous versions of this Policy are archived and available on request by contacting our support team.
14.1 For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the winapk Data Protection team through the following channels:
14.2 winapk aims to resolve all privacy-related queries promptly and transparently. If you are not satisfied with our response, you may escalate the matter to the independent dispute resolution body designated under winapk's gaming licence. Details are available upon written request.
Now that you understand how we protect your privacy, explore the winapk platform with confidence — world-class slots, live cricket betting, and more, all secured with enterprise-grade encryption.
🔞 21+ only | Play responsibly | Gambling involves financial risk