winpke Privacy Policy

winpke is a licensed online gaming platform operating at winpke.net, built specifically for Pakistani players who want access to casino games, sports betting, live dealer tables, slots, and arcade titles — all in Pakistani Rupees (PKR) with local payment support. For the purposes of this Privacy Policy, winpke is the data controller responsible for the personal information collected through our platform.

This Privacy Policy applies to all users who access winpke.net, register an account, deposit funds, place bets, participate in promotions, or interact with our customer support team in any capacity — whether from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan or internationally.

If you have any questions about this Privacy Policy or about how winpke handles your personal data, you can reach our data protection team at any time by emailing [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

winpke collects personal data through multiple touchpoints: your account registration, ongoing platform use, payment transactions, customer support interactions, and certain automated technical processes. Below is a transparent breakdown of the categories of data we collect and their sources.

winpke does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers beyond what is strictly required for age and identity verification through the KYC process.

winpke processes your personal data for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we use your personal information are as follows:

• Account Management: Creating, verifying, maintaining, and securing your winpke account, including processing login requests, password resets, and two-factor authentication via your registered Pakistani mobile number.
• Identity Verification (KYC): Confirming your age (21+), identity, and payment method ownership as required by our licensing obligations. KYC verification is a legal requirement, not optional.
• Payment Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20. This includes sharing minimum necessary data with payment processors to complete transactions.
• Gaming Services: Enabling access to all winpke game verticals including casino, sports betting (including PSL and cricket markets), slots, and arcade games. Logging gameplay data for dispute resolution, fairness auditing, and responsible gaming monitoring.
• Fraud Prevention & AML: Detecting, investigating, and preventing fraudulent activity, money laundering, account abuse, and other prohibited conduct as defined in our Terms & Conditions. This is both a legal obligation and a platform integrity requirement.
• Customer Support: Responding to your enquiries, complaints, and account-related requests through our live chat, email, and support ticketing systems. Support interactions are logged for quality assurance and dispute resolution purposes.
• Responsible Gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling behaviour, enabling our responsible gaming team to proactively offer support tools such as deposit limits and self-exclusion where appropriate.
• Marketing Communications: Sending promotional emails and SMS notifications about bonuses, new games, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment options, and user experience. This analysis does not identify individual players.
• Legal Compliance: Meeting reporting obligations under applicable anti-money laundering regulations, responding to lawful requests from Pakistani and international regulatory authorities, and maintaining records as required by our gaming licence.

winpke processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your account — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification requirements, anti-money laundering (AML) reporting obligations, and retention of transaction records.
• Legitimate Interests: Processing conducted for winpke's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, dispute resolution, and platform improvement through anonymised analytics.
• Consent: Processing conducted on the basis of your explicit opt-in consent — primarily for marketing communications via email and SMS. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

winpke does not sell your personal data to any third party. We share personal information only in the following tightly controlled circumstances, and only to the extent strictly necessary for each purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateway providers receive the minimum transaction data required to process your deposit or withdrawal. These providers are bound by their own privacy and data security obligations.
• KYC & Identity Verification Partners: Third-party identity verification services that assist winpke in processing CNIC document checks and age verification during account registration and ongoing KYC reviews.
• Fraud Detection & AML Services: Specialist third-party providers that assist winpke in identifying suspicious transaction patterns, flagging potential money laundering activity, and maintaining platform integrity.
• Game Content Providers: Licensed third-party game studios and software providers whose games are hosted on the winpke platform may receive anonymised session data for technical performance purposes. They do not receive personally identifiable information.
• Regulatory & Law Enforcement Authorities: winpke will disclose personal data to Pakistani or international regulatory authorities, law enforcement agencies, or gaming licensing bodies where we are legally required to do so, or where disclosure is necessary to protect the safety of our players or the integrity of the platform.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of winpke's assets, personal data held by winpke may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

All third parties with whom winpke shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond what winpke has specified.

winpke uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, detect fraud, and understand how players use our services. The following categories of cookies are used on winpke.net:

winpke does not use third-party advertising cookies or cross-site tracking cookies. You can manage your cookie preferences through your browser settings; however, disabling strictly necessary or security cookies may impair the functionality of your winpke account.

winpke retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's existence on winpke, plus a minimum of 5 years following account closure to satisfy AML and licensing record-keeping requirements.
• KYC Documents (CNIC copies, selfies, proof of address): Retained for a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable under winpke's gaming licence.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years. This is a legal requirement under AML legislation and cannot be waived by account closure or deletion requests.
• Customer Support Communications: Retained for 3 years following the resolution of the relevant interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your account plus 2 years following opt-out or account closure, to demonstrate compliance with consent obligations.
• Technical / Server Logs: Retained for up to 12 months for security monitoring and fraud detection purposes, after which they are anonymised or deleted.

winpke employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and winpke's servers is encrypted in transit using TLS 1.3, the current industry standard for secure web communications.
• Data Encryption at Rest: Sensitive data fields — including payment details, CNIC numbers, and account credentials — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Password Hashing: Account passwords are never stored in plain text. winpke uses bcrypt hashing with a high work factor, meaning even our own technical staff cannot read your password.
• Two-Factor Authentication: winpke offers 2FA for all registered accounts via SMS to your verified Pakistani mobile number, providing an additional layer of protection against unauthorised access.
• Access Controls: winpke staff access to personal data is strictly role-based and limited to the minimum necessary for each job function. Access to production databases is restricted to a small number of authorised personnel and is fully audited.
• Intrusion Detection: winpke operates continuous automated monitoring for unusual access patterns, potential data exfiltration attempts, and system anomalies, with 24/7 security response capability.
• Third-Party Security Audits: winpke's platform and data handling practices are subject to periodic independent security reviews to verify compliance with applicable standards.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, winpke will notify affected players and relevant authorities in accordance with applicable legal requirements, without undue delay and where feasible within 72 hours of becoming aware of the breach.

winpke respects your right to control your personal data. You may exercise any of the following rights at any time by contacting us at [email protected] with your full name, account username, and a description of your request:

• Right of Access: Request a copy of all personal data winpke holds about you. We will provide this in a commonly used electronic format within 30 days of receiving a verified request.
• Right to Rectification: Request correction of any personal data we hold about you that is inaccurate, incomplete, or out of date. Some data fields (such as your legal name as verified against your CNIC) may require re-verification before amendment.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no legitimate legal basis for continued processing. This right is subject to winpke's legal retention obligations — data required under AML or licensing law cannot be deleted.
• Right to Restrict Processing: Request that winpke temporarily suspends processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to Data Portability: Request that winpke provides your personal data in a structured, machine-readable format so you can transfer it to another service provider, where technically feasible.
• Right to Object: Object to processing of your personal data where winpke relies on legitimate interests as the legal basis. winpke will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Withdraw consent to marketing communications at any time. This does not affect the lawfulness of processing carried out before withdrawal.

winpke is strictly an adult gaming platform. Access to and registration on winpke is prohibited for any individual under the age of 21 years. winpke does not knowingly collect or process personal data from individuals under 21.

If winpke becomes aware that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or any other means — the following actions will be taken immediately:

• The relevant account will be suspended and access to the platform restricted without delay.
• Any funds deposited by the under-age individual will be returned via the original payment method, net of any bonuses received.
• All personal data associated with the account will be deleted as soon as the return of funds and any associated compliance obligations have been completed.

Parents and guardians of individuals who may have accessed winpke while under the age of 21 are encouraged to contact us immediately at [email protected]. winpke will treat all such reports with full discretion and urgency. We also encourage all households to use device-level parental control software to prevent underage access to online gaming platforms.

winpke's primary data processing infrastructure is hosted in secure, internationally recognised data centres. As a platform serving Pakistani players and operating under an international gaming licence, some personal data may be processed in jurisdictions outside Pakistan — for example, by KYC verification partners, fraud detection services, or game content providers whose technical infrastructure is located internationally.

Where personal data is transferred outside Pakistan, winpke ensures that appropriate safeguards are in place to protect the data to an equivalent standard as required under applicable data protection principles. These safeguards include:

• Contractual data processing agreements with all third-party processors containing binding data protection obligations.
• Restrictions on onward transfer of personal data by third-party processors without winpke's prior written authorisation.
• Requirements for third-party processors to implement equivalent technical and organisational security measures.

winpke does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without implementing contractual or other equivalent protections first.

The winpke platform may contain references to third-party services such as payment processors (JazzCash, EasyPaisa, bank portals) that you are redirected to when completing payment transactions. Once you leave the winpke platform and interact with a third-party service, that service's own privacy policy and data practices apply. winpke is not responsible for the privacy practices of third-party services.

winpke recommends that you review the privacy policies of any third-party payment or service provider through which you interact when using the winpke platform. If you have any concerns about how a third-party payment processor handles your data, please contact that provider directly or raise the matter with winpke support so we can assist where possible.

winpke reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, licensing requirements, or platform features. The "Effective Date" at the top of this page indicates when the current version came into force.

Where changes to this Privacy Policy are material — meaning they significantly affect how we process your personal data or the rights available to you — winpke will notify registered players via the email address associated with their account at least 7 days before the changes take effect. For non-material clarifications or corrections, the updated policy will be published on this page without advance notification.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data winpke holds about you, our data protection team is available to assist. Please use the following contact details for all privacy-related matters:

• Email: [email protected] — include "Privacy Request" in the subject line for fastest routing.
• Live Chat: Available 24/7 from your winpke account dashboard. Average response time: 3–5 minutes.
• Response Time: All written privacy requests are responded to within 5 business days. Formal data subject rights requests (access, deletion, portability) are processed within 30 calendar days.

When submitting a privacy request, please include your full name, registered email address, and account username so that we can verify your identity before processing the request. This verification step is necessary to protect your data from unauthorised access by third parties.