DATA & PRIVACY
This Privacy Policy explains how winpak ("the Company," "we," "us," "our") collects, uses, processes, stores and protects personal data relating to individuals ("you," "your," "the Player") who access or use the winpak platform at winpak.asia, including all betting, casino gaming, payment and support services offered by winpak to players in Pakistan.
winpak is committed to handling your personal data with transparency, integrity and proportionality. This Policy is designed to give you a clear and complete picture of how your information is used from the moment you first visit winpak.asia through to account registration, ongoing gameplay and any eventual account closure. Please read this document carefully before registering your winpak account or completing the winpak Login process for the first time.
By registering an account on winpak or by continuing to use the Platform after this Policy has been updated, you confirm that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein.
These six cards summarise winpak's core privacy commitments. They do not replace the full legal text below — all players must read the complete document.
All personal data transmitted between your device and winpak's servers is protected by SSL/TLS encryption. Data stored on winpak's systems is protected by industry-standard encryption at rest. Your winpak Login credentials are hashed and are never stored in plain text by any winpak system or staff member.
winpak does not sell, rent or trade your personal data to third-party marketing organisations or data brokers. Your information is shared only where strictly required for the operation of the Platform — for example, with payment processors facilitating your JazzCash or EasyPaisa transactions — and never for third-party commercial gain.
winpak processes your personal data only where a lawful basis exists — primarily: performance of the contract between you and winpak, compliance with legal and regulatory obligations (including KYC and anti-money-laundering requirements), and where you have provided explicit consent for specific processing activities such as marketing communications.
As a winpak player, you have the right to access the personal data winpak holds about you, to request correction of inaccurate data, to request deletion of data where retention is no longer necessary, and to withdraw consent for marketing at any time. See Section 10 for the full list of your data rights and how to exercise them.
winpak retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory obligations. Account data is typically retained for a defined period following account closure in accordance with anti-money-laundering regulations. Specific retention periods are set out in Section 9 of this Policy.
winpak operates under international gaming licensing standards, and our data protection practices are designed to meet the requirements of those standards. Our approach to privacy is not a marketing statement — it is an operational obligation we take seriously across every system and process that touches player data.
Note: This Privacy Policy should be read alongside the winpak Terms & Conditions, which form the primary contractual agreement between you and winpak. Together these documents govern your entire relationship with the winpak platform.
1.1 winpak is the operator of the winpak.asia online betting and casino platform. winpak operates under international gaming licensing standards and is the data controller responsible for the personal data of players and site visitors processed in connection with the winpak platform.
1.2 For all privacy-related enquiries, data subject access requests and consent withdrawals, players may contact winpak using the support email address displayed in the footer of every page on winpak.asia. winpak will acknowledge all data-related correspondence within twenty-four (24) hours of receipt.
2.1 This Privacy Policy applies to all personal data processed by winpak in connection with:
2.2 This Policy does not apply to third-party websites or services that may be referenced on the winpak Platform but that are operated independently by third parties. winpak accepts no responsibility for the privacy practices of any third-party service provider.
3.1 winpak collects the following categories of personal data in connection with the operation of the Platform:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Pakistani mobile number, email address (if provided) | Account access, winpak Login, 2FA, notifications |
| Financial Data | JazzCash account reference, EasyPaisa reference, bank account details | Deposit processing, withdrawal verification, AML compliance |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, game session history | Account management, dispute resolution, AML monitoring, responsible gaming |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Platform security, fraud detection, session management |
| Usage Data | Pages visited, game categories accessed, session duration, click patterns | Platform improvement, personalisation, analytics |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Dispute resolution, quality assurance, record-keeping |
| Document Data | CNIC scan or photograph, selfie verification images | KYC identity verification, age verification, fraud prevention |
3.2 winpak does not intentionally collect sensitive personal data such as biometric data beyond what is required for document verification, health data, religious beliefs or political opinions. If you voluntarily disclose such information in support communications, winpak will handle it with heightened care and will not process it beyond the immediate support context.
winpak collects personal data through the following channels:
5.1 winpak processes your personal data only where a lawful basis exists under applicable data protection law. The primary lawful bases relied upon are as follows:
winpak does not rely on "legitimate interests" as a basis for processing personal data in ways that conflict with your fundamental privacy rights. Where there is any conflict, your rights take precedence.
6.1 winpak uses cookies and similar tracking technologies on the winpak.asia Platform. Cookies are small text files placed on your device that help the Platform function correctly and allow winpak to understand how players use the Platform.
6.2 The following categories of cookies are used on winpak.asia:
6.3 You may configure your browser to reject or delete cookies. Rejecting strictly necessary cookies will prevent you from using the winpak Platform including the winpak Login process. Rejecting analytics or marketing cookies will not affect your ability to use the Platform's core features.
7.1 winpak does not sell, rent or trade your personal data to any third party for commercial purposes. Data is shared with third parties only where strictly necessary for the operation of the Platform or compliance with legal obligations, specifically:
7.2 All third-party service providers engaged by winpak are required to process personal data only for the specific purposes for which they were engaged, and to maintain appropriate technical and organisational security measures consistent with winpak's standards.
8.1 winpak's primary data processing infrastructure is located within its licensed operating jurisdiction. Some data processing activities — particularly those relating to third-party KYC, fraud screening and game software services — may involve the transfer of personal data to processors located in other countries.
8.2 Where such transfers occur, winpak ensures that appropriate contractual safeguards are in place with the receiving party and that the transfer is conducted in compliance with applicable data protection requirements. winpak does not transfer personal data to jurisdictions that do not offer adequate data protection standards without implementing appropriate contractual protections.
9.1 winpak retains personal data only for as long as is necessary for the purposes for which it was collected, taking into account applicable legal and regulatory retention obligations.
9.2 The following indicative retention periods apply to major data categories:
9.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
As a winpak player, you have the following rights with respect to your personal data. To exercise any of these rights, contact winpak support using the email address in the site footer.
You have the right to request a copy of the personal data winpak holds about you. winpak will provide this information within thirty (30) days of a verified request.
Where personal data winpak holds about you is inaccurate or incomplete, you have the right to request correction. Identity data corrections may require documentary evidence.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation overrides this right.
You may request that winpak restrict processing of your personal data while a rectification or objection request is being resolved.
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
You may object to winpak's processing of your personal data where that processing is based on legitimate interests. You may also object to any direct marketing processing at any time, without qualification.
Where processing is based on consent — specifically marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
11.1 winpak may send promotional communications about bonuses, new game launches, PSL-season betting promotions and other platform news to players who have explicitly opted in to receive such communications at the time of account registration or subsequently via Account settings.
11.2 winpak will not send unsolicited marketing communications. If you opted in to marketing but later wish to stop receiving promotional messages, you may withdraw consent at any time by:
11.3 winpak will not send marketing communications to players who have activated self-exclusion tools or who have requested account closure due to responsible gaming concerns.
11.4 Transactional and account communications — such as deposit confirmations, withdrawal notifications, security alerts and winpak Login verification OTPs — are sent regardless of marketing preference as they are necessary for the operation of your Account.
12.1 winpak is an adult platform restricted to individuals aged 21 years and above. winpak does not knowingly collect or process the personal data of individuals under the age of 21.
12.2 If winpak becomes aware that personal data has been collected from an individual who is under 21 years of age, that data will be deleted immediately and the associated account closed without delay. Any Real Money Balance associated with an underage account will be handled in accordance with applicable regulatory requirements.
12.3 If you are a parent or guardian and believe that a minor has registered an account on winpak or provided personal data to the Platform, please contact winpak support immediately using the email address in the site footer.
13.1 winpak implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
13.2 Notwithstanding the above measures, no internet-based platform can guarantee absolute security. winpak encourages players to use a strong, unique password for their winpak Account and to enable 2FA to reduce the risk of unauthorised access.
14.1 winpak reserves the right to update or amend this Privacy Policy at any time to reflect changes in winpak's data processing practices, applicable law or regulatory requirements. The effective date of the current version is displayed at the top of this page.
14.2 For material changes to this Policy — particularly changes that expand the scope of data collection or alter the purposes for which data is processed — winpak will notify registered players via their registered mobile number or via in-account notification prior to the changes taking effect.
14.3 Your continued use of the winpak Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the updated Policy. It is your responsibility to review this page periodically for any changes.
15.1 For all privacy-related enquiries, including data subject access requests, rectification requests, erasure requests, marketing opt-outs and general questions about how winpak processes your personal data, please contact winpak's support team. Contact details are displayed in the footer of every page on winpak.asia.
15.2 All data subject requests will be acknowledged within twenty-four (24) hours of receipt. winpak will respond substantively to data access and erasure requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, of which you will be notified.
15.3 winpak may require identity verification before processing data subject requests to ensure that personal data is not disclosed to or modified at the request of an unauthorised third party.
15.4 For general terms of service questions, please refer to the winpak Terms & Conditions. For responsible gaming tools and self-exclusion, please visit the winpak Responsible Gaming page.