Your privacy matters to us. This Policy explains what personal data WinPak collects, why we collect it, how it is used and stored, and what rights you have over your own information. Please read it alongside our Terms & Conditions.
A plain-language summary of the key privacy commitments you will find in the full policy below.
We collect only the personal data needed to operate your account — name, date of birth, contact details, payment information and betting activity. Nothing beyond what is necessary for our services.
All data is stored on encrypted servers with strict access controls. We apply industry-standard technical and organisational measures to prevent unauthorised access, loss or disclosure of your personal information.
We do not sell your personal data. It may be shared with regulated third-party service providers, payment processors and compliance authorities where required by law — and only to the extent necessary.
You have the right to access, correct, export and in certain cases delete your personal data. You can also object to certain types of processing or withdraw consent where consent was the legal basis for collection.
We use essential cookies to keep your session active and analytical cookies to improve the Platform. You can manage your cookie preferences through your browser settings at any time.
We only send promotional messages where you have given consent or where a legitimate interest applies. You may opt out of marketing communications at any time through your account settings or by contacting support.
WinPak ("we", "us", "our", "the Platform") is an English-language online betting and casino platform built for Pakistani players. We are committed to handling the personal data of our users with care, transparency and respect for applicable privacy law.
This Privacy Policy ("Policy") sets out in detail what personal data WinPak collects from you, the purposes for which that data is processed, the legal bases on which processing takes place, how long data is retained, who it may be shared with, and what rights you hold in relation to your own information.
This Policy applies to all personal data processed in connection with your use of the WinPak website at winpak.cam, including account registration, deposits, withdrawals, sports betting, casino gaming and customer support interactions.
By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. Where your consent is required for a specific processing activity, we will request it explicitly and separately from general acceptance of our Terms & Conditions.
Pakistan Notice: WinPak does not operate under Pakistani law. This Policy is drafted in accordance with international data protection standards. Users in Pakistan should be aware that local data protection frameworks may differ from those referenced herein. This Policy does not constitute legal advice.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial data. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, WinPak. |
| "Data Processor" | A third party that processes personal data on behalf of WinPak under a written data processing agreement. |
| "User" / "You" | Any individual who accesses or uses the WinPak Platform, whether as a registered account holder or as an anonymous visitor. |
| "KYC" | Know Your Customer — the identity and age verification process required under applicable anti-money laundering obligations. |
| "Cookies" | Small text files stored on your device by the Platform for purposes including session management, analytics and personalisation. |
WinPak collects personal data from you in the following ways:
We may receive personal data about you from third-party identity verification providers, fraud detection services and, where applicable, responsible gambling databases (such as self-exclusion registries maintained by the operator's licensing authority). Any such data is used solely for the purposes described in this Policy.
WinPak processes your personal data on one or more of the following legal bases:
| Legal Basis | Examples of Processing |
|---|---|
| Contract Performance | Opening and managing your account, processing deposits and withdrawals, settling bets, and providing customer support. |
| Legal Obligation | KYC identity verification, anti-money laundering checks, responsible gambling compliance, and responding to lawful authority requests. |
| Legitimate Interests | Fraud prevention and platform security, improving our services through analytics, and maintaining accurate business records. |
| Consent | Sending marketing emails and promotional SMS messages; placing non-essential cookies on your device. You may withdraw consent at any time. |
The personal data we collect is used for the following purposes:
WinPak does not sell, rent or trade your personal data to any third party for their own commercial purposes. We may share your data in the following limited circumstances:
We engage regulated third-party companies to assist in delivering our services. These include payment processing providers, identity verification and KYC platforms, IT infrastructure and hosting providers, fraud detection services, and customer support software operators. Each provider is bound by a data processing agreement and may only process your data in accordance with our instructions and for the specified purpose.
We may disclose personal data to law enforcement agencies, regulatory authorities or licensing bodies where we are legally required to do so, where there is a court order or where disclosure is necessary to protect the rights, property or safety of WinPak, our users or the public.
In the event of a merger, acquisition, restructuring or sale of WinPak's business assets, personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer that results in a material change to this Policy.
No Third-Party Marketing Sales: WinPak will never sell your contact details or betting history to third-party advertisers or data brokers. Payment method names referenced on this Platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are contextual references only; those providers have no access to your WinPak account data.
WinPak operates internationally. Your personal data may be processed in countries outside of Pakistan, including the jurisdiction in which WinPak holds its operating licence and in countries where our third-party service providers maintain data centres. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with applicable data protection law, including contractual protections equivalent to standard data protection clauses.
By using the Platform, you acknowledge that your data may be transferred, stored and processed outside of Pakistan. If you have questions about the specific safeguards applicable to your data, please contact us at the details in Section 15.
We retain personal data only for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following general retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of the account plus 5 years after closure, or longer if required by applicable law. |
| KYC / identity documents | 5 years from account closure, in accordance with anti-money laundering obligations. |
| Transaction records | 5 years from the date of each transaction, or longer if required by regulatory obligation. |
| Betting and gaming logs | 5 years from the date of each bet or game play. |
| Customer support records | 3 years from the date of each interaction, unless the interaction relates to a dispute or compliance matter. |
| Marketing consent records | Until consent is withdrawn, plus 3 years for audit purposes. |
| Analytical / usage data | Up to 26 months from collection, in aggregated and anonymised form thereafter. |
Upon expiry of the relevant retention period, data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
WinPak uses cookies and similar technologies to operate and improve the Platform. The following cookie categories are in use:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential | Session management, authentication, load balancing and security tokens. The Platform cannot function correctly without these. | No |
| Analytical | Aggregated, anonymised measurement of page visits, feature usage and navigation paths, used to improve the Platform. | Yes |
| Functional | Remembering user preferences such as language, odds format and display settings. | Yes |
| Marketing | Tracking visits to deliver relevant promotional content to registered users who have opted in to marketing communications. | Yes |
You can manage or withdraw consent for non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Your browser documentation will provide instructions for managing cookies in your specific browser.
Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data held by WinPak. To exercise any of these rights, please contact us using the details in Section 15.
Request a copy of the personal data we hold about you, along with information about how it is processed.
Ask us to correct inaccurate or incomplete personal data without undue delay.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Ask us to restrict processing of your data in certain circumstances, such as while an accuracy dispute is resolved.
Receive your personal data in a structured, commonly used and machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including profiling, and to direct marketing communications at any time.
We will respond to all verified rights requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days with prior notice. We will not charge a fee for reasonable requests unless they are manifestly unfounded or excessive.
How to Submit a Request: Email us at [email protected] with the subject line "Data Subject Request" and include your registered account email address and a description of your request. We may ask you to verify your identity before processing the request.
WinPak implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:
While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials. If you suspect that your account has been compromised, contact support immediately at [email protected].
The WinPak Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from any person under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account.
If you believe that a minor has registered an account on the Platform or that personal data of a minor has been submitted to us, please contact us immediately at [email protected]. We take the protection of minors very seriously and encourage parents and guardians in Pakistan to use available parental control tools to prevent underage access to gambling websites.
18+ Only: Age verification is mandatory before any withdrawal can be processed. Accounts found to belong to individuals under 18 will be permanently closed and all deposits returned minus any bonus credits claimed.
All payment transactions on the Platform are processed by regulated third-party payment service providers. WinPak does not store full card numbers, bank account credentials or mobile wallet PINs on its own systems. The payment providers we work with operate under their own privacy policies and data security standards.
When you make a PKR deposit or withdrawal, your transaction details are shared with the relevant payment processor solely for the purpose of completing that transaction. References to familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as contextual examples of the types of payment options that may be available. These references do not imply that those providers have any access to your WinPak account data, nor do they imply endorsement, affiliation or support for gambling services.
WinPak reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered users by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this document will be revised accordingly.
We encourage you to review this Policy periodically to remain informed about how we protect your personal data. Your continued use of the Platform following the publication of any revised Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure as described in our Terms & Conditions.
If you have any questions, concerns or requests relating to this Privacy Policy or the personal data WinPak holds about you, please reach out to our support team using the details below. Support is available in English and, upon request, in Urdu.
Data & Privacy Enquiries:
[email protected] — plain text, not a clickable link
Subject Line:
Use "Privacy Policy Enquiry" or "Data Subject Request" so we can route your message to the right team promptly.
Response Time:
We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days of receiving a complete and verified request.