1winpk Privacy Policy

1. Introduction

1winpk ("we", "us", "our", "Platform") operates the website https://1winpk.club and associated mobile interfaces. We are committed to protecting the personal information of every user ("you", "your") who interacts with our platform. This Privacy Policy describes, in plain and legal terms, exactly what data we collect, why we collect it, how we use it, with whom we may share it, and what rights you have in relation to it.

By registering an account on 1winpk, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please discontinue use of the platform and contact us to close your account.

2. Personal Data We Collect

1winpk collects personal data in two broad ways: data you provide directly, and data collected automatically through your use of the platform.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage Data: Pages viewed, games played, bets placed (markets, stakes, outcomes), session duration, login timestamps, and navigation paths within the platform.
• Location Data: Approximate geolocation derived from your IP address. We do not collect GPS-level location data unless your device explicitly grants permission.
• Cookie and Tracking Data: Information gathered through cookies and similar tracking technologies as described in Section 6 below.

3. How We Use Your Personal Data

1winpk uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first notifying you and, where required, obtaining your consent.

• Account Management: Creating, maintaining, and securing your 1winpk account; verifying your identity; processing deposits and withdrawals in PKR.
• Service Delivery: Enabling you to place bets, play casino games, and access all platform features available to your account tier.
• KYC and AML Compliance: Verifying identity documents and financial information to comply with anti-money laundering obligations and responsible gaming requirements.
• Customer Support: Responding to queries submitted via live chat or email; resolving disputes; processing responsible gaming requests including self-exclusion and deposit limit changes.
• Fraud Prevention and Security: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, and other fraudulent or prohibited activity.
• Platform Improvement: Analysing aggregated usage data to identify bugs, improve game loading performance, and enhance the mobile experience for Pakistani users.
• Responsible Gaming Monitoring: Using betting and session data to identify patterns consistent with problem gambling and to apply responsible gaming interventions where appropriate.
• Direct Marketing (with consent): Sending promotional emails or notifications about new games, bonuses, or cricket betting markets where you have opted in. You may withdraw marketing consent at any time via account settings or by contacting support.

4. Legal Basis for Processing

We process your personal data on the following legal bases, depending on the processing activity in question:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement with you — including processing deposits, settling bets, and handling withdrawal requests.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering, KYC, and responsible gaming obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of 1winpk or our users, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your explicit consent, primarily in respect of direct marketing communications. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing conducted before withdrawal.

5. Data Sharing and Disclosure

1winpk does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary for the purposes set out in this Policy:

• Payment Service Providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive the financial data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data protection obligations.
• Game Software Providers: Casino and slot game studios (such as PG Soft and Pragmatic Play) may receive anonymised session data to facilitate game delivery and RNG certification. They do not receive your name, contact details, or financial information.
• Identity Verification Services: Third-party KYC and age verification providers may process identity documents submitted during account verification. These providers are bound by strict data security and confidentiality obligations.
• IT Infrastructure and Security Providers: Cloud hosting, cybersecurity, and content delivery partners who process data on our behalf under binding data processing agreements.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory demand, 1winpk may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities.

6. Cookies & Tracking Technologies

1winpk uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session management, authentication tokens, and security cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your language preferences, last visited games, and layout preferences to provide a personalised experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the platform — which pages are visited most, where users drop off in the registration flow, and which game categories attract the most traffic.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling analytics cookies will not affect core functionality.

7. Data Retention

1winpk retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active Accounts: All account data is retained for the lifetime of your account and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years from the date of verification, in accordance with applicable financial regulation.
• Transaction Records: Deposit, withdrawal, and betting history records in PKR are retained for five (5) years following each transaction.
• Support Communications: Chat transcripts and email correspondence are retained for three (3) years from the date of the communication.
• Marketing Consent Records: Records of marketing consent and withdrawal thereof are retained for three (3) years from the last relevant interaction.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with your identity.

8. Security Measures

1winpk implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 1winpk servers;
• Passwords stored using one-way cryptographic hashing — we cannot retrieve your plaintext password;
• Two-factor authentication (2FA) available to all account holders as an optional additional security layer;
• Brute-force login protection with automatic temporary account lockout after repeated failed attempts;
• Access controls ensuring that only authorised 1winpk personnel with a legitimate business need can access personal data;
• Regular security audits and penetration testing of platform infrastructure.

While we employ robust security measures, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, 1winpk will notify affected users promptly and take immediate remediation steps.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 1winpk:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor updates (email address, contact number) can be made directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. This right cannot override our regulatory obligation to retain KYC and transaction data.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while the accuracy of disputed data is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, or to direct marketing processing at any time. Marketing objections take effect immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at [email protected]. We may require identity verification before processing a data rights request.

10. Children's Privacy

The 1winpk platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user is under 18, the account will be immediately suspended, any deposited funds returned, and all associated personal data deleted in accordance with our retention policy. If you believe a minor has registered an account on 1winpk, please notify us immediately at [email protected].

11. International Data Transfers

1winpk operates infrastructure that may involve processing or storing data in jurisdictions outside Pakistan. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent data protection mechanisms, to ensure that your data receives a level of protection consistent with the standards described in this Policy.

12. Updates to This Privacy Policy

1winpk may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. Material changes will be communicated to registered users via email to the address on file, or via a prominent notice on the platform, at least 14 days before the revised Policy takes effect. The effective date at the top of this page will be updated on each revision. Your continued use of 1winpk after the effective date of a revised Policy constitutes acceptance of the updated terms.

13. Contact & Data Enquiries

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 1winpk handles your personal information, please contact us through the following channels:

• Email: [email protected] — responses within 12 hours for general enquiries; within 30 days for formal data rights requests.
• Live Chat: Available 24/7 within your 1winpk account — responses under 2 minutes. English and Urdu-friendly support during peak Pakistan hours.