WinRPK is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and the rights available to you as a data subject.
We collect only the personal data that is strictly necessary to operate your account, comply with KYC and AML obligations, and deliver the services you have requested. We do not collect data for its own sake.
Your personal data is never sold to third parties for commercial gain. Where data is shared with third-party service providers, it is shared solely on a need-to-know basis under contractual data-protection obligations.
All data in transit is protected by TLS/SSL encryption. Stored data is protected through access controls, encryption at rest and regular security reviews. We apply security measures proportionate to the sensitivity of the data held.
You have substantive rights over your personal data — including access, correction, erasure and portability. We provide a clear process for exercising those rights and respond within reasonable timeframes.
Personal data is retained only for as long as it is needed for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Data is securely deleted or anonymised when the retention period expires.
We inform you clearly about what data we hold, why we hold it and what legal basis we rely on for each processing activity. This policy is written in plain English specifically for Pakistani players who use our platform.
This Privacy Policy ("Policy") is issued by WinRPK ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with the operation of the WinRPK website at winrpk.cam and all associated betting, casino and gaming services.
WinRPK operates as an English-language online betting and live casino platform primarily serving players in Pakistan. Our platform covers sports betting — with a particular focus on Pakistan cricket, PSL markets, ICC tournaments and T20 competitions — alongside live casino, slots, table games and esports.
We understand that privacy matters deeply. Pakistani players who use WinRPK share personal and financial information with us in the course of registering an account, verifying their identity and making transactions. This Policy is our commitment to handling that information with integrity, transparency and security.
By registering an account with WinRPK, you acknowledge that you have read this Policy and consent to the collection, use and processing of your personal data as described herein. If you do not agree with this Policy, you should not register or continue to use the platform.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, CNIC number, email address, IP address, device identifiers and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction. |
| "Data Subject" | The natural person to whom the personal data relates — in this context, you, the player or site visitor. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. WinRPK acts as the Data Controller in respect of player data collected via winrpk.cam. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller, under a contractual data-processing agreement. |
| "KYC" | Know Your Customer — the identity and document verification process conducted to comply with applicable regulatory obligations. |
| "Cookies" | Small text files placed on your device by the platform to store session information, preferences and analytical data. |
| "Consent" | A freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
WinRPK acts as the Data Controller in respect of all personal data collected from players and visitors through the winrpk.cam website. As Data Controller, we are responsible for ensuring that personal data is processed lawfully, fairly and transparently in accordance with applicable data protection legislation.
Where WinRPK engages third-party service providers to process personal data on our behalf — such as KYC verification providers, payment technology companies or analytics services — those providers act as Data Processors under written agreements that impose data-protection obligations equivalent to those assumed by WinRPK under this Policy.
For all data-related enquiries, requests to exercise your rights, or complaints, please contact our support team using the details set out in Section 17 (Contact Us).
We collect and process the following categories of personal data in connection with the operation of the WinRPK platform:
| Category | Examples | Necessity |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality, gender | Required for KYC and account eligibility verification |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Karachi, Lahore, Islamabad) | Required for account management and support communications |
| Financial Data | Bank account details, mobile wallet references (e.g., Easypaisa/JazzCash account references used for KYC purposes), transaction history, deposit and withdrawal records in PKR | Required for payment processing and AML compliance |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, geolocation data | Required for security, fraud prevention and platform operation |
| Usage Data | Pages visited, games played, bet history, login frequency, session duration, product interactions | Used for platform improvement, personalisation and responsible gambling monitoring |
| KYC Documents | Copies of CNIC, passport, utility bills, bank statements provided for identity and address verification | Required by regulatory obligation before withdrawal processing |
| Communication Data | Support chat transcripts, email correspondence, live-chat logs | Retained for quality assurance, dispute resolution and regulatory records |
| Marketing Preferences | Opt-in and opt-out records for email, SMS and push-notification marketing | Required to manage marketing communications lawfully |
We collect personal data through the following channels and methods:
During the account registration process, when submitting KYC documentation, when contacting support, when completing transactions, or when responding to promotional communications or surveys.
Through cookies, tracking pixels, server logs and session-monitoring technologies embedded in the WinRPK website. This includes IP address, device fingerprint, browsing behaviour and game interaction data collected in real time during your sessions.
From identity verification and KYC service providers, fraud detection and AML screening services, payment service providers and data analytics platforms engaged by WinRPK. All third-party data sources are subject to due diligence and contractual data-sharing agreements.
In limited circumstances, WinRPK may cross-reference publicly available information (such as sanctions lists, politically exposed persons (PEP) databases) as part of our AML compliance obligations. Such cross-referencing is conducted in accordance with applicable regulatory requirements.
We process your personal data only where we have a valid legal basis for doing so. The primary purposes for which we process personal data, and the corresponding legal bases, are as follows:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity — required to deliver the services you have requested |
| KYC identity verification | Legal obligation — required to comply with applicable AML and regulatory requirements |
| Processing deposits and withdrawals in PKR | Contractual necessity — required to fulfil the payment obligations of your account agreement |
| Fraud prevention and AML monitoring | Legal obligation and legitimate interest — to protect the platform and comply with financial crime regulations |
| Responsible gambling monitoring and intervention | Legal obligation and legitimate interest — to protect player wellbeing and comply with responsible gambling requirements |
| Platform analytics and improvement | Legitimate interest — to improve the platform experience for Pakistani players |
| Customer support and dispute resolution | Contractual necessity and legitimate interest |
| Marketing communications (opted-in only) | Consent — you may withdraw consent at any time without affecting the lawfulness of prior processing |
| Compliance with legal and regulatory obligations | Legal obligation — including record-keeping, regulatory reporting and cooperation with authorities |
WinRPK does not sell personal data to third parties. We may share personal data only in the following circumstances and only to the extent necessary:
All third-party Data Processors engaged by WinRPK are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.
WinRPK uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences and collect analytical data. The categories of cookies in use are as follows:
Required for core platform functions including login session management, security token validation and bet-slip maintenance. These cookies cannot be disabled without impairing platform functionality.
Store your preferences such as display language (English), selected currency (PKR), chosen odds format (decimal) and notification settings. Disabling these cookies means your preferences will not be saved between sessions.
Collect aggregated and anonymised data about how visitors use the platform — pages visited, features accessed, session duration and error events. This data is used to improve the platform for Pakistani users. Analytical cookies do not identify you personally.
Used to deliver relevant promotional content to players who have opted into marketing communications. Marketing cookies may track your interactions with promotional materials across sessions. You may opt out of marketing cookies through your Account preferences at any time.
By continuing to use WinRPK after being presented with our cookie notice, you consent to the use of non-essential cookies as described above. You may manage cookie preferences at any time through your browser settings, though doing so may affect platform functionality.
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | Duration of account plus a minimum of 5 years following account closure, or longer where required by AML obligations |
| KYC Documents | Minimum 5 years from the date of verification, or as required by the applicable regulatory framework |
| Financial Transaction Records | Minimum 5 years from the date of each transaction in PKR |
| Betting and Gaming History | Duration of account plus 5 years following closure |
| Support Communications | 3 years from the date of the most recent interaction, unless the matter is subject to an active dispute or regulatory inquiry |
| Marketing Preference Records | Duration of account or until consent is withdrawn, plus 12 months |
| Technical / Session Logs | Up to 12 months for standard session data; longer periods for security incident logs where an investigation is ongoing |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification, unless an ongoing legal obligation or dispute requires continued retention.
WinRPK implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:
Notwithstanding the measures above, no security system is impenetrable and WinRPK cannot guarantee the absolute security of data transmitted over the internet. You are responsible for maintaining the confidentiality of your login credentials and notifying us immediately if you suspect unauthorised account access.
WinRPK may transfer personal data to, and process it in, countries outside Pakistan and outside the jurisdiction in which you are located. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law.
Transfers may occur in connection with the engagement of third-party KYC providers, payment technology companies, cloud infrastructure providers and game software suppliers who operate from or host data in other jurisdictions. All such transfers are governed by contractual data-processing agreements that impose equivalent data-protection obligations.
If you have questions about the safeguards applicable to any specific international transfer, please contact our support team at the address in Section 17.
As a data subject, you hold the following rights in respect of your personal data held by WinRPK. These rights are subject to applicable legal exemptions — for example, where retention is required by AML or other regulatory obligations.
You may request a copy of the personal data WinRPK holds about you, along with information about how it is processed. We will respond within a reasonable timeframe, typically 30 days.
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update basic account details directly through your Account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose collected, or where consent has been withdrawn and no other legal basis applies. This right is subject to regulatory retention requirements.
You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is contested, or where you have objected to processing based on legitimate interest.
Where processing is based on consent or contract and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
You may object to processing based on our legitimate interests at any time. You may also withdraw consent to marketing communications at any time through your Account preferences without affecting prior lawful processing.
To exercise any of the above rights, please submit a written request to our support team using the contact details in Section 17. We will acknowledge your request promptly and respond within 30 days, or within any shorter period required by applicable law. Where a request is complex or numerous, we may extend this period by a further 30 days, with notification to you.
WinRPK's services are strictly for adults aged 18 and over — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from persons under the applicable minimum age.
If you are a parent or guardian and believe that a minor has submitted personal data to WinRPK, or has opened or attempted to open an account, please contact our support team immediately at [email protected]. We will investigate the matter promptly and, where a minor's data has been inadvertently collected, delete it without undue delay.
Age verification is conducted as part of the KYC process before any withdrawal is processed. Accounts where age verification raises concerns may be suspended pending satisfactory documentary proof of age.
The WinRPK platform does not include outbound links to third-party websites as a general practice. However, in the event that any third-party content or resource is referenced, WinRPK takes no responsibility for the privacy practices or data processing activities of those third parties. Their use of your personal data is governed by their own privacy policies.
Similarly, if you access WinRPK via a link from a third-party site, WinRPK is not responsible for the privacy practices of that referring website. This Policy applies solely to data collected by WinRPK through winrpk.cam.
WinRPK sends promotional communications — including bonus offers, tournament announcements, cricket betting promotions and PSL market alerts — only to players who have expressly opted in to receive such communications during the registration process or through their Account settings.
15.1 Opt-Out. You may withdraw consent to marketing communications at any time by: updating your preferences in the Account settings panel; clicking the unsubscribe link included in every marketing email; or contacting our support team directly.
15.2 Transactional Communications. Withdrawal of marketing consent does not affect our ability to send transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, KYC requests and account security alerts. These communications are sent on the basis of contractual necessity and cannot be opted out of while your account is active.
15.3 Self-Excluded Players. Players who have activated self-exclusion will be removed from all marketing communication lists immediately. WinRPK will not send promotional materials to self-excluded players for the duration of their exclusion period.
WinRPK reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices or the services we offer. Material changes will be communicated to registered players via email or via a prominent notification on the platform, with reasonable advance notice before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. Players are encouraged to review this page periodically. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy.
If you have concerns about a proposed amendment to this Policy, you may contact our support team before the effective date. If you do not accept the revised Policy, you should close your account prior to the effective date of the change.
For any data protection enquiries, requests to exercise your rights under this Policy, or general questions about how WinRPK processes your personal data, please use the following contact information:
Email: [email protected]
Live Chat: Available through the platform interface during support hours.
Language: English and Urdu assistance available.
Response Timeframe: We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days. Complex requests — including comprehensive data subject access requests — may take up to 60 days where a reasonable extension applies, with notification to you.
Our support team is ready to help with any data protection query — whether you want to access your data, update your preferences, or understand how WinRPK uses your information. You can also explore our full Terms and FAQ for more detail.
18+ only — or the higher minimum required by the operator/license jurisdiction. Local laws in Pakistan may restrict gambling. By using WinRPK you accept this Privacy Policy and our Terms & Conditions. For responsible gambling tools, visit the dedicated page.