WinkPKR Privacy Policy – How We Protect Your Data

1Introduction

This Privacy Policy describes how WinkPKR — operating the platform at winkpkr.ws — collects, uses, stores, and protects personal information provided by users of our betting and gaming platform. It applies to all players who register an account, visit the website, use any WinkPKR service, or contact our support team.

WinkPKR takes the privacy of its users seriously. For Pakistani players, whose personal data may include financial information, identity documents, and transaction records tied to local payment methods such as Easypaisa and JazzCash, we understand the importance of handling that data with care, transparency, and security. This policy is our commitment to doing exactly that.

This Privacy Policy should be read alongside our Terms and Conditions, which govern your overall use of the WinkPKR platform. By registering an account or using any part of our platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described within it.

2Data We Collect

WinkPKR collects personal data through several channels: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and in some cases information received from trusted third-party sources such as payment processors or identity verification services. Below is a breakdown of the categories of data we may hold about you.

We collect only the data that is genuinely necessary for the purposes described in Section 3. We do not collect sensitive personal data such as religious beliefs, political opinions, or health information unless specifically required by law or regulation and only with your explicit consent.

3How We Use Your Data

WinkPKR uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is not listed here without first obtaining your additional consent.

• Account management: To create and maintain your WinkPKR account, authenticate your identity when you log in, and manage your account settings and preferences.
• Service delivery: To allow you to place bets, play games, claim promotions, and use all other features available on the WinkPKR platform.
• Payment processing: To process your deposits and withdrawals through your chosen payment method in PKR, and to maintain accurate records of all financial transactions on your account.
• Identity verification and KYC compliance: To verify your age and identity in compliance with our licensing obligations. WinkPKR is required to verify that all players are at least 18 years old and that the payment methods used belong to the account holder.
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account hacking, bonus abuse, and other prohibited activity. Technical data such as IP addresses and device identifiers are used specifically for this purpose.
• Customer support: To respond to your queries, complaints, and requests through live chat, email, or other communication channels. Support interactions are recorded to ensure quality and to resolve any disputes accurately.
• Legal and regulatory compliance: To comply with obligations under WinkPKR's gaming licence, applicable anti-money laundering legislation, and any lawful request from a regulatory or law enforcement authority.
• Platform improvement: To analyse how players use the WinkPKR platform in aggregate, in order to improve our services, fix technical issues, and develop new features. This analysis uses anonymised or aggregated data wherever possible.
• Responsible gaming: To monitor account activity for signs of problem gambling patterns and to enforce any responsible gaming limits, self-exclusions, or cooling-off periods that you have requested.
• Marketing communications: To send you information about WinkPKR promotions, bonuses, and relevant updates, where you have given your consent to receive such communications. You can withdraw this consent at any time.

4Legal Basis for Processing

WinkPKR processes your personal data under one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Contract performance: Processing that is necessary to fulfil our obligations under the contract formed when you register a WinkPKR account — including processing transactions, operating your account, and providing the betting and gaming services you have signed up for.
• Legal obligation: Processing that is required for WinkPKR to comply with its licensing conditions, anti-money laundering regulations, age verification requirements, and any other legal obligations applicable to an online gaming operator.
• Legitimate interests: Processing carried out for WinkPKR's legitimate business interests, including fraud prevention, platform security, and business analytics — provided these interests do not override your fundamental privacy rights.
• Consent: Processing for purposes such as marketing communications, where we have obtained your explicit, informed consent. You have the right to withdraw this consent at any time without affecting other uses of your data.

5Data Sharing and Disclosure

WinkPKR does not sell, rent, or trade your personal data with any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment service providers: Your financial transaction data is shared with payment processors — including the Easypaisa, JazzCash, NayaPay, and SadaPay networks, as well as banking partners for IBFT and card transactions — solely to process your deposits and withdrawals. These processors are bound by strict contractual data security obligations.
• Identity verification services: To complete KYC verification, WinkPKR may use third-party identity verification providers who check your documents against official databases. These providers are required to handle your data in compliance with applicable data protection standards.
• Regulatory and law enforcement authorities: WinkPKR is legally required to disclose certain information to its licensing authority, financial intelligence units, and law enforcement agencies upon lawful request. This may include transaction records and identity information in connection with fraud or money laundering investigations.
• Technology and infrastructure providers: WinkPKR uses reputable third-party technology providers for services such as cloud hosting, cybersecurity, analytics, and customer support tooling. These providers process data only on WinkPKR's instructions and under data processing agreements that restrict their use of your information.
• Business transfers: In the unlikely event of a merger, acquisition, or sale of WinkPKR or its assets, player data may be transferred as part of that transaction. Players would be notified in advance of any such transfer and the privacy terms applicable to their data.

6Cookies and Tracking Technologies

WinkPKR uses cookies and similar tracking technologies on its website to provide a functional, personalised, and secure experience. A cookie is a small file stored on your device when you visit a website. The table below explains the types of cookies WinkPKR uses and their purposes.

Strictly necessary and security cookies cannot be disabled as the platform cannot function properly without them. Optional cookies — analytics and performance — can be refused or withdrawn at any time through your browser settings. Disabling optional cookies does not affect your ability to use WinkPKR.

WinkPKR does not use third-party advertising cookies or any cookie that tracks your activity across other websites. All analytics data is used in aggregate and anonymised form to improve the WinkPKR platform only.

7Data Retention

WinkPKR retains your personal data only for as long as it is necessary for the purposes described in this policy or required by law. The main retention periods that apply to WinkPKR player data are as follows:

• Active account data: While your WinkPKR account is open and active, we retain all data necessary to operate your account and provide our services. This includes your registration information, transaction history, betting records, and communication logs.
• Closed account data: Following the closure of your WinkPKR account, we are required to retain transaction records, identity verification documents, and account history for a minimum of five years to comply with our anti-money laundering obligations and licensing requirements. After this mandatory retention period expires, data is securely deleted or irreversibly anonymised.
• Support communications: Customer support interactions are retained for up to three years from the date of the last interaction to allow us to reference past conversations if a dispute arises and to maintain quality standards.
• Marketing consent records: If you consented to receive marketing communications, we retain a record of that consent for as long as we send you marketing, plus a further two years after you withdraw consent, as evidence of compliance.

When data is no longer required and its retention period has expired, WinkPKR deletes it securely in a manner that prevents recovery. Backup copies are purged on a rolling schedule aligned with the same retention policy.

8Data Security

WinkPKR takes the security of your personal and financial information seriously. We have implemented a range of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, or disclosure. These measures are reviewed and updated regularly to keep pace with evolving security standards and threats.

• SSL/TLS encryption: All data transmitted between your device and the WinkPKR platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser address bar confirms this encryption is active.
• Password hashing: Your account password is never stored in plain text. WinkPKR uses strong cryptographic hashing algorithms to protect password data so that even internal staff cannot see your password.
• Access controls: Access to personal data within WinkPKR's systems is restricted to staff who need it to perform their specific job functions. All staff with data access are subject to confidentiality obligations and security training.
• Server security: WinkPKR's servers are hosted in secure, access-controlled data centres with continuous monitoring, intrusion detection, and regular security audits.
• Two-factor authentication: WinkPKR offers optional two-factor authentication for player accounts, adding an extra layer of protection beyond your username and password.
• Payment security: Financial transactions on WinkPKR are processed through PCI-DSS compliant payment partners. WinkPKR does not store full payment card numbers or complete mobile wallet credential sets on its own servers.

9Your Data Rights

As a WinkPKR player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at support@winkpkr.ws with the subject line "Data Rights Request." We will respond within 30 days.