WinkPKR Privacy Policy – How We Protect Your Personal Data

WinkPKR is an online gaming platform operating at winkpkr.bet, designed and built specifically for players in Pakistan. For the purposes of this Privacy Policy, WinkPKR is the data controller — meaning we determine how and why your personal data is collected and processed.

WinkPKR's data protection contact is reachable at privacy@winkpkr.bet. If you have any question about how WinkPKR handles your data, the privacy team is the right starting point and will respond to all enquiries within 5 business days.

WinkPKR processes personal data for the purpose of operating a licensed online gaming service, including player registration, identity verification, payment processing, game delivery, bonus management, responsible gaming monitoring and customer support. Every processing activity described in this policy is tied to one or more of these legitimate operational purposes.

WinkPKR collects only the data that is necessary to operate the platform, comply with legal obligations and provide you with a safe, personalised gaming experience. We do not collect data beyond what is needed for these purposes.

The categories of personal data WinkPKR may collect are:

WinkPKR collects data through the following channels:

3.1 Directly From You

Most of the data WinkPKR holds is provided directly by you. This happens when you register an account (identity and contact data), complete identity verification (verification documents), make a deposit or withdrawal (financial data), contact customer support (communications data), or update your account preferences (marketing preferences, responsible gaming settings).

3.2 Automatically During Platform Use

When you access WinkPKR — whether on a phone, tablet or computer — our systems automatically record certain technical information including your IP address, device identifiers, browser type and version, operating system, referring URL, pages visited on WinkPKR and the time of each visit. This technical data is used for security monitoring, fraud prevention and platform performance optimisation.

3.3 From Third Parties

WinkPKR may receive data about you from third-party sources in specific, limited circumstances:

• Payment processors (Easypaisa, JazzCash, NayaPay, IBFT banking networks) — transaction confirmation data
• Identity verification services — confirmation of document authenticity during KYC
• Fraud prevention services — risk scores and device fingerprinting data for security purposes
• Marketing analytics platforms — aggregated, anonymised campaign performance data (never individual player identification)

WinkPKR uses your personal data for the following specific purposes, each tied to a legitimate operational or legal requirement:

4.1 Account Registration and Management

To create and maintain your WinkPKR account, authenticate your identity when you log in, manage your balance and account settings, and communicate important account-related information such as deposit confirmations, withdrawal updates and security alerts.

4.2 Identity Verification (KYC)

WinkPKR is obligated to verify the identity of all players as part of its anti-money laundering (AML) compliance requirements. KYC verification uses your identity documents and face photograph to confirm that you are who you say you are, that you meet age eligibility requirements, and that your account is not being used for financial crime.

4.3 Payment Processing

To process deposits from your Easypaisa, JazzCash, NayaPay or bank account, and to send withdrawal payments back to your chosen payment method. WinkPKR retains transaction history as required by financial regulations and for the purposes of resolving disputes.

4.4 Game Delivery and Personalisation

To deliver games and platform features, remember your preferences (language, game favourites), and provide a consistent experience across sessions and devices. WinkPKR may use your gameplay data to recommend games relevant to your interests — this personalisation can be turned off from your account settings.

4.5 Responsible Gaming Monitoring

WinkPKR uses your gameplay data — session durations, betting volumes, deposit frequency, win and loss patterns — to monitor for indicators of problematic gaming behaviour. This monitoring is a core player protection obligation and is one of the most important uses of usage data on the platform. It enables WinkPKR's responsible gaming team to intervene proactively when a player may need support.

4.6 Fraud Prevention and Security

To detect and prevent fraudulent activity, account takeover, money laundering, collusion in poker, bonus abuse, multi-accounting and other prohibited activities. Technical data including IP addresses and device fingerprints is used actively for fraud prevention. Suspicious activity may be reported to relevant authorities.

4.7 Customer Support

To resolve queries, complaints and disputes. Support interactions are logged and retained to maintain quality standards, train support staff and evidence the resolution of disputes.

4.8 Legal and Regulatory Compliance

WinkPKR processes personal data as required to comply with anti-money laundering laws, data protection regulations, gaming licence conditions and any other applicable legal obligations. Records may be retained beyond your period of active use where legally required.

Every processing activity at WinkPKR has a legal basis. The principal bases WinkPKR relies on are:

• Contract performance — processing necessary to provide the gaming services you have signed up for (account management, payment processing, game delivery)
• Legal obligation — processing required by applicable law (KYC/AML compliance, regulatory reporting, tax record keeping)
• Legitimate interests — processing necessary for WinkPKR's legitimate business interests, balanced against your privacy rights (fraud prevention, platform security, responsible gaming monitoring, customer support quality)
• Consent — processing you have explicitly agreed to (marketing communications). Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

WinkPKR does not sell your personal data to third parties. We do not share your data for advertising purposes with any external company. Data is shared only where necessary to operate the platform and meet legal obligations. The specific categories of recipient are:

6.1 Payment Service Providers

Easypaisa, JazzCash, NayaPay, SadaPay and IBFT banking networks receive the minimum financial data required to process your deposits and withdrawals. These providers are regulated financial services companies with their own data protection obligations.

6.2 Identity Verification Partners

WinkPKR works with regulated identity verification services to conduct KYC checks. Your identity document images and face photograph are shared with these services solely for the purpose of verification and are not retained by them beyond the period necessary to complete the check.

6.3 Game Providers

Third-party game providers (such as Pragmatic Play, NetEnt and others) receive limited session data necessary to deliver their games on the WinkPKR platform. Game providers do not receive your payment data, full identity data or contact details — they receive only a player identifier and the game session parameters required for gameplay.

6.4 Fraud Prevention Services

WinkPKR works with fraud detection technology providers who process technical data (IP addresses, device fingerprints) to generate risk assessments. These services do not receive your full identity profile.

6.5 Legal and Regulatory Authorities

WinkPKR will disclose personal data to law enforcement, financial intelligence units, gaming regulators or other government authorities when required by law, court order or valid legal process. WinkPKR will notify you of any such disclosure where legally permitted to do so.

WinkPKR retains your personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The table below summarises WinkPKR's principal retention periods:

After these retention periods expire, data is securely deleted or irreversibly anonymised. Anonymised data (with all identifying information removed) may be retained indefinitely for statistical and analytical purposes without any privacy impact.

WinkPKR uses cookies and similar tracking technologies on its website and mobile platform. A cookie is a small file placed on your device by the WinkPKR platform when you visit. It allows the platform to recognise your device on subsequent visits and maintain session state.

8.1 Essential Cookies

These cookies are required for WinkPKR to function. They maintain your login session, remember your account settings and ensure secure access to your account. These cookies cannot be disabled without preventing you from using the platform.

8.2 Functional Cookies

These cookies remember your preferences — such as your preferred game categories, language settings and notification preferences — to provide a personalised experience without you having to reset them each session.

8.3 Analytical Cookies

WinkPKR uses analytics tools to understand how players use the platform — which pages are visited most, how long players spend in different sections and where technical issues arise. This data is collected in aggregated, anonymised form and is used solely to improve the platform. Individual player behaviour at this level of detail is not used for marketing or commercial profiling.

8.4 Security Cookies

WinkPKR uses device fingerprinting and session security tokens to protect accounts from unauthorised access. These security cookies are essential and cannot be disabled.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the WinkPKR platform.

As a WinkPKR player, you have the following rights over your personal data. To exercise any of these rights, contact WinkPKR's privacy team at privacy@winkpkr.bet. WinkPKR will respond to all rights requests within 30 days.

9.1 Right of Access

You may request a copy of all personal data WinkPKR holds about you. WinkPKR will provide this in a clear, structured format. There is no fee for a standard access request. WinkPKR may ask you to verify your identity before fulfilling an access request to protect against unauthorised data disclosure.

9.2 Right to Correction

If any personal data WinkPKR holds about you is inaccurate or incomplete, you have the right to request correction. Many data fields (name spelling, address, contact number) can be updated directly through your WinkPKR account settings. For data that cannot be self-corrected — such as verified identity document data — please contact the privacy team.

9.3 Right to Deletion

You may request deletion of your personal data in certain circumstances — principally where the data is no longer necessary for the purposes for which it was collected. This right is not absolute: WinkPKR may be required to retain certain data for legal compliance even after a deletion request. WinkPKR will explain clearly which data can be deleted and which must be retained when responding to a deletion request.

9.4 Right to Object

You may object to WinkPKR's processing of your data where the legal basis is "legitimate interests." WinkPKR will consider your objection and cease processing if it cannot demonstrate compelling legitimate grounds that override your interests.

9.5 Right to Data Portability

Where processing is based on consent or contract and is carried out automatically, you may request a copy of your data in a machine-readable format (JSON or CSV) for transfer to another service.

9.6 Right to Withdraw Consent

Where WinkPKR processes your data based on your consent (primarily marketing communications), you may withdraw that consent at any time by updating your marketing preferences in account settings or by contacting the privacy team. Withdrawal of consent does not affect the legality of processing conducted before withdrawal.

WinkPKR takes the security of your personal data seriously and implements multiple layers of technical and organisational safeguards to protect it. The security measures in place at WinkPKR include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the WinkPKR platform
• Encryption at rest for all sensitive data fields stored in WinkPKR's databases, including financial data and identity documents
• Two-factor authentication available for all player accounts — strongly recommended and promoted to all WinkPKR users
• Role-based access controls within WinkPKR — staff access player data only on a need-to-know basis appropriate to their function
• Regular penetration testing by independent cybersecurity firms assessing WinkPKR's infrastructure annually
• Intrusion detection systems monitoring WinkPKR's infrastructure 24/7
• Secure data disposal — when retention periods expire, data is deleted using industry-standard secure erasure processes

No online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, WinkPKR will notify affected players and relevant authorities promptly in accordance with applicable breach notification requirements.

WinkPKR is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. Age verification is applied to all accounts and the minimum age requirement is enforced without exception.

If WinkPKR discovers that an account belongs to a person under 18, the account will be immediately closed, all funds will be handled in accordance with applicable regulations, and all personal data associated with the account will be deleted as quickly as legally permissible.

If you believe a person under 18 has created a WinkPKR account, please contact us immediately at privacy@winkpkr.bet so we can investigate and take appropriate action.

WinkPKR may send you promotional communications about new games, bonuses, tournaments, VIP Club benefits and other offers — but only with your explicit consent. Marketing communications are opt-in. You are never automatically enrolled in marketing messaging at WinkPKR.

If you have opted in to marketing, WinkPKR may contact you via email, SMS or push notification (if the WinkPKR app is installed). You can opt out of marketing communications at any time through:

• The Marketing Preferences section of your WinkPKR account settings (takes effect within 24 hours)
• Clicking the unsubscribe link in any WinkPKR marketing email (takes effect immediately)
• Replying STOP to any WinkPKR SMS (takes effect within 24 hours)
• Emailing the privacy team at privacy@winkpkr.bet

Opting out of marketing does not affect essential service communications — you will still receive account security alerts, deposit confirmations, withdrawal updates and support responses regardless of your marketing preferences.

WinkPKR may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform functionality. The "Last Updated" date at the top of this page reflects the most recent revision.

When WinkPKR makes material changes to this policy, registered players will be notified by email and/or through a notice displayed on the platform at next login. We will give a minimum of 14 days' notice before material changes take effect, giving you time to review the updated policy and, if you disagree with it, close your account and request withdrawal of your balance.

Continued use of WinkPKR after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. Non-material changes such as corrections, clarifications and restructuring may be made without advance notice.

If you have any question, concern or complaint about how WinkPKR handles your personal data, or if you wish to exercise any of the rights described in Section 9, please contact the WinkPKR privacy team:

• Privacy Email: privacy@winkpkr.bet
• General Support: support@winkpkr.bet
• Live Chat: Available from the platform when logged in
• Response Time: Privacy requests acknowledged within 48 hours, resolved within 30 days

If you are not satisfied with WinkPKR's response to a privacy complaint, you have the right to escalate to the relevant data protection authority applicable in your jurisdiction.