1winpk Privacy Policy
& Data Protection Statement

This Privacy Policy ("Policy") describes how 1winpk ("we", "us", "our"), accessible at https://1winpk.cam, collects, uses, stores and discloses personal information when you access our Platform. 1winpk is an English-language online gaming information and platform access service targeting adult users in Pakistan and other permitted jurisdictions.

By accessing the 1winpk Platform, registering an account, placing wagers or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

If you do not agree with any aspect of this Policy, you should discontinue use of the Platform. We reserve the right to update this Policy at any time. Material changes will be communicated through the Platform interface or by email notification to registered users.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, financial account details and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means 1winpk, the entity that determines the purposes and means of processing personal data collected through this Platform.
• "Data Processor" means any third party that processes personal data on behalf of 1winpk pursuant to a written agreement.
• "User", "you", "your" means any individual who accesses, registers on or otherwise interacts with the Platform.
• "KYC" means Know Your Customer — identity, age and address verification procedures required before processing withdrawals and certain other account functions.
• "Cookies" means small text files placed on a user's device by the Platform to store session or preference information.

We collect personal data through several channels depending on how you interact with the Platform. The categories of data we collect include:

We do not knowingly collect sensitive personal data beyond what is required for KYC compliance, responsible gambling obligations and fraud prevention. We do not collect data from individuals under the age of 18.

We process your personal data for the following purposes:

• Account management: Creating, maintaining, verifying and securing your registered account on the 1winpk Platform.
• Service delivery: Processing bets, payments, withdrawals and all gaming-related transactions.
• KYC and compliance: Verifying your identity and age in accordance with applicable gaming regulations and anti-money-laundering obligations.
• Fraud prevention and security: Detecting, investigating and preventing fraudulent transactions, money laundering, abuse of bonuses and unauthorised account access.
• Responsible gambling: Monitoring gameplay patterns to identify potential problem gambling indicators and to enforce self-exclusion or limit requests.
• Customer support: Responding to queries, complaints and technical support requests submitted through Live Chat, email or the Help Center.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game availability and user experience.
• Legal and regulatory obligations: Retaining records as required by applicable law, responding to lawful regulatory or law enforcement requests.

We process your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the account agreement between you and 1winpk, including service delivery and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including KYC verification, anti-money-laundering requirements and responsible gambling obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, improving our services and maintaining the integrity of our gaming environment — where these interests are not overridden by your data protection rights.
• Consent: Where you have provided explicit consent for a specific processing activity — for example, receiving promotional communications — we rely on that consent as the legal basis. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

1winpk does not sell, rent or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipient only where necessary and subject to appropriate data protection safeguards:

• Payment processors: To facilitate deposits and withdrawals through payment channels. Note that references to Pakistani payment methods — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — on this Platform are for contextual reference only and do not imply those providers endorse gambling or receive your data from 1winpk without separate interaction on your part.
• KYC and identity verification providers: Third-party services engaged to verify identity documents and perform age verification as required for regulatory compliance.
• Game software providers: Providers whose gaming content is accessed through the Platform may receive necessary session and account data required to run games.
• Fraud prevention and security services: Specialist providers that assist in detecting and preventing fraudulent activity on the Platform.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory request, we may disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Business successors: In the event of a merger, acquisition or asset sale, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties who process personal data on our behalf are contractually required to maintain the confidentiality and security of your data and to process it only in accordance with our documented instructions.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention approach is as follows:

• Active account data: Retained for the duration of your active account relationship with 1winpk.
• Transaction and financial records: Retained for a minimum period as required by applicable anti-money-laundering and gaming regulatory requirements — typically five to seven years from the date of the transaction.
• KYC documents: Retained for the period required by applicable compliance obligations, generally up to five years after account closure.
• Support and communications records: Retained for a reasonable period to manage ongoing support relationships and to resolve disputes.
• Self-exclusion records: Retained for the duration of the exclusion and for a reasonable period thereafter to prevent re-registration during the exclusion period.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

1winpk implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest, including financial and identity records.
• Access controls limiting personal data access to authorised personnel on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Secure procedures for managing suspected data breaches, including notification obligations where required by applicable law.

The 1winpk Platform uses cookies and similar tracking technologies to operate core Platform functions, maintain session state and understand how users interact with our services. The categories of cookies we use include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session authentication tokens, security cookies and load-balancing cookies.
• Functional cookies: Store your preferences such as language settings, display options and responsible gambling limit preferences to improve your experience.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform to help us improve performance and content relevance. Individual users are not identified through analytics data.
• Security and fraud-prevention cookies: Used to detect and prevent malicious activity, duplicate account creation and automated bot access.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the Platform's ability to function correctly. We do not use cookies to serve third-party advertising on the 1winpk Platform.

When you make deposits or request withdrawals through the Platform, financial transaction data is processed to complete those transactions. We handle payment data with additional layers of security given its sensitive nature.

Payment method references on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as familiar Pakistani payment context only. Their listing does not imply that those providers receive your personal data from 1winpk directly, nor that they endorse or support gambling transactions. Any data exchange between you and a payment provider occurs through the provider's own systems and is subject to the provider's separate privacy policy.

Full card or payment-account numbers are not stored by 1winpk. Payment tokenisation is used where supported by the relevant payment processor. PKR-denominated transaction records are retained as required by applicable financial record-keeping obligations.

The 1winpk Platform is strictly for adults aged 18 or above — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect or process personal data from individuals under the applicable minimum age.

Age verification is conducted as part of the KYC process. Where we identify that personal data has been provided by an individual below the minimum age, we will promptly close the associated account and delete the data, subject to any legal retention obligations relating to the detection of underage access attempts.

Subject to applicable law, you hold the following rights in relation to your personal data held by 1winpk. You may exercise these rights by contacting our support team using the details in Section 15.

We aim to respond to all verified rights requests within 30 days. We may request proof of identity before processing a request to protect against unauthorised data access. Where we are unable to fulfil a request due to a legal obligation, we will explain the reason clearly.

1winpk may transfer personal data to countries outside your country of residence, including for hosting, infrastructure and third-party service provider purposes. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect the transferred data, including:

• Transferring data only to countries recognised as providing an adequate level of data protection by the relevant regulatory framework.
• Using standard contractual clauses or equivalent data transfer mechanisms with third-party recipients.
• Ensuring that data processors engaged in international transfers are contractually bound to equivalent data protection standards.

Users in Pakistan should be aware that data may be processed outside Pakistan. We do not make representations that international data transfers are supervised or endorsed by any Pakistani authority.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or platform functionality. The "Last updated" date at the top of this page reflects the most recent revision.

Where amendments are material — for example, introducing a new category of data processing or changing how we share data — we will provide reasonable advance notice through the Platform interface or by email to registered users. Your continued use of the Platform following notification of amendments constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

If you have questions, concerns or wish to exercise any of your data rights in relation to this Privacy Policy, please contact the 1winpk support team. We handle all data-related inquiries with care and aim to respond within 30 days of receipt.

For responsible gambling queries — including self-exclusion requests, deposit limit adjustments or concern about problem gambling — please visit our dedicated Responsible Gambling page for full details on available tools and support resources.

For queries about the legal terms governing your account, please refer to our Terms & Conditions.