Privacy Policy

1. Data Controller

winpar ("we", "us", "the Company") is the data controller for all personal information collected through the winpar platform at winpar.app. As data controller, winpar determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data-related enquiries, you may contact our Data Protection team at: [email protected]

2. Personal Data We Collect

winpar collects personal data in the following categories:

• Identity Data: Full legal name, date of birth, gender, CNIC or passport number, nationality.
• Contact Data: Email address, mobile number, residential address (city, province, country — e.g., Karachi, Lahore, Islamabad).
• Account Data: Username, encrypted password hash, account creation date, login history, session records.
• Financial Data: Deposit and withdrawal records, payment method identifiers (e.g., last four digits of a card, JazzCash mobile number, IBAN), transaction history in PKR.
• KYC Documents: Copies of government-issued identity documents and proof of address submitted for verification purposes.
• Behavioural Data: Betting history, game session data, staking patterns, preferred markets (e.g., PSL cricket, live casino, slots), responsible gaming interactions.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, referring URL, cookies and similar tracking identifiers.
• Communications Data: Records of your interactions with winpar's customer support team, including chat transcripts and email correspondence.

winpar collects data through account registration, KYC submission, platform usage, payment processing, customer support interactions, and automated technical means (cookies, server logs).

3. How winpar Uses Your Personal Data

winpar processes your personal data for the following purposes:

• To create and manage your winpar account and verify your identity.
• To process deposits and withdrawals in PKR via JazzCash, Easypaisa, HBL, UBL, and other supported methods.
• To deliver betting, casino, and slot gaming services through the winpar platform.
• To fulfil our legal and regulatory obligations, including anti-money laundering (AML) screening, age verification, and fraud detection.
• To communicate with you regarding account activity, promotions, security alerts, and updates to winpar policies.
• To operate and improve responsible gaming tools, including deposit limit monitoring, self-exclusion management, and problem gambling risk profiling.
• To personalise your winpar experience, including recommending cricket markets or casino games based on your preferences.
• To analyse platform usage and improve product performance, security, and user experience.
• To defend winpar's legal rights and resolve disputes in connection with your account.

4. Legal Basis for Processing

winpar relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to fulfil the Terms & Conditions you agreed to when registering on winpar, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations and age verification requirements.
• Legitimate Interests: Processing carried out to protect winpar against fraud, ensure platform security, and improve the service — provided these interests do not override your fundamental rights.
• Consent: For optional communications such as promotional emails or push notifications, processing is based on your explicit consent, which you may withdraw at any time.

5. KYC Identity Verification

winpar operates a mandatory Know Your Customer (KYC) programme. Before processing a withdrawal, winpar requires users to submit satisfactory identity and address documentation. This programme serves two purposes: it protects your winpar account from unauthorised use, and it enables winpar to comply with AML obligations.

KYC documents are stored securely and are only accessible to winpar's authorised compliance personnel. They are not used for any purpose beyond identity verification, fraud prevention, and regulatory compliance. KYC documentation is retained for a minimum period as described in Section 8.

6. Cookies & Tracking Technologies

winpar uses cookies and similar technologies to operate the platform effectively. The categories of cookies we use are:

• Essential Cookies: Required for core platform functionality including login sessions, bet slip management, and payment gateway integration. These cannot be disabled without impairing your use of winpar.
• Performance Cookies: Collect anonymised data on how users navigate winpar — which pages are visited most, where errors occur, and how quickly pages load — to guide technical improvements.
• Functional Cookies: Remember your preferences such as language, preferred odds format, and responsible gaming settings.
• Analytics Cookies: Used by trusted analytics partners to generate aggregate usage reports. No individual user is identified in these reports.

You may manage non-essential cookies through your browser settings. Disabling essential cookies may prevent you from using core winpar features including login and payment processing.

7. Data Sharing & Third Parties

winpar does not sell, rent, or trade your personal data to third parties. We share data only in the following limited circumstances:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment providers receive the minimum data necessary to process your transactions.
• KYC / Identity Verification Partners: Third-party KYC providers who assist winpar in verifying identity documents and screening against sanctions lists.
• Game Providers: Casino game providers receive a pseudonymous player identifier and stake/win data to operate games and calculate RTP. They do not receive your name or contact details.
• Regulatory Authorities: winpar may be required to disclose data to law enforcement, financial intelligence units, or licensing authorities pursuant to a lawful request or applicable legal obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party data processors engaged by winpar are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

8. Data Retention

winpar retains your personal data for as long as your account is active and for a defined period thereafter:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documentation is retained for a minimum of five (5) years following the completion of the business relationship.
• Customer support communications are retained for three (3) years.
• Technical logs (server logs, IP records) are retained for up to twelve (12) months for security monitoring purposes.

After the applicable retention period, data is securely deleted or anonymised such that it can no longer be attributed to any individual.

9. Your Data Rights

Depending on applicable data protection law, you may have the following rights in relation to your personal data held by winpar:

• Right of Access: Request a copy of the personal data winpar holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to winpar's legal retention obligations.
• Right to Restriction: Request that winpar restricts processing of your data in certain circumstances.
• Right to Data Portability: Request a structured, machine-readable copy of data you have provided to winpar.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact winpar's Data Protection team at: [email protected]. Requests will be acknowledged within 72 hours and resolved within 30 calendar days.

10. Data Security

winpar implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit across the winpar platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the winpar platform.
• Two-factor authentication (2FA) available for all user accounts.
• Automatic session timeouts for inactive winpar accounts.

In the event of a data breach that poses a risk to your rights and freedoms, winpar will notify affected users without undue delay and take all necessary remedial steps.

11. Children & Minors

winpar is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If winpar becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed. If you believe a minor has registered on winpar, please contact us immediately at: [email protected].

12. Changes to This Privacy Policy

winpar may update this Privacy Policy periodically to reflect changes in legal requirements, data processing practices, or platform functionality. Material changes will be communicated to registered users via email or an on-platform notification. The effective date at the top of this policy will be updated accordingly. Continued use of winpar following the effective date of any revision constitutes acceptance of the updated policy.

13. Contact Us

For questions, complaints, or requests relating to this Privacy Policy or winpar's data processing practices, please contact our Data Protection team:

Email: [email protected]

Our English-language support team operates 24 hours a day, seven days a week. We aim to acknowledge all privacy-related communications within 72 hours.