WinPKR 20 Privacy Policy — Your Data, Your Rights, Our Responsibility

WinPKR 20 operates the online gaming and sports betting platform available at winpkr20.net. For the purposes of this Privacy Policy, WinPKR 20 is the data controller — meaning we decide how and why your personal data is collected and used when you interact with our platform.

WinPKR 20 is built specifically for the Pakistani market. All financial transactions on the platform are conducted in Pakistani Rupees (PKR) via local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Pakistani-issued Visa/Mastercard cards. Our data handling practices reflect the PKR-first, Pakistan-first nature of the platform.

If you have any questions about this Privacy Policy or how WinPKR 20 handles your data, contact us at: support@winpkr20.net

WinPKR 20 collects personal data in two main ways — information you provide directly, and information collected automatically when you use the platform.

Information you provide:

• Identity data: full name, date of birth, CNIC number (for KYC verification).
• Contact data: mobile phone number, email address.
• Financial data: payment method type, account or wallet identifier (e.g., your Easypaisa mobile number), transaction history in PKR.
• Verification documents: CNIC copy or other government-issued ID submitted for identity verification.
• Support communications: messages, chat logs, and email correspondence with our support team.

Information collected automatically:

• Device & technical data: IP address, device model, operating system version, browser type.
• Usage data: pages visited, games played, session duration, clickstream data.
• Gaming data: bet amounts, game selections, win/loss history, deposit and withdrawal patterns.
• Cookie data: session identifiers, preference cookies, analytics cookies (see Section 4).

WinPKR 20 collects and processes personal data only for defined, legitimate purposes. We do not collect data "just in case" — every category serves a specific function:

• Account registration & management: to create, maintain, and secure your WinPKR 20 account and allow you to log in, deposit, and withdraw in PKR.
• Identity verification (KYC): to verify your age (18+), confirm your identity, and comply with anti-money laundering obligations. This is a legal requirement for licensed gaming platforms.
• Payment processing: to execute deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and bank cards in PKR — accurately and securely.
• Responsible gaming: gaming activity data (bet history, session lengths, deposit frequency) is monitored to identify patterns consistent with problem gambling so that WinPKR 20 can intervene appropriately.
• Fraud prevention & security: IP addresses, device identifiers, and login patterns are used to detect and prevent account fraud, bonus abuse, and money laundering.
• Customer support: communication records are retained to enable our support team to handle queries and disputes effectively.
• Platform improvement: anonymised and aggregated usage data helps WinPKR 20 understand how players use the platform and make it better.
• Marketing communications (optional): if you opt in, we use your contact data to send bonus offers, promotions, and WinPKR 20 news. You can opt out at any time.

WinPKR 20 uses cookies and similar technologies to operate the platform, keep you securely logged in, and understand how players use the site. Here is what we use and why:

• Essential cookies: required for the platform to function. These maintain your logged-in session, remember your bet slip contents, and ensure payments process correctly. You cannot opt out of essential cookies without breaking core platform functionality.
• Security cookies: used to detect unusual login activity, prevent cross-site request forgery, and flag suspicious session patterns. These are necessary for account security.
• Analytics cookies: used to understand how pages are navigated, which games are most visited, and where users drop off. Analytics data is aggregated and anonymised — it cannot be used to identify you personally.
• Preference cookies: remember your language preference and other display settings so you don't have to reset them on every visit.

WinPKR 20 does not use advertising cookies, retargeting pixels, or third-party tracking technologies that share your data with advertisers. Your browsing activity on WinPKR 20 is not sold to or shared with ad networks.

WinPKR 20 does not sell, rent, or trade your personal data to third parties for marketing purposes — ever. Your data is not a product. It is only shared with third parties in the following specific, limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the transaction data necessary to process your PKR deposits and withdrawals. They receive no more information than is required for the payment to complete.
• KYC/identity verification providers: third-party services used to verify CNIC documents and confirm player identity. These providers are contractually bound to handle data securely and may not use it for any other purpose.
• Game software providers: providers of the casino games, crash games, and live dealer content available on WinPKR 20 may receive anonymised session data needed to operate the games. They do not receive your personal identity or payment information.
• Legal and regulatory bodies: WinPKR 20 will disclose personal data to law enforcement, financial intelligence units, or regulators when legally required to do so. We will notify you when permitted by law.
• Fraud prevention networks: anonymised risk signals (not personal data) may be shared with industry fraud prevention services to protect the platform and its players.

WinPKR 20 takes data security seriously. The platform implements the following protections:

• 256-bit SSL/TLS encryption on all connections between your device and WinPKR 20 servers. Every page, every bet, every payment is transmitted over an encrypted connection.
• Encrypted storage for sensitive data including CNIC document scans and payment method identifiers. Data at rest is encrypted using industry-standard algorithms.
• Access controls: WinPKR 20 staff access to player personal data is restricted on a need-to-know basis. Support agents can see what they need to help you; they cannot access payment credentials or full CNIC data beyond what is required.
• Two-factor authentication (2FA): available for player accounts and mandatory for internal staff systems.
• Regular security audits: WinPKR 20's technical infrastructure is reviewed periodically for vulnerabilities.
• Incident response procedures: if a data breach affecting player data occurs, WinPKR 20 will notify affected players promptly and take immediate containment steps.

No system is completely immune to security threats. WinPKR 20 maintains these protections to industry standards, but we also rely on players to keep their own account credentials secure. Do not share your WinPKR 20 password with anyone.

WinPKR 20 retains personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable legal obligations:

• Account data (name, contact, login history): retained for the life of your account plus a minimum of 5 years after account closure, in line with standard financial record-keeping requirements.
• KYC documents (CNIC copies): retained for a minimum of 5 years after account closure in accordance with anti-money laundering requirements.
• Transaction history (PKR deposits, withdrawals, bet records): retained for 7 years from the date of each transaction.
• Support communications: retained for 3 years to allow for dispute resolution.
• Analytics data: anonymised and aggregated, retained indefinitely as it cannot be used to identify individual players.
• Marketing preferences: retained until you opt out, at which point your opt-in status is updated immediately.

When data is no longer required, it is securely deleted or anonymised. WinPKR 20 does not indefinitely accumulate personal data beyond what is needed and legally required.

As a WinPKR 20 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@winpkr20.net with "Data Rights Request" in the subject line.

• Right of Access: you can request a copy of all personal data WinPKR 20 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: if any personal data we hold is inaccurate or incomplete, you can ask us to correct it. You can also update most contact details directly from your account settings.
• Right to Erasure: you can request that WinPKR 20 delete your personal data. Note that some data must be retained for legal and regulatory reasons (see Section 7) and cannot be deleted on request. We will tell you exactly what can and cannot be deleted and why.
• Right to Restriction: you can ask WinPKR 20 to restrict how we use your data while a complaint or request is being resolved.
• Right to Portability: you can request your personal data in a structured, machine-readable format to transfer to another service provider.
• Right to Object: you can object to the processing of your data for marketing purposes at any time. See Section 10 for how to unsubscribe from marketing communications.

WinPKR 20 is strictly an adults-only platform. The minimum age to register and use the platform is 18 years. WinPKR 20 does not knowingly collect personal data from anyone under the age of 18.

If we discover that an account belongs to a person under 18, that account will be immediately suspended, all gaming activity voided, and any deposited funds returned to the payment method used — minus any winnings generated, which will be forfeited.

WinPKR 20 uses age verification during registration, including date-of-birth confirmation and, where necessary, CNIC-based KYC, to prevent underage access to the platform.

WinPKR 20 may send you promotional communications — bonus offers, PSL season promotions, VIP Club updates, and platform news — if you have opted in to receive them during or after registration.

Marketing messages from WinPKR 20 are sent by:

• Email to your registered address.
• SMS to your registered mobile number.
• In-platform notifications when you are logged in.

Unsubscribing: you can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email.
• Updating your notification preferences in your WinPKR 20 account settings.
• Emailing support@winpkr20.net with "Unsubscribe" in the subject line.

Opting out of marketing communications will not affect essential operational messages from WinPKR 20 — these include deposit confirmation, withdrawal confirmation, security alerts, and account verification requests, which are part of the service and cannot be disabled.

WinPKR 20 may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes — those that significantly affect how your data is used — we will:

• Email all registered players to notify them of the change.
• Display a prominent notice on the WinPKR 20 platform for a minimum of 14 days.
• Update the "Last Updated" date at the top of this document.

For minor updates — such as clarifying language, correcting typographical errors, or updating contact details — we will update this document without specific notification. The "Last Updated" date will always reflect the most recent version.

Continued use of WinPKR 20 after a Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with a material change, you can close your account by contacting support@winpkr20.net.

For any questions, requests, or concerns about this Privacy Policy or how WinPKR 20 handles your personal data, contact our dedicated data team:

• Email: support@winpkr20.net (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: available from your WinPKR 20 account dashboard — connect in under 5 minutes.

WinPKR 20 will acknowledge your enquiry within 2 business days and provide a full response within 15 business days. For formal data rights requests (access, erasure, portability) the response period is 30 days from verification of your identity.