winz Privacy Policy

1Who We Are

winz is an internationally licensed online gaming platform accessible at winz.cam, offering cricket betting, sports wagering, live casino games, slots, fishing games, and bingo to players in Pakistan and select international markets. In this Privacy Policy, references to "winz", "we", "us", or "our" refer to the operating entity behind the winz platform and all associated services.

winz acts as the data controller in respect of the personal information you provide when registering and using the platform. This means winz determines the purposes for which your data is collected and the manner in which it is processed, stored, and protected.

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact the winz Data Protection team at the contact details provided in Section 15 of this document.

2Data We Collect

winz collects only the categories of personal data that are necessary to deliver, operate, and improve the platform. The categories of data collected are described below:

2.1 Identity and Contact Data

• Full legal name as it appears on government-issued identification
• Date of birth (for age verification — 21+ requirement strictly enforced)
• Residential address, city, and country
• Email address used for account registration and communications
• Mobile phone number (for account security and verification purposes)

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., CNIC, passport)
• Proof of address documentation (e.g., utility bill, bank statement)
• Proof of payment method ownership where required for withdrawal processing

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast)
• Account balance history and bonus credit records
• Betting and gaming transaction history

2.4 Technical and Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, browser type and version
• Pages visited on winz, time spent, click paths, and feature usage patterns
• Session duration and login timestamps

2.5 Communications Data

• Records of support conversations, emails, and chat transcripts between you and the winz support team
• Feedback, complaints, and dispute correspondence submitted to winz
• Responses to surveys or promotional communications where you have opted in

3How We Collect Your Data

winz collects personal data through the following channels:

3.1 Directly From You

The majority of personal data winz holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion. You are under no obligation to provide this information, but without it winz cannot create or maintain your account or process transactions.

3.2 Automatically Through Platform Use

When you access winz, our servers automatically collect technical data including your IP address, device identifiers, browser configuration, and session activity. This data is collected via server logs and cookies as described in Section 9 of this Privacy Policy.

3.3 From Third-Party Service Providers

winz may receive supplementary identity or fraud-risk data from third-party KYC verification providers, payment processors, and fraud prevention services. Such data is used solely for the purposes of verifying your identity, processing your transactions securely, and protecting the integrity of the winz platform.

4Why We Use Your Data

winz processes your personal data for the following defined purposes:

5Legal Basis for Processing

winz processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and winz — i.e., providing the gaming and betting services you have registered to use, processing your deposits and withdrawals, and maintaining your account.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and financial record-keeping duties imposed by winz's licensing framework.
• Legitimate Interests: Processing undertaken for winz's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent for marketing at any time by contacting winz support or updating your account communication preferences.

6Data Sharing and Disclosure

winz does not sell your personal data. We may share your data with the following categories of trusted third parties only to the extent necessary for the stated purpose:

6.1 Payment Processors

To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, winz shares the minimum required transaction data with the relevant payment service provider. These providers are bound by their own data protection obligations and may not use your data for any purpose other than processing the transaction.

6.2 KYC and Identity Verification Providers

winz uses accredited third-party KYC verification services to authenticate the identity documents you submit during verification. Your submitted documents are processed by these providers in accordance with their own privacy policies and applicable data protection law. winz retains verified status flags and document reference identifiers rather than storing raw document images on winz servers beyond what is legally required.

6.3 Fraud Prevention and Security Services

winz partners with fraud detection and cybersecurity providers who process technical and behavioural data to identify suspicious activity, account takeover attempts, and coordinated abuse. Data shared with these providers is limited to pseudonymised technical signals and does not include unnecessary personal identifiers.

6.4 Game Content Providers

Third-party game studios and RNG software providers whose titles are hosted on winz may receive anonymised session and game-round data for the purposes of game performance monitoring, jackpot management, and regulatory compliance. Personally identifiable information is not shared with game content providers.

6.5 Regulatory and Law Enforcement Authorities

winz will disclose personal data to regulators, law enforcement agencies, or government bodies where legally required to do so, or where winz believes in good faith that disclosure is necessary to protect the rights, property, or safety of winz, its players, or the public.

7International Data Transfers

winz operates servers and engages service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, winz ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within your home jurisdiction.

Safeguards used by winz for international data transfers include contractual data protection clauses with all service providers, ensuring they maintain data security standards consistent with internationally recognised frameworks including ISO 27001 and GDPR-equivalent protections.

8Data Retention

winz retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account registration plus a minimum of five years following account closure, as required for AML compliance and financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in accordance with anti-money laundering regulatory requirements.
• Transaction Records: Retained for a minimum of five years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support and Communications: Retained for three years from the date of the last communication to support dispute resolution and service improvement activities.
• Technical and Log Data: Retained for up to 13 months for security analysis and fraud detection purposes, after which they are automatically purged or anonymised.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with winz's internal data lifecycle management procedures.

9Cookies & Tracking Technologies

winz uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain session security, and to gather anonymised analytics data. The categories of cookies used on winz are as follows:

9.1 Essential Cookies

These cookies are strictly necessary for the winz platform to function. They maintain your login session, prevent cross-site request forgery, and ensure the integrity of your account during use. Essential cookies cannot be disabled without rendering the platform non-functional.

9.2 Analytics Cookies

winz uses anonymised analytics tools to understand how players navigate the platform — which pages are most visited, where players encounter difficulties, and how features are used. This data is collected in aggregate form and cannot be linked back to individual players. Analytics data is used exclusively to improve the winz user experience.

9.3 Security Cookies

Security cookies help winz detect suspicious login behaviour, identify bot traffic, and prevent automated account abuse. These cookies analyse device fingerprint signals and session consistency without collecting additional personal information beyond what is already held in your account record.

9.4 Cookie Management

You can manage and delete non-essential cookies at any time through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of your winz gaming session. winz does not deploy third-party advertising cookies or social media tracking pixels on any page of the platform.

10Your Data Rights

As a winz player, you hold the following rights in respect of your personal data. These rights may be exercised by submitting a written request to the winz Data Protection team at the contact details in Section 15:

• Right of Access: You have the right to request a copy of the personal data winz holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by winz about you.
• Right to Erasure: You have the right to request deletion of your personal data where winz no longer has a lawful basis to retain it, subject to any overriding legal obligations such as AML record-keeping requirements.
• Right to Restriction: You have the right to request that winz restricts the processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to winz in a structured, machine-readable format, and to request its transfer to another data controller where technically feasible.
• Right to Object: You have the right to object to winz's processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where winz processes your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

winz will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, and you will be notified of the extension within the initial 30-day window.

11Children and Minors

The winz platform is strictly prohibited to individuals under the age of 21. winz does not knowingly collect personal data from anyone under 21 years of age. Age verification checks are performed during the registration and KYC process to enforce this restriction.

If you are a parent or guardian and you believe your child has registered on or accessed the winz platform, please contact our support team immediately at [email protected]. Upon confirmation, winz will immediately close the account, delete all associated personal data, and reverse any financial transactions where technically possible.

winz takes the protection of minors exceptionally seriously and cooperates fully with any family-initiated or regulatory enquiry relating to underage access.

12Security Measures

winz employs a multi-layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and winz servers
• AES-256 encryption for personal data stored within winz databases
• Multi-factor authentication options for player account login
• Role-based access controls ensuring winz staff can only access player data that is strictly necessary for their job function
• Regular third-party penetration testing and security audits of the winz platform infrastructure
• Real-time intrusion detection and anomaly monitoring on all production systems
• Strict vendor management processes ensuring all third-party service providers maintain equivalent security standards

In the event of a data security incident that poses a risk to your rights and freedoms, winz will notify affected players and relevant regulatory authorities within the timeframes required by applicable law, and will take immediate remedial action to contain and address the breach.

13Third-Party Services and Links

The winz platform may contain references to third-party game content providers, payment processors, and affiliated services. This Privacy Policy applies solely to data collected and processed by winz directly. winz is not responsible for the privacy practices of third-party service providers operating under their own privacy frameworks.

winz does not embed third-party social media widgets, advertising trackers, or affiliate tracking pixels on any page of the winz.cam platform that would result in your data being shared with those third parties without your knowledge.

14Changes to This Privacy Policy

winz reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where material changes are made, winz will provide advance notice to registered players via their registered email address or a prominent in-platform notification, at least 14 days prior to the changes taking effect.

The effective date at the top of this Privacy Policy will be updated each time a revision is published. We encourage you to review this Privacy Policy periodically to remain informed about how winz protects your data. Your continued use of the winz platform following any published update constitutes your acceptance of the revised Privacy Policy.

15Contact the winz Data Protection Team

For any queries, concerns, or requests relating to this Privacy Policy or your personal data held by winz, please contact the Data Protection team through the following channel:

All formal data rights requests and privacy complaints must be submitted in writing via the above email address so that a documented record is maintained. winz does not handle formal data protection matters through live chat or telephone channels.