winnr Privacy Policy

01 Who We Are

This Privacy Policy applies to the winnr platform, accessible at winnr.bio, and all associated services, features, and sub-pages operated under that domain. When this policy refers to "winnr," "we," "us," or "our," it means the entity responsible for operating the winnr platform.

winnr is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every city in between. We are committed to handling the personal data of our players — and all visitors to the winnr platform — with the highest standards of care, transparency, and security.

This Privacy Policy explains our practices in respect of the personal data we collect from you when you visit, register on, or use the winnr platform. Please read it carefully alongside our Terms & Conditions and Responsible Gaming policy.

02 Data We Collect

winnr collects the following categories of personal data from players and site visitors. The specific data points collected depend on how you interact with the platform:

03 How We Collect Your Data

winnr collects personal data through the following channels:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated technical collection: Data collected automatically when you visit the winnr platform, including IP address, device identifiers, browser information, and session behaviour, via server logs, cookies, and similar technologies.
• Third-party verification partners: Identity and age verification data obtained from licensed KYC / AML service providers when processing your account verification. These providers are contractually bound to handle data only as directed by winnr.
• Payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment providers, following your initiation of a deposit or withdrawal.
• Fraud and security systems: Device fingerprint data, behavioural analytics signals, and IP reputation data collected via integrated anti-fraud systems to protect the integrity of the platform and all player accounts.

04 Why We Use Your Data

winnr processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy:

• Account registration and management: Creating and maintaining your winnr account, verifying your identity and age (21+ requirement), and enabling access to all platform features.
• Contract performance: Processing your bets, calculating and paying out winnings, managing deposits and withdrawals, applying bonuses, and enforcing platform rules as set out in our Terms & Conditions.
• Legal and regulatory compliance: Fulfilling know-your-customer (KYC), anti-money laundering (AML), and responsible gaming obligations — including age verification at withdrawal, self-exclusion enforcement, and suspicious transaction reporting where legally required.
• Fraud prevention and platform security: Detecting and preventing multi-accounting, collusion, match-fixing, unauthorised access, money laundering, and other prohibited conduct. This includes device fingerprinting, IP analysis, and behavioural pattern monitoring.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality and compliance purposes.
• Platform improvement: Analysing aggregate, anonymised usage data to improve game selection, identify technical issues, optimise user experience, and develop new features.
• Marketing communications: Sending you promotional information about winnr bonuses, PSL season offers, new game launches, and VIP rewards — but only where you have opted in to receive such communications.

05 Legal Basis for Processing

Every instance of data processing by winnr is grounded in one of the following legal bases:

• Contractual necessity: Processing required to deliver the services you have registered for — including bet settlement, payment processing, account management, and customer support.
• Legal obligation: Processing required to comply with applicable KYC, AML, responsible gaming, and financial record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and internal analytics, where these interests are not overridden by your fundamental data rights.
• Consent: Processing for marketing communications and optional data collection activities, where we have obtained your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Sharing Your Data

winnr does not sell your personal data. We share your data only with the following categories of recipients, and only to the minimum extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, and Mastercard — to process your deposits and withdrawals. These providers receive only the transaction data necessary to complete the payment.
• KYC and AML service providers: Licensed identity verification and anti-money laundering screening partners who assist winnr in verifying player identities and meeting regulatory obligations.
• Game providers: Third-party casino game studios and sports data feed providers whose products are available on the winnr platform. These providers may receive anonymised session identifiers for technical integration purposes; they do not receive your identity or financial data.
• Cloud infrastructure providers: Hosting and data storage providers operating the servers on which the winnr platform and player data are stored. These providers are contractually prohibited from accessing or using player data for any purpose other than infrastructure provision.
• Legal and regulatory authorities: Where winnr is legally compelled to disclose data by a court order, regulatory direction, or applicable law — including suspicious transaction reports to financial intelligence authorities. winnr will notify affected players of such disclosures where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

07 Data Retention

winnr retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

08 Cookies & Tracking Technologies

The winnr platform uses cookies and similar technologies (including local storage objects and device fingerprinting signals) to operate the platform correctly and to improve your experience. The cookies we use fall into the following categories:

• Essential cookies: Required for the platform to function. These cookies manage your login session, maintain your PKR wallet balance display, enforce self-exclusion status, and preserve your game state. The platform cannot function without them.
• Security cookies: Used by our anti-fraud and bot-detection systems to distinguish legitimate player sessions from automated or malicious traffic. These cookies are deleted at the end of each session.
• Analytics cookies: Anonymous, aggregated data about how players navigate the platform — which games are most visited, where users drop off in the registration flow, and how the mobile layout performs. This data is never linked to individual player identities.
• Preference cookies: Store your optional platform preferences, such as language settings, notification preferences, and display options, to improve your return experience.

winnr does not use third-party advertising cookies or cross-site tracking cookies. You can control non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent the platform from functioning correctly and may log you out of your session.

09 Security Measures

winnr implements a layered security architecture designed to protect player data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS 1.3 encryption for all data in transit between your device and the winnr platform, including login sessions, deposit flows, and support communications.
• AES-256 encryption for sensitive data at rest, including identity verification documents, CNIC references, and financial data fields.
• Two-factor authentication (2FA) available to all registered players via their Pakistani mobile number (Jazz, Zong, Telenor, Ufone). winnr strongly recommends enabling 2FA.
• Role-based access controls limiting winnr staff access to player data on a strict need-to-know basis. No single employee has unrestricted access to the full player data set.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Isolated KYC document vault with separate access controls, audit logging, and retention management distinct from the main application database.
• Real-time fraud monitoring systems that flag and quarantine suspicious activity patterns for manual review before any financial action is processed.

10 International Data Transfers

The winnr platform is primarily designed to serve players in Pakistan, and we aim to store player data on infrastructure located within or as close as possible to the region. However, certain technical service providers — including cloud hosting, KYC verification, and fraud prevention partners — may process data on infrastructure located outside Pakistan.

Where personal data is transferred to service providers outside Pakistan, winnr ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements requiring the recipient to apply security standards equivalent to those described in this Privacy Policy.
• Selection of service providers operating in jurisdictions with recognised data protection frameworks.
• Data minimisation — ensuring that only the minimum data necessary for the specific service function is transferred internationally.

By registering for a winnr account, you acknowledge that your personal data may be processed in the manner described above. If you have concerns about international data transfers relating to your account, please contact our support team.

11 Your Data Rights

As a winnr player, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to the support contact in Section 12:

• Right of access: Request a copy of the personal data winnr holds about you, including a summary of how it is being used.
• Right to rectification: Request correction of any inaccurate or incomplete personal data in your winnr account. Minor updates (email, mobile number) can be made directly through account settings.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that certain data must be retained for the mandatory periods described in Section 7 and cannot be deleted on request.
• Right to restriction: Request that winnr restricts processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Request a structured, machine-readable copy of the personal data you have provided to winnr, to the extent technically feasible.
• Right to object: Object to processing based on winnr's legitimate interests, including profiling for fraud prevention. Note that objecting to fraud prevention processing may affect your ability to use the platform.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

winnr will respond to all valid data rights requests within 30 calendar days. In complex cases, this may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

12 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how winnr has handled your personal data, please contact us using the details below. All privacy-related communications must be submitted in writing via email.

If you are not satisfied with winnr's response to a privacy complaint, you have the right to escalate the matter through appropriate channels available in your jurisdiction. winnr takes all privacy complaints seriously and will cooperate fully with any legitimate regulatory or oversight process.

winnr reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The current version of this Privacy Policy is always available at winnr.bio/privacy-policy.