WainPKR Privacy Policy — How We Protect Your Data in Pakistan

WainPKR understands that privacy is something Pakistani players care deeply about. When you share personal information with any online platform — your phone number, your CNIC details, your payment account — you are placing trust in that platform to handle that information responsibly. WainPKR takes that trust seriously.

This Privacy Policy explains in plain terms what personal information wainpkr collects from players, why it is collected, how it is stored and protected, with whom it may be shared, how long it is kept, and what rights you have in relation to your own data. WainPKR is committed to full transparency on all of these points. If anything in this policy is unclear, our support team is available 24/7 to explain further.

WainPKR operates as an online gaming and sports betting platform serving players in Pakistan. All financial transactions on the platform are conducted in Pakistani Rupees (PKR). The personal data we collect is processed in connection with the provision of these services and for no other primary purpose.

WainPKR collects personal data in three main ways: information you provide directly, information generated automatically by your use of the platform, and information obtained from third parties such as payment processors during the course of a transaction.

WainPKR does not collect data that is not necessary for the purposes described in this policy. We do not collect biometric data, social media profile information, or location data beyond IP-derived country of access. We do not collect data from children — see Section 10 for details.

WainPKR collects and uses personal data only for specific, legitimate purposes related to the provision of the gaming platform and the protection of players and the business. The following table summarises each purpose and the data categories used.

• Account creation and management: Identity data and contact data are used to create and maintain your wainpkr account, verify your identity, and communicate with you regarding your account status.
• Payment processing: Financial data is used to process your deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. All transactions are in PKR.
• KYC and fraud prevention: Identity data and verification documents are used to confirm that you are who you say you are, that you meet the minimum age requirement of 18, and to detect and prevent fraudulent activity.
• Responsible gaming compliance: Gaming activity data and account data are used to monitor betting patterns, identify players who may need support, and apply responsible gaming tools activated by the player.
• Platform improvement: Technical data and gaming activity data are used in anonymised, aggregated form to improve the performance, reliability, and game selection of the wainpkr platform.
• Customer support: Communications data and account data are used to understand and resolve support queries efficiently and to maintain a record of previous interactions for continuity of service.
• Promotional communications: Contact data is used to send promotional offers and platform updates — but only where you have opted in to receive them. You can withdraw this consent at any time.

WainPKR processes your personal data under the following legal bases, depending on the purpose for which the data is being used:

• Contractual necessity: Processing of identity, contact, financial, and account data is necessary to fulfil the contract between wainpkr and the player — i.e., to provide the gaming platform and process payments.
• Legal obligation: Processing of KYC documents and transaction records is required to comply with applicable anti-money laundering, identity verification, and financial regulation obligations.
• Legitimate interests: Processing of technical data for fraud prevention, platform security, and responsible gaming monitoring is conducted on the basis of wainpkr's legitimate interest in maintaining a safe and compliant platform.
• Consent: Processing of contact data for marketing communications is conducted on the basis of your explicit consent, which you may withdraw at any time.

WainPKR does not sell your personal data to any third party under any circumstances. However, to operate the platform and comply with legal requirements, wainpkr shares data with a limited number of third-party service providers on a need-to-know basis only. These providers are contractually required to handle data in accordance with equivalent privacy standards.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, and card payment networks receive the minimum financial data necessary to process your transactions in PKR.
• Game providers: Third-party studios whose games appear in the wainpkr lobby may receive anonymised session identifiers to maintain game state. They do not receive your personal identity details.
• KYC verification services: Identity document verification is conducted with the assistance of specialist KYC technology providers who are bound by strict data handling agreements.
• Fraud prevention services: IP addresses and device fingerprints may be checked against fraud databases to protect the platform and honest players from fraudulent activity.
• Regulatory authorities: WainPKR may be required to disclose player data to regulatory bodies or law enforcement agencies where required by applicable law. Such disclosures are made only to the extent required and are logged.

Data security at wainpkr is not handled as a single measure — it is a multi-layer approach designed to protect your information from every credible threat vector. The following protections are in place at all times:

• All data transmitted between your device and wainpkr servers is encrypted using 256-bit SSL/TLS. The padlock icon visible in your browser confirms this connection is active.
• Passwords are stored as irreversible hashed values using industry-standard hashing algorithms. WainPKR staff cannot read your password — if you forget it, it must be reset rather than retrieved.
• Sensitive documents submitted for KYC, such as CNIC copies, are stored in encrypted form with access restricted to authorised compliance staff only.
• All data access by wainpkr staff is logged, and access rights are reviewed regularly. Employees are granted access only to the data necessary for their specific function.
• Regular independent security assessments are conducted on wainpkr's infrastructure to identify and address potential vulnerabilities before they can be exploited.
• In the event of a data security incident that affects player data, wainpkr will notify affected players as required by applicable law and will provide clear information on the nature of the incident and recommended steps.

WainPKR uses cookies — small text files stored on your device by your browser — to enable the platform to function correctly and securely. We do not use cookies for cross-site advertising or to track your activity outside of the wainpkr platform. The types of cookies we use are as follows:

WainPKR does not use third-party advertising cookies, pixel trackers, or any cookie technology that reports your activity to external advertising or analytics networks. You can manage or delete cookies at any time through your browser's cookie management settings. Clearing essential cookies will end your active session and require you to log in again.

WainPKR retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum post-closure period required by financial regulation.
• Transaction records: Financial transaction records, including PKR deposit and withdrawal history, are retained for a minimum of five years from the date of each transaction to comply with anti-money laundering obligations.
• KYC documents: Identity verification documents are retained for a minimum of five years after the account is closed, as required by applicable regulations.
• Customer support records: Support correspondence is retained for three years after the matter is resolved, to allow for follow-up and dispute resolution.
• Technical and session data: IP logs and session data are retained for 12 months and then deleted, unless retained further in connection with a specific fraud investigation or legal matter.

When retention periods expire, data is securely deleted or permanently anonymised so that it can no longer be associated with any individual player. Players may request early deletion of data not subject to mandatory retention — see Section 9 for details.

As a wainpkr player, you have meaningful rights in relation to your personal data. These rights are real and enforceable — not just words on a page. Here is what each right means in practice at wainpkr:

To exercise any of these rights, email support@wainpkr.app with the subject line "Data Rights Request". Please include your registered email address and a brief description of your request. All requests receive an acknowledgement within 48 hours and are resolved within 30 days.

WainPKR is strictly an 18+ platform. The collection and processing of personal data from persons under the age of 18 is not permitted and is not done intentionally by wainpkr. The platform uses both technical and manual age verification measures to identify and prevent underage registration.

If wainpkr discovers that personal data has been collected from a minor, the account will be immediately closed, all data relating to the account will be deleted, and any deposited funds will be returned to the payment source. If you believe that a minor has registered a wainpkr account, please contact support@wainpkr.app immediately with as much detail as possible.

Parents and guardians who are concerned about a minor accessing gambling platforms are encouraged to visit the Responsible Gaming page for information on parental control tools that can restrict access to gaming websites on shared or family devices.

WainPKR may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in the services offered, or changes in applicable law. The effective date at the top of this page will be updated whenever a new version is published.

Where changes are material — meaning they affect how your data is used, who it is shared with, or what rights you have — wainpkr will notify all registered players by email at least 14 days before the changes take effect. Minor updates, such as clarifications that do not change the substance of the policy, may be made without advance notice.

The current version of this Privacy Policy is always accessible at this page. If you disagree with any update to the policy, you may close your account and withdraw your balance. Continued use of wainpkr following the effective date of an updated policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, about how wainpkr handles your personal data, or if you wish to exercise any of your data rights, please get in touch. Our support team is available around the clock and privacy-related requests are handled as a priority.

• Email: support@wainpkr.app
• Live Chat: Available from within your wainpkr account after login
• Support Hours: 24/7 including Pakistan public holidays
• Languages: English and Urdu

For data rights requests, please use "Data Rights Request" as your email subject line and include your registered email address. For urgent security or data breach concerns, please mark your email as urgent or use the live chat for a faster response.