win92 Privacy Policy

win92 operates one of Pakistan's most widely used online casino and sports betting platforms, serving over 500,000 registered players across Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and every other major city in the country. As a platform that processes financial transactions, verifies identities, and maintains detailed account records, win92 handles significant volumes of personal data on a daily basis.

We take this responsibility seriously. Privacy protection at win92 is not a formality — it is a genuinely held operational principle. We have invested in robust technical security infrastructure, strict data access controls, staff training on data handling obligations, and clear internal policies governing how personal information is used. This Policy reflects those commitments in transparent, accessible language.

This Policy applies to all personal data processed by win92 in connection with the platform, including data collected through the website win92.bio, through player registration and account management, through financial transaction processing, through customer support interactions, and through any other point of contact between win92 and its players.

2.1 For the purposes of applicable data protection legislation, win92 is the data controller in respect of personal data collected through the win92 platform. As data controller, win92 is responsible for determining the purposes for which personal data is processed and the means by which it is processed.

2.2 win92 may appoint data processors — third-party service providers who process personal data on win92's behalf and under win92's documented instructions — for specific functions including payment processing, identity verification, customer support systems, and fraud detection. win92 remains responsible for ensuring that all such processors provide adequate guarantees regarding their data protection practices.

win92 collects the following categories of personal data:

win92 does not intentionally collect special category personal data (such as health, biometric, racial, religious, or political data) from players. In the event that any such data is inadvertently disclosed in the course of customer support communications, win92 will handle it in strict accordance with applicable data protection standards and will not retain it beyond the minimum period necessary to address the relevant support matter.

win92 collects personal data through the following mechanisms:

• Direct Provision: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, or updating your Account profile;
• Automated Technical Collection: Data collected automatically when you access the win92 platform, including IP address, device identifiers, browser characteristics, and session activity logs via server logs and similar technical systems;
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixel tags, and similar technologies deployed on win92.bio — see Section 9 of this Policy for full details;
• Third-Party Sources: Identity and fraud risk information received from third-party KYC and identity verification service providers; payment confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment processors; and fraud intelligence from anti-money laundering screening services.

win92 processes personal data only where a clear, documented lawful basis exists for doing so. The following table sets out the primary purposes for which win92 processes personal data and the corresponding lawful basis:

6.1 General Principle. win92 does not sell, rent, or commercially exploit your personal data. Personal data is shared only in the circumstances described in this Section, and only to the minimum extent necessary for the stated purpose.

6.2 Service Providers and Data Processors. win92 shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers include:

• Payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, cryptocurrency processors) — for the sole purpose of processing player transactions;
• KYC and identity verification service providers — for age and identity verification in compliance with regulatory requirements;
• Anti-fraud and AML screening services — for transaction monitoring and financial crime prevention;
• Customer support software providers — for managing live chat, email support, and ticket management systems;
• Platform analytics providers — for aggregate, anonymised usage analysis to improve platform performance.

All third-party data processors engaged by win92 are required by contract to process personal data solely in accordance with win92's documented instructions and to implement appropriate technical and organisational security measures.

6.3 Regulatory and Legal Disclosure. win92 may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, and other public bodies where required or permitted by applicable law, including in response to valid legal process, regulatory examination, or court order. win92 will, where legally permissible, notify affected players of such disclosures.

7.1 win92 operates infrastructure across multiple jurisdictions to ensure platform reliability and redundancy. As a result, personal data may be stored or processed in countries other than Pakistan, including countries where win92's licensing authority and primary data centre providers are located.

7.2 Where personal data is transferred outside Pakistan to countries that may not provide equivalent levels of data protection, win92 implements appropriate safeguards to ensure that the transferred data remains protected to a standard consistent with the principles described in this Policy. Such safeguards include contractual data protection clauses with the receiving entity and technical encryption of data in transit and at rest.

7.3 By registering an Account with win92, you acknowledge that your personal data may be transferred to, stored in, and processed in locations outside Pakistan in accordance with this Policy.

8.1 win92 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable legal and regulatory obligations — whichever period is longer.

8.2 The following general retention periods apply, subject to applicable regulatory requirements which may mandate longer retention:

8.3 At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, such that it can no longer be attributed to any identifiable individual.

9.1 What Are Cookies. Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently, to enhance user experience, and to provide website operators with analytical information about how their platforms are used.

9.2 Types of Cookies win92 Uses. win92 deploys the following categories of cookies on the win92.bio platform:

• Strictly Necessary Cookies: Essential for the operation of the win92 platform — including maintaining your logged-in session, storing your language preferences, and enabling core platform security functions. These cookies cannot be disabled without preventing core platform functionality.
• Analytical/Performance Cookies: Used to collect aggregate, anonymised information about how players use win92 — including which pages are visited most frequently, average session duration, and technical error rates. This information is used solely to improve platform performance.
• Functionality Cookies: Store your personalised platform preferences, such as game category filters, preferred stake levels, and notification settings, so that your preferences are remembered between sessions.
• Marketing Cookies: Used with your consent to deliver promotional content relevant to your demonstrated interests and platform usage patterns. You may withdraw consent for marketing cookies at any time.

9.3 Managing Cookies. You may manage, restrict, or delete cookies at any time through your browser settings. Disabling strictly necessary cookies will impair core platform functionality, including the ability to remain logged in to your win92 Account. All other cookie categories may be disabled without affecting your ability to access the core platform.

10.1 win92 implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between players and win92 servers;
• AES-256 encryption for sensitive data at rest, including financial data and KYC documents;
• Strict role-based access controls ensuring that win92 staff can only access the personal data necessary for their specific job function;
• Multi-factor authentication required for all win92 staff accessing systems containing player data;
• Regular third-party penetration testing and security audits;
• 24/7 automated security monitoring with alert thresholds calibrated to detect anomalous access patterns.

10.2 Breach Response. In the event of a personal data breach that presents a risk to the rights and freedoms of affected players, win92 will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach without delay. win92 maintains a documented data breach response plan that is reviewed and updated at least annually.

win92 is strictly an adult platform. Access to win92 is prohibited for any person under the age of 21. win92 does not knowingly collect or process personal data belonging to individuals under the age of 21. If win92 becomes aware that personal data of an individual under 21 has been collected, all such data will be deleted immediately and the associated Account permanently closed.

win92 employs active age verification measures at the registration stage and throughout the Account lifecycle. If you have reason to believe that a person under 21 has registered an Account with win92, please notify us immediately at [email protected].

win92 recognises the following personal data rights for all players. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request." Requests will be acknowledged within 5 business days and resolved within 30 calendar days.

• Right of Access: You may request a copy of all personal data that win92 holds about you.
• Right to Rectification: You may request correction of any inaccurate personal data that win92 holds about you.
• Right to Erasure: You may request deletion of your personal data, subject to win92's legal obligations to retain certain data (see Section 8).
• Right to Data Portability: Where technically feasible, you may request that your personal data be provided in a structured, machine-readable format.
• Right to Restrict Processing: You may request that win92 temporarily suspend processing of your data in defined circumstances, for example while a rectification request is being assessed.
• Right to Object: You may object to processing based on legitimate interests, including marketing communications. Such objections will be respected immediately in respect of marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

13.1 win92 may contact you with promotional communications about bonuses, new game releases, PSL season offers, cricket betting markets, and other platform features. Such communications are sent by email or SMS to your registered contact details.

13.2 You may opt out of marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email; (b) updating your communication preferences in your win92 Account settings; or (c) contacting customer support and requesting removal from marketing lists. Opt-out requests are processed within 48 hours. Opting out of marketing does not affect transactional communications relating to your Account, such as deposit confirmations, withdrawal notifications, and security alerts.

The win92 platform may contain references or hyperlinks to third-party websites, services, or content. This Privacy Policy applies solely to the win92 platform and the personal data processed by win92. win92 is not responsible for the privacy practices, content, or data security of any third-party website or service. Players who follow links to third-party sites do so at their own risk and are advised to review the privacy policies of those sites independently.

win92 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. Material changes will be communicated to registered players by email to their registered address and by a prominent notice on the win92.bio platform, no less than 14 days before the updated Policy takes effect. The "Last Updated" date at the top of this Policy reflects the most recent revision date.

Continued use of the win92 platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised Policy. If you do not accept the updated Policy, you must close your Account before the effective date of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which win92 processes your personal data, please contact us through one of the following channels:

win92 is committed to resolving all privacy-related queries and complaints promptly and transparently. Where a player remains dissatisfied following win92's response, they may escalate the matter to the applicable data protection authority or dispute resolution body under win92's licensing jurisdiction.