win92 Privacy Policy

win92 takes the privacy of its users seriously. This Policy explains how win92 collects, uses, stores, shares, and protects personal data in relation to users based in Pakistan and elsewhere who access the win92 platform. It also explains the rights you have in relation to your personal data and how you can exercise them.

By registering an account at win92.ws or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the win92 platform.

win92 is committed to handling personal data in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, integrity, confidentiality, and accountability. These principles underpin every data handling decision win92 makes.

For the purposes of this Privacy Policy, win92 acts as the data controller in respect of all personal data collected via the win92 platform at win92.ws. As data controller, win92 determines the purposes for which and the means by which personal data is processed.

Where win92 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification providers, or analytics platforms — those providers act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purposes for which it was shared.

All queries relating to data controllership, data processing agreements, or this Policy generally should be directed to: [email protected]

win92 collects the following categories of personal data depending on how you interact with the platform:

win92 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in a standard CNIC photograph submitted for KYC purposes.

win92 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, placing a bet, contacting customer support, or updating your account settings.
• Automated technologies: Technical and usage data collected automatically when you access the win92 platform, including via cookies, server logs, and device fingerprinting tools used for fraud prevention.
• Third-party KYC providers: Identity verification data returned by win92's KYC verification partner when you submit your CNIC for verification. The KYC partner cross-references the document against authoritative identity databases.
• Payment processors: Transaction confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard payment processing systems when you make a deposit or receive a withdrawal.
• Fraud prevention tools: Device and behavioural data gathered by win92's fraud detection systems to identify suspicious activity, duplicate accounts, and prohibited conduct as defined in the win92 Terms & Conditions.

win92 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to open and manage your account, process deposits and withdrawals, settle bets, and provide customer support — all of which are necessary to fulfil the contract between you and win92.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, KYC obligations, and any requirements imposed by win92's gaming licence authority — including the retention of transaction and identity records.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics that help win92 improve its services, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications via email, SMS, or push notification — where you have explicitly opted in to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.

win92 uses personal data for the following purposes:

• To create, verify, and manage your win92 account and ensure it remains secure;
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks;
• To verify your identity and age (21+) in compliance with KYC requirements before processing withdrawals;
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited conduct;
• To monitor your betting and gaming activity for responsible gaming purposes and to identify potential problem gambling behaviour;
• To settle bets, award bonuses, and resolve disputes in accordance with the win92 Terms & Conditions;
• To provide customer support via live chat and email;
• To send you transactional communications such as deposit confirmations, withdrawal updates, and security alerts — these communications are not optional as they are part of the service;
• To send you marketing communications about win92 promotions, bonuses, and new features — only where you have opted in; and
• To conduct internal analytics that help win92 understand how the platform is used and identify areas for improvement.

win92 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum data necessary to process your transactions. Each payment provider is bound by its own privacy and security obligations.
• KYC verification providers: win92's identity verification partner receives your CNIC image and personal details solely for the purpose of confirming your identity and age. This provider is bound by strict confidentiality and data security obligations.
• Fraud prevention platforms: Aggregated and anonymised device and behavioural data may be shared with fraud prevention partners to identify and block suspicious activity across the platform.
• Game software providers: Third-party game providers such as Pragmatic Play and Evolution Gaming may receive a pseudonymous player identifier to enable game session management. These providers do not receive your name, CNIC, or contact details.
• Legal and regulatory authorities: win92 may disclose personal data to law enforcement agencies, financial intelligence units, or licensing authorities where required to do so by applicable law, court order, or regulatory requirement. win92 will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of win92's assets, your personal data may be transferred to the acquiring entity, which will be bound by this Privacy Policy or an equivalent policy.

All third parties with whom win92 shares personal data are subject to contractual data processing agreements that restrict their use of your data to the specific purposes for which it was shared and require them to implement appropriate technical and organisational security measures.

win92 uses cookies and similar tracking technologies on win92.ws to deliver and improve the platform experience. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in during a session and security cookies used for CSRF protection. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and last-visited game category to improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how users navigate the win92 platform — which pages are visited most, where users drop off, and how long sessions last. This data is used to improve platform design and performance.
• Fraud prevention cookies: Used alongside device fingerprinting to detect duplicate accounts, suspicious login patterns, and other indicators of fraudulent activity.

You can manage non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the win92 platform. win92 does not use third-party advertising cookies or behavioural retargeting pixels.

win92 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and win92 servers;
• AES-256 encryption for personal and financial data stored at rest in win92's database infrastructure;
• Two-factor authentication available for all user accounts and mandatory for all win92 administrative accounts;
• Role-based access controls that limit staff access to personal data to those with a demonstrable operational need;
• Regular third-party penetration testing and vulnerability assessments of the win92 platform infrastructure;
• Automated intrusion detection and anomaly monitoring systems operating 24/7; and
• Formal data breach response procedures, including notification timelines as described in Section 6 of this Policy.

win92 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

Where win92 is required by law or regulatory authority to retain data beyond the periods listed above, the applicable legal retention period will take precedence. At the end of any retention period, data is deleted using secure erasure methods or irreversibly anonymised so that it can no longer be attributed to any individual.

As a win92 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact win92 at [email protected] or via 24/7 live chat, providing sufficient information to verify your identity.

win92 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or there are multiple requests, win92 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.

If you are a parent or guardian and believe that a minor in your care has registered an account on win92 or submitted personal data to the platform without your consent, please contact win92 immediately at [email protected]. win92 takes underage access extremely seriously and will act on all such reports promptly.

win92 may send you promotional communications about bonuses, new games, cricket betting offers, PSL promotions, and other platform features — but only where you have explicitly opted in to receive such communications during registration or via your account settings.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your win92 account settings;
• Clicking the unsubscribe link in any marketing email from win92; or
• Contacting the win92 support team via live chat or at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are part of the core win92 service and cannot be disabled while your account is active.

The win92 platform integrates third-party services including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard), game software providers (Pragmatic Play, Evolution Gaming, and others), KYC verification services, and analytics platforms. Each of these third parties operates under its own privacy policy and data processing terms.

win92 is not responsible for the privacy practices of any third-party service provider. By using third-party payment methods such as JazzCash and EasyPaisa to fund your win92 account, you are also subject to the privacy policies of those payment providers. win92 encourages you to review the privacy policies of any third-party service you use in connection with your win92 account.

win92 does not embed third-party social media tracking pixels, advertising networks, or retargeting scripts on the win92 platform. win92 does not share your data with social media platforms for advertising or profiling purposes.

win92 operates under an international gaming licence. As a result, some personal data may be transferred to and processed in countries outside Pakistan where win92's infrastructure providers and licensed game partners are located. Where such transfers occur, win92 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses in data processing agreements with international service providers;
• Processing only with providers that maintain ISO 27001 or equivalent information security certification; and
• Transfers to jurisdictions that maintain data protection standards equivalent to or exceeding those applicable to win92's operations.

If you would like further information about the specific safeguards applied to international data transfers from your account, please contact win92 at [email protected].

win92 may update this Privacy Policy from time to time to reflect changes in its data processing activities, applicable regulations, or platform features. Where material changes are made to this Policy, win92 will notify registered users via email or a prominent notice on the win92 platform at least 7 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the win92 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure and withdrawal of your remaining balance.

win92 maintains an archive of previous versions of this Privacy Policy. If you wish to review a prior version, please contact the win92 support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how win92 has handled your personal data, please contact the win92 Data Privacy team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 from your win92 account dashboard
• Response Time: win92 acknowledges all privacy-related enquiries within 24 hours and provides a substantive response within 30 calendar days