Winner Privacy Policy

1 Introduction

Winner operates the online gaming platform available at winner.ad, which includes sports betting on cricket, PSL, T20 internationals, football and esports, alongside a full game lobby of slot games, live casino and other titles. When you use any part of this platform — whether you are browsing as a visitor or are a registered player — certain personal data is collected and processed.

This Privacy Policy sets out clearly what that data is, why we collect it, how it is stored, who can see it and what your rights are regarding your own information. It is written for Pakistani players using the platform in Pakistan, where all transactions take place in PKR.

By registering an account or continuing to use the Winner platform, you acknowledge that you have read and understood this policy. If you do not agree with how your data is handled as described here, please do not register or continue using the platform.

2 What We Collect

Winner collects personal data in two main ways: information you provide directly, and information collected automatically when you use the platform.

Information you provide directly:

• Full name, date of birth and gender (collected at registration)
• Email address and mobile number
• CNIC or other identity documents submitted for verification purposes
• Payment method details — such as your JazzCash or Easypaisa mobile number, bank account name or card details used for PKR deposits and withdrawals
• Communications you send to Winner support, including live chat transcripts and email correspondence
• Responsible gaming preferences such as deposit limits or self-exclusion requests

Information collected automatically:

• Device information: device type, operating system, browser type and version
• IP address and approximate geographic location
• Session data: pages visited, time spent on each section, games played, bets placed and deposit or withdrawal activity
• Cookie and tracking data as described in Section 6
• App usage data if you use the Winner Android application

3 How We Use Your Data

Winner uses the data collected for the following specific purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account operation: To create and maintain your Winner account, authenticate your identity at login and manage your session securely.
• Transaction processing: To process PKR deposits via JazzCash, Easypaisa, Raast, Bank Transfer and other supported methods, and to process withdrawal requests to your verified payment method.
• Identity & age verification: To confirm that you are 18 or older and that the information on your account matches your submitted documents.
• Customer support: To respond to queries, resolve disputes, investigate complaints and provide assistance through live chat and email.
• Platform improvement: To understand how players use the game lobby, sports betting section and other features, and to improve performance, design and content accordingly.
• Responsible gaming: To monitor for patterns that may indicate problem gambling and to enforce deposit limits, cool-off periods or self-exclusion requests you have set.
• Fraud prevention: To detect and prevent bonus abuse, multi-accounting, payment fraud and other prohibited activities as outlined in the Terms and Conditions.
• Marketing communications: To send you promotions, bonus offers and platform news — only if you have opted in to receive these. You can opt out at any time.

4 Sharing Your Data

Winner does not sell personal data. We share it only in the following limited and necessary circumstances:

• Payment processors: Your payment details are shared with the relevant payment provider (such as JazzCash or Easypaisa infrastructure partners) solely to process your PKR transactions. These providers operate under their own privacy and security obligations.
• Game providers: When you play a game from a third-party provider such as Pragmatic Play or NetEnt, certain session data (your player ID and bet amounts) is shared with that provider to operate the game. Game providers do not receive your name, contact details or full payment information.
• Identity verification services: Where a third-party service is used to assist with age or identity verification, your submitted documents may be shared securely with that service for verification purposes only.
• Legal obligations: Winner may disclose personal data if required to do so by applicable law, regulation or a legally binding order from a competent authority.
• Business transfers: In the event of a merger, acquisition or sale of assets, your data may transfer to the new entity, subject to the same privacy protections described in this policy.

In all cases where data is shared with third parties, Winner requires those parties to handle your data securely and to use it only for the specific purpose for which it was shared.

5 Payment Data & PKR Transactions

All financial transactions on Winner are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal via JazzCash, Easypaisa, Raast or Bank Transfer, the relevant transaction data is processed securely.

Winner does not store full card numbers, mobile wallet PINs or bank account passwords. What is retained is sufficient to identify the payment method and reconcile transaction records — such as a masked card number, a registered mobile wallet number or a bank account name — for audit and dispute resolution purposes.

• Transaction records (amounts, dates, method used) are retained for a minimum period as required for financial audit purposes.
• Withdrawal requests are processed back to the same payment method used for the deposit where technically possible, as a fraud prevention measure.
• If a chargeback or payment dispute is raised, relevant transaction records will be used to investigate and respond to the claim.

6 Cookies & Tracking Technologies

Winner uses cookies and similar technologies on the platform and in the Android app to make the service work properly and to understand how it is being used.

Types of cookies used:

• Essential cookies: Required for core platform functionality — session management, login state and security tokens. These cannot be disabled without breaking the service.
• Functional cookies: Remember your preferences such as language, game lobby filters and notification settings, so you do not have to reconfigure them every visit.
• Analytics cookies: Collect anonymised data about how pages and features are used — which games are popular, where players spend the most time, and which sections of the platform may need improvement. No personally identifiable information is included in analytics data.
• Marketing cookies: Used only if you have consented to receive personalised promotions. These help us show you offers relevant to your interests — for example, PSL cricket betting promotions during the tournament season.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform. Disabling analytics or marketing cookies will not affect gameplay or your access to your account.

7 Data Retention

Winner retains your personal data for as long as your account is active and for a reasonable period afterwards to fulfil legal, financial and operational obligations. Specific retention periods are as follows:

• Account data (name, contact details, identity documents): Retained for the duration of your account and for a period after closure as required for audit and legal compliance.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum period as required by applicable financial record-keeping obligations.
• Support communications: Live chat and email records are retained to assist with dispute resolution and service improvement. Older records may be anonymised after a set period.
• Gaming activity logs: Bet history, game session records and bonus usage are retained to support dispute resolution and responsible gaming monitoring.

When the retention period for a specific data category expires, Winner securely deletes or anonymises that data so it can no longer be linked to you as an individual. If you request account deletion before a retention period expires, we will delete all data that is not subject to a legal hold obligation.

8 Security Measures

Keeping your data safe is a core responsibility we take seriously. Winner applies multiple layers of security across the platform:

• TLS encryption: All data in transit between your device and Winner's servers is encrypted using TLS. This applies to the website, the Android app and API communications.
• Access controls: Only authorised Winner personnel with a legitimate need can access personal account data. All internal access is logged and audited.
• Password security: Passwords are stored in hashed form. Winner staff cannot see your password in plain text and will never ask you for it.
• Fraud monitoring: Automated systems monitor for unusual account activity, suspicious login attempts and abnormal transaction patterns in real time.
• Secure infrastructure: Platform servers and databases are hosted in secure environments with regular security testing and patching.

While Winner takes all reasonable precautions, no online system is completely immune to risk. You also play a role in keeping your account safe — use a strong, unique password, do not share your login credentials, and contact support immediately if you notice anything unusual on your account.

9 Your Rights

As a Winner player, you have the following rights regarding your personal data. To exercise any of these, contact Winner support with your account details and the specific request:

• Right to access: You can request a copy of the personal data Winner holds about you. We will provide this within a reasonable timeframe.
• Right to correction: If any personal data on your account is inaccurate or out of date, you can ask us to correct it. Some corrections may require supporting documentation.
• Right to deletion: You can request that your personal data be deleted. We will action this except where retention is required by law or to resolve an outstanding dispute.
• Right to restrict processing: In certain circumstances you can ask Winner to limit how your data is used while a query or complaint is being resolved.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time through account settings or by contacting support.
• Right to data portability: You can request your data in a structured, commonly used format so that you can transfer it if needed.

Winner will respond to all data rights requests promptly. We may need to verify your identity before processing a request to protect against unauthorised access to another person's data.

10 Minors

The Winner platform is strictly for adults aged 18 and above. Winner does not knowingly collect personal data from anyone under the age of 18. If you believe a minor has registered an account or submitted personal data, please contact support immediately so the account can be investigated and closed.

If you share a device with younger family members, we strongly recommend using device-level parental controls or separate browser profiles to prevent accidental access to the Winner platform. The Responsible Gaming page has further guidance on managing access in shared households.

11 Changes to This Policy

Winner may update this Privacy Policy from time to time to reflect changes in how the platform operates, the services offered or applicable legal requirements. When meaningful changes are made, registered players will be notified via email to their registered address or through an in-platform notification.

The "Last updated" date at the top of this page always shows when the most recent revision was made. Continued use of the platform after the effective date of a policy update means you accept the revised terms. If you do not agree with any update, you should stop using the platform and contact support to request account closure.

We recommend bookmarking this page and checking it occasionally — especially if you use the platform regularly. We aim to keep the policy as stable as possible and will only update it when genuinely necessary.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise a data right or have a concern about how your personal information has been handled, please reach out to the Winner support team. We are available 24 hours a day, 7 days a week.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available directly within the platform after login
• FAQ: Visit our FAQ page for answers to common account and privacy questions

When submitting a data rights request, please include your registered email address and a brief description of your request so we can locate your account and respond accurately. Identity verification may be required before we action the request.