win27 Privacy Policy

1. Who We Are

win27 is an internationally licensed online gaming and sports betting platform available at win27.bet. We serve players across Pakistan — including Karachi, Lahore, Islamabad, and Faisalabad — offering cricket betting, live dealer casino games, slots, poker, and lottery products. References to "win27," "we," "us," or "our" throughout this Privacy Policy refer to the win27 operating entity and its affiliated service infrastructure.

This Privacy Policy applies to all personal data processed in connection with your use of win27's website, mobile interface, customer support channels, and any promotional communications issued by win27. It applies regardless of the device or network you use to access the Platform.

win27 acts as the data controller for personal data collected directly from you. Where win27 engages third-party processors — such as payment gateways or game content providers — those parties act as data processors under binding contractual obligations consistent with this Policy.

2. Data We Collect

win27 collects personal data across several categories depending on how you interact with the Platform. The table below summarises what we collect and why each category is necessary.

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, nationality	KYC verification, age confirmation (21+), AML compliance
Contact Data	Email address, mobile number, city	Account communications, support, promotional messages (where consented)
Financial Data	JazzCash / EasyPaisa wallet reference, bank name, transaction history in PKR	Processing deposits and withdrawals, fraud prevention
KYC Documents	CNIC scan (front & back), proof of address, proof of payment method	Regulatory identity verification, AML compliance
Technical Data	IP address, device type, browser, operating system, session timestamps	Security monitoring, fraud detection, platform optimisation
Usage Data	Pages visited, games played, bets placed, session duration	Personalisation, responsible gaming monitoring, product improvement
Preference Data	Responsible gaming limit settings, communication preferences	Honouring your account settings and self-exclusion choices
Communications Data	Live chat transcripts, support emails, complaint records	Dispute resolution, quality assurance, regulatory record-keeping

3. How We Collect Data

win27 collects personal data through the following channels:

• Registration: When you create a win27 account, you directly provide your name, contact details, date of birth, and preferred payment method.
• KYC Submission: You upload identity documents at the time of account verification or when triggered by a withdrawal request or suspicious activity review.
• Deposits and Withdrawals: Transaction references and wallet identifiers are collected automatically when you initiate a payment via JazzCash, EasyPaisa, HBL, or any other supported method.
• Platform Activity: Our servers log technical and usage data automatically whenever you access the win27 Platform, including login timestamps, game sessions, and betting history.
• Customer Support: When you contact win27 via live chat, email, or any other support channel, we collect the content of those communications.
• Cookies and Tracking Technologies: win27 uses cookies, pixels, and local storage to collect information about your browsing behaviour on our Platform. See Section 9 for full details.
• Third-Party Sources: In limited circumstances, win27 may receive data about you from identity verification partners, fraud prevention services, or our licensed game providers where this is necessary to complete a verification check or resolve a dispute.

4. Why We Use Your Data

win27 uses your personal data for the following purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account balance, and enable you to access win27's full range of products.
• Payment Processing: To process PKR deposits and withdrawals securely via your chosen Pakistani payment method and to maintain accurate financial records.
• Legal and Regulatory Compliance: To comply with anti-money laundering (AML) obligations, age verification requirements, and any reporting obligations imposed by win27's international gaming licence.
• Fraud and Security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, money laundering, match-fixing, and unauthorised access attempts.
• Responsible Gaming: To monitor gaming patterns, enforce deposit and loss limits you have set, action self-exclusion requests, and identify players who may be exhibiting signs of problem gambling.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Product Improvement: To analyse aggregated usage patterns, understand which features are most valued by Pakistani players, and improve the overall win27 experience.
• Marketing Communications: To send you information about promotions, new games, and bonus offers — but only where you have given explicit consent during registration or via your account settings. You may opt out at any time.

5. Legal Basis for Processing

win27 processes your personal data under the following legal bases:

• Contractual Necessity: The majority of data processing is necessary to deliver the services described in our Terms and Conditions — including account management, payments, and game access.
• Legal Obligation: Certain processing — particularly KYC verification, AML record-keeping, and age verification — is required to comply with legal and regulatory obligations applicable to win27's operating licence.
• Legitimate Interests: win27 processes technical and usage data based on its legitimate interests in maintaining platform security, preventing fraud, and improving its services, provided those interests are not overridden by your privacy rights.
• Consent: Marketing communications are sent only where you have given clear, freely given, and informed consent. You may withdraw consent at any time without affecting your account status.

6. Sharing Your Data

win27 does not sell your personal data. We share data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other payment partners receive transaction reference data necessary to process your deposits and withdrawals.
• Licensed Game Providers: Third-party game studios and live dealer providers may receive your account identifier and game session data to deliver game content and calculate payouts.
• Identity Verification Services: KYC and AML compliance partners may process your identity documents to verify your age and identity as required by win27's licence conditions.
• Regulatory Authorities: win27 will disclose personal data to relevant regulatory or law enforcement authorities where required to do so by applicable law, court order, or the terms of its operating licence.
• IT and Infrastructure Providers: Hosting, cloud storage, and cybersecurity partners who process data on win27's behalf under strict data processing agreements.

7. International Data Transfers

win27 operates through an internationally licensed gaming infrastructure. As a result, some of your personal data may be transferred to, stored in, or processed in countries outside Pakistan. These transfers may include countries where win27's game providers or cloud infrastructure partners are located.

Where such transfers occur, win27 ensures that adequate safeguards are in place to protect your data to a standard consistent with this Privacy Policy. These safeguards include contractual data protection clauses that bind the recipient to obligations equivalent to those we observe ourselves.

By registering and using win27, you acknowledge and consent to your data being processed internationally as described in this section.

8. Data Retention

win27 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC Data: Retained for a minimum of five years following account closure, in compliance with AML and gaming licence obligations.
• Transaction Records: Retained for a minimum of five years from the date of the transaction, for financial record-keeping and regulatory purposes.
• Support Communications: Retained for three years from the date of the last communication, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your account plus two years, to evidence your consent status at any given time.
• Technical Logs: Retained for 12 months on a rolling basis, for security monitoring and fraud investigation purposes.

Upon the expiry of applicable retention periods, win27 will securely delete or anonymise your personal data in a manner that prevents reconstruction of your identity.

9. Cookies & Tracking

win27 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that detect fraudulent activity. These cookies cannot be disabled without affecting your ability to use win27.
• Functional Cookies: Remember your preferences such as language, last visited game category, and responsible gaming settings. Disabling these cookies may reduce personalisation but will not prevent access to the Platform.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where sessions end, and how features are used. This data is used in aggregate to improve the win27 experience for Pakistani players.
• Marketing Cookies: Used only where you have consented to receive personalised promotional content. These cookies track which offers you have seen and whether you have claimed them, so we can avoid sending irrelevant promotions.

You may manage cookie preferences via your browser settings. Please note that disabling all cookies may impair your ability to access certain win27 features, including login and game loading.

10. Your Privacy Rights

As a win27 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact win27 customer support with your account details and a clear description of your request.

• Right to Access: You may request a copy of all personal data win27 holds about you. win27 will respond within 30 days of a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Certain data fields — such as name and date of birth — can only be corrected following re-verification of your CNIC.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to win27's legal obligation to retain certain data for AML and regulatory purposes.
• Right to Restriction: You may request that win27 temporarily restrict processing of your data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: You may request your personal data in a commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object at any time to processing of your data for direct marketing purposes. Marketing will cease immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Children & Minors

win27 is strictly an adult platform. No person under the age of 21 may register an account or use any win27 service. win27 does not knowingly collect personal data from individuals under 21.

Where win27 has reason to believe that a registered user is under 21 years of age, the account will be immediately suspended pending age verification. If it is confirmed that the account holder is underage, the account will be permanently closed, all funds will be held pending investigation, and all account data will be flagged in accordance with win27's responsible gaming obligations.

If you believe that a minor has registered an account on win27, please notify us immediately at the contact details in Section 15. We treat such reports as urgent and will act within 24 hours of receipt.

12. Security Measures

win27 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• TLS 1.3 Encryption: All data transmitted between your browser or app and win27's servers is encrypted in transit.
• AES-256 Encryption at Rest: Sensitive stored data including KYC documents and financial records is encrypted at rest.
• Two-Factor Authentication: Recommended for all accounts and required for high-value withdrawal requests.
• Access Controls: win27 staff access to personal data is restricted on a need-to-know basis. All access is logged and audited.
• Penetration Testing: win27's infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities.
• Fraud Detection Systems: Automated systems monitor account activity 24/7 for patterns consistent with account takeover, bonus abuse, or money laundering.

Despite these measures, no internet-based system can guarantee absolute security. If you suspect your win27 account has been compromised, contact support immediately at [email protected].

13. Third-Party Services

The win27 Platform may contain references to or integrations with third-party service providers — including payment processors, game studios, and analytics services. This Privacy Policy applies only to data collected and processed by win27 directly. win27 is not responsible for the privacy practices of third-party providers.

Where win27 engages third-party processors, we require them to sign data processing agreements that bind them to data protection standards consistent with this Policy. They may not use your data for any purpose other than providing services to win27.

14. Policy Amendments

win27 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we process your data or the rights available to you — we will notify you by email to your registered address at least 14 days before the changes take effect.

Non-material updates, such as clarification of existing language or correction of typographical errors, will take effect immediately upon publication on the Platform. The effective date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of win27 following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your account before the effective date of the change.

15. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how win27 has handled your personal data, please contact our data protection team:

win27 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant regulatory authority under win27's operating licence jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026.