1win PK Privacy Policy — How We Protect Your Personal Data

This Privacy Policy applies to all users of the 1win PK platform, accessible at 1winpk.biz, including the website, any mobile-optimised version and all services, features and products available through the platform. Throughout this document, "1win PK", "we", "us" and "our" refer to the operator of 1winpk.biz. "You" and "your" refer to any registered player or visitor to the platform.

By registering an account on 1win PK, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal information as described herein. If you disagree with any part of this policy, please do not register or continue using the platform.

This policy should be read alongside our Terms and Conditions, which govern your overall use of 1win PK, and our Responsible Gaming page, which describes how we handle data related to gambling harm prevention tools.

1win PK collects the following categories of personal data from players:

1win PK processes your personal data only for specific, legitimate purposes. The table below maps each purpose to the data types used and the legal basis on which we rely:

1win PK does not use your data for automated decision-making that produces legal or similarly significant effects without human oversight, except where such processing is expressly required by our licensing authority for fraud detection or AML screening.

1win PK shares your personal data only with the categories of third party described below, and only to the extent necessary for the specified purpose. We do not sell your data to any third party under any circumstances.

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the financial and identity data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy and security frameworks and are contractually required to handle your data securely.
• Identity Verification Providers: Third-party KYC service providers may process your identity documents and conduct liveness checks on behalf of 1win PK to satisfy our licensing obligations. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Game Software Providers: The RNG-certified game studios that power 1win PK's slots, poker and casino products receive anonymised session data necessary to deliver the gaming experience. No personally identifiable information is shared with game providers beyond what is technically necessary to maintain your game session.
• Regulatory and Law Enforcement Authorities: 1win PK is legally required to report certain suspicious transactions and player data to our licensing authority and, where required by law, to law enforcement agencies. We comply with all lawful data requests from competent authorities.
• Fraud and AML Screening Services: We use specialist fraud detection and anti-money laundering screening services that process transactional and identity data to identify suspicious activity. These services operate under strict data processing agreements.
• Platform Infrastructure Providers: Hosting, cloud storage and IT service providers that operate 1win PK's technical infrastructure may have access to technical and account data in the course of providing their services. All infrastructure providers are bound by confidentiality obligations and data processing agreements.

All PKR deposits and withdrawals on 1win PK are processed through certified payment gateways. Your full payment credentials — including Easypaisa wallet numbers, JazzCash PINs, bank account details or card numbers — are never stored in full on 1win PK's own servers. We retain only masked reference identifiers (e.g. the last four digits of a wallet number) necessary to match transactions to your account.

When you initiate a deposit via Easypaisa or JazzCash, your payment confirmation is handled directly by the respective payment provider's secure environment. 1win PK receives only a transaction confirmation and the PKR amount — not your wallet credentials or mobile banking PIN.

Transaction records — including deposit amounts, withdrawal amounts, dates and payment method references — are retained for a minimum of five years as required by our anti-money laundering obligations under our gaming licence. These records are stored securely and are accessible only to authorised compliance staff or as required by law.

1win PK uses cookies and similar tracking technologies on the platform. The following categories of cookies may be active on your browser when you use 1win PK:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling analytical or marketing cookies will not affect your ability to bet, deposit or withdraw on 1win PK.

1win PK retains personal data for as long as is necessary for the purpose for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply:

• Account Data: Retained for the duration of your account, plus 5 years after account closure to satisfy anti-money laundering and regulatory record-keeping requirements.
• Financial & Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by our gaming licence.
• KYC Verification Documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
• Betting & Gaming Records: Retained for 3 years after account closure for dispute resolution purposes, and longer where required by regulatory audit obligations.
• Support Communications: Retained for 2 years from the date of the interaction, or longer if the communication relates to an active complaint or regulatory investigation.
• Marketing Preferences: Retained until you withdraw consent. Opt-out records are retained indefinitely to ensure we honour your preference.

After the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to your identity.

1win PK takes the security of your personal data seriously. The following technical and organisational measures are in place across the platform:

• TLS/SSL Encryption: All data transmitted between your device and 1win PK's servers is encrypted using Transport Layer Security (TLS). This prevents interception of your login credentials, account details and transaction data in transit.
• Access Controls: Personal data is accessible only to 1win PK staff who require it for their specific job function. Access is governed by role-based permissions and logged for audit purposes.
• Encrypted Storage: Sensitive data — including identity documents and financial records — is stored in encrypted form. Passwords are hashed using industry-standard algorithms and cannot be recovered even by 1win PK staff.
• Regular Security Audits: Our platform infrastructure undergoes regular penetration testing and security audits conducted by independent specialists. Identified vulnerabilities are addressed on a priority basis.
• Two-Factor Authentication: 1win PK supports two-factor authentication (2FA) for all player accounts. We strongly recommend enabling 2FA from your account settings to add a second layer of protection beyond your password.
• Data Breach Response: In the event of a data breach that is likely to affect your rights, 1win PK will notify affected players and relevant regulatory authorities within the timeframe required by applicable law.

As a 1win PK player, you have the following rights in relation to your personal data. All requests can be submitted by contacting our support team via live chat or email at support@1winpk.biz:

We will verify your identity before processing any data rights request to ensure your data is not disclosed to unauthorised individuals. Complex requests may require up to 30 days to fulfil. We will keep you informed of progress throughout.

1win PK strictly prohibits access by individuals under the age of 18. The platform is not designed for, and does not knowingly collect personal data from, anyone under 18 years of age. Age verification checks are conducted at the point of registration using date-of-birth data provided and, where required, documentary evidence.

If we discover that personal data has been collected from a player who was under 18 at the time of registration, we will immediately close the account, void all transactions made during the period of underage use, and delete the personal data in question in accordance with applicable regulations.

1win PK may update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or business operations. When material changes are made — meaning changes that affect how your data is collected, used or shared in ways that may affect your rights — we will:

• Email you at your registered 1win PK email address with a summary of the changes, at least 7 days before the changes take effect.
• Display a prominent notice on the 1win PK platform for at least 7 days following publication of the updated policy.
• Update the "Last Updated" date at the top of this page.

The current version of this Privacy Policy will always be available at 1winpk.biz/privacy-policy. Continued use of 1win PK after any update takes effect constitutes your acceptance of the revised policy. If you disagree with any changes, you may request account closure by contacting our support team.

Minor changes — such as corrections of typographical errors or clarifications that do not alter the substance of the policy — may be made without specific advance notice, though the updated date on this page will reflect any change.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how 1win PK has handled your personal information, please get in touch through one of the following channels:

If you are not satisfied with our response to a privacy complaint, you may wish to escalate the matter to the relevant data protection or gaming regulatory authority with jurisdiction over 1win PK's operations. Details of the relevant authority are available from our compliance team on request.

For queries specifically related to responsible gaming data — such as how your self-exclusion or deposit limit data is handled — please visit our Responsible Gaming page or contact support directly.