GoPKWin Privacy Policy – How We Protect Your Data in Pakistan

GoPKWin ("gopkwin," "we," "our," "the Platform") operates the online gaming and betting platform accessible at gopkwin.biz. For the purposes of this Privacy Policy, gopkwin is the data controller — meaning we are responsible for deciding how and why personal data belonging to our players is collected and processed.

This Privacy Policy applies to all personal data collected by gopkwin in connection with your use of the platform, including data collected during registration, payment processing, gameplay, customer support interactions, and promotional participation. It applies to all Pakistani players and any other users who access the gopkwin platform.

By registering a gopkwin account and using the platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the gopkwin Terms and Conditions, which contain additional obligations and rights relevant to your account.

gopkwin collects personal data in several ways — information you provide directly, information generated by your use of the platform, and in limited cases information received from third-party service providers. Here is a breakdown of what we collect and when:

gopkwin does not collect full payment card numbers. Card payments are processed through PCI-DSS compliant third-party payment gateways and we receive only a masked reference number. We do not store full CNIC numbers beyond what is required for one-time identity verification.

Every piece of data gopkwin collects has a specific, documented purpose. We do not collect data speculatively or beyond what is genuinely required for the platform to operate. Here is how we use the data we hold:

• Account operation: Creating and maintaining your gopkwin account, verifying your identity, and managing your profile settings and preferences
• Payment processing: Facilitating deposits and withdrawals in PKR through Easypaisa, JazzCash, bank transfer, and card payment channels
• Fraud and security: Detecting and preventing fraudulent account activity, money laundering, and other prohibited conduct described in the gopkwin Terms and Conditions
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, operating deposit limits, and managing self-exclusion requests
• Customer support: Responding to your queries, complaints, and account-related requests via live chat, email, and WhatsApp
• Legal compliance: Meeting any obligations imposed on gopkwin by applicable law, including record-keeping requirements and responses to lawful authority requests
• Platform improvement: Analysing anonymised usage patterns to improve game performance, page load speeds, and the overall gopkwin user experience
• Marketing: Sending you information about gopkwin promotions, new games, and offers — but only where you have explicitly opted in to receive marketing communications

gopkwin processes personal data on the following legal grounds, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil the agreement formed between you and gopkwin when you register an account — including account management, payments, and gameplay
• Legal obligation: Processing required to comply with applicable laws and regulations — including identity verification, anti-money laundering checks, and responses to lawful authority requests
• Legitimate interests: Processing necessary for gopkwin's legitimate business interests that do not override your rights — including fraud prevention, platform security, and anonymised analytics
• Consent: Processing based on your explicit agreement — specifically for marketing communications and certain non-essential cookies. Consent can be withdrawn at any time without affecting any other service

Where gopkwin relies on legitimate interests as the basis for processing, we have assessed that our interests do not override your rights and freedoms as a player. If you would like more detail on any specific processing activity and its legal basis, contact us at support@gopkwin.biz.

gopkwin does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Full stop. Data is shared with third parties only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer partners, and card payment gateways receive the minimum financial data required to process your transactions. These providers are contractually bound to process your data only for payment purposes.
• Identity verification providers: Where KYC checks require verification of your CNIC or other documentation, a specialist identity verification provider processes this data on gopkwin's behalf under strict confidentiality obligations.
• Game software providers: Some gopkwin games are provided by third-party game studios. These providers may receive anonymised session data for technical performance purposes. No personally identifying information is shared.
• Legal and regulatory authorities: Where gopkwin is required by law to disclose your data to a government body, law enforcement agency, or regulatory authority, we will comply and will notify you where legally permissible to do so.
• Business transfers: In the event that gopkwin undergoes a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer.

gopkwin retains personal data for as long as your account is active and for the periods required by applicable law thereafter. The key retention periods are as follows:

• Active account data (identity, contact, and payment data): Retained for the full duration of your gopkwin account and for five years following account closure, to meet anti-money laundering and fraud prevention record-keeping requirements
• Transaction records (deposit and withdrawal history): Retained for seven years following the transaction date in compliance with standard financial record-keeping obligations
• Responsible gaming records (self-exclusion, deposit limit history): Retained for the duration of any exclusion period and for five years after the exclusion ends, to prevent re-registration during an active exclusion
• Support communications (chat transcripts, emails): Retained for three years from the date of the last communication
• Marketing data (consent records): Retained for two years from the date of last interaction, or until consent is withdrawn
• Technical and analytics data (anonymised): Retained indefinitely in aggregated form with no personally identifying information attached

When data is no longer required for its original purpose and the applicable retention period has expired, gopkwin securely deletes or anonymises the data in accordance with our internal data destruction procedures.

Protecting the personal data of gopkwin players is taken seriously at every level of the organisation. The following technical and organisational security measures are in place:

• Encryption in transit: All data transmitted between your device and gopkwin servers is protected using TLS 1.2 or higher encryption, the same standard used by Pakistani banks for online transactions
• Encryption at rest: Sensitive data stored on gopkwin servers — including personal identification data and payment references — is encrypted using AES-256 encryption
• Access controls: Only gopkwin staff members who require access to personal data for their specific job function can access it. Access is logged and audited. No employee has broad access to the full player database.
• Two-factor authentication: Available on all gopkwin player accounts and mandatory for staff accounts with access to personal data
• Regular security audits: gopkwin engages independent security specialists to conduct penetration testing and vulnerability assessments on a regular basis
• Incident response: gopkwin maintains a documented security incident response plan. In the event of a data breach that poses a risk to players, we will notify affected players and relevant authorities within the timeframes required by applicable law

While gopkwin takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. You can significantly reduce your personal risk by using a strong, unique password for your gopkwin account and enabling two-factor authentication from your account settings.

gopkwin uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and help us understand how the platform is used. We use the following categories of cookies:

• Essential cookies: Required for the platform to function — keeping you logged in, maintaining your session, and ensuring security features work correctly. These cannot be disabled without affecting your ability to use gopkwin.
• Functional cookies: Remember your preferences — language settings, preferred game view, notification settings. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited most, how long sessions last, and where technical issues occur. This data helps gopkwin improve the platform. No personally identifying information is collected in analytics cookies.
• Marketing cookies: Used only where you have explicitly consented to receive personalised promotional content from gopkwin. These are not active for players who have not opted in to marketing.

gopkwin does not use third-party advertising cookies or allow external advertising networks to place cookies on the platform. The only tracking technologies active on gopkwin are those operated directly by gopkwin or by vetted service providers acting under our instructions.

You have the following rights regarding your personal data held by gopkwin. All requests can be submitted to support@gopkwin.biz and will be responded to within 30 days:

gopkwin is strictly an adults-only platform. The minimum age to register and use gopkwin is 18 years. We do not knowingly collect personal data from anyone under the age of 18. All registration submissions include an age declaration and we conduct identity verification to confirm age where required.

If gopkwin becomes aware that a player under 18 has registered an account, the account will be immediately closed, any balance held will be retained pending investigation, and all personal data associated with the account will be deleted. If you are a parent or guardian and believe your child may have accessed gopkwin, please contact us immediately at support@gopkwin.biz.

gopkwin reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in applicable law, or feedback from players about clarity. The date of the most recent revision is displayed at the top of this page and in the hero section above.

When material changes are made to this policy — changes that meaningfully affect your rights or how your data is processed — gopkwin will notify registered players via email at least 7 days before the change takes effect. Minor clarifications and corrections that do not change the substance of any section may be made without advance notice.

Your continued use of the gopkwin platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised version. If you do not agree with any change, you may request account closure by contacting our support team, and your data will be handled in accordance with your request subject to applicable retention requirements.

For any questions about this Privacy Policy, to exercise any of your data rights, or to raise a concern about how gopkwin handles your personal data, please get in touch through any of the following channels:

• Email: support@gopkwin.biz — for privacy rights requests, please include "Privacy Request" in the subject line and your account username in the message
• Live Chat: Available 24/7 on the gopkwin website — for urgent account security concerns this is the fastest route
• WhatsApp: Available for Pakistani players who prefer this channel — search for GoPKWin on WhatsApp

gopkwin aims to respond to all privacy-related requests within 30 days. Where a request is complex or involves a large volume of data, we will acknowledge receipt within 5 business days and provide a full response as soon as possible thereafter.

If you are not satisfied with how gopkwin has handled your privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. gopkwin cooperates fully with any legitimate regulatory investigation.