vinpkr Privacy Policy – Protecting Your Personal Data

1. Introduction

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by vinpkr ("we", "us", "our", "the Platform"), the online casino and sports betting service operated at vinpkr.bio and made available to players across Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, Multan, Rawalpindi, Peshawar, and all other cities.

By registering a vinpkr account, completing the vinpkr login process, or otherwise accessing any part of the platform, you acknowledge that you have read and understood this Policy in full and consent to the data practices described herein.

This Policy is drafted in alignment with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, and with the responsible gaming obligations attached to our international gaming licence. Where Pakistani data protection law imposes additional requirements, those requirements are honoured.

2. Data Controller

vinpkr acts as the data controller in respect of the personal information you provide when using the platform. The platform operates under an international gaming licence and is subject to the data protection obligations prescribed by that licensing jurisdiction. For any data-related queries, complaints, or requests, players should contact us directly through our support channel. Contact details are provided in Section 14 of this Policy.

3. Data We Collect

vinpkr collects personal data through several channels: account registration, the vinpkr login process, KYC verification, payment transactions, gameplay activity, customer support interactions, and passive technical data collected during browsing sessions. The specific categories of data collected are as follows.

3.1 Registration and Account Data

• Full legal name (as per CNIC)
• Date of birth (to verify the 21+ age requirement)
• Email address
• Pakistani mobile number (for 2FA and account notifications)
• Username and encrypted password
• City and province of residence (e.g., Karachi, Lahore, Islamabad)
• Preferred currency (PKR)

3.2 Identity Verification (KYC) Data

• National Identity Card (CNIC) number and copy
• Proof of address documentation
• Selfie or biometric verification image (where required)
• Source of funds declaration (for higher-tier accounts)

3.3 Financial and Transaction Data

• JazzCash or EasyPaisa wallet identifiers (masked)
• HBL, UBL, or Meezan Bank account reference numbers (masked)
• Deposit and withdrawal amounts in PKR
• Transaction timestamps and reference codes
• Bonus and promotion redemption history

3.4 Gameplay and Behavioural Data

• Bet history, game session durations, and wagering patterns
• Sports betting selections including PSL, cricket, and other markets
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus participation and wagering progress

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Platform access logs and timestamps
• Cookie and local storage data (see Section 9)

3.6 Communications Data

• Live chat transcripts with our support team
• Email correspondence sent to or received from vinpkr support
• Feedback and complaint submissions

Data Category	Examples	Purpose
Registration Data	Name, email, mobile number	Account creation, login, communications
KYC Data	CNIC copy, proof of address	Age verification, fraud prevention, AML compliance
Financial Data	JazzCash ID, PKR transaction records	Payment processing, withdrawal verification
Gameplay Data	Bet history, session logs	Responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type	Security, fraud detection, platform optimisation
Communications	Support chat transcripts	Customer service, complaint handling, quality assurance

4. How We Use Your Data

vinpkr processes personal data only for defined, legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which your data is used are as follows.

1. Account Management: Creating, maintaining, and securing your vinpkr account, including the vinpkr login process, password management, and two-factor authentication.
2. Identity and Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity as required by our licensing obligations and anti-money laundering (AML) regulations.
3. Payment Processing: Facilitating PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported methods. Ensuring that funds reach the correct wallet or bank account.
4. Platform Operation and Game Delivery: Providing access to the live casino lobby, sports betting markets (including PSL cricket and other Pakistani-relevant events), slots, and all other platform features following a successful vinpkr login.
5. Fraud Prevention and Security: Detecting, investigating, and preventing unauthorised account access, fraudulent transactions, collusion, bonus abuse, and other prohibited activities.
6. Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, administering self-exclusion requests, enforcing deposit and loss limits, and complying with responsible gaming obligations under our licence.
7. Legal and Regulatory Compliance: Meeting our obligations under AML legislation, gaming licence conditions, financial crime regulations, and any lawful requests from competent authorities.
8. Customer Support: Resolving account queries, payment disputes, game malfunctions, and any other player support issues communicated through our 24/7 support channel.
9. Platform Improvement: Analysing aggregated, anonymised usage data to improve the vinpkr platform, fix bugs, and optimise features for Pakistani players.
10. Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS, where you have opted in to receive such communications. You may unsubscribe at any time.

5. Legal Basis for Processing

vinpkr relies on the following legal bases for processing personal data, consistent with internationally recognised data protection principles.

• Contractual Necessity: Processing required to perform the contract between you and vinpkr — i.e., operating your account, processing PKR transactions, and delivering platform services.
• Legal Obligation: Processing required to comply with AML laws, gaming licence conditions, KYC obligations, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, non-essential cookies, and any other purpose where we expressly request your permission. Consent may be withdrawn at any time without detriment to your account.

6. Data Sharing and Disclosure

vinpkr does not sell or rent your personal data to any third party. We may share your information in the following limited circumstances only.

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors receive the minimum data necessary to complete your PKR transactions. Each provider is contractually bound to handle your data securely and only for the stated payment purpose.
• Identity Verification Partners: Third-party KYC and AML screening services may receive your CNIC and identity documentation for the sole purpose of verifying your identity and screening against sanctions or financial crime watchlists. These partners are bound by strict data processing agreements.
• Gaming Software Providers: Game studios whose titles appear on vinpkr may receive anonymised session and wagering data for the purpose of game performance monitoring. No personally identifiable information is shared with game studios unless strictly required for dispute resolution.
• Regulatory and Law Enforcement Authorities: Where required by our gaming licence, a court order, or applicable law, vinpkr will disclose personal data to competent authorities. We will notify you of such disclosure where legally permissible.
• Fraud Prevention Networks: Anonymised or flagged account data may be shared with industry fraud prevention databases to protect the broader gaming ecosystem from bad actors.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance.

7. Data Retention

vinpkr retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following retention periods.

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to meet AML and gaming licence record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction, in compliance with financial record-keeping obligations.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
• Support Communications: Customer support chat logs and email correspondence are retained for three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Where you have opted in to marketing communications, your contact preferences are retained until you withdraw consent or request deletion, plus a reasonable wind-down period of 30 days.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an individual.

8. Security Measures

vinpkr implements technical and organisational security measures commensurate with the sensitivity of the data we hold and the risks posed by the gaming environment. Key measures include the following.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and vinpkr servers is encrypted in transit using 256-bit SSL/TLS, whether you are accessing the platform via Jazz 4G in Karachi or a fibre connection in Lahore.
• Encryption at Rest: Sensitive data fields — including CNIC references, payment identifiers, and authentication credentials — are encrypted at rest in our databases using AES-256 or equivalent standards.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their vinpkr accounts. Staff access to player data requires multi-factor authentication as a minimum.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff roles are assigned minimum necessary permissions; access logs are maintained and audited.
• Penetration Testing: The vinpkr platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights, vinpkr will notify affected players without undue delay, providing details of the breach, data involved, and steps taken to mitigate harm.

While vinpkr takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. We strongly advise Pakistani players to use a unique, strong password for their vinpkr account, enable 2FA, and avoid logging in on unsecured public Wi-Fi networks.

9. Cookies and Tracking Technologies

vinpkr uses cookies and similar technologies (local storage, session tokens) on its platform. This section explains what they are and how they are used.

9.1 Strictly Necessary Cookies

These cookies are essential for the vinpkr platform to function. They maintain your session after the vinpkr login, store your language preferences, and enable security features such as CSRF protection. They cannot be disabled without breaking core platform functionality.

9.2 Performance and Analytics Cookies

These cookies collect anonymised data about how players navigate the vinpkr platform — which pages are visited most, how long sessions last, and where errors occur. This data is used exclusively to improve platform performance. No personally identifiable information is included in analytics data sets.

9.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred game lobby layout, sports betting market selections, or PKR stake defaults — so you do not have to reconfigure them on every session.

9.4 Marketing Cookies

vinpkr does not deploy third-party advertising or cross-site tracking cookies. If this changes in the future, you will be notified and asked to provide fresh consent before any such cookies are placed on your device.

You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use the vinpkr platform.

10. Your Data Protection Rights

As a player whose personal data is processed by vinpkr, you hold the following rights, which you may exercise at any time by contacting our support team.

• Right of Access: You may request a copy of the personal data vinpkr holds about you. We will respond within 30 calendar days of receiving a verified request.
• Right of Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your mobile number or email address can also be updated directly through your vinpkr account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (where consent is the legal basis), or where the data has been unlawfully processed. Deletion requests are subject to our legal retention obligations outlined in Section 7.
• Right to Restrict Processing: You may request that we temporarily restrict processing of your data while a dispute about its accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request a copy of your data in a structured, machine-readable format suitable for transfer to another controller.
• Right to Object: You may object to processing based on our legitimate interests at any time. You may also opt out of marketing communications at any time without any impact on your account or access to vinpkr services.
• Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact vinpkr support through the live chat channel available on the platform. We may ask you to verify your identity before processing a data rights request, to ensure we are responding to the correct individual.

11. Minors and Age Restriction

vinpkr operates a strict minimum age policy. The platform is available exclusively to individuals who are 21 years of age or older. This requirement is enforced at the point of account registration through CNIC-based KYC verification.

vinpkr does not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that a player account belongs to an individual under the minimum age, that account will be immediately suspended, any outstanding balance will be returned in accordance with our terms, and all personal data associated with the account will be securely deleted unless legal retention obligations require otherwise.

If you believe that a minor has accessed or registered a vinpkr account, please contact our support team immediately so that the appropriate action can be taken.

12. International Data Transfers

vinpkr may process and store personal data on servers located outside Pakistan. Where such international transfers occur, we ensure that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. Safeguards include data processing agreements incorporating standard contractual clauses, and transfers only to jurisdictions or service providers that offer an adequate level of data protection.

Our gaming licence obligations require us to maintain records in specific jurisdictions for regulatory oversight purposes. In all cases, your data is subject to the security and access controls described in Section 8, regardless of where it is physically stored.

13. Changes to This Privacy Policy

vinpkr reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data practices, platform features, legal obligations, or regulatory requirements. The "Effective Date" at the top of this Policy indicates when the most recent version came into force.

When material changes are made to this Policy, vinpkr will notify active players via email and/or a prominent notice on the platform. Continued use of the vinpkr platform following the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you have the right to close your account before the change takes effect.

We encourage you to review this Policy regularly to stay informed about how vinpkr protects your personal data.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way vinpkr handles your personal data, please contact us through the following channel.

• Email: [email protected]
• Live Chat: Available 24/7 directly within the vinpkr platform after completing the vinpkr login process.

We aim to respond to all data protection queries within five (5) business days, and to formal data rights requests within thirty (30) calendar days of receipt of a verified request. Response times may be extended for complex requests, in which case we will notify you of the extension and the anticipated response date.

If you are not satisfied with our response to a data protection concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction under which our gaming licence is held.