SpinWinPK Privacy Policy –
How We Protect Your Data

SpinWinPK ("we", "us", "our") is the operator of the online gaming platform accessible at spinwinpk.pro. We provide online casino games, live dealer games, fish games, slot games, sports betting and related features to registered adult players in Pakistan.

For the purposes of this Privacy Policy, SpinWinPK is the data controller — meaning we are the entity that determines why and how your personal data is processed. If you have any questions about how your data is handled, the contact details in Section 13 are the right place to start.

This Privacy Policy is effective as of June 2026 and applies to all personal data collected from the date of your account registration onwards. It should be read alongside our Terms and Conditions and Responsible Gaming Policy.

The data we collect falls into three broad categories: information you provide to us directly, information we collect automatically as you use the platform, and information we receive from third-party payment providers during transaction processing.

We do not collect sensitive personal data such as biometric data, religious beliefs or political opinions. We collect only what is reasonably necessary for operating a gaming platform and processing PKR transactions.

SpinWinPK collects personal data through the following methods:

• Direct submission: When you fill in the registration form, complete KYC verification, submit a support request or update your account profile, you provide data directly to us.
• Automated collection: When you visit spinwinpk.pro or use the SpinWinPK app, our servers automatically log technical data including your IP address, device identifiers, browser type and session timestamps. This happens on every visit regardless of whether you are logged in.
• Payment providers: When you make a deposit or withdrawal via JazzCash, Easypaisa, Raast or bank transfer, the payment provider shares transaction confirmation data with us — including the amount in PKR, a transaction reference and the registered account holder name. We do not receive your full mobile wallet PIN, card number or internet banking password through this process.
• Cookies and similar technologies: Our platform uses cookies and local storage to maintain your login session, remember your preferences and support platform security. See Section 7 for full details.

Every use of your personal data by SpinWinPK is tied to a specific, legitimate purpose. We do not process your data for reasons unrelated to operating the platform. The primary purposes are:

• Account management: Creating, maintaining and securing your SpinWinPK account, processing your login and enforcing account limits you set yourself.
• Transaction processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported channels, and maintaining an accurate record of your financial activity on the platform.
• Identity verification (KYC): Verifying that you are who you say you are, confirming your age is 18 or over, and complying with applicable anti-money laundering obligations.
• Gameplay and product delivery: Delivering casino games, live dealer tables, fish games, slot games, sports betting markets and all other platform features to your device.
• Customer support: Responding to your queries, resolving disputes and addressing any technical issues you report.
• Fraud and security monitoring: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering and unauthorised account access.
• Responsible gaming: Monitoring usage patterns to identify signs of problem gambling and applying limits or restrictions where necessary in line with our Responsible Gaming Policy.
• Platform improvement: Using aggregated and anonymised usage data to understand how players interact with features, identify bugs and improve the overall experience.
• Marketing communications: Sending you promotional offers, bonus notifications and platform updates — but only if you have opted in to receive these. You can opt out at any time.

We rely on different legal bases for different processing activities: performance of a contract (account management, transactions), legal obligation (KYC, anti-money laundering), legitimate interests (fraud prevention, security) and consent (marketing communications).

SpinWinPK processes all real-money transactions in Pakistani Rupees (PKR). Our platform supports JazzCash, Easypaisa, Raast, bank transfers and card payments as deposit and withdrawal methods.

What we store: We maintain a record of each transaction associated with your account, including the date, amount in PKR, payment method type (e.g. JazzCash), transaction status and a reference number. This record is necessary for account management, dispute resolution and anti-money laundering compliance.

What we do not store: SpinWinPK does not store your JazzCash or Easypaisa PIN, your internet banking username or password, your full card number or CVV, or any sensitive authentication credential belonging to a third-party payment system. Payment authentication takes place directly within the secure infrastructure of the respective payment provider.

Third-party payment processors: By initiating a deposit or withdrawal, you authorise the relevant payment provider (JazzCash, Easypaisa, Raast, your bank) to process the transaction. Each of these providers operates under their own privacy policies and security standards. SpinWinPK is not responsible for the data practices of third-party payment services.

SpinWinPK does not sell, rent or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each purpose.

• Payment service providers: JazzCash, Easypaisa, Raast, banks and card networks receive the minimum transaction data required to process your PKR deposit or withdrawal.
• Game providers: Third-party game studios whose titles are accessible through the SpinWinPK Game Lobby may receive a pseudonymous player identifier (not your name or contact details) for the purpose of game session management, RNG certification and RTP reporting.
• Identity verification services: If a KYC verification partner is used to check your documents, your identity data is shared with that partner for the sole purpose of verification. Verification partners are contractually bound to process the data only for this purpose.
• IT and infrastructure providers: Cloud hosting, database and security services providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, a valid court order or a formal request from law enforcement, we may be required to disclose certain account data. We will only do so to the extent legally required.
• Business transfers: In the event of a merger, acquisition or sale of the platform, player account data may be transferred to the acquiring entity. You will be notified in advance if this affects how your data is processed.

All third parties with whom we share personal data are required to maintain appropriate security standards and to process data only for the specified purpose.

SpinWinPK uses cookies — small text files stored on your device — and similar technologies such as local storage to make the platform function correctly and securely. The following types of cookies are used:

• Essential cookies: These are required for the platform to operate. They maintain your login session, remember your preferred language, protect against cross-site request forgery (CSRF) and support basic security checks. You cannot opt out of essential cookies without losing access to the platform.
• Functional cookies: These remember your preferences, such as game display settings or promotional opt-in status, so you do not have to set them on every visit.
• Analytics cookies: We may use anonymised, aggregated analytics data to understand how different pages and features are being used, identify technical issues and guide product improvements. This data is not linked to individual player profiles.

SpinWinPK does not use third-party advertising cookies or behavioural profiling trackers that would share your browsing data with external ad networks. You can manage cookie preferences through your browser settings. Note that disabling all cookies may affect your ability to log in and use certain platform features.

SpinWinPK retains personal data only for as long as necessary for the purpose for which it was collected or as required by applicable obligations. Once data is no longer required, it is securely deleted or irreversibly anonymised.

If you request deletion of your account, we will action your request within a reasonable timeframe. Some data may be retained beyond the account closure date where we have a legal obligation to do so, as outlined in the table above.

As a SpinWinPK player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us using the details in Section 13.

• Right to access: You can request a copy of the personal data we hold about you at any time. We will respond to access requests within a reasonable period.
• Right to rectification: If any personal data we hold is inaccurate or out of date, you have the right to request that we correct it. You can update most account details yourself through the account settings panel.
• Right to erasure: You can request that we delete your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires us to retain it.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: You can request that we provide your data in a structured, machine-readable format so that you can transfer it to another service where technically feasible.
• Right to object to marketing: You can opt out of promotional communications at any time by updating your preferences in the account settings or by contacting support. Opting out of marketing does not affect transactional account communications.
• Right to withdraw consent: Where we rely on your consent to process data (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

SpinWinPK implements technical and organisational security measures appropriate to the nature and volume of personal data we process. Key measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• Password hashing — your account password is never stored in plain text.
• Access controls — internal access to personal data is restricted to staff members who require it to perform their specific role.
• Two-factor authentication (2FA) — optional but strongly recommended for all player accounts to protect against unauthorised login.
• Regular security reviews — our infrastructure is subject to periodic security assessments to identify and address vulnerabilities.
• Incident response procedures — we maintain documented procedures for responding to data security incidents, including notification protocols.

No system can be guaranteed to be 100% secure. In the unlikely event of a data breach that affects your personal data in a material way, SpinWinPK will notify affected players and take immediate remediation steps.

You also play an important role in security. Use a strong, unique password for your SpinWinPK account, do not share your login credentials with anyone and contact support immediately if you believe your account has been accessed without your authorisation.

SpinWinPK is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 years of age or older, and identity verification is used to enforce this requirement.

If we discover that an account has been created by or on behalf of a person under 18, we will immediately suspend the account, void any winnings generated during the underage period and securely delete the associated personal data, except where retention is required for legal compliance purposes.

If you are a parent or guardian and believe that a minor in your care has registered an account on SpinWinPK, please contact us immediately using the support details in Section 13. We will investigate and act promptly.

SpinWinPK may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make changes, the "Last Updated" date at the top of this page will be revised accordingly.

For material changes that significantly affect how your personal data is processed, we will notify registered players via the contact information on file — either by email or through an in-platform notification — before the changes take effect. Minor clarifications or formatting updates may be published without a direct notification but will always be reflected in the updated date on this page.

Your continued use of SpinWinPK following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you have the right to close your account and request deletion of your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to report a privacy concern or need to escalate a data-related complaint, please get in touch with the SpinWinPK support team using the contact details in the footer of this page.

When submitting a privacy request, please include:

• Your registered SpinWinPK username or the mobile number linked to your account.
• A clear description of your request or concern (e.g., data access request, deletion request, marketing opt-out).
• Any relevant reference numbers if your query relates to a specific transaction or communication.

We aim to acknowledge all privacy-related enquiries within two business days and to provide a substantive response within ten business days. Complex requests — such as large data access requests or deletion requests requiring legal review — may take longer, in which case we will keep you informed of progress.