This Privacy Policy explains in full how wonpkr collects, processes, stores, protects, and — where applicable — shares personal data belonging to players registered on the wonpkr platform. We take your privacy seriously and operate to the highest standards of data protection, in compliance with our international gaming licence obligations and applicable data protection law. This policy applies to all wonpkr account holders, including all players based in Karachi, Lahore, Faisalabad, Islamabad, and across Pakistan.
These cards summarise wonpkr's core data protection commitments to every Pakistani player. Full legal detail for each commitment is in the policy sections below.
Every piece of personal data transmitted between your device and the wonpkr platform travels through 256-bit SSL encryption — the same standard used by international banks. Data at rest is encrypted using AES-256 on wonpkr's secure servers.
wonpkr does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only where strictly necessary for providing our services — payment processing, KYC verification, regulatory compliance, and fraud prevention.
Every wonpkr player has the right to access their personal data, request corrections, request deletion, withdraw consent, and object to processing. These rights are exercisable at any time via a simple email to wonpkr's data protection team.
wonpkr retains personal data only for as long as required to fulfil the purpose for which it was collected, or as mandated by our regulatory and licensing obligations. Account data is typically retained for five years following account closure to satisfy AML requirements.
wonpkr uses essential cookies to operate the platform and optional analytics cookies to improve user experience. Non-essential cookies are only activated with your explicit consent. You can manage all cookie preferences through your account settings or browser controls at any time.
wonpkr strictly prohibits registration by any person under 21 years of age and does not knowingly collect personal data from minors. All accounts are subject to CNIC-based age verification before full access to the platform is granted.
For the purposes of applicable data protection legislation, the data controller responsible for your personal data collected through the wonpkr platform at wonpkr.net is the entity operating wonpkr under its international gaming licence (hereinafter referred to as "wonpkr", "we", "us", or "our").
wonpkr operates the data protection function internally, with designated responsibility for all privacy matters held at the senior compliance level. All data protection requests, complaints, and subject access requests should be directed to the contact address above and will be handled with confidentiality and priority.
wonpkr collects the following categories of personal data from registered players and platform visitors. All data collection is conducted on a minimum-necessary basis — we do not collect data beyond what is genuinely required for the purposes identified in this policy.
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC document image, gender | Account registration, KYC verification, age verification (21+) |
| Contact Data | Mobile number, email address, city/region of residence | Account communication, OTP delivery, support correspondence |
| Financial Data | JazzCash / EasyPaisa account number, HBL / UBL / Meezan Bank account details, transaction history, deposit and withdrawal records | Payment processing, withdrawal execution, AML compliance |
| Gaming Activity Data | Game history, bet records, win/loss data, session timestamps, bonus usage | Account management, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, operating system, browser type, session data, login timestamps | Security, fraud prevention, platform optimisation |
| Preference Data | Communication preferences, responsible gaming limit settings, game favourites | Personalisation, responsible gaming tool delivery |
| Communications Data | Records of support interactions, live chat transcripts, email correspondence | Customer service quality, dispute resolution, compliance records |
wonpkr does not collect special categories of sensitive personal data (such as health data, biometric data, political opinions, or religious beliefs) except where exceptional circumstances arising from a responsible gaming welfare concern require it, in which case processing will only occur with explicit consent or as otherwise permitted by law.
wonpkr collects personal data through the following channels and mechanisms:
3.1 Direct Collection — Data You Provide
3.2 Automated Collection — Data Generated by Platform Use
3.3 Third-Party Sources
wonpkr may receive personal data about you from the following third-party sources in limited circumstances:
wonpkr processes your personal data on the following legal bases, depending on the specific processing activity involved. We identify the applicable legal basis for each major category of processing in the table below:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (our Terms and Conditions with you) |
| KYC and age (21+) verification | Legal obligation (gaming licence compliance) |
| Payment processing and withdrawal execution | Performance of contract |
| Anti-money laundering monitoring | Legal obligation (AML regulatory requirements) |
| Fraud detection and security monitoring | Legitimate interests (protecting wonpkr and its players) |
| Responsible gaming monitoring and tool delivery | Legal obligation; legitimate interests (player welfare) |
| Marketing and promotional communications | Consent (opt-in at registration or via account settings) |
| Platform analytics and improvement | Legitimate interests (improving the wonpkr platform for all players) |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
wonpkr uses your personal data for the following specific purposes, all of which are limited to what is necessary and proportionate to the identified objective:
wonpkr does not sell your personal data to any third party. We share personal data with third parties only to the limited extent necessary to provide our services, fulfil our legal obligations, or protect the integrity of the platform. All third-party data processors engaged by wonpkr are bound by contractual data processing agreements that require them to protect your data to standards equivalent to those applied by wonpkr itself.
6.1 Service Provider Categories
wonpkr may share your personal data with the following categories of service providers:
6.2 Regulatory and Law Enforcement Disclosure
wonpkr may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts where legally required to do so — for example, in response to a valid court order, regulatory investigation, AML suspicious activity report obligation, or where disclosure is necessary to protect the safety of any person. Where possible, wonpkr will notify you of such disclosure in advance, except where doing so is prohibited by law or would prejudice the investigation or proceeding concerned.
As an internationally licensed gaming platform, wonpkr's operations and service providers are located across multiple jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan, including countries whose data protection laws may differ from those applicable in your jurisdiction.
Where such international transfers occur, wonpkr ensures that appropriate safeguards are in place to protect the transferred data, including:
wonpkr retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our licensing, regulatory, and legal obligations. The following retention periods apply to the principal categories of personal data we hold:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and KYC data | 5 years from account closure | Gaming licence regulatory requirement; AML obligation |
| Financial transaction records | 7 years from transaction date | AML and financial regulatory compliance |
| Gaming activity and bet history | 5 years from account closure | Regulatory obligation; dispute resolution |
| Customer support correspondence | 3 years from last interaction | Dispute resolution; quality assurance |
| Technical and session logs | 13 months from collection | Security monitoring; fraud prevention |
| Marketing consent records | Duration of consent + 3 years | Consent compliance; dispute evidence |
| Self-exclusion records | Minimum 5 years from exclusion date | Responsible gaming obligation; re-registration prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with wonpkr's data disposal procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.
As a wonpkr player whose personal data is processed by wonpkr, you have the following data protection rights under applicable privacy law. These rights are available to all registered players regardless of location within Pakistan, including players based in Karachi, Lahore, Faisalabad, and Islamabad.
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Right Name]". Please include your full name, registered email address or mobile number, and a clear description of the right you wish to exercise. wonpkr will acknowledge your request within 72 hours and provide a full response within 30 calendar days. In cases of complex or multiple requests, this period may be extended by a further 60 days, of which you will be notified.
wonpkr uses cookies and similar tracking technologies on the wonpkr platform to provide core functionality, maintain security, and improve user experience. The following categories of cookies are used:
10.1 Essential Cookies
These cookies are strictly necessary for the wonpkr platform to function and cannot be disabled without preventing you from using the site. They include session authentication cookies (keeping you logged in during your session), security tokens (preventing CSRF attacks), and load balancing cookies. No consent is required for essential cookies as they are necessary for the service you have requested.
10.2 Analytics Cookies
With your consent, wonpkr uses first-party analytics cookies to understand how players navigate the platform — which game categories are most visited, where players encounter difficulties, and how the registration and login flow performs. This data is aggregated and anonymised before analysis and is used solely to improve the wonpkr experience for all Pakistani players. Analytics cookies are optional and will only be activated if you accept them.
10.3 Preference Cookies
These cookies remember your choices on the wonpkr platform — such as your language preference, responsible gaming limit displays, and notification settings — so you do not have to reconfigure them on each visit. Preference cookies are optional and can be disabled without affecting core platform access.
10.4 Managing Cookies
You can manage your cookie preferences at any time through your browser's cookie settings or through the wonpkr cookie preference panel accessible in your account settings. Please note that disabling certain cookie categories may affect your experience on the wonpkr platform — in particular, disabling session cookies will prevent you from remaining logged in during an active session.
wonpkr implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:
Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. wonpkr will always take all reasonable precautions to protect your data and encourages players to use strong, unique passwords and to never share their login credentials with any third party.
The wonpkr platform is strictly intended for individuals aged twenty-one (21) years and above. wonpkr does not knowingly collect personal data from any person under the age of 21, and the platform is not directed at or designed for use by minors of any age.
If a parent or guardian becomes aware that their child has registered an account on wonpkr, they should contact wonpkr support immediately at [email protected] with the subject line "Minor Account — Immediate Action Required". wonpkr will treat all such reports as priority communications, will immediately suspend the account, and will delete all personal data associated with the minor account as soon as practicable, subject to any mandatory retention requirements under AML regulation.
wonpkr may send you marketing communications — including promotional bonus offers, new game announcements, VIP programme updates, and seasonal promotions — where you have provided explicit consent to receive such communications. Consent is collected at the time of account registration and can be updated at any time through your account's notification preferences settings.
13.1 Types of Marketing Communications
With your consent, wonpkr may contact you through the following channels: SMS to your registered Pakistani mobile number; email to your registered email address; and in-platform notifications visible within your wonpkr account dashboard. Each channel requires separate consent and can be opted out of independently.
13.2 Opting Out
You may withdraw your consent to receive marketing communications at any time by: updating your notification preferences in your wonpkr account settings; clicking the unsubscribe link included in any marketing email; or contacting wonpkr support at [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within five business days. Please note that opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are essential to the operation of your account.
13.3 No Data Sharing for Marketing
wonpkr does not share your personal data with any third party for the purpose of that third party's marketing activities. All wonpkr marketing communications are sent by wonpkr directly and exclusively relate to wonpkr products and services.
wonpkr reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. Material changes to this Privacy Policy will be communicated to all registered players via their registered email address and/or through a prominent notice on the wonpkr platform, with a minimum of fourteen (14) days' notice prior to the amended policy taking effect.
Where changes are required to comply with new legal or regulatory obligations, they may take effect immediately and without the standard notice period, in which case wonpkr will notify players as promptly as practicable following implementation.
The "Effective Date" at the top of this policy indicates the date of the most recent version. Continued use of the wonpkr platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the revised policy. If you have concerns about any changes to this policy, please contact wonpkr's data protection team before the revised policy takes effect.
All data protection enquiries, subject access requests, rights exercise requests, and privacy complaints should be directed to wonpkr using the contact details below. wonpkr commits to handling all privacy-related communications with confidentiality, professionalism, and the urgency appropriate to the nature of the request.
If you are dissatisfied with wonpkr's response to any privacy-related request or complaint, you have the right to escalate the matter to the competent data protection supervisory authority in your jurisdiction, or to the regulator designated by wonpkr's international gaming licence authority as the applicable supervisory body for data protection complaints.
wonpkr is committed to resolving all data protection concerns directly in the first instance and will cooperate fully and in good faith with any regulatory investigation or inquiry relating to our data protection practices. Your privacy is not a secondary consideration at wonpkr — it is a core operational standard that we are held to by our licence, our team, and our obligation to the 500,000+ Pakistani players who trust us with their personal data every day.
Privacy-compliant, internationally licensed, and fully transparent. wonpkr is where 500,000+ Pakistani players chose to play — and chose to stay. Log in to your account today and play with confidence. 21+ only.