SpinWin PK Privacy Policy — How We Protect Pakistani Player Data

1. Who We Are and Scope of This Policy

SpinWin PK ("we," "us," "the Platform") operates the online gaming website at spinwinpk.best and all associated services, including games, live cricket scores, payment processing, the VIP Club programme, and customer support. This Privacy Policy applies to all information collected by SpinWin PK from players who visit the website, register an account, or interact with any part of the platform.

This Policy should be read alongside the SpinWin PK Terms and Conditions, which together form the complete agreement governing your relationship with the platform. By registering an account on SpinWin PK you confirm that you have read and understood this Privacy Policy and that you consent to your personal data being processed as described herein.

SpinWin PK is committed to handling all player data in a responsible, transparent, and secure manner. This document is intended to be clear and readable — not a dense legal document that obscures what we actually do. If at any point something is unclear, please contact our support team directly.

2. What Personal Data SpinWin PK Collects

SpinWin PK collects personal data in two ways: information you provide directly during registration and account use, and information collected automatically as you interact with the platform.

Information you provide directly:

Information collected automatically:

3. How SpinWin PK Uses Your Personal Data

SpinWin PK uses the personal data collected for the following specific purposes:

• Account creation and management: Processing your registration, maintaining your account profile, and enabling you to access all platform features.
• Identity verification (KYC): Confirming your identity and age before processing withdrawal requests, as required to protect all players and meet financial compliance obligations.
• Payment processing: Facilitating deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment channels. Transaction data is used to trace and resolve any payment discrepancies.
• VIP Club operation: Calculating your VIP point balance, determining tier level, and crediting weekly cashback and other tier benefits to your account automatically.
• Security and fraud prevention: Monitoring account activity for unusual patterns, identifying potential duplicate accounts, and protecting the platform and all players from fraudulent or abusive conduct.
• Responsible gaming: Monitoring play patterns to identify potential indicators of problem gambling and reaching out proactively where our responsible gaming team identifies a player who may benefit from support. See the Responsible Gaming page for full details.
• Customer support: Using your account and communication history to provide effective and personalised support when you contact us.
• Marketing communications: Sending you information about promotions, new features, and special offers relevant to your SpinWin PK account — only where you have not opted out. You can unsubscribe at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to identify areas where the platform can be improved for all players.

4. Legal Basis for Processing

SpinWin PK processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil the Terms and Conditions agreement — including operating your account, processing payments, and providing the gaming service.
• Legal obligation: Processing required to meet identity verification, age verification, anti-money-laundering, and financial record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement, where these interests do not override your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit consent at registration or subsequently. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing — Who We Share With and Why

SpinWin PK does not sell, rent, or share your personal data with third parties for their own commercial marketing purposes under any circumstances. Data is shared with third parties only where necessary to provide the platform service, as described below:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card gateway providers receive transaction data necessary to execute your deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.
• Identity verification providers: Where third-party KYC services are used to verify your identity and CNIC, your identity documents and verification data are transmitted to those providers in encrypted form. These providers are contractually bound to handle data securely and use it solely for verification purposes.
• Game content providers: Third-party game providers (for live casino, crash games, fishing games, etc.) may receive your player identifier and bet data to facilitate gameplay and settlement. They do not receive your full identity or payment information.
• Fraud prevention services: Aggregated and anonymised behavioural data may be shared with fraud prevention partners to help identify and prevent fraudulent activity across the industry.
• Legal and regulatory authorities: SpinWin PK will disclose personal data to law enforcement, financial regulators, or other government authorities where required by law or where there is a legitimate public interest in doing so, such as in the investigation of financial crime.

6. Payment Data Security

SpinWin PK takes the security of payment-related data particularly seriously given its sensitivity. The following specific security measures apply to all payment data:

• SpinWin PK does not store card numbers, Easypaisa PINs, JazzCash MPINs, or any other payment authentication credentials on its own servers at any point in the transaction process.
• All card payments are processed through PCI-DSS Level 1 certified payment gateways. Compliance at this level represents the highest standard of security certification for payment card data in the industry.
• Mobile wallet transactions through Easypaisa and JazzCash are processed directly through the respective providers' secure APIs. SpinWin PK receives only a transaction confirmation and reference number.
• Transaction records retained by SpinWin PK — amounts, dates, and truncated reference numbers — are stored in encrypted form and accessible only to authorised personnel for the purpose of resolving payment disputes.
• Where a player reports an unauthorised transaction from their SpinWin PK account, the account is immediately suspended pending a security review. The player is contacted within 24 hours to assist with the investigation.

7. Cookies and Tracking Technologies

SpinWin PK uses cookies and similar tracking technologies on the platform. Here is a plain-language breakdown of what we use and why:

You can manage cookie preferences through your browser settings at any time. Blocking essential cookies will prevent the platform from functioning correctly. Analytics and marketing cookies can be disabled without affecting your ability to play.

8. How Long We Keep Your Data

SpinWin PK retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a period of 5 years after account closure, to meet financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years following the closure of your account, as required for anti-money-laundering compliance.
• Transaction records: Payment transaction records are retained for 7 years from the date of the transaction.
• Support communications: Chat and email records are retained for 3 years from the date of the communication, to support ongoing account management and dispute resolution.
• Marketing data: Email and notification preferences and associated data are retained until you withdraw consent or close your account, at which point marketing data is deleted within 30 days.
• Technical / log data: Server access logs and session data are retained for 12 months and then deleted.

When a retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player.

9. Your Privacy Rights as a SpinWin PK Player

As a registered player on SpinWin PK you have the following rights with respect to your personal data. To exercise any of these rights, contact us via live chat or at support@spinwinpk.best:

SpinWin PK will respond to all privacy rights requests within 30 days. In complex cases this may be extended by a further 30 days with notice provided. We may ask you to verify your identity before fulfilling a request to protect against unauthorised access to another player's data.

10. Children's Privacy

SpinWin PK is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the KYC process and any account found to belong to a person under 18 will be immediately closed, all funds forfeited, and all personal data deleted in accordance with the retention policy in Section 8.

If you are a parent or guardian and believe a minor has registered on SpinWin PK, please contact us immediately at support@spinwinpk.best. We will investigate and close the account within 24 hours of receiving a verified report. We take the protection of minors extremely seriously and have invested in age verification systems specifically to prevent underage access.

11. How SpinWin PK Secures Your Data

SpinWin PK has implemented a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and SpinWin PK servers.
• Encrypted data storage — personal data is encrypted at rest in our database infrastructure.
• Role-based access controls — only authorised staff with a legitimate need to access player data can do so, with all access logged and audited.
• Two-factor authentication on all internal systems and player accounts.
• Regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response procedures — in the event of a data breach affecting player data, SpinWin PK will notify affected players within 72 hours of becoming aware of the incident and will take all steps necessary to contain and remediate the breach.

No data security system is 100% impenetrable. While SpinWin PK invests heavily in security infrastructure, players are also responsible for maintaining the security of their own account credentials. Use a strong, unique password for your SpinWin PK account and never share your login details with anyone.

12. Changes to This Privacy Policy

SpinWin PK may update this Privacy Policy from time to time to reflect changes in how we handle data, changes to the services we offer, or updates to applicable legal requirements. When material changes are made, we will notify registered players via account notification and/or email at least 7 days before the updated policy takes effect.

The current version of this Privacy Policy is always available at spinwinpk.best/privacy-policy. The "Last updated" date at the top of this page indicates when the most recent revision was made. Continued use of the platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you object to any changes in how SpinWin PK processes your data, you have the right to close your account before the changes take effect. Contact support to do so. Your remaining real money balance will be returned to your verified payment method.