gopwin Privacy Policy –
How We Handle Your Personal Data

1. Introduction

gopwin is Pakistan's premier online casino and sports betting platform, offering live dealer games, slots, cricket betting, Teen Patti, Andar Bahar, and more. We operate under an internationally recognised gaming licence and serve registered players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Multan, and beyond.

We understand that when you share personal information with gopwin — whether during registration, during a deposit via JazzCash or EasyPaisa, or while contacting our support team — you are placing trust in us. This Privacy Policy exists to make that trust well-founded. We do not sell your data. We do not share it with unrelated third parties. We store only what is necessary and protect it to the highest applicable standard.

If you have questions about any aspect of this policy, our support team is available 24/7 via live chat from your account dashboard. You can also reach us at the contact details listed in Section 11 of this document.

2. Data We Collect

gopwin collects personal data in several ways — directly from you during registration and account use, automatically through your device and browsing behaviour, and from third parties where necessary for identity verification and fraud prevention purposes.

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, gender, Pakistani mobile number, email address, and residential city.
• Identity verification documents: CNIC (Computerised National Identity Card), passport, or other government-issued identification as required during KYC (Know Your Customer) procedures.
• Financial data: JazzCash or EasyPaisa account numbers, bank account details (HBL, UBL, Meezan Bank, etc.), USDT wallet addresses (TRC20), and transaction histories generated on the platform.
• Communications: Content of support chat conversations, emails, and any feedback or complaints submitted to gopwin.
• Promotional data: Bonus redemption history, referral codes used, and responses to promotional surveys where voluntarily submitted.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, click patterns, bet history, and deposit/withdrawal activity.
• Location data: General geographic location inferred from IP address. We do not access GPS-level location data.
• Cookie and tracking data: Session cookies, preference cookies, and analytics identifiers. See Section 5 for full details.

2.3 Information from Third Parties

• Identity verification agencies used during KYC processing.
• Payment processors including mobile wallet providers (JazzCash, EasyPaisa) and banking partners.
• Fraud detection and anti-money laundering (AML) service providers.
• Social login providers (Google, Facebook) where you choose to use these methods to access your gopwin account.

3. How We Use Your Data

gopwin uses your personal data for clearly defined purposes. We do not process personal information beyond what is reasonably necessary to deliver and maintain the services you have registered to use.

• Account management: Creating, verifying, and maintaining your gopwin player account, including age and identity verification to ensure compliance with our 21+ policy.
• Service delivery: Processing deposits and withdrawals in PKR, enabling gameplay across our full game library, and delivering personalised game recommendations.
• Security and fraud prevention: Detecting suspicious login activity, preventing multi-accounting, enforcing responsible gaming limits, and complying with AML obligations under our international gaming licence.
• Customer support: Responding to queries, resolving disputes, and processing complaints through our 24/7 support team.
• Legal and regulatory compliance: Meeting obligations under our gaming licence, tax regulations, and any applicable Pakistani or international data protection law.
• Marketing and promotions: Sending you personalised bonus offers, PSL season promotions, and platform updates — only where you have given explicit consent to receive such communications. You may opt out at any time from your account notification settings.
• Platform improvement: Analysing aggregated usage data to improve site performance, navigation, and the overall player experience on gopwin.

4. Data Sharing & Disclosure

gopwin does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data sharing occurs only in the following limited and necessary circumstances:

• Payment processors: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20 infrastructure providers solely to process the transactions you initiate.
• KYC and compliance providers: Identity documents are shared with our licensed verification partners to fulfil regulatory obligations. These partners are contractually bound to confidentiality.
• Gaming platform technology partners: Game providers and platform software vendors who power specific games or features within the gopwin ecosystem. Only data strictly necessary for the service is shared.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, gopwin may disclose data to competent authorities. We will inform you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving gopwin, your data may be transferred to the successor entity. You will be notified in advance of any such transfer.

All third-party data processors engaged by gopwin are subject to data processing agreements that require them to handle personal data in a manner consistent with this Privacy Policy and applicable data protection obligations.

5. Cookies & Tracking Technologies

gopwin uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following cookie categories are used:

• Essential cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load balancing identifiers. These cannot be disabled without impairing platform functionality.
• Preference cookies: Store your language, display, and notification preferences so you do not need to reconfigure them on each visit.
• Analytics cookies: Track aggregated usage patterns — pages visited, session duration, game categories accessed — to help us improve the gopwin experience. No personally identifiable information is transmitted via analytics cookies.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the gopwin platform.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your gopwin account. For analytics and preference cookies, your browser's built-in controls give you full management capability.

6. Data Security

gopwin applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Specific measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and gopwin servers is encrypted in transit, including login credentials, financial data, and support communications.
• Password hashing: Passwords are stored using a strong one-way cryptographic hash function with a unique salt per user. gopwin staff cannot view or retrieve your password in plain text under any circumstances.
• Access controls: Personal data is accessible only to gopwin staff who require it to perform their specific role. Role-based access control (RBAC) is enforced across all internal systems.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their gopwin accounts. This adds an OTP layer that significantly reduces the risk of unauthorised account access.
• Regular security audits: The gopwin platform undergoes periodic security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data centre security: Player data is stored on servers housed in secure, access-controlled facilities with redundant infrastructure and disaster recovery protocols.

Despite these measures, no digital system is entirely immune to risk. We recommend that you use a strong, unique password for your gopwin account, enable 2FA, and contact support immediately at [email protected] if you suspect any unauthorised access to your account.

7. Data Retention

gopwin retains your personal data for as long as your account is active and for a defined period thereafter, in line with our legal and regulatory obligations under our international gaming licence.

• Active accounts: All account data, transaction history, and gaming records are retained for the full duration of your account's active status.
• Closed accounts: Following account closure, gopwin retains your data for a minimum of five (5) years to satisfy AML, responsible gaming audit, and financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum period as required by our licensing authority's AML directives, typically five to seven years from the date of submission.
• Support communications: Chat logs and email records are retained for three (3) years from the date of the interaction, unless a longer period is required for an active dispute or regulatory inquiry.
• Marketing data: If you opt out of marketing communications, your contact details are moved to a suppression list retained only to ensure we do not contact you again — not for any other purpose.

Once the applicable retention period has expired and there is no legal basis for continued storage, gopwin securely deletes or anonymises your personal data so that it can no longer be attributed to you.

8. Your Rights

As a gopwin player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered account details for identity verification.

• Right of access: You may request a copy of all personal data gopwin holds about you. We will respond within 30 days of a verified request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Basic profile fields (name, mobile number, email) can be updated directly from your account settings.
• Right to erasure: You may request deletion of your personal data where gopwin no longer has a legitimate or legal basis to retain it. Note that data subject to AML or regulatory retention obligations cannot be erased prior to the mandatory retention period expiring.
• Right to restrict processing: You may request that gopwin limits how your data is used while a correction or objection request is being processed.
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another service where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Use the unsubscribe option in any gopwin marketing communication, or update your preferences from the account dashboard.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

9. Minors & Age Policy

The gopwin platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is performed during the KYC process, and accounts found to belong to underage individuals will be immediately closed and any funds returned in accordance with our responsible gaming policy.

If you have reason to believe that a minor has registered on the gopwin platform or provided personal data to us, please contact us immediately at [email protected]. We take the protection of minors extremely seriously and will act swiftly to investigate and resolve any such report.

Parents and guardians in Pakistan are encouraged to use parental control software to restrict access to online gambling platforms where minors have access to shared devices.

10. Changes to This Privacy Policy

gopwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the gopwin platform following notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with any changes, you should close your account before the effective date of the revision.

We recommend reviewing this Privacy Policy periodically — particularly at the start of each PSL season or major promotional period — so you remain informed about how gopwin handles your data.

11. Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to the gopwin Data Protection team using the following contact details:

gopwin is committed to resolving all data-related concerns promptly and transparently. Where a complaint cannot be resolved directly with our team, you retain the right to escalate the matter to the relevant supervisory authority under our licensing jurisdiction.