PRPWin Privacy Policy — How We Protect Your Personal Data

PRPWin ("we", "us", "our", "the platform") is an online gaming and sports betting platform operating at prpwin.ws and serving players in Pakistan. All services are provided in Pakistani Rupees (PKR) and are accessible via the internet.

For the purposes of this Privacy Policy, PRPWin is the data controller — meaning we are the entity that determines why and how your personal data is collected and processed. If you have any questions about your data or this policy, you can contact us at any time through our support channels listed in Section 14.

This Privacy Policy applies to all personal data collected from individuals who visit the PRPWin website, register a player account, deposit funds, place bets, use any feature of the platform or contact PRPWin's support team. By using PRPWin, you acknowledge this policy and confirm your understanding of how your data is handled.

PRPWin collects personal data in the following categories. We do not collect data beyond what is necessary for the purposes described in this policy.

2.1 Account Registration Data

When you register a PRPWin account, we collect your full legal name, date of birth, mobile number, email address and a username of your choice. This data is required to create and maintain your account and to verify your identity as required by anti-fraud and anti-money laundering obligations.

2.2 Identity Verification Data

PRPWin may request a copy of your Pakistani CNIC (Computerised National Identity Card) or passport for identity verification purposes, particularly before processing withdrawals above certain thresholds or where unusual account activity has been detected. Document images are stored securely and used only for verification — they are never shared with third parties except where legally required.

2.3 Payment Method Data

PRPWin records your payment method type and a masked reference for each deposit and withdrawal transaction (for example, the last four digits of a card number or a masked mobile wallet number). PRPWin does not store full card numbers, CVV codes or mobile banking PINs — these are handled exclusively by your payment provider's secure systems, not by PRPWin's servers.

2.4 Gaming Activity Data

PRPWin maintains records of all gaming activity conducted through your account, including bets placed, games played, session durations, deposit and withdrawal history and bonus usage. This data is used for account management, responsible gaming monitoring, dispute resolution and regulatory compliance.

2.5 Technical and Device Data

PRPWin automatically collects certain technical data when you access the platform, including your IP address, device type, browser type and version, operating system and pages visited. This data is used for platform security, fraud detection and technical performance optimisation.

PRPWin collects personal data through three primary channels:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support or participate in a promotion
• Automatically: When you use the PRPWin platform, our systems automatically log technical data including your IP address, device information and session activity as described in Section 2.5
• From payment providers: When you make a deposit or withdrawal, your payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank or card issuer) confirms the transaction to PRPWin. PRPWin receives only a transaction confirmation and a masked payment reference — never your full payment credentials

PRPWin does not purchase data from data brokers, scrape social media profiles or acquire personal data from any source other than those described above. The data we hold about you is data you have provided directly or that has been generated by your use of the PRPWin platform.

PRPWin uses the personal data it holds for specific, defined purposes. We do not use your data for purposes beyond those described here without your explicit consent or a legal obligation to do so.

• Account operation: To create, maintain and manage your PRPWin account, process your bets, credit your winnings and manage your balance
• Identity verification and fraud prevention: To confirm you are who you say you are, ensure you meet the minimum age requirement of 18 years and detect and prevent fraudulent account activity
• Payment processing: To facilitate deposits and withdrawals in PKR through your chosen payment method
• Responsible gaming: To monitor for signs of problem gambling behaviour and apply responsible gaming tools, including deposit limits and self-exclusion, as described in our Responsible Gaming page
• Customer support: To handle your enquiries, complaints and disputes efficiently and maintain a record of communications for reference
• Legal and regulatory compliance: To meet anti-money laundering, know-your-customer and other regulatory obligations applicable to our operations
• Platform security: To detect, investigate and prevent security incidents, unauthorised access and other threats to the integrity of the PRPWin platform
• Platform improvement: To analyse aggregated, anonymised usage patterns in order to improve PRPWin's features, performance and user experience
• Promotional communications: To send you information about relevant PRPWin promotions and offers — only where you have opted in to receive such communications

PRPWin processes your personal data on the following legal grounds:

• Contract performance: The majority of data processing at PRPWin is necessary to deliver the services you have contracted for by registering an account and agreeing to our Terms and Conditions. This includes operating your account, processing transactions and managing your gaming activity.
• Legal obligation: PRPWin is required by law to carry out identity verification, maintain transaction records, apply responsible gaming controls and comply with anti-money laundering regulations. Data processed for these purposes is not optional — it is a legal requirement of operating a gaming platform.
• Legitimate interest: PRPWin processes technical and behavioural data for the legitimate purposes of platform security, fraud prevention and platform improvement. We apply a balancing test to ensure these interests do not override your rights.
• Consent: For optional processing such as marketing communications, PRPWin relies on your explicit consent. You can withdraw this consent at any time without affecting your account.

PRPWin does not sell, rent or trade your personal data. Full stop. Your data is not a revenue stream for PRPWin and we have no arrangements with data brokers, advertisers or any other commercial third parties that involve sharing your personal information.

PRPWin may share your data with the following categories of recipients, strictly for the purposes described:

• Payment providers: Transaction confirmation data is exchanged with Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card networks to facilitate deposits and withdrawals. These providers operate under their own privacy policies and are bound by their own regulatory obligations regarding data protection.
• Game providers: Game-level data (session start, bet amount, outcome) is shared with the relevant certified game provider in order to deliver the game and maintain game integrity records. This data does not include your name, CNIC or payment information.
• Regulatory and law enforcement authorities: PRPWin will disclose personal data to relevant authorities when required to do so by law, court order or regulatory mandate. PRPWin will not disclose data to authorities voluntarily beyond what is legally required.
• Identity verification services: Where third-party identity document verification services are used to confirm CNIC or passport authenticity, your document data is shared with that provider under a strict data processing agreement that prohibits any use beyond verification.

Financial data security deserves its own section because it is the area Pakistani players are most understandably cautious about. Here is precisely what PRPWin holds, and what it does not hold, regarding your payment information.

What PRPWin stores: PRPWin stores a masked reference identifying your payment method type — for example, "Easypaisa ending ×××× 4782" or "Visa card ending ×××× 9341". This reference is used to ensure withdrawals are returned to the same method used for deposits and to display your transaction history accurately.

What PRPWin never stores: PRPWin does not store your full card number, CVV or expiry date, your Easypaisa or JazzCash PIN, your internet banking credentials or any other full payment credential. These are processed exclusively through your payment provider's secure gateway and never touch PRPWin's servers.

Transaction records: PRPWin maintains a complete record of all deposit and withdrawal transactions on your account — amounts, dates, methods and statuses. These records are used for account management, dispute resolution and regulatory compliance. They are available to you in your account transaction history at any time.

PRPWin implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction.

• SSL/TLS encryption: All data transmitted between your device and PRPWin's servers is encrypted using current industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this is active at all times when using PRPWin.
• Encrypted data storage: Sensitive data stored in PRPWin's systems — including identity document references and payment method references — is encrypted at rest.
• Access control: PRPWin's internal systems operate on a need-to-know access model. Only staff whose role requires access to a specific category of player data can access it. Access is logged and audited.
• Two-factor authentication: PRPWin supports and encourages two-factor authentication for player accounts, adding an additional layer of protection against unauthorised access beyond the password alone.
• Penetration testing and audits: PRPWin subjects its platform to regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Breach response: In the event of a data breach that poses a risk to your rights and freedoms, PRPWin will notify affected players without undue delay and take immediate remediation steps.

While PRPWin takes all reasonable steps to secure your data, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to keep your PRPWin account credentials secure. Do not share your password with anyone and enable two-factor authentication from your account settings.

PRPWin uses cookies and similar tracking technologies to operate the platform, maintain your login session and improve your experience. Cookies are small text files stored on your device by your browser. PRPWin uses the following categories of cookies:

• Essential cookies: Required for core platform functionality including login session management, security and navigation. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings and game display preferences. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised, aggregated data about how players use PRPWin. This helps us identify popular features, diagnose performance issues and improve the platform. No individual player is identified in analytics data.
• Security cookies: Help detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect platform functionality. PRPWin does not use advertising or retargeting cookies — we do not serve ads on the platform and do not participate in advertising networks that would track you across other websites.

PRPWin retains personal data only for as long as it is necessary for the purposes for which it was collected or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account with PRPWin and for a period following account closure as required by our regulatory obligations
• Transaction records: Financial transaction records are retained for a minimum of five years following the transaction date, as required by anti-money laundering regulations
• Identity documents: Retained for the period required to satisfy our know-your-customer obligations and for a reasonable period thereafter to support dispute resolution
• Support communications: Retained for up to three years from the date of the communication, to support dispute resolution and quality assurance
• Technical logs: IP logs and session data are retained for up to 90 days for security purposes, after which they are deleted or anonymised

When data is no longer required and there is no legal obligation to retain it, PRPWin securely deletes or anonymises it. Anonymised data may be retained indefinitely for statistical purposes — this data cannot be used to identify any individual player.

As a PRPWin player, you have the following rights regarding your personal data. To exercise any of these rights, contact PRPWin support at support@prpwin.ws with your account username and a description of your request. PRPWin will respond within 30 days.

PRPWin's services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If PRPWin discovers that a player account has been created by or for a person under 18, the account will be immediately suspended, all data will be deleted (subject to any legal hold requirements) and any deposited funds will be returned to the payment source.

If you are a parent or guardian and believe your child has registered a PRPWin account, please contact us immediately at support@prpwin.ws. PRPWin will act on this notification without delay.

PRPWin may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements or platform operations. When material changes are made, PRPWin will notify registered players through one or more of the following: a notification displayed on the PRPWin website on login, an email to your registered address, or an in-platform notification.

The "Effective Date" at the top of this policy indicates when the current version took effect. We encourage you to review this policy periodically. Your continued use of PRPWin following notification of changes constitutes your acknowledgement of the updated policy.

If a proposed change would involve a materially less protective treatment of your existing data and you do not agree, you should close your PRPWin account before the change takes effect. Contact support for assistance with this if needed.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how PRPWin has handled your personal data, please contact us through the following channels. Our support team is available 24 hours a day, seven days a week.

• Email: support@prpwin.ws — use the subject line "Privacy Enquiry" for faster routing
• Live chat: Available in your PRPWin account — click the support icon in the bottom corner of the screen

PRPWin aims to respond to all privacy enquiries within 48 hours and to complete substantive requests (data access, rectification, deletion) within 30 days. If you are not satisfied with PRPWin's response to a privacy concern, you have the right to escalate the matter through the dispute resolution process described in our Terms and Conditions.