At win27, your privacy is not a formality — it is a core responsibility. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold over your own information.
win27 treats your personal information with the highest level of care. These six principles underpin every data decision we make on the platform.
All data transmitted between your device and the win27 platform is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive account data at rest is encrypted using AES-256 protocols to prevent unauthorised access at the storage layer.
win27 will never sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is used exclusively to deliver win27 services to you and to meet our legal and regulatory obligations under our gaming licence.
win27 collects only the data that is strictly necessary to operate the platform, verify your identity, process transactions in PKR, and comply with our AML and KYC obligations. We do not collect data speculatively or beyond what our licensing requires.
You have clearly defined rights over your personal data held by win27 — including the right to access, correct, restrict, and in certain circumstances delete your information. Our support team is available around the clock to assist with any data request.
Where win27 shares data with third-party service providers — such as payment processors for JazzCash and EasyPaisa transactions or game software providers — those parties operate under strict contractual data protection obligations and may not use your data for their own independent purposes.
win27 does not retain your personal data indefinitely. Data is held only for as long as necessary to fulfil the purpose for which it was collected, or as required by law or our gaming licence conditions. Upon account closure, personal data is deleted or anonymised in accordance with our documented retention schedule.
The table below summarises the categories of personal data collected by win27 and the lawful basis for each type of processing.
| Data Category | Examples | Purpose & Legal Basis |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, photograph | KYC verification, age verification (21+), AML compliance, contractual obligation |
| Contact Data | Email address, Pakistani mobile number, residential address | Account communication, support, transaction notifications, legal obligation |
| Financial Data | JazzCash / EasyPaisa wallet IDs, HBL / UBL / Meezan bank account details, transaction history in PKR | Processing deposits and withdrawals, AML monitoring, regulatory reporting |
| Technical Data | IP address, browser type, device identifiers, operating system, session timestamps | Platform security, fraud prevention, service optimisation, legitimate interest |
| Usage Data | Pages visited, games played, bets placed, session duration, feature interactions | Service improvement, responsible gaming monitoring, personalisation, legitimate interest |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer service, dispute resolution, legal obligation, legitimate interest |
| Marketing Preferences | Opt-in / opt-out status for promotional emails, SMS notifications | Sending relevant offers and promotions — based on consent only |
win27 recognises and upholds the data rights of every user on the platform. Whether you are based in Karachi, Lahore, Islamabad, or anywhere else in Pakistan, these rights apply to your win27 account in full. To exercise any of the rights listed, contact our support team at [email protected] — we will acknowledge your request within 48 hours and respond in full within 30 calendar days.
win27 will never charge a fee to handle a legitimate data rights request. Verification of your identity may be required before we action a request to protect the security of your account.
Right to Access Request a complete copy of all personal data win27 holds about you, including how it is being used and with whom it has been shared.
Right to Rectification Request correction of any inaccurate or incomplete personal data held in your win27 account at any time.
Right to Erasure Request deletion of your personal data where there is no longer a lawful basis for win27 to retain it, subject to our legal and regulatory obligations.
Right to Restrict Processing Request that win27 limits how your data is used while a complaint or query is being investigated, without requiring full deletion.
Right to Data Portability Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Withdraw Consent Where win27 processes your data based on consent (such as marketing emails), you may withdraw that consent at any time without affecting prior processing.
This Privacy Policy (hereinafter referred to as "the Policy") describes how win27 (hereinafter referred to as "win27", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals who access or use the win27 website at win27.ws, the win27 mobile application, or any associated products and services (collectively, "the Platform").
win27 is committed to handling personal data responsibly, transparently, and in full compliance with the data protection requirements imposed by our gaming licence and applicable international standards. By accessing or using the win27 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
This Policy should be read alongside the win27 Terms & Conditions, which govern the overall relationship between win27 and its users. Capitalised terms not defined in this Policy carry the meaning given to them in the Terms & Conditions.
For the purposes of applicable data protection law, win27 acts as the data controller in respect of the personal data collected through the Platform. This means win27 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is conducted lawfully and fairly.
Where win27 engages third-party service providers to process personal data on its behalf — such as payment processors handling JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions — those providers act as data processors under binding contractual agreements and may only process personal data in accordance with win27's documented instructions.
win27 collects identity data to fulfil its Know Your Customer (KYC) obligations under its gaming licence and anti-money laundering (AML) regulatory requirements. This includes your full legal name, date of birth, nationality, government-issued identification number (such as your Pakistani CNIC or passport number), and photographic identification.
We collect your email address, Pakistani mobile number, and residential address at the time of account registration and may update these details during the lifecycle of your account. This information is used for account communications, transaction alerts, and support correspondence.
To process deposits and withdrawals in Pakistani Rupees (PKR), win27 collects payment method details including JazzCash or EasyPaisa wallet identifiers, HBL, UBL, or Meezan Bank account information, and Visa or Mastercard details where applicable. win27 also maintains a full record of your transaction history on the Platform for the purposes of AML monitoring and regulatory reporting.
When you access the win27 Platform, we automatically collect certain technical data including your IP address, browser type and version, device type and identifiers, operating system, time zone setting, and session access timestamps. This data is used to maintain platform security, detect and prevent fraud, and optimise the user experience.
win27 collects data about how you interact with the Platform, including which pages you visit, which games you play (slots, live casino, cricket betting, and others), the duration of your sessions, and features you engage with. This data supports responsible gaming monitoring, platform improvement, and — where consented to — personalised service delivery.
win27 collects personal data through the following channels:
win27 uses the personal data it collects for the following purposes, each grounded in a lawful basis:
win27 shares personal data with carefully selected third-party service providers who assist in the delivery of Platform services. These include payment processors, identity verification partners, IT infrastructure providers, fraud prevention agencies, and customer support platform operators. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering services to win27.
win27 may be required to disclose personal data to regulatory authorities, gaming licence supervisors, law enforcement agencies, or courts of competent jurisdiction where required by law or where disclosure is necessary to protect the rights, property, or safety of win27, its users, or the public. win27 will, where legally permissible, notify you of any such disclosure.
In the event of a merger, acquisition, or sale of all or part of win27's business, personal data held by win27 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that result from it.
win27 does not and will not sell, rent, or otherwise transfer your personal data to third parties for their own independent commercial or marketing purposes. Your data is yours. win27's business model is built on providing a trusted gaming platform — not on monetising user data.
win27 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how users interact with win27 services. Cookies are small text files stored on your device that help win27 recognise you on return visits and personalise your experience.
win27 uses the following categories of cookies:
You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some areas of the win27 Platform.
win27 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by our gaming licence conditions, AML regulations, or other applicable legal obligations.
As a general principle, win27 retains identity and financial data for a minimum of five years following account closure, in accordance with standard AML record-keeping requirements. Usage and technical data is typically retained for a shorter period unless required for an ongoing investigation or legal proceeding.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user.
win27 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a personal data breach that poses a risk to your rights, win27 will notify the relevant regulatory authority and, where required, affected users, in accordance with applicable breach notification obligations.
win27 may transfer personal data to, and store data on servers located in, countries outside Pakistan. Where such transfers occur, win27 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply under internationally recognised data protection frameworks. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to countries recognised as providing an adequate level of data protection.
The win27 Platform is strictly intended for adults aged 21 years and above. win27 does not knowingly collect personal data from individuals under the age of 21. The Platform is not directed at minors, and win27 takes active steps — including mandatory age verification during KYC — to prevent underage access.
If win27 becomes aware that personal data has been collected from a user who is under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with win27's standard underage account procedure.
Parents and guardians who believe that their child may have accessed or attempted to access win27 are encouraged to contact our support team immediately at [email protected].
win27 may send you promotional emails, SMS messages, and in-Platform notifications about new games, bonuses, PSL betting offers, and other win27 promotions, but only where you have given explicit prior consent to receive such communications.
You may withdraw your consent to marketing communications at any time by: updating your notification preferences in your win27 account settings; clicking the "unsubscribe" link in any win27 marketing email; or contacting our support team directly. Withdrawal of marketing consent will not affect your ability to use the win27 Platform or receive essential account communications such as transaction confirmations and security alerts.
To exercise any of the data rights described in this Policy — including the right to access, rectify, erase, restrict, or port your personal data — please submit a written request to the win27 data protection team. Requests may be submitted by email to [email protected] with the subject line "Data Rights Request".
win27 will acknowledge your request within 48 hours of receipt and will provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be informed of the extension and the reason for it. There is no charge for submitting a data rights request.
win27 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to, corrected by, or deleted at the request of an unauthorised individual.
win27 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the requirements of our gaming licence. Where a proposed change is material, win27 will provide registered users with advance notice via email or a prominent in-Platform notification prior to the change taking effect.
The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the win27 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. The most current version of this Policy is always available at win27.ws/privacy-policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which win27 handles your personal data, please do not hesitate to get in touch with our dedicated privacy team. We take all privacy queries seriously and will respond promptly.
Contact us by email at: [email protected]
If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the supervisory authority relevant to win27's gaming licence jurisdiction.
Related Policies: This Privacy Policy should be read alongside the win27 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between win27 and its users.
This Privacy Policy was last updated on 1 January 2026. For a full understanding of your rights as a win27 user, please also review our Terms & Conditions and our FAQ page. For data requests or privacy concerns, contact us directly at [email protected].
win27 combines world-class casino entertainment with genuine data protection — because trust is the foundation of everything we do for Pakistani players.