wipkr Privacy Policy — How We Protect Your Personal Information

wipkr ("we," "us," or "the Company") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data provided by users of the wipkr Platform, accessible at wipkr.app.

This Policy applies to all individuals who register an account with wipkr, access our website, or otherwise interact with our services. By using the wipkr Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

If you do not agree with the practices set out in this Privacy Policy, you should not use the wipkr Platform or provide us with any personal information.

For the purposes of applicable data protection legislation, wipkr is the data controller responsible for your personal information. This means we determine the purposes and means by which your personal data is processed.

wipkr operates under an internationally recognised gaming licence and is subject to the data protection requirements of the jurisdiction in which that licence is issued. We adhere to the principles set out in the General Data Protection Regulation (GDPR) and similar data protection frameworks applicable to our operations.

Our registered contact details for data protection enquiries are provided in Section 15 of this Policy.

3.1 Information You Provide Directly

When you register an account, complete KYC verification, make a deposit, contact support, or otherwise interact with wipkr, we collect personal data that you voluntarily provide, including:

• Identity Information: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification
• Contact Information: Email address, Pakistani mobile number (Jazz, Zong, Telenor, Ufone, or Warid), and postal address
• Identity Documents: Scanned copies of your CNIC, passport, or other government-issued identity documents submitted during KYC
• Financial Information: Payment method details (JazzCash account number, EasyPaisa number, HBL/UBL/Meezan Bank account details), deposit and withdrawal transaction records, and source of funds documentation where required
• Account Credentials: Username and encrypted password (wipkr never stores passwords in plain text)
• Communications: Records of your communications with wipkr support, including live chat transcripts and email correspondence

3.2 Information Collected Automatically

When you access and use the wipkr Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived therefrom
• Device type, operating system version, and browser type
• Session duration, pages visited, features accessed, and in-session navigation patterns
• Game history, wagering activity, betting patterns, and balance transaction logs
• Login timestamps, session identifiers, and authentication logs
• Referral source (how you arrived at the wipkr Platform)
• Cookie and tracking technology data as described in Section 8

3.3 Information from Third Parties

In certain circumstances, wipkr may receive personal data about you from third parties, including:

• Payment processors (JazzCash, EasyPaisa, banking partners) to verify transaction status and detect fraudulent payment activity
• Identity verification service providers engaged for KYC compliance purposes
• Credit reference or anti-fraud agencies where required by our regulatory obligations
• Responsible gaming databases and self-exclusion registers, to verify that a player has not self-excluded from gambling services

wipkr uses the personal data we collect for the following purposes:

4.1 Account Management & Service Delivery

• To create and maintain your wipkr account, authenticate your identity on login, and enable access to all platform features
• To process deposits and withdrawals via JazzCash, EasyPaisa, and banking partners, and to maintain accurate transaction records in PKR
• To provide customer support, respond to your enquiries, and resolve disputes in an informed and efficient manner
• To personalise your platform experience, including displaying relevant game recommendations and promotions based on your activity

4.2 Legal & Regulatory Compliance

• To conduct Know Your Customer (KYC) identity and age verification as required by our operating licence — including verifying that you are 21 years of age or older
• To conduct anti-money laundering (AML) checks and report suspicious financial activity to relevant authorities as required by law
• To comply with our responsible gaming obligations, including cross-referencing self-exclusion registers
• To maintain records required by our gaming licence, applicable tax authorities, and financial regulators

4.3 Security & Fraud Prevention

• To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeover attempts, and other prohibited conduct
• To monitor for patterns of problem gambling and enforce responsible gaming limits where applicable
• To protect the integrity of our sports betting markets and casino games

4.4 Marketing & Communications

• To send you promotional offers, bonus notifications, and platform news where you have provided consent or where a legitimate interest basis applies
• To conduct surveys and collect feedback to improve wipkr's services
• To provide you with important service notifications, including security alerts, Terms updates, and account status communications — these are non-marketing and cannot be opted out of while your account remains active

wipkr processes your personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, payments, and game provision
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence conditions — including KYC, AML, age verification, and record-keeping requirements
• Legitimate Interests: Processing carried out in wipkr's legitimate business interests where these are not overridden by your data protection rights — including fraud prevention, platform security, and service improvement
• Consent: Processing for marketing communications where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal
• Vital Interests: In exceptional circumstances, wipkr may process personal data where necessary to protect the vital interests of a player — for example, in serious responsible gaming intervention scenarios

wipkr does not sell your personal data to third parties. We may share your personal information with the following categories of recipients in the circumstances described:

6.1 Service Providers & Processors

wipkr engages trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include payment processors (JazzCash, EasyPaisa, banking partners), KYC and identity verification providers, fraud detection platforms, cloud infrastructure providers, and customer support software providers. All such providers are contractually required to maintain appropriate data security standards and may not use your data for any purpose beyond the services they provide to wipkr.

6.2 Regulatory & Legal Authorities

wipkr may disclose personal data to regulatory bodies, gaming authorities, law enforcement agencies, financial intelligence units, or courts where required by law or by the terms of our gaming licence. Such disclosures may include transaction records, identity verification results, and account activity data. wipkr will, where permitted by law, notify you of any such disclosure request.

6.3 Business Transfers

In the event that wipkr undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, wipkr will notify affected players prior to data transfer and the successor entity will be required to honour this Privacy Policy.

6.4 Responsible Gaming Partners

wipkr may share relevant information with recognised responsible gaming organisations, self-exclusion scheme administrators, or gambling harm support services where required by our licence or where we have a reasonable basis to believe such sharing is in the player's interest.

wipkr implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our key security controls include:

• Transport Encryption: All data transmitted between your device and wipkr's servers is encrypted using TLS 1.3 / SSL protocols. The wipkr Platform operates exclusively over HTTPS.
• Data-at-Rest Encryption: Personal data stored in wipkr's databases is encrypted using AES-256 encryption standards.
• Access Controls: wipkr personnel access to personal data is role-based and restricted on a strict need-to-know basis. Access to sensitive data requires multi-factor authentication.
• Password Security: Account passwords are stored using industry-standard one-way cryptographic hashing — wipkr cannot retrieve or read any user's password in plain text.
• Penetration Testing: wipkr's platform and infrastructure undergo regular security assessments and penetration testing by independent security professionals.
• Incident Response: wipkr maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, we will notify you and the relevant regulatory authorities within the timeframes required by applicable law.

While wipkr takes every reasonable precaution to secure your data, no internet-based system can be guaranteed to be completely secure. We strongly encourage all players to use strong, unique passwords, enable two-factor authentication, and keep their registered email address secure.

wipkr uses cookies and similar tracking technologies to operate the Platform effectively, enhance your experience, and collect analytics data. The following categories of cookies may be set when you access wipkr:

8.1 Strictly Necessary Cookies

These cookies are essential for the wipkr Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and preference cookies that store your display settings. No consent is required for strictly necessary cookies.

8.2 Analytics Cookies

wipkr uses analytics tools to understand how players navigate and use the Platform. Analytics cookies collect aggregated and anonymised data about page visits, feature usage, session duration, and navigation paths. This data helps wipkr improve platform performance and user experience. Analytics cookies are only placed with your consent.

8.3 Functional Cookies

Functional cookies remember your preferences and personalisation choices — such as your preferred language, display settings, and recently played games — so that these are preserved across sessions. These improve your convenience on the Platform.

8.4 Managing Cookies

You may control cookie settings through your browser preferences at any time. Disabling strictly necessary cookies will impair your ability to use the wipkr Platform. Disabling analytics or functional cookies will not prevent Platform access but may reduce the quality of your experience. You may also update your cookie consent preferences through the wipkr cookie preference centre accessible from the Platform footer.

Subject to applicable data protection law and our regulatory obligations, you have the following rights in relation to your personal data held by wipkr:

• Right of Access: You may request a copy of the personal data wipkr holds about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For certain data fields (such as your registered name), corrections may require supporting documentation.
• Right to Erasure: You may request permanent deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records under our gaming licence and AML requirements.
• Right to Restrict Processing: You may request that wipkr restricts processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that wipkr provides your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing processing, wipkr will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact wipkr's support team via live chat or email at [email protected]. We will verify your identity before processing any data rights request to protect against unauthorised access to your information. We will not charge a fee for data rights requests unless they are manifestly unfounded or excessive.

wipkr retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with active wipkr accounts is retained for the duration of the account's active status.
• Closed Account Data: Following account closure, wipkr retains KYC records, financial transaction data, and account activity logs for a minimum of five (5) years to satisfy anti-money laundering, fraud prevention, and gaming licence record-keeping requirements. This period may be extended where required by applicable law.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the last interaction, unless a longer period is required by ongoing dispute resolution or legal proceedings.
• Marketing Consent Records: Records of marketing consent or opt-out status are retained for the lifetime of the account plus five (5) years to demonstrate compliance with applicable marketing regulations.
• Technical Logs: Server access logs, security event logs, and session data are retained for up to twelve (12) months unless required longer for security investigations.

After the applicable retention period expires, wipkr will securely delete or anonymise your personal data in accordance with our data disposal procedures.

wipkr operates internationally and your personal data may be transferred to, stored in, or processed in countries outside Pakistan, including the jurisdiction in which wipkr holds its gaming licence and countries where our third-party service providers operate.

Where personal data is transferred outside your country of residence, wipkr takes appropriate measures to ensure that the transfer is lawful and that your data receives a level of protection equivalent to that in your home jurisdiction. Safeguards we employ for international transfers include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into our agreements with third-party processors
• Data processing agreements that impose equivalent data protection obligations on all international recipients of your personal data
• Technical security measures — including encryption in transit and at rest — that apply regardless of where data is stored or processed

By using wipkr and providing your personal data, you acknowledge that your data may be transferred and processed internationally as described in this Policy.

The wipkr Platform is intended exclusively for adults aged 21 years and above. wipkr does not knowingly collect personal data from individuals under the age of 21, and the Platform is not designed for, directed at, or intended to attract users below the minimum age requirement.

As part of our KYC process, wipkr verifies the age of all registered players before permitting deposits or wagering activity. If wipkr becomes aware that an individual under the age of 21 has registered an account or provided personal data, we will immediately:

• Suspend and terminate the relevant account
• Void all wagers placed during the period of underage access
• Delete the personal data provided by the underage individual, subject to any mandatory retention requirements
• Return any deposits made, less any amounts required to be held for regulatory reporting purposes

Parents and guardians who believe a minor may have registered a wipkr account should contact our support team immediately at [email protected]. We take underage access concerns as a matter of the highest priority.

wipkr may send you promotional and marketing communications about bonuses, new games, special offers, and platform features where you have consented to receive them during registration or at a later date.

13.1 Types of Marketing

Marketing communications from wipkr may be delivered via email, SMS to your registered Pakistani mobile number, or through in-platform notifications. The types of promotions we communicate include welcome bonuses, deposit match offers, free spins promotions, PSL cricket betting specials, and seasonal promotions relevant to Pakistani players.

13.2 Opting Out

You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email from wipkr
• Updating your communication preferences in your wipkr account settings
• Contacting wipkr support via live chat or email and requesting removal from marketing lists

Opting out of marketing communications will not affect your ability to use the wipkr Platform, receive service notifications, or access your account. Service communications — including deposit confirmations, withdrawal notifications, KYC requests, and security alerts — are not classified as marketing and will continue to be sent regardless of marketing preference settings.

13.3 Responsible Marketing

wipkr does not direct gambling marketing at players who have activated self-exclusion or responsible gaming restrictions. Once a self-exclusion is applied to a wipkr account, that account is immediately removed from all marketing lists and no promotional communications will be sent for the duration of the exclusion period.

wipkr reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered players via their registered email address where the changes materially affect their data rights or our processing practices
• Display a prominent notice on the wipkr Platform for a reasonable period following any significant update

Your continued use of the wipkr Platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to remain informed of how wipkr protects your personal data.

Where any change to this Policy requires your fresh consent under applicable data protection law, wipkr will seek that consent before the new processing practices take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wipkr handles your personal data, please contact us using the following channels:

• Live Chat: Available 24/7 directly on the wipkr Platform. For urgent data concerns such as suspected unauthorised account access, live chat is the fastest route to support.
• Email: [email protected] — for formal data subject access requests, erasure requests, or data protection complaints, please include "Privacy Request" in your subject line to ensure your enquiry is routed appropriately.

wipkr will acknowledge all privacy-related enquiries within 2 business days and will aim to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this response period by up to an additional 60 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with wipkr's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your situation.