1. Who We Are
SpinWinPK (operating at spinwinpk.click) is Pakistan's premier online gaming platform, offering casino games, card games, sports betting, Teen Patti, Aviator, fishing games and a VIP loyalty programme — all denominated in Pakistani Rupees. When this Privacy Policy refers to "SpinWinPK", "we", "us" or "our", it refers to the operating entity behind the spinwinpk.click platform.
SpinWinPK is the data controller for all personal information processed in connection with your account and gameplay on our platform. This means we determine why and how your data is processed, and we are responsible for ensuring that processing is done lawfully, fairly and transparently.
If you have any questions about data privacy at SpinWinPK, you can reach our data team directly at support@spinwinpk.click. Privacy requests — including data access, correction and deletion requests — are handled separately from general support queries and are prioritised accordingly.
2. Data We Collect
SpinWinPK collects personal data in three broad ways: information you provide directly to us, information generated by your use of the platform, and information received from third parties such as payment processors. The table below sets out the main categories.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, copy of identity document | Provided by you at registration or verification |
| Contact Data | Mobile number, email address, city/province of residence | Provided by you at registration |
| Financial Data | Easypaisa/JazzCash wallet number, bank IBFT account details, Visa/Mastercard last four digits | Provided by you when making deposits or withdrawal requests |
| Transaction Data | Deposit and withdrawal amounts, dates, reference numbers, game session records, bet history, win/loss records | Generated by your activity on SpinWinPK |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, pages visited | Collected automatically when you use the platform |
| Usage Data | Games played, frequency of play, session length, bonus usage, VIP tier activity | Generated by your activity on SpinWinPK |
| Communications Data | Support chat transcripts, email correspondence, any feedback submitted | Generated when you contact SpinWinPK |
2.1 Data We Do Not Collect
SpinWinPK does not collect or process any of the following special categories of sensitive data: racial or ethnic origin, religious beliefs, political opinions, health or medical information, biometric data beyond CNIC photograph for identity verification, or sexual orientation. We have no need for this information to operate a gaming platform and we do not seek it.
3. Why We Collect Your Data
Every piece of data SpinWinPK collects has a specific, legitimate reason behind it. We do not collect data speculatively or because it might be useful someday. Below is a breakdown of our primary purposes:
3.1 Account Operation
Your identity and contact data are essential to create and maintain your SpinWinPK account. Without your name, mobile number and email address, we cannot register you, communicate with you about your account or verify that you are the legitimate account holder when you contact support.
3.2 Payment Processing
Financial data is necessary to process your deposits and withdrawals in PKR. SpinWinPK is legally and commercially obligated to verify that deposits originate from payment methods registered in your name, and that withdrawals are returned to verified accounts. This data flows directly to payment processor partners such as Easypaisa and JazzCash under strict data processing agreements.
3.3 Identity Verification and Fraud Prevention
CNIC data is used to verify your age and identity — two requirements that are non-negotiable for a responsible gaming platform. SpinWinPK also uses transaction and technical data to identify patterns consistent with fraud, money laundering, account takeover or underage gambling. This processing protects both SpinWinPK and its honest players.
3.4 Responsible Gaming
Usage and transaction data enables SpinWinPK's responsible gaming systems to function correctly. Session limits, loss limits, deposit limits, and self-exclusion all rely on accurate records of your gaming activity. Without this data, SpinWinPK could not offer the protective tools that are a core part of our platform.
3.5 Platform Improvement
Anonymised and aggregated technical and usage data helps SpinWinPK understand how the platform is being used — which games are most popular, where players encounter errors, and where the user interface can be improved. This data is analysed at population level, not individual level, and does not identify any particular player.
3.6 Legal Compliance
Certain data is retained because we are legally required to keep it — transaction records, verification documents and communications related to complaints fall into this category. Retention periods for legally mandated data are set out in Section 8.
4. Legal Basis for Processing
SpinWinPK processes your personal data under the following legal bases, which are consistent with standard data protection principles applicable to online service providers:
- Contract Performance: Processing necessary to deliver the gaming services you have registered for, including account management, game access, deposit and withdrawal processing.
- Legal Obligation: Processing required to comply with applicable laws — including age verification, anti-money-laundering checks and record-keeping requirements.
- Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring and anonymised analytics — where these interests do not override your fundamental privacy rights.
- Consent: Where SpinWinPK requests your consent for specific optional processing — such as marketing communications — you have the right to withdraw that consent at any time with no negative consequences for your account.
5. How We Store Your Data
All SpinWinPK data is stored on secure servers. Data at rest is encrypted using AES-256 encryption as standard. Access to player data within SpinWinPK's systems is restricted on a strict need-to-know basis — only team members who require access to specific data categories to perform their role are granted it, and all access is logged and auditable.
SpinWinPK's primary data storage infrastructure is subject to regular security audits by independent third parties. Any vulnerabilities identified through these audits are remediated according to a defined severity-based timeline — critical issues within 24 hours, high-severity issues within 7 days.
Where SpinWinPK uses third-party service providers that process personal data on our behalf — such as payment processors, KYC verification providers and cloud infrastructure providers — those relationships are governed by formal data processing agreements that impose equivalent data protection standards on the third party. SpinWinPK remains the data controller and the third party acts only on our documented instructions.
6. Third-Party Data Sharing
SpinWinPK does not sell, rent or trade your personal data to any third party for commercial purposes. Sharing only occurs in the following specific, controlled circumstances:
6.1 Payment Processors
To process deposits and withdrawals, SpinWinPK shares relevant financial and identity data with payment service providers — including Easypaisa, JazzCash, NayaPay, SadaPay and card processing networks. This data is shared under formal agreements and is used solely for the purpose of executing your transaction. Payment processors are not permitted to use your data for any other purpose.
6.2 Identity Verification Partners
SpinWinPK uses third-party KYC (Know Your Customer) service providers to assist with CNIC verification and age checks. These partners receive only the minimum data necessary to perform the verification and are contractually prohibited from retaining or reusing that data beyond the verification process.
6.3 Legal and Regulatory Obligations
SpinWinPK may be required to disclose player data to law enforcement, regulatory authorities or courts where we receive a valid legal order or where we are otherwise required to do so by applicable law. In such cases, SpinWinPK will disclose only the specific data requested, will comply with applicable legal processes, and will notify the affected player where we are legally permitted to do so.
6.4 Business Transfers
In the event that SpinWinPK undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players would be notified before any such transfer occurs, and the acquiring entity would be required to honour the privacy commitments set out in this Policy.
7. Cookies and Tracking Technologies
SpinWinPK uses cookies and similar technologies on the spinwinpk.click platform. These are small files placed on your device that help us deliver a functional, personalised and secure experience. The main categories we use are as follows:
7.1 Strictly Necessary Cookies
These cookies are essential for the platform to function and cannot be switched off. They include session authentication tokens (which keep you logged in during your visit), security cookies that protect against cross-site request forgery, and cookies that remember your language and currency preferences. No personal data is transmitted to external parties via these cookies.
7.2 Functional Cookies
Functional cookies remember choices you make on SpinWinPK — your preferred game category, notification settings and responsible gaming limit preferences. These improve your experience by not requiring you to reconfigure the platform every time you visit.
7.3 Analytics Cookies
SpinWinPK uses anonymised analytics to understand aggregate usage patterns — which features are used most, where players experience difficulty, and how the platform performs across different devices. Analytics data is not linked to individual player identities. You can opt out of analytics cookies through your browser settings without affecting core platform functionality.
7.4 Managing Cookies
You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in or using secure features of the SpinWinPK platform. Disabling functional or analytics cookies will not prevent basic platform use but may reduce your experience quality.
8. Data Retention
SpinWinPK retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity & contact data | Duration of account + 5 years after closure | Legal and regulatory obligation |
| Financial transaction records | 7 years from transaction date | Accounting and AML compliance |
| KYC / identity verification documents | 5 years after account closure | Regulatory requirement |
| Game session & bet history | 3 years from session date | Dispute resolution and responsible gaming |
| Support communications | 3 years from last interaction | Quality assurance and dispute records |
| Technical / log data | 12 months | Security monitoring and fraud detection |
| Anonymised analytics data | Indefinite (non-personal) | Platform improvement |
On expiry of the applicable retention period, SpinWinPK will securely delete or irreversibly anonymise the relevant data. If you close your account, SpinWinPK will begin the deletion process for data not subject to mandatory retention within 30 days of the account closure being confirmed.
9. Your Privacy Rights
As a SpinWinPK player, you have meaningful rights over your personal data. These are not aspirational — they are enforceable rights that SpinWinPK is committed to honouring within the timelines set out below.
Right to Access
Request a copy of all personal data SpinWinPK holds about you. We will provide this within 30 days of a verified request.
Right to Correction
Request correction of any inaccurate or incomplete personal data. Account details can be updated directly through your account settings or via support.
Right to Deletion
Request deletion of your personal data. Note that data subject to mandatory legal retention cannot be deleted until the retention period expires, even if you close your account.
Right to Object
Object to processing based on legitimate interests, including direct marketing. Marketing opt-out takes effect within 24 hours of your request.
Right to Portability
Request a structured, machine-readable copy of your personal data to transfer to another service. Available for data provided directly by you.
Right to Restrict Processing
Request restriction of processing in specific circumstances — for example, while a correction request is being verified or an objection is being assessed.
To exercise any of these rights, contact SpinWinPK at support@spinwinpk.click with the subject line "Privacy Request". Please include your registered email address and a brief description of your request. We will acknowledge receipt within 2 business days and respond substantively within 30 calendar days.
10. Children's Privacy
SpinWinPK is strictly a platform for adults aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. If a person under 18 has provided personal data to SpinWinPK — whether through a misrepresentation during registration or through any other means — that account will be closed immediately upon discovery and all associated data will be deleted as soon as reasonably practicable, except where mandatory legal retention applies.
If you are a parent or guardian and you believe your child has registered an account on SpinWinPK, please contact us immediately at support@spinwinpk.click. We will investigate and act on your report within 24 hours. SpinWinPK takes underage access to gaming platforms extremely seriously and this type of report is treated as the highest priority.
11. Security Measures
SpinWinPK implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. Key measures include:
- TLS Encryption in Transit: All data exchanged between your browser or device and SpinWinPK's servers is encrypted using TLS 1.3 as standard. Older protocol versions are not supported.
- AES-256 Encryption at Rest: Sensitive stored data — including identity documents, financial details and authentication credentials — is encrypted at rest using AES-256.
- Multi-Factor Authentication: SpinWinPK's internal systems require multi-factor authentication for all staff accessing player data. This prevents unauthorised internal access even if login credentials are compromised.
- Access Controls: Player data access within SpinWinPK is governed by role-based access controls. Staff members see only the data required for their specific role — a support agent cannot access financial transaction records that are not relevant to their assigned ticket.
- Penetration Testing: SpinWinPK's platform undergoes regular penetration testing by independent security professionals. Findings are triaged by severity and remediated on a defined schedule.
- Incident Response Plan: SpinWinPK maintains a formal security incident response plan. In the event of a data breach, the plan specifies detection, containment, notification and remediation steps — including the requirement to notify affected players within 72 hours.
While SpinWinPK takes every reasonable precaution, no online platform can guarantee absolute security. You also have a role to play — protecting your SpinWinPK login credentials, using a strong unique password and enabling any two-factor authentication options available in your account settings.
12. Changes to This Privacy Policy
SpinWinPK may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform features. When a material change is made, we will: update the version number and date at the top of this document; send a notification to your registered email address; and display a prominent notice on the SpinWinPK platform for at least 14 days before the change takes effect.
Minor clarifications or corrections that do not substantively affect how your data is processed may be made without formal notification, though the version date will always be updated to reflect any change. We encourage you to review this Privacy Policy periodically.
If you disagree with any material change to this Privacy Policy, you have the right to close your SpinWinPK account before the change takes effect by contacting support@spinwinpk.click. Continued use of SpinWinPK after a revised Policy takes effect constitutes acceptance of the updated terms.
13. Contact Us
For any questions, concerns or requests related to this Privacy Policy or SpinWinPK's data practices, please contact us through the following channels:
- Privacy Requests: support@spinwinpk.click (subject: "Privacy Request")
- General Support: Live chat within your SpinWinPK account — 24/7, response within 2 minutes
- VIP Members: Diamond and Platinum tier members may raise privacy concerns directly with their account manager
SpinWinPK acknowledges all privacy-related emails within 2 business hours and provides a substantive response within 30 calendar days. For time-sensitive requests — such as suspected unauthorised account access — please use live chat and mark your message as urgent, or call our priority support line if you are a Gold tier or above member.