vinpak Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by vinpak ("vinpak", "we", "us", "our") in connection with the vinpak platform, accessible at vinpak.net, and all associated services including casino games, sports betting markets, live dealer tables, fishing games, and financial transaction services.

This Policy applies to all registered and unregistered users of the vinpak platform, with particular relevance to players based in Pakistan who use vinpak's services via web browser or mobile device. By accessing the vinpak platform or creating an account, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside vinpak's Terms & Conditions and Responsible Gaming policy, both of which contain additional provisions relevant to how your account data is managed.

For the purposes of applicable data protection legislation, vinpak is the data controller responsible for your personal data. This means vinpak determines the purposes and means of processing your personal information.

vinpak operates under an international gaming license. As a licensed operator, vinpak is subject to data protection and anti-money laundering obligations imposed by its licensing jurisdiction, in addition to any applicable obligations arising from serving players in Pakistan.

Where vinpak engages third-party service providers to process personal data on its behalf (for example, payment processors or game providers), those parties act as data processors and are bound by contractual obligations to process data only on vinpak's instructions and in accordance with this Policy.

vinpak collects the following categories of personal data from players:

vinpak does not collect sensitive personal data (such as health information, biometric data, or political opinions) except where strictly required by responsible gaming obligations — for example, where a player discloses problem gambling concerns, this information is held confidentially and used solely to provide appropriate support.

vinpak collects personal data through the following means:

• Direct submission: Data you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or updating your account settings.
• Automated technical collection: Technical data (IP address, device information, browser data, login timestamps) collected automatically each time you access the vinpak platform via server logs and session management systems.
• Cookies and similar technologies: Session cookies, functional cookies, and analytics cookies placed on your device when you access vinpak. See Section 11 for full details.
• Third-party identity verification: During KYC checks, vinpak may use licensed identity verification services to cross-reference the documents you submit. These services process only the data necessary for the verification check.
• Payment processors: When processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, vinpak receives transaction confirmation data from these providers.

vinpak processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, game facilitation, and payment processing.
• Legal obligation: Processing required to comply with vinpak's obligations under its international gaming license, including KYC identity verification, AML transaction monitoring, responsible gaming age verification, and regulatory reporting.
• Legitimate interests: Processing necessary for vinpak's legitimate business interests, including fraud detection and prevention, platform security, abuse detection, and improving service quality — provided these interests are not overridden by your rights.
• Consent: Processing based on your specific consent, primarily for direct marketing communications. You may withdraw consent at any time through your account settings without affecting the lawfulness of prior processing.

vinpak uses the personal data we collect for the following purposes:

• Creating and managing your vinpak account and processing your registration.
• Verifying your identity and age (21+ minimum) as required by our gaming license and responsible gaming obligations.
• Processing deposits and withdrawals in PKR via supported payment methods.
• Conducting AML screening and transaction monitoring as required by our international gaming license.
• Providing customer support, responding to complaints, and managing dispute resolution.
• Monitoring gaming activity to enforce responsible gaming limits and identify potential problem gambling behaviour.
• Detecting and preventing fraud, cheating, collusion, and other prohibited conduct as defined in vinpak's Terms & Conditions.
• Improving the vinpak platform through analysis of anonymised usage patterns and technical performance data.
• Sending you transactional communications (account confirmations, deposit/withdrawal notifications, security alerts) — these are not optional as they are necessary for account management.
• Sending you promotional communications where you have opted in to receive them.

vinpak does not sell or rent your personal data to any third party. Your data is shared only in the following limited circumstances:

• Licensed game providers: Game session data is shared with the providers of the games you play (casino, fishing, slots, live dealer) to the extent necessary to facilitate gameplay, resolve disputes, and verify game integrity.
• Payment processors: Financial data is shared with payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) strictly to process your requested transactions.
• Identity verification services: Identity documents submitted for KYC are shared with licensed third-party verification providers solely for the purpose of completing the verification check.
• Regulatory and licensing authorities: vinpak may disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required by applicable law, court order, or regulatory obligation.
• Professional advisors: Legal, accounting, and auditing professionals engaged by vinpak may access limited personal data under strict confidentiality obligations.

All third parties who process personal data on vinpak's behalf are contractually bound to process that data only on vinpak's instructions, in accordance with this Privacy Policy, and to implement appropriate technical and organisational security measures.

As an internationally licensed gaming platform, vinpak may transfer your personal data to countries outside Pakistan for the purposes described in this Policy — for example, where game servers, payment processing infrastructure, or identity verification services are hosted in other jurisdictions.

Where personal data is transferred internationally, vinpak ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries recognised as providing an adequate level of data protection.
• Use of standard contractual clauses or equivalent mechanisms with receiving parties.
• Contractual obligations requiring receiving parties to apply security standards equivalent to those vinpak applies within its own systems.

For further information about the safeguards applied to international transfers of your personal data, please contact vinpak's support team.

vinpak retains personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and licensing obligations. The following retention periods apply:

• Account and identity data: Retained for a minimum of 5 years following permanent account closure, as required by vinpak's international gaming license AML obligations.
• Financial transaction records: Retained for a minimum of 5 years following each transaction, consistent with financial record-keeping obligations.
• Gaming activity logs: Retained for a minimum of 5 years to support dispute resolution and regulatory reporting.
• Customer support records: Retained for 3 years following resolution of a support interaction or complaint.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical/session data: Retained for up to 13 months for security and fraud detection purposes.

vinpak implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and vinpak's servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data (including identity documents and financial data) is stored using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised vinpak personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all staff.
• Independent security audits: vinpak's platform and data infrastructure are subject to regular independent penetration testing and security audits.
• Incident response: vinpak maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, vinpak will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

While vinpak takes all reasonable technical precautions, no internet transmission or electronic storage method is completely secure. You are responsible for maintaining the security of your vinpak account credentials and should contact support immediately if you suspect unauthorised access.

vinpak uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies while using the platform.
• Functional cookies: Remember your preferences such as your preferred language, display settings, and responsible gaming tool configurations. These persist between sessions.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the vinpak platform. This data helps us identify and fix usability issues and improve the platform experience. We do not use this data to identify individual players.
• Marketing cookies: Used only where you have opted in to receive personalised promotions. These help vinpak display relevant offers based on your gaming preferences.

You can manage non-essential cookie preferences through your browser settings. Restricting functional or analytics cookies may affect certain platform features. Clearing all cookies will log you out of your vinpak session.

Subject to applicable law and vinpak's legal obligations, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of all personal data vinpak holds about you (a "Subject Access Request"). vinpak will respond within 30 days.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. You may also update some data directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where: the data is no longer necessary for the purpose it was collected; you withdraw consent (where consent is the legal basis); or the data has been unlawfully processed. Note that legal retention obligations (see Section 9) may prevent full erasure.
• Right to Restrict Processing: Request that vinpak limits how it uses your data while a dispute is being resolved or where you contest the accuracy of data held.
• Right to Data Portability: Request your personal data in a structured, commonly used, machine-readable format for transfer to another service.
• Right to Object: Object to processing based on vinpak's legitimate interests, including direct marketing. vinpak will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, contact vinpak support at [email protected] including your registered username, a description of your request, and a copy of identity documentation confirming you are the account holder. vinpak will acknowledge your request within 5 business days and provide a substantive response within 30 days.

vinpak may send you promotional communications (email, SMS) about bonuses, new games, sports betting events, and platform news where you have opted in to receive such communications during registration or through your account settings.

You may withdraw consent for marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email.
• Updating your notification preferences in your vinpak account settings.
• Contacting vinpak support to request removal from all marketing lists.

Please note that withdrawing marketing consent does not affect your receipt of transactional communications (such as deposit confirmations, security alerts, and responsible gaming notifications), which are necessary for account management and cannot be opted out of while your account remains active.

vinpak strictly prohibits use of the platform by anyone under the age of 21. vinpak does not knowingly collect or process personal data from individuals under this age. If vinpak becomes aware that personal data has been submitted by or on behalf of an individual under 21, that account will be immediately suspended, the data investigated, and deleted where no legal obligation requires its retention.

vinpak uses age verification tools as part of the KYC process to confirm all players are 21 or older. These checks are completed before any withdrawal is processed and may be triggered at any time during the account lifecycle where vinpak has reason to doubt a player's stated age.

vinpak reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our platform services. The effective date at the top of this Policy reflects when the current version came into effect.

Material changes to this Policy will be communicated to registered players via email or prominent on-platform notification at least 14 days before taking effect. Minor amendments (such as typographical corrections or clarifications that do not alter your rights) may be made without advance notice.

Continued use of the vinpak platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The current version of this Policy is always accessible on this page.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact vinpak through the following channels:

• Email: [email protected] — mark your message "Privacy Request" in the subject line for fastest routing.
• Live Chat: Available 24/7 through the vinpak platform for general privacy questions.

vinpak will acknowledge privacy requests within 5 business days and resolve them within 30 days. For complex requests, we may extend this period by an additional 60 days with notice to you.

If you are not satisfied with vinpak's response to your privacy complaint, you have the right to escalate the matter to the data protection authority of the jurisdiction in which vinpak holds its gaming license, or to the relevant regulatory body of your country of residence. vinpak's support team can provide further guidance on escalation routes upon request.