epiwin Privacy Policy

1. Introduction

1.1 epiwin is committed to protecting the privacy and personal data of all users who interact with the Platform. This Policy explains in plain terms what personal information epiwin processes, why we process it, how long we keep it, and what rights you have over your data.

1.2 epiwin processes personal data only to the extent necessary to provide a safe, compliant, and high-quality gaming and betting experience for Pakistani players. We do not sell personal data to third parties and we do not use it for purposes unrelated to operating the Platform.

1.3 Where this Policy refers to "personal data" or "personal information", we mean any information that identifies or could reasonably be used to identify you as an individual — including your name, CNIC number, mobile number, email address, payment account details, and device identifiers.

2. Data We Collect

2.1 Registration Data. When you create an epiwin account, we collect your full name, date of birth, email address, Pakistani mobile number, and chosen username and password. This information is required to create and administer your account.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and to verify that you are at least 18 years of age, epiwin collects copies of government-issued identity documents (such as your Pakistani CNIC), proof of address, and in certain circumstances proof of payment method ownership.

2.3 Financial Data. We collect details of your deposits and withdrawals including payment method type (e.g., JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), transaction amounts in PKR, and transaction reference numbers. We do not store full bank account numbers or mobile wallet PINs.

2.4 Usage & Gaming Data. We automatically collect data about how you use the Platform, including game sessions played, bets placed, sports markets accessed, session duration, login timestamps, and responsible gaming settings you have applied.

2.5 Technical Data. We collect your IP address, browser type and version, operating system, device type, and referral URL. This data is collected automatically when you access the Platform and is used for security monitoring, fraud prevention, and performance optimisation.

2.6 Communications Data. If you contact epiwin support, we retain records of those communications — including chat logs and email correspondence — for quality assurance, dispute resolution, and compliance purposes.

3. How We Use Your Data

3.1 epiwin uses your personal data for the following purposes:

• Creating and administering your epiwin account;
• Processing deposits and PKR withdrawal requests;
• Verifying your identity and age (18+ enforcement);
• Detecting and preventing fraud, money laundering, and other prohibited conduct;
• Operating responsible gaming tools including self-exclusion and limit-setting;
• Providing customer support and resolving disputes;
• Sending transactional communications (account notifications, security alerts, withdrawal confirmations);
• Sending promotional communications where you have opted in to receive them;
• Improving Platform performance and user experience through aggregated analytics;
• Complying with legal and regulatory obligations applicable to epiwin.

3.2 epiwin does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where required for fraud detection, in which case you may request human review of any such decision by contacting support.

4. Legal Basis for Processing

4.1 epiwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account and fulfil our obligations under the epiwin Terms & Conditions;
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements, and other applicable regulatory obligations;
• Legitimate interests: Processing for fraud prevention, security monitoring, and improving Platform performance, where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time by updating your marketing preferences in account settings.

5. Data Sharing & Disclosure

5.1 epiwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 We may share your personal data with the following categories of recipients, strictly as necessary to operate the Platform:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah and their processing networks, to facilitate deposits and withdrawals;
• Identity verification providers: Third-party KYC services that assist in document verification and age checking;
• Game content providers: Software providers whose games appear on the epiwin Platform may receive anonymised session data necessary to deliver game content;
• Fraud prevention services: Services that assist epiwin in detecting and preventing fraudulent activity;
• Legal authorities: Law enforcement, regulatory authorities, or courts where disclosure is required by law or where epiwin is legally compelled to do so.

5.3 Where epiwin shares data with third-party service providers, those providers are contractually obligated to process your data only as instructed by epiwin and to maintain appropriate security standards.

6. Cookies & Tracking Technologies

6.1 epiwin uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and collect usage analytics. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without breaking core functionality such as your login session.
• Functional cookies: Remember your language preferences, responsible gaming settings, and other personalisation choices.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform, which helps us improve performance and usability.

6.2 You can control non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the Platform but will limit epiwin's ability to identify and address usability issues.

7. Data Retention

7.1 epiwin retains your personal data for as long as your account is active and for a period following account closure as required by applicable anti-money laundering and financial record-keeping laws. In general:

• Account and KYC data is retained for a minimum of 5 years following account closure;
• Transaction records are retained for a minimum of 5 years from the date of each transaction;
• Support communications are retained for 3 years;
• Technical and usage logs are retained for 12 months.

7.2 Where personal data is no longer required for any lawful purpose, epiwin securely deletes or anonymises it.

8. Your Rights

8.1 Subject to applicable law, you have the following rights regarding your personal data held by epiwin:

• Right of access: Request a copy of the personal data epiwin holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements;
• Right to restrict processing: Request that epiwin limits the processing of your data in certain circumstances;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: Object to processing carried out on the basis of legitimate interests, including direct marketing.

8.2 To exercise any of these rights, contact epiwin support with your account details and a clear description of your request. epiwin will respond within 30 days. Verification of your identity will be required before any data is disclosed or modified.

9. Data Security

9.1 epiwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the epiwin Platform;
• Hashed storage of passwords — epiwin never stores your password in readable form;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and monitoring of the Platform infrastructure;
• Two-step verification available for all epiwin accounts to prevent unauthorised login.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, epiwin will notify affected users as required by applicable law and will take immediate steps to contain the breach and mitigate its impact.

10. Third-Party Services

10.1 The epiwin Platform integrates third-party game content and payment processing services. When you interact with these services — for example by playing a game hosted by a third-party provider or initiating a JazzCash transaction — those third parties may process technical data necessary to deliver the service.

10.2 epiwin is not responsible for the privacy practices of third-party services. You should review the privacy policies of any third-party payment provider you use in connection with the epiwin Platform.

10.3 The epiwin Platform does not embed third-party social media tracking pixels or advertising networks that would share your browsing behaviour with unrelated external parties.

11. Children's Privacy

11.1 The epiwin Platform is strictly for users aged 18 years and above. epiwin does not knowingly collect personal data from individuals under the age of 18. If epiwin becomes aware that a user account has been created by a person under 18, that account will be immediately closed and all associated data handled in accordance with applicable law.

11.2 If you believe a minor has accessed the epiwin Platform using your account or otherwise, contact epiwin support immediately.

12. Changes to This Policy

12.1 epiwin may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. The date of the most recent revision is indicated at the top of this page.

12.2 Where changes to this Policy are material, epiwin will provide reasonable notice through the Platform or by email to your registered address. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes.

13. Contact Us

13.1 If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how epiwin handles your personal data, please contact our support team.

13.2 Support contact: [email protected] (plain text — not a clickable link). Please include your account username and a clear description of your request or concern. epiwin aims to respond to all privacy-related enquiries within 5 business days.