At winjj, the privacy and security of every player's personal data is treated as a core operational obligation — not an afterthought. This Privacy Policy sets out in full detail what data winjj collects, how it is used, who it may be shared with, how long it is retained, and what rights you hold over your own information. Please read this document carefully before registering a winjj account.
Six core commitments that underpin how winjj handles the personal data of every Pakistani player on the platform. These are not marketing claims — they are operational standards embedded in every system and process winjj runs.
Every connection between your device and the winjj platform is protected by 256-bit SSL/TLS encryption. Your login credentials, transaction details, CNIC data, and personal information are never transmitted in plain text. Data at rest is encrypted using industry-standard AES-256 protocols within winjj's secure infrastructure.
winjj does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Data is shared only where strictly required — such as with licensed payment processors like JazzCash and EasyPaisa for transaction handling, or with regulatory authorities under legal obligation.
winjj players retain meaningful control over their data. From within your account settings you can review your stored information, update inaccurate details, and manage marketing communication preferences at any time. Formal data subject requests are processed within the timeframes set out in this Policy.
winjj collects only the personal data that is genuinely necessary for the purposes described in this Policy — account registration, identity verification, payment processing, fraud prevention, and regulatory compliance. We do not collect data speculatively or for purposes beyond those disclosed here.
winjj's data handling practices are designed to meet the requirements of its international gaming licence and the data protection obligations applicable within that licensing jurisdiction. This includes mandatory data retention periods for AML and KYC documentation, and mandatory breach notification procedures.
Data collected on player gaming behaviour — session duration, deposit frequency, game choices — is used exclusively for responsible gaming monitoring and player protection purposes. winjj's safer gambling tools rely on this data to identify patterns of concern and trigger appropriate interventions early.
IMPORTANT: This Privacy Policy ("Policy") describes how winjj collects, uses, stores, and shares information about you when you use the winjj platform at winjj.app. By registering a winjj account or using the platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
winjj is the trading name of the operator of the online casino and sports betting platform accessible at winjj.app and its associated subdomains and applications. winjj operates under an international gaming licence and is the data controller responsible for personal data collected through the winjj platform.
For the purposes of this Policy, references to "winjj," "we," "us," and "our" refer to the winjj platform operator. References to "you," "your," and "player" refer to any individual who accesses, registers on, or uses the winjj platform in any capacity — including visitors who have not yet registered an account.
If you have any questions about this Policy or about how winjj handles your personal data, please contact the winjj Data Protection team via the contact details provided in Section 14 of this Policy.
winjj collects the following categories of personal data in connection with your use of the platform:
winjj collects personal data through the following channels and mechanisms:
The majority of data winjj holds about you is provided directly by you — during account registration, when completing KYC verification, when making deposits or requesting withdrawals, when contacting our support team, or when completing responsible gaming assessments. You are not obligated to provide this data, but winjj cannot open or maintain an account for you without it.
When you use the winjj platform — whether on desktop or mobile — technical data is automatically collected through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser type, session duration, and pages or games accessed. See Section 7 for full details of winjj's use of cookies and tracking technologies.
winjj may receive data about you from third parties in limited circumstances, including: identity verification service providers used to cross-check CNIC validity; payment processors such as JazzCash and EasyPaisa who confirm transaction status; fraud prevention and AML screening services; and publicly available sources where winjj has a legitimate interest or legal obligation to conduct background checks.
winjj uses the personal data it collects for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity data, contact details, credentials |
| Identity verification and KYC compliance | Identity data, KYC documents, device data |
| Processing deposits and withdrawals in PKR | Financial data, identity data, transaction records |
| Fraud prevention and anti-money laundering | All categories, especially financial and device data |
| Providing casino and sportsbook services | Gaming data, identity data, financial data |
| Responsible gaming monitoring and intervention | Gaming behavioural data, responsible gaming tool records |
| Customer support and complaint resolution | Communications data, identity data, transaction data |
| Marketing communications (where consented) | Contact details, gaming preferences, promotional history |
| Platform security and technical maintenance | Device data, session logs, IP data |
| Regulatory reporting and legal compliance | All categories as required by applicable law |
Marketing Communications: winjj will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, or special events if you have actively opted in to receive such communications during registration or via your account preferences. You may withdraw this consent at any time by updating your communication preferences in your account settings.
winjj relies on the following legal bases to process your personal data, consistent with the data protection framework applicable under its operating licence:
winjj does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data is shared only in the following strictly defined circumstances:
To process PKR deposits and withdrawals, winjj shares the minimum necessary transaction and identity data with its licensed payment partners — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. All payment partners are contractually bound to handle your data in accordance with applicable data protection standards and are prohibited from using your data for any purpose other than facilitating the relevant transaction.
To fulfil its KYC and AML obligations under its gaming licence, winjj shares CNIC and identity documentation with accredited third-party identity verification service providers. These providers are engaged solely to verify the authenticity and accuracy of the information you have provided and are subject to strict data processing agreements.
winjj may be required by law, regulation, court order, or under the conditions of its gaming licence to disclose personal data to regulatory bodies, law enforcement agencies, tax authorities, or other governmental entities. winjj will only disclose the minimum data necessary to comply with such requirements and will, where permitted by law, endeavour to notify the affected player of any such disclosure.
winjj shares data with specialist fraud prevention and AML screening services to identify patterns associated with financial crime, account fraud, or suspicious betting activity. Information shared for these purposes may be retained by those services and used to assist other regulated businesses in preventing fraud — meaning a fraud flag on your winjj account could be visible to other participating organisations within the screening network.
In the event of a merger, acquisition, restructuring, or sale of all or part of winjj's business, your personal data may be transferred to the acquiring or successor entity as part of that transaction. winjj will provide reasonable notice of any such transfer where permitted, and the acquiring entity will be required to honour the commitments made in this Policy.
No Third-Country Transfers Without Safeguards: Where personal data is transferred to service providers or partners located outside the licensing jurisdiction, winjj ensures that appropriate contractual safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — are in place before any transfer occurs.
The winjj platform uses cookies and similar tracking technologies to ensure proper platform functionality, enhance your user experience, and support fraud prevention and analytics. The following categories of cookies are used:
You may manage non-essential cookie preferences via the cookie settings panel accessible from the winjj platform footer. Please note that disabling certain categories of cookies may limit access to some platform features.
winjj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by its licensing and AML compliance obligations:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with winjj's internal data destruction procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
winjj implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Despite these measures, no internet-based system can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, winjj will notify you and the relevant regulatory authority within the timeframes required by applicable law.
Your Responsibility: You are responsible for maintaining the security of your winjj account credentials. winjj will never ask for your password via email, live chat, or any other channel. If you suspect your account has been compromised, contact winjj support immediately via the 24/7 live chat facility.
Subject to the data protection framework applicable under winjj's licensing jurisdiction, you hold the following rights in relation to the personal data winjj holds about you:
Request a copy of all personal data winjj holds about you. Requests are fulfilled within 30 days.
Request correction of any inaccurate or incomplete personal data held on your account.
Request deletion of your data where there is no legal obligation on winjj to retain it further.
Request that winjj restricts processing of your data in certain defined circumstances.
Receive a structured, machine-readable copy of data you provided to winjj, where technically feasible.
Object to processing based on winjj's legitimate interests, including direct marketing at any time.
To exercise any of these rights, please contact the winjj Data Protection team using the contact details in Section 14. winjj will respond to all verified data subject requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case winjj will notify you of the extension and the reasons for it. winjj will not charge a fee for standard data subject requests.
Please note that certain rights may be limited where winjj has a legal obligation to retain your data — for example, AML and KYC record-keeping requirements override the right to erasure for data held within mandatory retention periods.
The winjj platform is strictly intended for adults aged 21 and above. winjj does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory CNIC-based age verification before any real-money activity is permitted. If winjj discovers that personal data has been collected from an individual below the age of 21, that account will be immediately suspended, all data will be securely deleted, and any deposited funds will be returned through the original payment method.
If you are a parent or guardian and have reason to believe that a minor in your care has registered a winjj account, please contact winjj support immediately via the 24/7 live chat service so that the matter can be investigated and resolved without delay.
winjj is an internationally operated platform and some of the service providers and infrastructure partners that process data on winjj's behalf may be located in countries other than the one in which you reside. Where personal data is transferred to countries that may not provide a level of data protection equivalent to that of the applicable licensing jurisdiction, winjj implements appropriate safeguards including:
A list of the countries to which your data may be transferred and the safeguards in place for each transfer category is available upon written request to the winjj Data Protection team.
winjj reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, licensing requirements, business practices, or platform functionality. The version number and effective date at the top of this document will be updated with each revision.
Where changes are material — meaning they significantly affect how winjj processes your personal data or the rights available to you — winjj will provide advance notice via email to your registered address or via an in-platform notification, at least fourteen (14) days before the changes take effect. Continued use of the winjj platform after the effective date of any revision constitutes your acceptance of the updated Policy.
winjj encourages all players to review this Policy periodically. The most current version is always accessible at winjj.app/privacy-policy.
For any questions, concerns, or requests related to this Privacy Policy or the personal data winjj holds about you, please contact the winjj Data Protection team through the following channels:
If you are not satisfied with winjj's response to a data protection complaint, you may have the right to lodge a complaint with the supervisory authority relevant under winjj's licensing jurisdiction. Details of the applicable supervisory authority are available upon request from the Data Protection team.
Verification Requirement: To protect your privacy, winjj is required to verify your identity before fulfilling any data subject request. You will be asked to confirm your registered account details and may be asked to provide a copy of your CNIC before any personal data is released or modified in response to your request.
Pakistan's most trusted PKR casino and sportsbook — secure, transparent, and built for players in Karachi, Lahore, Islamabad and beyond. 21+ only. Play responsibly.
Access winjj Now Explore the Casino