gopwin Privacy Policy

gopwin is an online casino and sports betting platform operating at gopwin.app. The platform is operated by gopwin's licensed operating entity, holding an international gaming licence issued by a recognised gaming regulatory authority. References to "gopwin," "we," "us," or "our" throughout this Privacy Policy refer to that operating entity.

gopwin serves players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Peshawar. Our platform offers cricket betting, live casino games powered by Evolution Gaming, slot games, fishing arcade titles, and a range of other wagering products — all transacted in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20, and debit card.

For all privacy-related queries, please contact us at: [email protected]

gopwin collects the following categories of personal data, depending on how you interact with the platform:

gopwin collects personal data through the following means:

• Directly from you: When you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotion.
• Automatically: When you access the gopwin platform, our systems automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. See Clause 7 for full details on our use of cookies.
• From third-party payment providers: When you initiate a transaction via JazzCash, EasyPaisa, HBL, or any other accepted payment method, those providers may pass transaction reference data to gopwin to confirm payment status. We do not receive your full payment credentials from these providers.
• From identity verification partners: Where gopwin uses a third-party KYC or anti-money laundering (AML) service to verify your identity documents, that service may provide us with a verification result and associated risk flags.
• From fraud prevention services: gopwin may receive signals from fraud detection partners that flag IP addresses, device fingerprints, or behavioural patterns associated with prohibited conduct.

gopwin uses the personal data we hold about you for the following purposes:

• Account management: To register your account, authenticate your login, manage your PKR balance, and maintain your account preferences.
• Transaction processing: To process PKR deposits via JazzCash and EasyPaisa, execute withdrawal requests to your verified payment method, and maintain accurate financial records.
• KYC and AML compliance: To verify your identity as required by our international gaming licence, and to detect and prevent money laundering, fraud, and other financial crimes. This is a legal obligation we cannot waive.
• Responsible gaming: To monitor your betting patterns and activity for indicators of problem gambling, and to administer deposit limits, session limits, loss limits, and self-exclusion tools that you or gopwin may activate.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of communications for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse usage patterns, test new features, and optimise the gopwin user experience for Pakistani players — including improving the performance of cricket betting markets during PSL season.
• Security: To detect and prevent unauthorised account access, bot activity, multi-accounting, and other security threats to the platform and its users.
• Legal and regulatory compliance: To comply with obligations imposed by our licencing authority, applicable law, and any lawful request from a competent authority.
• Marketing (with consent): To send promotional communications about gopwin bonuses, PSL promotions, new game launches, and other offers — but only where you have given explicit consent and have not subsequently withdrawn it.

gopwin processes your personal data under the following legal bases, depending on the purpose:

• Contractual necessity: Processing your identity data, financial data, and transaction data is necessary to perform our contract with you — i.e., to operate your account, process your deposits and withdrawals, and settle your bets.
• Legal obligation: KYC verification, AML monitoring, and record-keeping for regulatory audit purposes are legal obligations imposed by our international gaming licence and applicable financial crime prevention standards.
• Legitimate interests: Fraud detection, security monitoring, platform analytics, and responsible gaming pattern monitoring are carried out on the basis of gopwin's legitimate interest in operating a safe, compliant, and high-quality platform. We have assessed these interests against your privacy rights and are satisfied that our use of data for these purposes is proportionate.
• Consent: Marketing communications are sent only on the basis of your explicit, freely given consent. You may withdraw marketing consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

gopwin does not sell, rent, or trade your personal data. We share data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other accepted payment partners receive the minimum transaction data required to process your PKR deposits and withdrawals.
• KYC and AML service providers: Third-party identity verification and anti-money laundering screening services that process your documents to produce a verification result. These providers are bound by strict confidentiality agreements and data processing terms.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, and others whose games are accessible via the gopwin platform may receive a session token and your account-level game history in anonymised or pseudonymised form for game performance and integrity purposes.
• Fraud prevention services: Specialised fraud detection partners who process technical and behavioural data to identify and block prohibited activity. No unnecessary personal identifiers are shared beyond what is technically required for fraud screening.
• Regulatory and legal authorities: gopwin will disclose personal data to its licencing authority, law enforcement agencies, or any court or tribunal of competent jurisdiction when legally required to do so, or when such disclosure is necessary to protect the legal rights of gopwin or its users.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of gopwin's operating entity, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer.

gopwin uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by our web server when you access the platform. Cookies allow us to recognise your browser, maintain your login session, and improve your experience.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential to the operation of the platform. They maintain your login session, remember your account preferences, and enable core platform functionality. These cookies cannot be disabled without breaking the platform.
• Performance cookies: These collect anonymised data about how players use the platform — which pages are visited most, where errors occur, and how long sessions last. This data helps gopwin identify and fix usability issues.
• Functional cookies: These remember your preferences such as language settings and display options so you do not have to reconfigure them each visit.
• Analytics cookies: gopwin uses analytics tools to understand aggregate player behaviour, inform platform improvements, and measure the effectiveness of promotional campaigns. Analytics data is processed in aggregate and does not identify you individually.

You may control cookie settings through your browser's privacy settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the gopwin platform. We do not use advertising cookies or cross-site tracking cookies that monitor your behaviour on third-party websites.

gopwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law or our licencing authority. Our standard retention periods are as follows:

• Active account data: Retained for the full duration that your gopwin account remains open and active.
• Transaction records and betting history: Retained for a minimum of five years following the date of the transaction, as required by standard financial record-keeping obligations under our international licence.
• KYC documents: Retained for a minimum of five years following account closure or the completion of the business relationship, in compliance with anti-money laundering regulations.
• Customer support communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for five years from the date consent was given or last renewed, regardless of whether you subsequently withdrew consent (the record of consent is retained even after withdrawal).
• Self-exclusion records: Retained indefinitely to prevent re-registration during an exclusion period and to support responsible gaming compliance obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with your identity.

gopwin takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS encryption: All data transmitted between your device and gopwin's servers is encrypted using current Transport Layer Security (TLS) protocols.
• Encryption at rest: Personal data and financial records stored in gopwin's databases are encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within gopwin's organisation is restricted to staff who require it to perform their job functions. Access is logged, monitored, and reviewed regularly.
• Two-factor authentication: Two-factor authentication is available and encouraged for all gopwin account holders. Internal systems handling personal data require multi-factor authentication for staff access.
• Security audits: gopwin's platform and infrastructure undergo regular security assessments, including penetration testing and vulnerability scanning, conducted by qualified third-party security professionals.
• Incident response: gopwin maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframe required by our licencing conditions.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials as described in the Terms & Conditions.

You have the following rights in relation to the personal data gopwin holds about you. To exercise any of these rights, contact us at [email protected]. We will acknowledge your request within 72 hours and respond substantively within 30 days.

gopwin's platform is strictly restricted to adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not register an account, access the platform, or provide us with any personal information.

If gopwin discovers or has reasonable grounds to suspect that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and forfeit any balance or winnings associated with that account in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has registered on gopwin, please contact us immediately at [email protected] so we can take prompt action.

gopwin will only send you marketing communications — including promotional emails, bonus notifications, PSL betting previews, and new game alerts — where you have given your explicit consent to receive them at the point of registration or at a later date.

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link in any marketing email sent by gopwin.
• Logging into your gopwin account and updating your communication preferences.
• Contacting [email protected] with a clear request to opt out of all marketing.

Withdrawal of marketing consent will be processed within five business days. Please note that withdrawing marketing consent does not affect the lawfulness of processing that took place before withdrawal, and gopwin will continue to send you transactional communications (such as deposit confirmations, withdrawal status updates, and important account notices) regardless of your marketing preferences, as these are necessary to the operation of your account.

The gopwin platform may contain links to third-party websites — for example, links to our game providers' support pages or payment partners' help centres. This Privacy Policy applies only to the gopwin platform. It does not govern the privacy practices of any third-party website you may access via a link on our platform.

gopwin is not responsible for the privacy policies, data handling practices, or content of any third-party website. We encourage you to review the privacy policy of any third-party site before providing that site with any personal data.

gopwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When we make material changes, we will notify registered account holders via email to the address on file and display a prominent notice on the platform for at least 30 days following the update.

The effective date at the top of this policy reflects the date of the most recent version. We encourage you to review this policy periodically. Continued use of the gopwin platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data gopwin holds about you, please contact our data privacy team:

• Email: [email protected]
• Response time: Acknowledgement within 72 hours; substantive response within 30 days
• Operating hours: Pakistan Standard Time (PST / UTC+5)

If you are not satisfied with gopwin's response to a privacy-related complaint, you may escalate your concern to the relevant supervisory authority under our licencing jurisdiction. Details of the applicable supervisory authority are available on request.

gopwin takes all privacy complaints seriously. Every complaint is logged, reviewed by a qualified team member, and responded to with a full written explanation of our findings and any remedial action taken.