Your privacy matters to us. This Privacy Policy explains exactly what personal data Winli collects, why we collect it, how we use and protect it, and what rights you have over your information as a player on our platform.
These cards summarise the key principles of our Privacy Policy. They are not a substitute for reading the full policy below — but they give you a clear picture of our approach upfront.
We collect the data needed to operate your account securely: your name, date of birth, email address, CNIC or passport details for KYC, payment method information, betting history and device/session data. We collect only what is necessary and do not sell your data to third parties.
All data in transit is encrypted using TLS/HTTPS. Sensitive information — including payment details and identity documents — is stored with industry-standard encryption at rest. Access to personal data is restricted to authorised personnel only and is logged for audit purposes.
You have the right to access, correct, export and request deletion of your personal data. You can withdraw marketing consent at any time. Requests are processed within the timeframes required by applicable data protection law. Contact support via Live Chat or by email to exercise your rights.
We share data only with trusted service providers essential to platform operation — payment processors, KYC verification services, fraud prevention tools and analytics providers. We do not sell personal data. All third-party processors are bound by strict data processing agreements.
Winli uses cookies and similar technologies to keep your session active, remember your preferences and measure platform performance. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.
We retain your personal data for as long as your account is active and for the period required by applicable AML, KYC and financial regulations after account closure — typically a minimum of five years. After the retention period expires, data is securely deleted or anonymised.
This Privacy Policy ("Policy") describes how Win li ("Winli", "we", "us", "our") collects, uses, stores, shares and protects personal data submitted by users ("you", "your") of the online gaming and sports betting platform accessible at winli.cam (the "Platform").
By registering an account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of, and should be read alongside, our Terms & Conditions and Responsible Gambling Policy.
Winli is committed to handling your personal data with care, transparency and respect. We process data only for legitimate, specified purposes and implement appropriate safeguards to protect your information against unauthorised access, loss or misuse.
In this Policy, the following terms carry the meanings set out below:
Winli is the Data Controller for all personal data collected and processed through the Platform. As Data Controller, Winli determines what data is collected, the purposes for which it is processed and the measures applied to protect it.
Where Winli engages third-party service providers to process data on its behalf — such as payment processors, identity verification services or analytics platforms — those parties act as Data Processors under written agreements that bind them to Winli's data protection standards and restrict their use of personal data to the specific services contracted.
For all privacy-related enquiries, data subject access requests or complaints, please contact Winli's support team using the details provided in Section 17 of this Policy.
Winli collects the following categories of personal data:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, gender, CNIC / passport number | Account registration, KYC verification, age verification |
| Contact Data | Email address, phone number, residential address | Account communications, support, KYC compliance |
| Financial Data | Payment method details, transaction history, deposit/withdrawal records | Payment processing, AML compliance, fraud prevention |
| KYC Documents | Scanned CNIC, passport, driving licence, utility bill, bank statement | Identity verification, regulatory compliance |
| Betting & Gaming Data | Wager history, game play records, win/loss data, bonus usage | Service delivery, responsible gambling monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Pages visited, features used, click paths, session duration | Analytics, UX improvement, personalisation |
| Communications Data | Live Chat transcripts, support emails, survey responses | Customer service, quality assurance, record keeping |
The majority of personal data we hold is provided directly by you when you:
When you access the Platform, certain technical and usage data is collected automatically through cookies, server logs and similar technologies. This includes your IP address, device identifiers, browser type, referring URLs and the sequence of pages visited during your session.
Winli may receive data about you from authorised third-party sources, including identity verification service providers, fraud screening databases, payment processors and, where applicable, responsible gambling registers. Data received from third parties is handled with the same level of care as data collected directly from you.
Winli processes personal data on the basis of one or more of the following lawful grounds, depending on the specific purpose:
Winli uses the personal data we collect for the following purposes:
Winli shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include identity verification and KYC providers, payment processors, fraud detection services, cloud hosting providers, analytics platforms and customer support tools. All such providers are bound by data processing agreements that restrict their use of your data to the specific services contracted.
Winli may disclose personal data to regulatory bodies, law enforcement authorities, licensing authorities, financial intelligence units or courts where required to do so by applicable law, court order or regulatory direction. Such disclosures may include reporting suspicious transactions under AML obligations without prior notice to the user concerned.
In the event of a merger, acquisition, corporate restructuring or sale of all or part of Winli's business, personal data held by Winli may be transferred to the acquiring or succeeding entity, subject to the same privacy protections described in this Policy. Users will be notified of any material change to data controller identity in advance.
Winli does not sell, rent or trade your personal data to any third party for their independent marketing or commercial purposes. Period.
Winli operates internationally and some of the third-party service providers we engage may process personal data in jurisdictions outside of Pakistan or the operator's primary jurisdiction. Where personal data is transferred to a country that does not provide an equivalent level of data protection, Winli ensures appropriate safeguards are in place, which may include:
You may request further information about the safeguards applicable to any specific international transfer by contacting Winli's support team.
Cookies are small text files stored on your device when you access the Platform. They allow the Platform to recognise your browser across requests within a session or between sessions, enabling features such as staying logged in, remembering preferences and measuring how pages are used.
| Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens — required for the Platform to function | Session |
| Functional | Remembering language preferences, odds format, display settings | Up to 12 months |
| Analytics | Measuring page visits, feature usage and performance to improve the Platform | Up to 24 months |
| Marketing | Tracking interactions with promotional content to personalise offers (only with consent) | Up to 12 months |
You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair core Platform functionality, including the ability to log in and maintain a session. Disabling analytics or marketing cookies will not affect your ability to use the Platform's core features.
Winli retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory minimum retention periods. The table below sets out our general retention approach:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account, plus minimum 5 years after closure (AML/KYC requirement) |
| Financial transaction records | Minimum 5 years from date of transaction |
| KYC documents | Minimum 5 years after account closure |
| Betting and gaming history | Duration of account, plus minimum 5 years after closure |
| Support communications | 3 years from date of communication |
| Technical and usage logs | Up to 13 months from collection |
| Marketing consent records | Until consent is withdrawn, plus 3 years as proof of consent |
| Self-exclusion records | Duration of exclusion plus 7 years |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.
Subject to applicable data protection law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data held by Winli:
Request a copy of the personal data we hold about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no overriding legal basis to retain it.
Request that processing of your data be restricted while accuracy or lawfulness is reviewed.
Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including direct marketing at any time.
Request human review of any solely automated decision that significantly affects you.
Withdraw consent for marketing or other consent-based processing at any time without penalty.
To exercise any of these rights, contact Winli's support team via Live Chat or by email at [email protected]. We will acknowledge your request promptly and respond within the timeframe required by applicable law. In some cases, we may need to verify your identity before processing a request.
With your consent, Winli may send you promotional communications about bonuses, sports betting offers, new game launches and other Platform news. These communications may be delivered by email, SMS or in-Platform notification, depending on your preference settings.
You may withdraw your marketing consent and unsubscribe from all marketing communications at any time by:
Opting out of marketing does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, security alerts and account management messages — which are sent based on contractual necessity and cannot be disabled.
Where a user has activated a cool-off period, deposit limit or self-exclusion, Winli will immediately suspend all promotional marketing to that account for the duration of the measure. Marketing suppression in responsible gambling contexts takes precedence over any previously granted marketing consent.
Winli implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Key measures include:
All data exchanged between your device and the Platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire Platform with HTTP Strict Transport Security (HSTS) enabled.
Sensitive data — including KYC documents, payment details and account credentials — is encrypted at rest using industry-standard algorithms. Access keys are managed through secure key management systems.
Access to personal data is granted on a strict need-to-know basis using role-based access control (RBAC). All internal access to personal data is logged and regularly audited.
Winli operates continuous security monitoring with automated alerting for anomalous access patterns. In the event of a data breach, affected users will be notified in accordance with applicable legal requirements.
Despite these measures, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying Winli immediately if you suspect any unauthorised access to your account.
The Platform is strictly for adults aged 18 years or older — or the higher minimum age required by the applicable operator/license jurisdiction. Winli does not knowingly collect personal data from any person under the minimum eligible age.
Age verification is conducted as part of the registration and KYC process. Where Winli discovers or is notified that personal data has been collected from an under-age user, the account will be immediately suspended, all funds returned (less any winnings, which will be forfeited), and all personal data associated with that account will be deleted as promptly as legally permissible.
Winli reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law or the services we offer. Where changes are material, we will provide advance notice by email to your registered address and/or by displaying a prominent notice on the Platform, at least 14 days before the updated Policy takes effect.
Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and contact support to request account closure before the effective date.
The current version of this Privacy Policy is always available at winli.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please reach out to the Winli support team through the channels below:
Available 24/7 directly through the Platform. Live Chat is the fastest route for privacy queries, data subject access requests and urgent account concerns. English and Urdu assistance available.
Send privacy-related requests to: [email protected]. Please include your registered email address and a brief description of your request. This address is plain text and is not a clickable link.
We aim to acknowledge all privacy requests within 72 hours and to respond in full within the period required by applicable law. Complex requests — such as full data subject access requests — may take longer, in which case we will keep you informed of progress.
You have read how Winli collects, uses and protects your personal data. Explore the platform with confidence — transparent odds, deep Pakistan cricket coverage, familiar payment references and responsible gambling tools built in from the start.
🔞 18+ only, or higher where required by the operator/license jurisdiction. Local laws may restrict gambling. Winli does not claim Pakistani government authorisation.