wowpak Privacy Policy

wowpak ("we", "us", "our") is committed to protecting and respecting the privacy of all individuals who use our platform at wowpak.org. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by wowpak. It applies to all services offered through the wowpak platform, including the sportsbook, live casino, slot games, King of Fishing arcade, and all associated account and payment services.

This policy is written in plain English so that players across Pakistan — whether you are in Karachi, Lahore, Faisalabad, or Islamabad — can clearly understand how your information is handled. Where legal terminology is unavoidable, we have provided explanations alongside it.

This policy should be read alongside the wowpak Terms & Conditions, which govern the overall contractual relationship between you and wowpak. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy matter, this Privacy Policy shall take precedence.

wowpak collects only the personal data that is necessary for the operation of the platform, compliance with legal obligations, and delivery of services to you. The categories of personal data we collect are as follows:

wowpak does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity document verification under KYC regulations.

wowpak collects personal data through the following means:

• Direct interactions: Data you provide when registering your wowpak account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to surveys or promotions.
• Automated technologies: When you access the wowpak platform, we automatically collect Technical Data and Usage Data through server logs, session cookies, and analytics tools. This data is collected to maintain platform security and improve user experience.
• Third-party payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, or Mastercard, our payment service partners share transaction confirmation data with wowpak for the purpose of crediting or debiting your account balance in PKR. Full card or wallet credentials are never transmitted to wowpak.
• Identity verification partners: wowpak works with certified KYC service providers to verify identity documents. These partners return a verification result to wowpak; the document images themselves are handled under strict data protection controls.

wowpak processes personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual necessity: Processing that is required to fulfil our contractual obligations to you as a registered wowpak player — including operating your account, processing deposits and withdrawals in PKR, and settling bets.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, international gaming licence conditions, and any lawful orders from regulatory or law enforcement authorities.
• Legitimate interests: Processing that is necessary for the legitimate business interests of wowpak, where those interests are not overridden by your fundamental rights. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics for platform improvement.
• Consent: Where we rely on your consent — for example, sending optional promotional communications about wowpak bonuses, PSL betting offers, or casino promotions — you may withdraw that consent at any time by contacting [email protected] or updating your notification preferences within your account settings.

wowpak uses the personal data we hold about you for the following specific purposes:

• To create, verify, and maintain your wowpak account, including processing your registration and confirming your identity and age (21+) through KYC procedures.
• To process deposits and withdrawals in PKR through your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, Visa, or Mastercard.
• To operate and settle sportsbook bets on cricket, PSL, football, UFC, and other covered events, and to manage casino and slot game sessions.
• To communicate with you about your account — including transaction confirmations, security alerts, KYC requests, and support responses.
• To monitor betting and gaming activity for the purposes of responsible gaming intervention, including detecting signs of problem gambling and activating protective tools where appropriate.
• To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and any other prohibited conduct as described in the wowpak Terms & Conditions.
• To personalise your experience on the wowpak platform, including surfacing relevant promotions and game recommendations based on your activity — but only where you have not objected to such personalisation.
• To fulfil our obligations under applicable gaming regulations, including record-keeping, audit trails, and reporting to relevant regulatory authorities where required by law.

wowpak does not sell, rent, or trade your personal data. We share your information only in the following limited and controlled circumstances:

• Payment service providers: We share the minimum necessary data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks to process your PKR transactions. These providers are contractually bound to use your data only for payment processing.
• KYC and identity verification providers: Certified third-party KYC partners receive your identity document data solely to perform age and identity verification. They are prohibited from retaining or using your data for any other purpose.
• Game software providers: When you play casino or slot titles on wowpak, the certified software provider's system processes the game session. These providers receive a session token and stake value but not your full personal profile.
• Fraud prevention and security services: wowpak shares Technical Data and flagged transaction data with fraud detection partners to protect the integrity of the platform and the safety of our player community.
• Regulatory and law enforcement authorities: wowpak will disclose personal data to competent regulatory bodies or law enforcement agencies where required to do so by applicable law, court order, or gaming licence conditions. wowpak will notify affected players of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of wowpak's business or assets, personal data held by wowpak may be transferred to the acquirer, subject to the same privacy protections described in this policy.

All third parties with whom wowpak shares personal data are required to implement appropriate technical and organisational security measures and are permitted to use your data only for the specific purpose for which it was shared.

wowpak uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by our web server. The cookies used by wowpak fall into the following categories:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account state, and prevent cross-site request forgery. You cannot opt out of these cookies without ceasing to use the platform.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the wowpak platform — such as which pages are visited most frequently and how long sessions last. This data is used exclusively for internal platform optimisation. wowpak does not share analytics data with advertising networks.
• Functionality cookies: These remember your preferences — such as your preferred language and notification settings — to provide a more personalised experience across visits.
• Fraud prevention cookies: These track device fingerprint signals to help detect and block fraudulent account activity and multi-accounting attempts.

You can control and manage cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging into or using the wowpak platform. Disabling other categories will not affect your ability to place bets or play games, but may reduce personalisation features.

wowpak retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and gaming regulations. The following retention periods apply:

• Account and identity data: Retained for a minimum of 5 years following account closure, as required under international AML and gaming licence regulations. This includes KYC documents, account registration details, and transaction history.
• Betting and gaming records: Retained for 5 years post-account closure for regulatory audit and dispute resolution purposes.
• Communications data: Support correspondence and chat transcripts are retained for 2 years from the date of the last interaction, or longer if the communication relates to an open dispute or regulatory investigation.
• Technical and usage data: Server logs and anonymised analytics data are retained for 12 months from collection, after which they are deleted or fully anonymised.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account relationship plus 3 years, to demonstrate compliance in the event of a regulatory query.

Where retention beyond the standard periods is required for an active legal proceeding, regulatory investigation, or unresolved dispute, data will be held until the matter is fully resolved, after which standard deletion procedures will apply.

wowpak implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and wowpak's servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that wowpak staff can only access personal data to the extent necessary for their specific job function.
• Two-factor authentication (2FA) required for all wowpak administrative system access.
• Regular independent penetration testing and vulnerability assessments of the wowpak platform infrastructure.
• Automated anomaly detection systems that flag unusual access patterns for immediate security review.

In the event of a personal data breach that poses a risk to your rights and freedoms, wowpak will notify the relevant supervisory authority within 72 hours of becoming aware of the breach and will communicate directly with affected players without undue delay where required.

As a wowpak player, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting [email protected] with the subject line "Data Rights Request":

wowpak will respond to all data rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for exercising your data rights unless requests are manifestly unfounded or excessive.

wowpak enforces a strict minimum age requirement of 21 years for all registered players. The wowpak platform is not directed at, and does not knowingly collect personal data from, persons under the age of 21.

Age verification is a mandatory step in the wowpak account registration and KYC process. Where wowpak discovers or is notified that a person under the age of 21 has successfully registered an account, the following actions will be taken immediately:

• The account will be suspended and access to the platform revoked.
• All deposits made by the underage player will be returned to the originating payment method.
• Any winnings accumulated during the period of underage access will be forfeited.
• All personal data associated with the account will be securely deleted, except where retention is required for regulatory reporting purposes.

wowpak operates under international gaming regulations and may process or store personal data on servers located outside of Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as Pakistan, wowpak implements appropriate safeguards to ensure your data remains protected, including:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with all data processors handling transferred data.
• Transfers only to countries or organisations that have been assessed as providing an adequate level of data protection by the relevant supervisory body.
• Technical controls ensuring that data transferred internationally is subject to the same encryption standards as data processed domestically.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting [email protected].

The wowpak platform integrates services from certified third-party providers to deliver the full range of features available to players. These providers include payment gateways, game software studios, KYC verification services, and platform security tools. Each provider is vetted for data protection compliance before integration.

wowpak is not responsible for the privacy practices of third-party websites or services that are not directly operated by wowpak. This Privacy Policy applies solely to data processing activities conducted by or on behalf of wowpak. Players should review the privacy policies of any third-party service they interact with independently of the wowpak platform.

wowpak does not embed social media tracking pixels, third-party advertising SDKs, or affiliate tracking scripts that share your personal data with external parties without your explicit consent.

wowpak reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulations, or platform features. When material changes are made, we will notify registered players via the email address on file or through a prominent notice on the wowpak platform, at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. The effective date at the top of this document indicates when the current version was last updated. Continued use of the wowpak platform after the effective date of any update constitutes your acknowledgement of the revised policy.

Previous versions of the wowpak Privacy Policy are archived and available on request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact wowpak using the details below. All privacy-related communications should be sent in English.

This Privacy Policy was last updated and became effective on 1 January 2026. This version supersedes all previous wowpak Privacy Policy documents.