This Privacy Policy ("Policy") is issued by eipwin ("we", "us", "our"), the operator of the online gaming platform accessible at eipwin.net (the "Platform"). It describes our practices regarding the collection, processing, storage, and disclosure of personal data belonging to individuals ("Users", "Players", or "you") who register accounts or interact with the eipwin Platform. By creating an eipwin account or otherwise accessing the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree, please discontinue use of the Platform immediately.
1. Introduction & Scope
This Policy applies to all personal data processed by eipwin in connection with the Platform's services, including but not limited to account registration and management, identity verification (KYC), financial transactions, customer support interactions, promotional activities, and general platform usage analytics. It covers data collected via the eipwin website, any associated mobile-optimised interfaces, and direct communications between players and eipwin staff.
eipwin takes the privacy and security of player data seriously. We process personal data only for legitimate, clearly defined purposes and apply appropriate technical and organisational safeguards to protect it at all times. This Policy is intended to be transparent and accessible — if any part is unclear, our support team is available around the clock to assist.
2. Data Controller
eipwin is the data controller responsible for the personal data processed under this Policy. As data controller, eipwin determines the purposes for which personal data is collected and the means by which it is processed. All data subject rights requests, privacy inquiries, and related correspondence should be directed to eipwin using the contact details set out in Section 15 of this Policy.
Where eipwin engages third-party processors — including payment gateway operators (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification providers, and game software suppliers — eipwin remains responsible for ensuring that such processors operate under appropriate data protection obligations and handle player data in a manner consistent with this Policy.
3. Data We Collect
eipwin collects the following categories of personal data, depending on the nature of your interaction with the Platform:
3.1 Registration & Identity Data
- Full legal name as it appears on your government-issued identification;
- Pakistani National Identity Card (CNIC) number or passport number;
- Date of birth (used to verify the 21+ age requirement);
- Registered Pakistani mobile number (primary account identifier);
- Email address (where provided);
- Residential address.
3.2 Financial & Transaction Data
- JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or debit card account identifiers used for deposits and withdrawals;
- Transaction amounts, dates, and reference numbers in PKR;
- Account balance history and wagering records;
- Bonus claims and wagering requirement completion records.
3.3 KYC Verification Documents
- Scanned or photographed copies of CNIC or valid passport;
- Proof of address documents (utility bills, bank statements);
- Payment method ownership evidence;
- Selfie or video verification images where requested.
3.4 Platform Usage & Technical Data
- IP address, device type, operating system, and browser type;
- Login timestamps, session durations, and geolocation data (at city level);
- Pages visited, games played, bet amounts, and navigation patterns;
- Cookies and similar tracking technologies (see Section 6).
3.5 Communications Data
- Records of live chat sessions with eipwin support staff;
- Email correspondence submitted to [email protected];
- Feedback, complaint, and dispute records.
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Identity & Registration | Account management, KYC compliance | Duration of account + 5 years |
| Financial & Transaction | Payment processing, fraud prevention, audit | 7 years (regulatory requirement) |
| KYC Documents | Age and identity verification | Duration of account + 5 years |
| Platform Usage & Technical | Service optimisation, security monitoring | Up to 24 months |
| Communications | Support quality, dispute resolution | 3 years from last interaction |
4. How We Use Your Data
eipwin uses personal data for the following purposes:
- Account creation and management: Registering your eipwin account, maintaining account records, and authenticating your identity at login;
- KYC and age verification: Confirming that all players are at least 21 years of age and verifying the identity information provided at registration;
- Payment processing: Facilitating PKR deposits via JazzCash, EasyPaisa, and linked bank accounts, and processing withdrawal requests to verified payment methods;
- Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and bonus abuse through transaction monitoring and behavioural analysis;
- Regulatory compliance: Meeting eipwin's obligations under applicable international gaming licensing requirements, including anti-money laundering (AML) and know-your-customer (KYC) mandates;
- Customer support: Responding to account queries, resolving disputes, and providing technical assistance;
- Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour and providing appropriate intervention tools or notifications;
- Platform improvement: Analysing usage patterns to improve the eipwin user experience, game selection, and interface performance;
- Marketing communications: Sending promotional information, bonus offers, and platform updates to players who have consented to receive such communications (see Section 13).
5. Legal Basis for Processing
eipwin processes personal data on the following legal bases, in accordance with applicable international data protection law:
- Contractual necessity: Processing required to perform the eipwin User Agreement — including account registration, payment processing, and game provision — is carried out on the basis that it is necessary for the performance of a contract with you;
- Legal obligation: Processing carried out to comply with eipwin's AML, KYC, and responsible gaming obligations under applicable licensing requirements;
- Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics where eipwin's interests do not override your fundamental privacy rights;
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent that may be withdrawn at any time.
6. Cookies & Tracking Technologies
eipwin uses cookies and similar tracking technologies to operate the Platform effectively and to improve the user experience. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impacting core Platform functionality;
- Performance & Analytics Cookies: Collect anonymised data about how players interact with the eipwin Platform — pages visited, time spent, error events — to help us improve service quality;
- Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limits you have set;
- Marketing Cookies: Used, with your consent, to personalise promotional content and bonus offers relevant to your activity on eipwin.
You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some eipwin Platform features. Cookie consent settings can also be updated at any time via the cookie preference centre accessible from the eipwin Platform footer.
7. Data Sharing & Third Parties
eipwin does not sell your personal data to third parties for commercial marketing purposes under any circumstances. Your personal data may, however, be shared with the following categories of third parties under strict confidentiality and data protection obligations:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and debit card processing networks — to facilitate PKR deposits and withdrawals;
- KYC and identity verification providers: Third-party services contracted to verify CNIC documents and confirm player identity in compliance with AML/KYC requirements;
- Game software providers: Licensed game developers whose products are hosted on the eipwin Platform may receive the minimum data necessary to operate game sessions (e.g., player ID, wager amounts);
- Regulatory and licensing authorities: Data may be disclosed to the relevant licensing body or competent authorities in response to lawful requests, investigations, or regulatory audits;
- Legal and professional advisors: Lawyers, auditors, and accountants engaged by eipwin under strict professional confidentiality obligations;
- Fraud prevention agencies: Industry fraud prevention and anti-money laundering databases where required under eipwin's licensing obligations.
8. International Data Transfers
eipwin's servers and some of its third-party processors may be located outside Pakistan. Where personal data is transferred internationally, eipwin takes appropriate measures to ensure that such transfers are subject to adequate safeguards consistent with internationally recognised data protection standards. These safeguards may include contractual clauses binding receiving parties to data protection obligations equivalent to those described in this Policy, or reliance on the receiving jurisdiction's recognised adequacy status.
Where your data is processed by payment processors such as JazzCash or EasyPaisa, such processing occurs within their own established infrastructure. eipwin maintains data processing agreements with these providers setting out the permissible scope and manner of data processing.
9. Data Retention
eipwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the overriding requirements of applicable law and our licensing obligations. The general retention periods applicable to each data category are set out in the table in Section 3. Key principles governing retention include:
- Transaction and financial records are retained for a minimum of seven (7) years in accordance with standard anti-money laundering and financial record-keeping requirements;
- Identity and KYC documents are retained for a minimum of five (5) years following account closure;
- Upon expiry of applicable retention periods, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to a specific individual;
- Retention periods may be extended where eipwin is required to preserve data in connection with ongoing legal proceedings, regulatory investigations, or unresolved disputes.
10. Security Measures
eipwin implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure:
- 256-bit SSL/TLS encryption applied to all data in transit between your device and eipwin's servers;
- Encrypted storage of sensitive data at rest, including KYC documents and financial records;
- Access controls: Personal data is accessible only to eipwin staff who require it to perform their job functions, subject to formal role-based access permissions;
- Two-factor authentication options for player accounts via JazzCash and EasyPaisa OTP;
- Continuous security monitoring of the Platform for anomalous login behaviour, unauthorised access attempts, and suspicious transaction patterns;
- Regular security assessments and penetration testing of Platform infrastructure by qualified third-party specialists;
- Incident response procedures enabling eipwin to identify, contain, and notify affected parties in the event of a confirmed data security incident.
11. Your Privacy Rights
As a data subject, you hold the following rights in relation to your personal data processed by eipwin. To exercise any of these rights, please contact us using the details in Section 15:
- Right of access: You may request a copy of the personal data eipwin holds about you, along with information about how it is being used;
- Right to rectification: You may request correction of any inaccurate or incomplete personal data in your eipwin account;
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
- Right to restrict processing: You may request that eipwin suspend processing of your data in certain circumstances while a dispute or objection is under review;
- Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format;
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
eipwin will respond to all valid data subject requests within thirty (30) calendar days of receipt. In cases of complexity or volume, we may extend this period by a further thirty days, with notice given to you. We do not charge a fee for exercising any of the above rights unless requests are manifestly unfounded or excessive.
12. Children & Minors
eipwin's Platform is strictly intended for adults aged 21 years and above. eipwin does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is conducted at registration and may be supplemented by documentary KYC checks at any subsequent point.
13. Marketing Communications
eipwin may send you promotional communications — including bonus offers, game announcements, and platform updates — via your registered mobile number or email address, subject to the following conditions:
- Marketing communications are sent only to players who have opted in during registration or subsequently via their account settings;
- You may unsubscribe from marketing communications at any time by contacting eipwin support or by updating your communication preferences from your account dashboard;
- Transactional communications — such as deposit confirmations, withdrawal notifications, account verification messages, and security alerts — are not marketing communications and will be sent regardless of marketing opt-in status, as they are necessary for account management;
- eipwin does not share your contact details with third-party marketing organisations.
14. Changes to This Privacy Policy
eipwin reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, Platform features, applicable legal requirements, or licensing conditions. Where material changes are made to this Policy, eipwin will endeavour to notify registered players via their registered mobile number or email address, and will publish the updated Policy on this page with a revised effective date. Your continued use of the eipwin Platform following publication of any revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this Policy periodically.
15. Contact Us
For all privacy-related enquiries, data subject rights requests, or complaints regarding eipwin's data practices, please contact our Data Protection team using the following details:
- Email: [email protected] — please use the subject line "Privacy Request" for data subject rights matters
- Live Chat: Available directly on the eipwin Platform, 24 hours a day, 7 days a week
- Response Commitment: Privacy enquiries are acknowledged within 48 hours; substantive responses provided within 30 calendar days
This Privacy Policy was last reviewed and updated on 1 January 2026. Prior versions are archived and available upon written request.