waywin Privacy Policy

This Privacy Policy ("Policy") describes how waywin ("waywin", "we", "us", "our") collects, processes, stores, and protects the personal information of users ("you", "your", "Player") who access and use the waywin platform at waywin.app, including all associated gaming, betting, payment, and customer support services.

waywin is committed to handling your personal data with the utmost care, transparency, and respect for your rights. This Policy is written in plain English so that every Pakistani player — whether in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in the country — can understand exactly how their data is being handled and what choices they have.

This Policy should be read alongside the waywin Terms & Conditions, which together constitute the full legal agreement between you and waywin. By registering an account or using the waywin platform, you acknowledge that you have read and understood this Policy.

waywin is the data controller responsible for your personal information in connection with the waywin platform. The platform is operated by the waywin group of companies, licensed under an international gaming regulatory framework. For the purpose of this Policy, all references to "waywin" encompass the operating entity and its authorised data processors acting on its behalf.

All data processing activities described in this Policy are carried out under the authority of waywin's international gaming license, which imposes specific obligations regarding KYC, AML, and data protection that waywin is legally required to fulfil. These obligations directly shape the types of data waywin collects and the purposes for which it is used.

waywin collects personal data across several categories, each serving a specific and defined purpose:

waywin does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where directly relevant to a responsible gaming self-assessment voluntarily completed by a player.

waywin collects personal data through the following channels:

• Direct Registration: Information you provide when creating your waywin account, completing KYC verification, or updating your account profile;
• Platform Usage: Data generated automatically as you use the waywin platform — including your betting activity, game sessions, and account interactions;
• Payment Processors: Transaction reference data received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and other payment partners when you make deposits or withdrawals;
• Identity Verification Partners: Confirmation data returned from our licensed KYC verification service providers when processing your identity documents;
• Support Interactions: Information you provide when contacting waywin via live chat or email support;
• Technical Tracking: Cookies and similar technologies that record your browser session, device information, and navigation behaviour on the waywin platform (see Section 8 for full details);
• Third-Party Fraud Prevention: Risk signals shared by licensed fraud prevention services to help waywin protect all players from account compromise and financial fraud.

waywin processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and waywin — including account management, payment processing, and delivery of gaming services;
• Legal Obligation: Processing required to comply with waywin's obligations under its international gaming license, AML regulations, and data protection law — including KYC verification and transaction record-keeping;
• Legitimate Interests: Processing that serves waywin's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights;
• Consent: Processing that requires your explicit opt-in consent, specifically the sending of marketing communications via email and SMS. You may withdraw this consent at any time without affecting the lawfulness of any prior processing.

waywin uses the personal data collected for the following purposes, each of which is tied to a defined legal basis:

• Creating and managing your waywin player account;
• Processing deposits and withdrawals in PKR through your chosen payment method;
• Verifying your identity and age (21+) to comply with gaming license requirements;
• Conducting AML checks and fulfilling financial crime reporting obligations;
• Detecting and preventing fraud, account takeover, and other security incidents;
• Providing customer support via live chat and email;
• Administering and resolving disputes related to bets, games, or account balances;
• Personalising your gaming experience on the waywin platform;
• Administering responsible gaming tools including deposit limits, loss limits, and self-exclusion;
• Sending you transactional communications (deposit confirmations, withdrawal notifications, security alerts) — these are not marketing and cannot be opted out of while your account is active;
• Sending you promotional communications about waywin bonuses and offers — subject to your marketing consent;
• Analysing platform usage to improve waywin's products and services;
• Complying with requests from competent regulatory or law enforcement authorities.

waywin does not sell, rent, or trade your personal data. Data is shared with third parties only in the following strictly defined circumstances:

• Payment Processors: Transaction reference data is shared with JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and cryptocurrency processors as necessary to execute your deposit and withdrawal transactions. These processors are bound by their own regulatory obligations and data protection requirements;
• KYC & Identity Verification Partners: Identity documents submitted for verification are processed by licensed identity verification service providers under strict data processing agreements. These providers act as data processors on waywin's behalf and are contractually prohibited from using your data for any other purpose;
• Fraud Prevention Services: Risk-related technical data including IP addresses may be shared with licensed fraud prevention services to protect waywin's platform and all its players from financial crime;
• Game Content Providers: Anonymised or pseudonymised session data is shared with third-party game studios to ensure proper game function and RNG certification. Your full personal identity is not disclosed to game providers;
• Regulatory and Law Enforcement Authorities: waywin will disclose personal data to competent regulatory authorities, licensing bodies, or law enforcement agencies where legally required to do so or where disclosure is necessary to prevent serious crime;
• Legal and Professional Advisers: Personal data may be disclosed to waywin's legal counsel, auditors, or compliance consultants under strict confidentiality obligations where required for the administration of the business.

All third parties with whom waywin shares data are required to respect the security of your personal data and to treat it in accordance with applicable law. waywin does not permit third-party service providers to use your data for their own marketing or commercial purposes.

waywin uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device that help waywin recognise returning users, maintain session security, and understand how the platform is being used.

The types of cookies used by waywin include:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking the platform's core functionality;
• Functional Cookies: Remember your preferences such as language selection, display settings, and responsible gaming tool configurations to provide a personalised experience on return visits;
• Analytics Cookies: Collect anonymised data about how users navigate the waywin platform — which pages are visited most, how long sessions last, and where users encounter difficulty. This data is used solely to improve the platform experience;
• Security Cookies: Help waywin detect and prevent fraudulent account activity, bot traffic, and other security threats by analysing behavioural patterns across sessions.

waywin does not use third-party advertising or tracking cookies from ad networks or social media platforms. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your waywin account.

waywin employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Transport Encryption: All data transmitted between your browser or device and waywin's servers is encrypted using TLS 1.3 — the same standard used by major international banks;
• Encryption at Rest: Personal data and KYC documents stored in waywin's systems are encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within waywin is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks and regular data protection training;
• Two-Factor Authentication: waywin supports and encourages the use of two-factor authentication (2FA) on player accounts as an additional layer of security against unauthorised access;
• Regular Security Audits: waywin's platform and data infrastructure are subject to regular independent security assessments and penetration testing;
• Incident Response: waywin maintains a documented data breach response procedure. In the event of a confirmed security incident involving your personal data, affected players will be notified promptly with details of the incident and the steps waywin has taken to contain and remediate it.

Whilst waywin takes every reasonable precaution, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their waywin account and to enable 2FA to minimise personal risk.

waywin retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law and regulatory obligations. The following retention periods apply:

• Account Data: Retained for the duration of the active account relationship and for a minimum of five years following account closure, as required by AML regulations;
• KYC Documents: Retained for a minimum of five years from the date of verification, in compliance with anti-money laundering record-keeping requirements;
• Transaction Records: Retained for a minimum of five years from the date of each transaction to satisfy financial crime compliance obligations;
• Customer Support Records: Live chat transcripts and support email correspondence are retained for three years from the date of the interaction, to support dispute resolution;
• Gaming Activity Logs: Bet history and game session records are retained for three years to support regulatory reporting and responsible gaming reviews;
• Marketing Data: Email and SMS marketing consent records and associated data are deleted within 30 days of consent withdrawal or account closure, whichever is earlier;
• Technical / Analytics Data: Anonymised platform usage data is retained in aggregated form for up to two years for the purpose of service improvement.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual.

waywin respects your rights over your personal data. The following rights are available to all waywin players:

To exercise any of the above rights, please contact the waywin support team via live chat or by sending a written request to [email protected] (plain text — not a clickable link). waywin will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

Please note that the right to erasure is subject to waywin's legal retention obligations under AML and gaming regulations. waywin cannot delete records it is legally required to retain, however such data will be flagged as closed-account data and will not be used for any ongoing processing beyond regulatory compliance.

waywin sends marketing communications only to players who have given their explicit consent to receive them at the point of registration or subsequently through their account settings. Marketing communications may include promotional offers, bonus announcements, new game notifications, and sports betting alerts relevant to Pakistani players.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in the waywin account settings panel;
• Clicking the unsubscribe link included in any marketing email from waywin;
• Contacting waywin support via live chat and requesting removal from all marketing communications.

Withdrawal of marketing consent will be processed within five business days. Withdrawing marketing consent does not affect your ability to use the waywin platform or to receive transactional communications (such as deposit confirmations and withdrawal notifications), which are sent as a necessary part of the service and are not subject to marketing consent.

waywin does not purchase or use third-party marketing lists. All marketing is directed only at existing registered players who have consented to receiving it.

waywin's age verification process, conducted as part of KYC compliance, is specifically designed to identify and prevent underage access. Where waywin has reasonable grounds to believe that a player is under the age of 21, the account will be suspended immediately and no funds will be released pending age verification.

If you are a parent or guardian and you believe that a minor in your care has accessed the waywin platform and provided personal data, please contact waywin support immediately. waywin will investigate the matter promptly, close any underage account identified, and securely delete all associated data in accordance with applicable law.

waywin encourages parents and guardians in Pakistan to use internet filtering tools to prevent underage access to online gaming platforms.

The waywin platform may contain links to third-party websites, including payment processor portals and responsible gaming resource pages. waywin is not responsible for the privacy practices of any third-party website and this Policy does not extend to any website that is not directly operated by waywin.

When you navigate away from the waywin platform to a third-party site — including JazzCash, EasyPaisa, or any bank portal — the privacy practices of that third party will govern the handling of any data you provide on their platform. waywin recommends that you review the privacy policy of any third-party site you visit.

waywin operates under an international gaming license and uses infrastructure and service providers that may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and stored in countries other than Pakistan.

Where such transfers occur, waywin ensures that adequate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy. Safeguards may include contractual data protection clauses, adequacy decisions, or the data protection standards imposed by the applicable gaming regulatory framework.

By using the waywin platform, you acknowledge and consent to such cross-border transfers of your personal data as described in this section.

waywin reserves the right to update or amend this Privacy Policy at any time. The current version of this Policy, along with its effective date and version number, will always be published on this page. Where changes to the Policy are material — meaning they significantly affect your rights or how waywin processes your data — waywin will notify registered players via the registered email address or through a prominent notice on the platform prior to the changes taking effect.

Your continued use of the waywin platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with any amendment, you should cease using the platform and may request account closure by contacting the support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or waywin's handling of your personal data, you may contact the waywin support team through the following channels:

• Live Chat: Available 24/7 directly from the waywin Platform. Average response time is 3–5 minutes. Live chat is the fastest channel for urgent privacy queries.
• Email: [email protected] (plain text — not a clickable link). Email responses are provided within one business day during normal operating conditions.

If you wish to make a formal data protection complaint, please address it to the attention of the waywin Data Protection Officer via the email address above. waywin commits to acknowledging all formal complaints within 48 hours and providing a substantive response within 15 business days.

If you are not satisfied with waywin's response to your data protection complaint, you have the right to escalate the matter to the data protection authority in the jurisdiction where waywin holds its gaming license, or to seek independent legal advice.