vinpk Privacy Policy – How We Handle Your Personal Data

1. Data Controller

1.1 The data controller responsible for the personal information collected via the vinpk platform is the operating entity behind vinpk.app (referred to throughout this Policy as "vinpk", "we", "us" or "our"). If you require specific details regarding the registered entity, please contact us at the address set out in Section 12.

1.2 vinpk processes personal data in order to operate the platform, provide gaming and betting services, process financial transactions, comply with applicable legal and regulatory obligations, and maintain a safe and secure environment for all users.

2. Categories of Personal Data We Collect

2.1 vinpk collects and processes the following categories of personal data, depending on your interaction with the platform:

2.2 vinpk does not knowingly collect data classified as "special category" data (e.g., health, biometric or racial data) except where expressly required by law or where you voluntarily provide it in connection with a responsible gaming request.

3. How We Collect Your Data

3.1 Directly from you: when you register an account on vinpk, complete your KYC submission, make a deposit or withdrawal, contact customer support, or fill out any form on the platform.

3.2 Automatically: through cookies, log files and similar technologies when you access the vinpk website. This includes your IP address, device information and browsing behaviour on the platform.

3.3 From third parties: vinpk may receive information from payment processors (such as JazzCash or Easypaisa) to confirm transaction details, or from identity verification service providers to complete KYC checks in accordance with applicable compliance obligations.

4. Purposes and Legal Basis for Processing

4.1 vinpk processes your personal data for the following purposes and on the following legal bases:

• Account administration and service delivery – necessary for the performance of a contract with you (i.e., the Terms & Conditions you agreed to on registration).
• Payment processing and fraud prevention – necessary for the performance of a contract and for our legitimate interests in preventing financial crime.
• KYC and identity verification – necessary to comply with our legal and regulatory obligations regarding anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Responsible gaming monitoring – necessary for compliance with responsible gaming obligations and to protect users' vital interests.
• Customer support – necessary for the performance of a contract and for our legitimate interest in resolving disputes and maintaining service quality.
• Platform security and abuse prevention – necessary for our legitimate interest in maintaining a safe platform for all users.
• Marketing communications – based on your consent, where you have opted in to receive promotional emails or notifications from vinpk. You may withdraw consent at any time.
• Analytics and platform improvement – necessary for our legitimate interests in understanding how the platform is used in order to improve it.

5. Sharing of Personal Data

5.1 vinpk does not sell, rent or trade your personal data to third parties. We may share your data with the following categories of recipient, strictly on a need-to-know basis:

• Payment processors – JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard/UnionPay processors and USDT infrastructure providers, solely to facilitate deposits and withdrawals.
• Identity verification providers – third-party KYC service providers who assist in verifying your identity documents against authoritative sources.
• Game technology providers – studios and platform providers (e.g., Pragmatic Play, Evolution) may receive session and user identifiers as part of game integration. They do not receive your full identity data.
• Legal and regulatory authorities – we may disclose data to law enforcement, regulatory bodies or courts where required by applicable law or legal process.
• Professional advisers – lawyers, auditors and insurers, under obligations of confidentiality, where necessary for our business operations.

5.2 Any third party receiving your data is required to handle it securely and only for the specified purpose. vinpk does not authorise third parties to use your data for their own marketing purposes.

6. Data Retention

6.1 vinpk retains personal data for as long as your account is active and for a period thereafter as required by our legal, regulatory and operational obligations. Typical retention periods are as follows:

• Account and identity data: retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML recordkeeping requirements.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• Support communications: retained for up to three (3) years from the date of the interaction.
• Usage and analytics data: typically retained in anonymised or aggregated form beyond the account relationship period.

6.2 Where data is no longer required for the purposes for which it was collected, and no legal obligation requires its retention, vinpk will securely delete or anonymise it.

7. Security Measures

7.1 vinpk implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and vinpk servers.
• Hashed and salted password storage — passwords are never stored in recoverable plain text.
• Role-based access controls limiting staff access to personal data to those with a defined operational need.
• Two-factor authentication available for account access.
• Regular security assessments and monitoring for suspicious activity.

7.2 No system is completely immune to attack. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, vinpk will notify affected users and relevant authorities in accordance with applicable legal requirements.

8. Cookies and Tracking Technologies

8.1 vinpk uses cookies and similar technologies to operate the platform, remember your preferences and analyse how the platform is used. The categories of cookies used are:

• Strictly Necessary Cookies: required for the platform to function. These include session cookies that keep you logged in and security cookies. They cannot be disabled.
• Functional Cookies: remember your preferences (e.g., language, currency display). Disabling these may affect platform functionality.
• Analytics Cookies: collect anonymised data about how visitors use the site (pages visited, session length). Used to improve platform performance.

8.2 You may adjust your cookie preferences through your browser settings. Blocking all cookies may prevent certain parts of the vinpk platform from working correctly.

9. Your Data Rights

9.1 Subject to applicable law, you have the following rights in relation to your personal data held by vinpk:

• Right of access: you may request a copy of the personal data vinpk holds about you.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations.
• Right to restrict processing: you may request that vinpk limits how your data is processed in certain circumstances.
• Right to data portability: where processing is based on consent or contract and carried out automatically, you may request a machine-readable copy of your data.
• Right to withdraw consent: where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: you may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes.

9.2 To exercise any of these rights, please contact vinpk support. We will respond to verified requests within 30 days. We may need to verify your identity before processing certain requests.

10. Minors

10.1 The vinpk platform is strictly for users aged 18 and above. vinpk does not knowingly collect personal data from persons under the age of 18. If we become aware that a minor has provided personal data or registered an account, we will immediately close the account and delete all associated data.

10.2 If you believe a minor has registered or used the vinpk platform, please notify us immediately via support so that we can take appropriate action.

11. Changes to This Privacy Policy

11.1 vinpk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices or applicable legal requirements. Where changes are material, we will notify registered users by email or via a prominent notice on the platform before the changes take effect.

11.2 The date of the most recent revision is shown at the top of this page. Continued use of the vinpk platform after the effective date of any update constitutes acceptance of the revised Policy.

12. Contact

12.1 If you have any questions, concerns or requests relating to this Privacy Policy or the way vinpk handles your personal data, please contact our support team:

Email (plain text – not a link): [email protected]

12.2 You may also use the 24/7 live chat facility available on the vinpk platform. Our team will respond to privacy-related queries as a priority.