wowpk Privacy Policy — How We Handle Your Personal Data

wowpk is an online gaming and sports betting platform ("the Platform") operated under an international gaming licence. For the purposes of this Privacy Policy, wowpk acts as the data controller — meaning we determine the purposes and means of processing your personal data. Where we engage third-party processors (such as payment gateway providers or game studios), we do so under contractual obligations that bind those processors to data protection standards consistent with this policy.

This Privacy Policy applies to all personal data collected through the wowpk website, mobile browser application, customer support interactions (live chat, email, and phone), and any promotional or loyalty programme communications. It applies to all registered and prospective players, including Pakistani players accessing wowpk from Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and all other locations.

wowpk collects the following categories of personal data from players, depending on the stage of their interaction with the platform:

wowpk does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data, except where health-related data is voluntarily provided in the context of responsible gaming support (for example, a self-declared gambling problem disclosed when requesting self-exclusion).

wowpk collects personal data through the following channels:

• Direct provision by you: When you register for a wowpk account (providing your Pakistani mobile number, name, and date of birth), complete KYC verification (uploading identity documents), make deposits or withdrawal requests, contact our support team, or update your account settings.
• Automated technical collection: When you access the wowpk platform, we automatically record technical data including your IP address, browser type and version, operating system, device identifiers, pages visited, time spent on each section, and click patterns. This data is collected via server logs and, where applicable, first-party cookies and session storage.
• Payment processors: When you deposit via JazzCash, EasyPaisa, Raast, 1LINK, or bank transfer, we receive transaction confirmation data from the relevant payment gateway — including the sending mobile number or account reference and the transaction amount. We do not receive your JazzCash MPIN or full banking credentials.
• Third-party game providers: Game studios providing content to wowpk's platform (such as Microgaming and Pragmatic Play) share anonymised game session data for the purposes of RTP reporting, fair play monitoring, and technical dispute resolution. These providers do not receive your personal identity data unless required for a specific regulatory audit.
• Anti-fraud and AML systems: wowpk employs third-party anti-money laundering (AML) and fraud detection tools that may cross-reference registration data against publicly available watchlists, sanctions lists, and PEP (Politically Exposed Persons) databases as required by our licensing obligations.

wowpk processes personal data for the following specific purposes:

4.1 Account Creation and Management

To register your wowpk account, verify your Pakistani mobile number via OTP, maintain your login credentials, and allow you to access the platform's full services including casino games, sports betting, and the wowpk Casino section.

4.2 Payment Processing

To process your JazzCash deposits, EasyPaisa top-ups, bank transfer withdrawals, and cryptocurrency transactions. Financial data is processed by our licensed payment partners and retained for reconciliation, tax reporting, and audit trail purposes.

4.3 Identity Verification and KYC Compliance

To verify your identity documents (CNIC, passport) in compliance with our licensing authority's Know Your Customer requirements and international anti-money laundering regulations. This process is required before processing withdrawals above defined thresholds and may be required at any time for regulatory compliance purposes.

4.4 Responsible Gaming Monitoring

To monitor gaming patterns and identify behaviour that may indicate problem gambling — for example, unusually rapid deposit sequences, frequent large bet sizes relative to historical averages, or self-exclusion requests. This monitoring is conducted in furtherance of wowpk's responsible gaming obligations and may result in the platform initiating supportive contact or imposing account restrictions in the player's interest.

4.5 Customer Support

To respond to your queries, resolve disputes, process complaints, and deliver technical support. Support communications may be recorded and retained for quality assurance and dispute resolution purposes.

4.6 Security and Fraud Prevention

To detect, investigate, and prevent unauthorised account access, bonus abuse, match fixing, money laundering, and other prohibited activities. wowpk's security systems may analyse login patterns, IP addresses, and transaction behaviour to identify anomalous activity.

4.7 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates via SMS to your registered Pakistani mobile number — but only where you have opted into receiving such communications. You may withdraw your marketing consent at any time by contacting support or updating your account notification settings.

4.8 Legal and Regulatory Compliance

To comply with our international gaming licence obligations, financial intelligence unit (FIU) reporting requirements, and any lawful request from competent governmental or regulatory authorities.

wowpk processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil the contract between wowpk and the player — including account registration, payment processing, game delivery, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements imposed by our gaming licence, financial intelligence reporting obligations, and mandatory data retention periods.
• Legitimate Interests: Processing conducted to serve wowpk's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, responsible gaming monitoring, and internal business analytics.
• Consent: Processing of data for optional purposes where we have obtained your explicit consent — principally marketing communications sent to your Pakistani mobile number. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

wowpk does not sell personal data to any third party. We share personal data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment Processors: JazzCash (Jazz/Mobilink), Telenor's EasyPaisa, Raast (State Bank of Pakistan's instant payment system), 1LINK, HBL, UBL, Meezan Bank, and cryptocurrency wallet processors — for the purpose of executing deposits and withdrawals.
• Game Content Providers: Licensed game studios supplying casino games to wowpk's platform. Anonymised session data may be shared for RTP verification and game performance monitoring.
• Identity Verification Services: Third-party KYC providers who verify the authenticity of identity documents submitted during the wowpk account verification process.
• AML / Fraud Detection Providers: Third-party services that screen transactions and account details against sanctions lists, PEP databases, and known fraud indicators, as required by our licensing obligations.
• Cloud Infrastructure Providers: Hosting and data storage providers on whose infrastructure wowpk's platform and databases operate. These providers are bound by data processing agreements and do not access or use player data for any independent purpose.
• Legal and Regulatory Authorities: Competent governmental bodies, regulatory agencies, courts, or law enforcement authorities where disclosure is required by applicable law, court order, or our gaming licence terms. wowpk will notify affected players of such disclosures to the extent permitted by law.
• Professional Advisors: Legal counsel, auditors, and accountants, where necessary for obtaining professional advice or in connection with legal proceedings, subject to professional confidentiality obligations.

wowpk operates as an internationally licensed platform, and some of our data processors — including game content providers, cloud infrastructure partners, and KYC verification services — may be located in jurisdictions outside Pakistan. When personal data is transferred to recipients in countries that do not have data protection laws equivalent to internationally recognised standards, wowpk implements appropriate safeguards including:

• Standard contractual clauses (SCCs) adopted or approved by relevant data protection authorities, binding the recipient to data protection obligations consistent with this Policy.
• Binding corporate rules where the recipient is part of a group subject to group-wide data protection policies.
• Adequacy decisions where the recipient country has been determined by relevant authorities to provide an adequate level of data protection.

You may request details of the specific safeguards applied to any international transfer of your personal data by contacting wowpk's Data Protection Officer using the contact details in Section 15.

wowpk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and compliance obligations. Our general retention periods are as follows:

• Account Registration Data: Retained for the duration of your active wowpk account plus 1 year following account closure, unless a longer period is required for compliance reasons.
• Financial Transaction Records: Retained for a minimum of 7 years following each transaction date, in accordance with standard financial record-keeping requirements applicable to licensed gaming operators.
• KYC / Identity Verification Documents: Retained for a minimum of 5 years following the KYC check, or 5 years following account closure — whichever is later — as required by AML regulations applicable to licensed operators.
• Gaming History: Retained for 5 years following each game session, for the purposes of dispute resolution and regulatory audit compliance.
• Customer Support Communications: Retained for 2 years following resolution of the relevant support interaction, or longer if the matter relates to an ongoing dispute or investigation.
• Marketing Consent Records: Retained for the duration of your wowpk account plus 1 year, to provide evidence of consent or withdrawal of consent in the event of a complaint.

When data reaches the end of its retention period, it is securely deleted or anonymised such that it can no longer be associated with any individual player. Where data has been anonymised, it may be retained indefinitely for aggregate statistical analysis.

As a wowpk player, you have the following rights in relation to your personal data. These rights may be subject to certain limitations where legal obligations, regulatory requirements, or the rights of third parties take precedence.

To exercise any of the above rights, contact wowpk's Data Protection Officer using the details in Section 15. Requests are responded to within 30 days. Identity verification may be required before a data rights request can be processed. There is no fee for submitting a data rights request.

The wowpk platform uses cookies and similar tracking technologies to operate effectively, maintain your login session, and enhance your gaming experience. We use only first-party cookies — we do not embed third-party advertising tracking cookies or cross-site tracking pixels on the wowpk platform.

10.1 Essential Session Cookies

These cookies are strictly necessary for the wowpk platform to function. They maintain your logged-in state during a session, remember your language preference, and prevent session hijacking. These cookies cannot be disabled without preventing you from using the platform.

10.2 Security Cookies

Used to detect fraudulent logins, bot activity, and cross-site request forgery (CSRF) attempts. These cookies contain cryptographic tokens that are validated server-side and do not contain personally identifiable information in readable form.

10.3 Functional Cookies

Used to remember your preferences — such as your last visited game category, table bet size preferences, and notification settings — to provide a personalised wowpk experience on return visits. These cookies may be disabled without preventing basic platform access, though some personalisation features will not function.

10.4 Analytics Cookies

Used to collect anonymised, aggregated data about how players navigate the wowpk platform — which game sections are most visited, how long players spend in the sportsbook versus the casino, and which deposit method is selected most frequently. This data informs product improvements and is never used to identify individual players.

The wowpk platform is strictly intended for persons aged 21 years of age and above. wowpk does not knowingly collect personal data from individuals under the age of 21. The registration process includes a date-of-birth field, and wowpk verifies that the stated age meets the minimum requirement before completing registration.

Where wowpk discovers or is notified that a person under 21 years of age has provided personal data in connection with a wowpk account, we will immediately close that account, delete all associated personal data (subject to any legal obligation to retain evidence of the underage access), forfeit any balance, and void any winnings. If you believe that a minor in your household has registered for or accessed wowpk, please notify our support team immediately via live chat.

wowpk implements a multi-layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in Transit: All data exchanged between your browser or mobile device and wowpk's servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by Pakistani banking applications like HBL and UBL online banking.
• Encryption at Rest: Sensitive data fields stored in wowpk's databases — including identity documents, financial account references, and contact details — are encrypted at rest using AES-256 encryption.
• Password Security: Player passwords are never stored in plaintext. They are hashed using the bcrypt algorithm with sufficient cost factors to resist brute-force attacks. wowpk staff cannot retrieve or view player passwords.
• Two-Factor Authentication: Players are offered optional two-factor authentication via OTP to their registered Pakistani mobile number. This additional security layer is recommended for all players and is mandatory for accounts requesting large withdrawals.
• Access Controls: Access to personal data by wowpk personnel is restricted on a strict need-to-know basis using role-based access controls. All internal access to player data is logged and audited.
• Penetration Testing: wowpk's systems are subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no digital platform can guarantee absolute security. You play an important role in protecting your own data by choosing a strong, unique password for wowpk, enabling two-factor authentication, and logging out from shared devices after use.

The wowpk platform may, in the ordinary course of its operation, interact with third-party services including payment processors (JazzCash, EasyPaisa), game content provider platforms, and identity verification services. While wowpk selects its third-party partners carefully and binds them to data protection obligations through contractual agreements, wowpk does not control and is not responsible for the privacy practices of third-party services that you access independently outside of the wowpk platform.

This Privacy Policy applies solely to personal data collected and processed by wowpk directly or through its contracted data processors. It does not extend to third-party websites, applications, or services that you may access independently, including JazzCash's own application, your bank's online portal, or any other service.

wowpk reviews this Privacy Policy at least quarterly, and updates it whenever there are material changes to our data practices, changes in applicable data protection law, or changes to our platform's data processing activities. The effective date at the top of this document reflects when the current version came into force.

Where changes are material — for example, if we were to start processing a new category of personal data, share data with a new category of recipient, or change our retention periods — we will notify registered players via SMS to their registered Pakistani mobile number prior to the changes taking effect, providing a summary of what has changed and why.

Continued use of the wowpk platform following notification of an updated Privacy Policy constitutes your acceptance of the revised version. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting wowpk support.

For all privacy-related enquiries, data rights requests, data breach reports, or questions about this Privacy Policy, please contact wowpk's designated Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat icon on the wowpk platform. Request to be connected to the Data Protection team when prompted.
• Email: support wowpk biz — mark your message subject line as "Privacy / DPO Request" for priority routing. Responses within 5 business days for general enquiries; within 30 days for formal data rights requests.
• Support Ticket: Submit a formal ticket through the wowpk Help section within your account. Privacy and data rights tickets are routed to the DPO team automatically when the "Data Privacy" category is selected.

wowpk is committed to working cooperatively with data protection regulators. If you are unsatisfied with our response to a privacy complaint, you have the right to raise the matter with the relevant supervisory authority in your jurisdiction. Details of applicable regulatory bodies are available upon request from the DPO.