1. Who We Are
This Privacy Policy is issued by bwin, the online casino and gaming platform accessible at bwin-play.net ("bwin," "we," "us," "our"). bwin is the data controller for all personal data collected from players who register on and use the platform.
This policy applies to all Pakistani players who access bwin through any device — desktop, mobile browser, or tablet. By registering an account or using the platform in any way, you confirm that you have read and understood this policy.
For privacy-related enquiries, contact us at: support@bwin-play.net
2. Personal Data We Collect
bwin collects the following categories of personal data from players:
| Data Category |
Examples |
Required? |
| Identity Data |
Full legal name, CNIC number, date of birth, gender |
Yes — account registration |
| Contact Data |
Pakistani mobile number, email address |
Yes — account communication |
| Financial Data |
Mobile wallet ID (Easypaisa/JazzCash), bank account for IBFT, card last 4 digits |
Yes — payment processing |
| Verification Documents |
CNIC scans, passport, utility bill, bank statement |
If KYC is triggered |
| Transaction Data |
Deposit amounts, withdrawal records, game bet history, win/loss records |
Yes — legal / AML compliance |
| Technical Data |
IP address, device type, browser, operating system, session times |
Yes — platform security |
| Usage Data |
Pages visited, games opened, session duration, features used |
Yes — platform improvement |
| Communications Data |
Support chat logs, email correspondence, live chat messages |
Yes — support quality & disputes |
Sensitive Data: bwin does not intentionally collect sensitive personal data such as health information, political views or religious beliefs. If you voluntarily provide such information in a support conversation, it will be treated with strict confidentiality and used only to resolve your query.
3. How We Collect Your Data
bwin collects personal data through several channels:
- Directly from you: When you complete the registration form, submit identity verification documents, make a deposit, request a withdrawal, use the live chat function, or contact support by email.
- Automatically through the platform: When you browse the website or use the platform, bwin's servers automatically log technical data including your IP address, device identifiers, browser type, session times and the pages or games you interact with.
- Through cookies and similar technologies: bwin uses cookies and similar tracking technologies to maintain session state, remember preferences, measure platform performance and detect suspicious activity. See Section 8 for full details of our cookie practices.
- Through payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, our payment partners may share transaction confirmation data with bwin for reconciliation and fraud prevention purposes.
- Through identity verification partners: If your account is subject to KYC verification, bwin works with licensed third-party identity verification providers who process your verification documents and return a verification outcome to bwin.
4. Why We Use Your Data (Legal Bases)
Every use of your personal data by bwin is grounded in a specific, legitimate purpose. The following table outlines how we use your data and the legal basis for each use:
- Account Creation & Management: Your identity and contact data are used to create and manage your bwin account, verify that you meet eligibility requirements, and communicate account-related information to you. Legal basis: contractual necessity.
- Payment Processing: Financial data is used to process deposits and withdrawals in PKR and to verify that payment methods belong to the account holder. Legal basis: contractual necessity and AML compliance.
- Identity Verification (KYC): Verification documents are used to confirm your identity and comply with anti-money laundering obligations. Legal basis: legal obligation.
- Fraud & Security Monitoring: Technical and usage data are used to detect fraudulent activity, account sharing, bonus abuse and suspicious betting patterns. Legal basis: legitimate interests (platform integrity and player protection).
- Customer Support: Communications data is used to respond to your support queries, resolve disputes and maintain records of player interactions. Legal basis: contractual necessity and legitimate interests.
- Platform Improvement: Anonymised and aggregated usage data is used to identify popular features, diagnose technical issues and improve the platform experience. Legal basis: legitimate interests.
- Responsible Gaming Monitoring: Transaction and session data is used to identify patterns that may indicate problem gambling and to apply responsible gaming interventions proactively. Legal basis: legal obligation and player protection.
- Marketing Communications: With your explicit consent at registration, contact data may be used to send you promotional emails and notifications about bwin offers. You may opt out at any time. Legal basis: consent.
Marketing Opt-Out: If you consented to marketing communications at registration and wish to opt out, you can do so at any time from your bwin account settings or by emailing support@bwin-play.net. Opting out of marketing does not affect essential account communications.
5. Who We Share Your Data With
bwin does not sell, rent or trade your personal data. Data is shared only with the following categories of third parties, and only to the extent necessary for the specific purpose stated:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard processing networks receive the minimum financial data required to process your transactions. These partners operate under their own privacy policies and applicable financial regulations.
- Identity Verification Providers: Licensed KYC and AML compliance providers receive identity document data when verification is required. These providers are bound by strict data handling agreements and may not use your data for any purpose other than the verification task.
- Game Technology Providers: The studios and technology providers behind bwin's live casino, crash games and other game formats may receive anonymised session and bet data for game performance monitoring. They do not receive your personal identity or contact information.
- IT and Security Service Providers: Cloud hosting, server management, cybersecurity and fraud detection providers operate bwin's technical infrastructure. These providers access data only as required to perform their services and are contractually prohibited from using it for other purposes.
- Regulatory and Law Enforcement Authorities: bwin may be legally required to share player data with relevant Pakistani authorities, financial intelligence units or law enforcement agencies in response to a lawful request, court order or regulatory obligation. bwin will comply with such requests in accordance with applicable law.
All third-party data processors engaged by bwin are required to sign data processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to maintain appropriate security standards.
6. How Long We Keep Your Data
bwin retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations.
- Account data (identity, contact): Retained for the duration of your active account plus 2 years after account closure.
- Financial and transaction records: Retained for 5 years from the date of each transaction, in accordance with AML record-keeping requirements.
- KYC verification documents: Retained for 5 years from the date of verification or account closure, whichever is later.
- Support communications: Retained for 2 years from the date of the last interaction.
- Technical and usage data (logs): Retained for 12 months from collection, after which they are deleted or fully anonymised.
- Marketing consent records: Retained for as long as you remain subscribed, plus 1 year after opt-out to evidence the consent history.
When the applicable retention period expires, bwin will securely delete or anonymise the relevant data. Anonymised data — where all identifying attributes have been removed and re-identification is not reasonably possible — may be retained indefinitely for statistical analysis and platform improvement.
7. How We Protect Your Data
bwin implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure:
- Encryption in transit: All data transmitted between your device and bwin's servers is encrypted using TLS 1.2 or higher. Connection security is verified via our SSL certificate, visible in your browser's address bar.
- Encryption at rest: Sensitive data stored on bwin's servers — including payment information and identity documents — is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data within bwin's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are trained in data handling obligations and subject to confidentiality agreements.
- Network security: bwin's infrastructure is protected by firewalls, intrusion detection systems and regular security audits. Penetration testing is conducted periodically by independent security specialists.
- Payment security: Payment data processed through bwin's platform is handled in compliance with PCI DSS (Payment Card Industry Data Security Standard) requirements for applicable payment methods.
- Incident response: bwin maintains a data breach response procedure. If a security incident occurs that affects player data, affected players will be notified promptly, as required by applicable regulations.
While bwin takes these measures seriously, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords, avoid sharing login credentials and report any suspected account compromise to support@bwin-play.net immediately.
8. Cookies & Tracking Technologies
bwin uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that allow the platform to recognise you between sessions and maintain certain preferences. The following types of cookies are used:
You can manage non-essential cookies through your browser settings. Note that disabling cookies may affect certain platform features. bwin does not use third-party advertising cookies or tracking pixels for retargeted advertising.
9. Your Data Rights
As a bwin player in Pakistan, you have the following rights over your personal data. To exercise any of these rights, contact us at support@bwin-play.net. We will respond within 30 days of receiving your request.
Right to Access
Request a copy of all personal data bwin holds about you. We'll provide it in a structured, readable format.
Right to Correction
Request correction of inaccurate data — for example, a misspelled name or outdated contact number on your account.
Right to Deletion
Request deletion of your personal data where it is no longer necessary. Note that legal retention obligations may mean some data cannot be deleted immediately.
Right to Object
Object to processing based on legitimate interests — for example, profiling for responsible gaming monitoring — where you have grounds to do so.
Right to Portability
Receive a copy of your data in a portable format so you can transfer it to another service, where technically feasible.
Right to Restrict Processing
Request that bwin limits processing of your data while a correction request or objection is being assessed.
Identity verification is required before we can action any data rights request. This protects you — we need to confirm we're disclosing or modifying data to the actual account holder rather than a third party.
10. Minors & Underage Users
bwin is strictly for individuals aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. If bwin discovers that personal data has been collected from a minor — whether through deliberate falsification of age at registration or otherwise — the account will be immediately closed, all data relating to the minor will be deleted, and any deposits will be refunded to the original payment method.
If you are a parent or guardian and have reason to believe that a person under 18 has registered on bwin, please contact us immediately at support@bwin-play.net. We take these reports seriously and will act promptly.
11. International Data Transfers
Some of bwin's service providers — including cloud infrastructure providers, identity verification partners and payment technology partners — may operate data centres or process data outside of Pakistan. Where this occurs, bwin ensures that appropriate safeguards are in place to protect your data to the same standard as applies within Pakistan.
Safeguards used for international transfers include:
- Contractual data processing agreements with all international service providers, requiring them to maintain equivalent data protection standards.
- Transfer to providers operating in jurisdictions with recognised data protection frameworks.
- Technical measures including end-to-end encryption on all transferred data.
If you have concerns about international data transfers relating to your account, please contact support@bwin-play.net and we will provide details of the specific safeguards applicable to your data.
12. Changes to This Privacy Policy
bwin reviews this Privacy Policy regularly and updates it when our data practices change or when legal requirements evolve. The "Last Updated" date at the top of this policy reflects the most recent revision.
For material changes — those that meaningfully affect your rights or how your data is used — bwin will notify registered players via email at least 7 days before the changes take effect. Minor administrative corrections (such as updated contact details or clarified wording with no substantive change to practice) may be made without individual notification, but will always be reflected in the updated "Last Updated" date.
Your continued use of the bwin platform after the effective date of any changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated policy, you should request account closure and data deletion before the effective date of changes.
