Epiwin Privacy Policy

1. Introduction

Epiwin ("the Platform," "we," "us," "our") is committed to protecting the privacy and security of all personal information it holds about registered players and website visitors. This Privacy Policy sets out, in plain terms, what personal data we collect, the reasons we collect it, how it is processed and stored, with whom it may be shared, how long we keep it, and what rights you have in relation to your own data.

This policy applies to all use of the Epiwin website at epiwin.onl and the Epiwin Android application, as well as all gaming, betting and account management services accessible through those channels. It should be read alongside our Terms and Conditions, which govern the overall relationship between you and the platform.

If you have questions about anything in this policy, or if you want to exercise any of your data rights, please contact our support team through the live chat on the website or app, or by email at the address shown in the footer of this page.

2. Data We Collect

The personal information Epiwin collects falls into the following categories:

Category	Examples	Why Collected
Identity Data	Full name, date of birth, CNIC number (where required for verification)	Account registration and age/identity verification
Contact Data	Email address, mobile number	Account communications, security alerts, support
Financial Data	JazzCash / Easypaisa mobile number, bank account details, transaction history	Processing PKR deposits and withdrawals
Technical Data	IP address, device type, browser, operating system	Security, fraud prevention, platform optimisation
Usage Data	Games played, bets placed, session duration, login history	Platform improvement, responsible gaming monitoring
Verification Documents	Identity document images submitted during KYC	Account verification and withdrawal processing

We do not collect sensitive personal data beyond what is specifically required for identity verification purposes. We do not collect data about your racial or ethnic origin, political opinions, religious beliefs or health information.

3. How We Collect Your Data

Epiwin collects personal data through the following means:

• Registration: When you create an Epiwin account, you provide your name, date of birth, email address and mobile number directly to us.
• Account verification: When you submit identity documents as part of the KYC (Know Your Customer) process, those documents are received and stored by our compliance team.
• Deposits and withdrawals: When you make a PKR deposit via JazzCash, Easypaisa, Raast or another supported method, the transaction details are recorded in your account history.
• Platform use: As you use the Epiwin website or app, technical data such as your IP address, device information and session data is automatically recorded by our systems.
• Support interactions: When you contact our support team via live chat or email, the content of those communications is retained for quality assurance and dispute resolution purposes.
• Cookies and similar technologies: The Epiwin website uses cookies to maintain your session, remember your preferences and analyse how the platform is used. See the Cookies section below for more detail.

4. How We Use Your Data

All personal data collected by Epiwin is used for specific, stated purposes. We do not use data in ways that are incompatible with the purpose for which it was collected. The main uses of your data are:

• Account management: To create, maintain and secure your Epiwin account, process your login, and keep your account information up to date.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and other supported payment methods.
• Identity verification: To verify that you are who you say you are, that you meet the minimum age requirement of 18, and that your payment methods belong to you.
• Fraud prevention and security: To detect and prevent fraudulent activity, duplicate accounts, money laundering and other misuse of the platform.
• Customer support: To respond to your enquiries, resolve disputes and provide assistance with your account or transactions.
• Platform improvement: To understand how players use the platform, identify issues and improve the gaming and betting experience across the website and app.
• Responsible gaming: To monitor gaming behaviour patterns that may indicate problem gambling and to apply responsible gaming tools where appropriate.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates — only where you have not opted out of such communications.
• Legal and compliance obligations: To meet any obligations required of us under applicable laws or regulations.

5. Payment Data and PKR Transactions

Because all Epiwin transactions are conducted in Pakistani Rupees (PKR), the payment data we process relates primarily to local payment methods including JazzCash, Easypaisa, Raast, bank accounts and debit or credit cards. The following points are important to understand about how payment data is handled:

• Epiwin records transaction metadata — including the amount, date, payment method type and transaction reference — for every deposit and withdrawal processed through your account.
• Full mobile wallet credentials (such as JazzCash or Easypaisa PINs) and full card numbers are never stored by Epiwin. Payment authentication is handled by the payment provider's own secure systems.
• Your payment method details are used only to process transactions you have initiated and to verify that payment methods belong to you as part of the withdrawal verification process.
• Transaction records are retained for the period required by our financial record-keeping obligations. See the Data Retention section for details.

All payment processing is conducted over encrypted connections. If you have a question about a specific transaction, contact our support team through live chat and have your transaction reference ready.

6. Sharing Data with Third Parties

Epiwin does not sell your personal data. We share data with third parties only where it is necessary to operate the platform and only under strict conditions. The categories of third parties with whom data may be shared are:

• Payment processors: JazzCash, Easypaisa, Raast, banks and card networks receive the payment data necessary to process your PKR transactions. These providers operate under their own privacy and security frameworks.
• Game providers: Third-party game studios that supply Slot Games, Live Casino and other titles accessible through the Epiwin Game Lobby may receive session and gameplay data necessary to deliver and maintain the game experience.
• Identity verification services: Where we use a third-party KYC provider to assist with document verification, your identity documents may be processed by that provider under a data processing agreement with Epiwin.
• Technology and hosting providers: The infrastructure that runs the Epiwin platform is provided by technology partners who may process data on our behalf under data processing agreements that require them to protect it to the same standard we apply.
• Legal and regulatory authorities: Where required by law, we may disclose personal data to relevant authorities. We will not disclose more than is strictly required in such circumstances.

7. Cookies and Tracking Technologies

The Epiwin website uses cookies — small text files stored on your device — and similar tracking technologies to support the operation of the platform. The cookies we use fall into the following categories:

• Essential cookies: These are required for the website to function. They maintain your login session, remember your language preferences and support the security features of the platform. These cookies cannot be disabled without affecting your ability to use the site.
• Analytics cookies: These help us understand how players navigate the website, which sections are most used, and where technical issues occur. Analytics data is aggregated and does not identify individual users.
• Preference cookies: These remember choices you have made — such as display settings — so you do not have to re-enter them on each visit.

The Epiwin Android app uses equivalent device-based technologies to maintain sessions and improve performance. Most browsers allow you to control cookie settings through your browser preferences. Disabling essential cookies will affect platform functionality. Disabling analytics cookies will not affect your ability to use the platform.

8. Data Retention

Epiwin retains personal data for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The general retention principles we apply are:

• Active account data: Personal and account data is retained for as long as your account is active and for a reasonable period after account closure to handle any outstanding queries, disputes or legal obligations.
• Transaction records: Financial transaction records, including PKR deposit and withdrawal history, are retained for a minimum period consistent with standard financial record-keeping requirements.
• Identity verification documents: KYC documents submitted for identity verification are retained for the period required by our compliance obligations and deleted securely once that period expires.
• Support communications: Records of support interactions are retained for a reasonable period to assist with dispute resolution and quality assurance, after which they are deleted.

When data is no longer required, it is deleted or anonymised securely. You may request deletion of your account and associated data at any time — see Your Rights below for how to do this.

9. Security Measures

Epiwin applies technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) across all connections to the website and app
• Encryption of sensitive data at rest within our storage systems
• Access controls that restrict personal data access to authorised Epiwin personnel only, on a strict need-to-know basis
• Regular security reviews and monitoring of our systems for unusual activity
• Secure handling and storage of KYC identity documents submitted for account verification

While we take all reasonable steps to protect your data, no system connected to the internet can be guaranteed to be completely secure. You also play a role in keeping your account safe — use a strong, unique password for your Epiwin account and do not share your login credentials with anyone.

10. Your Data Rights

As a registered Epiwin player, you have the following rights in relation to the personal data we hold about you:

• Right of access: You can request a copy of the personal data Epiwin holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to correction: If any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected. For basic account details such as email or phone number, you can update these directly from your account settings.
• Right to deletion: You can request that your Epiwin account and associated personal data be deleted. Deletion requests are processed subject to our legal obligations to retain certain records (such as transaction history) for required periods. Once those retention periods expire, data is deleted securely.
• Right to withdraw consent: Where data processing is based on your consent — such as receiving marketing communications — you can withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to restrict processing: In certain circumstances, you can request that we restrict how we process your data while a dispute or correction request is being resolved.

To exercise any of these rights, contact our support team through the live chat facility on the Epiwin website or app, or by email at the address shown in the footer. We will verify your identity before processing any data rights request and aim to respond within 30 days.

11. Minors and Under-18 Users

The Epiwin platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been created by or for a person under 18, that account will be closed immediately and any associated data deleted.

If you are a parent or guardian and believe that a minor has registered on the Epiwin platform using false age information, please contact our support team immediately so we can investigate and take appropriate action.

12. Updates to This Privacy Policy

Epiwin may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data protection practices. When material changes are made, we will notify registered players by email or through an in-platform notification before the updated policy takes effect.

The most current version of this Privacy Policy will always be available on this page, along with the date of the most recent update shown at the top of the page. Your continued use of the Epiwin platform following any update to this policy constitutes your acceptance of the updated terms.

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, want to understand more about how your data is used, or wish to exercise any of your data rights, please reach out to our support team through the following channels:

• Live Chat: Available 24/7 from the Epiwin website and within the Epiwin App. This is the fastest way to get a response.
• Email: Our support email address is displayed in the footer of this page. Email responses are typically provided within one business day.

For account-specific enquiries, please have your registered email address and account username ready so our team can verify your identity promptly and assist you without delay. For data deletion or access requests, please state clearly in your message what you are requesting so it can be routed to the right team.