Privacy Policy — wowpk1

This Privacy Policy ("Policy") is issued by wowpk1 ("Platform", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with your use of the wowpk1 website at wowpk1.cam and all associated services, features and content (collectively, the "Platform").

wowpk1 is an English-language online betting and gaming information platform designed to serve users in Pakistan and other eligible jurisdictions. We are committed to handling your personal data with integrity, transparency and in accordance with applicable data protection principles. This Policy explains what data we collect, the legal basis on which we process it, how we use it, who we share it with, how long we retain it, and what rights you have in relation to your data.

By accessing and using the Platform — including registering an account, placing bets, or interacting with any feature — you acknowledge that you have read this Privacy Policy and that you understand how your personal data will be processed. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Data Controller" means wowpk1, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of wowpk1 under a contractual arrangement.
• "Data Subject" means you — the individual whose personal data is collected and processed.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, CNIC number, IP address, device identifiers and financial data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Special Category Data" means data that requires enhanced protection due to its sensitivity, such as health data or data revealing racial or ethnic origin.
• "Cookie" means a small file placed on your device by the Platform to store session or preference information.
• "KYC Data" means identity verification data submitted as part of the Know Your Customer process, including copies of identity documents such as a CNIC or passport.

We collect personal data that is necessary to operate the Platform, verify your identity, process financial transactions, provide customer support and comply with applicable legal and regulatory requirements. The categories of personal data we collect include:

When you create a wowpk1 account, we collect: your full legal name, email address, date of birth, country of residence, and a password of your choosing. This information is required to establish and administer your account.

To comply with age verification, anti-money laundering (AML) and fraud prevention obligations, we collect documents and data including: a copy of a valid government-issued identity document (for Pakistani users, typically a CNIC or passport), proof of address where required, a selfie or liveness check image, and payment method verification documentation. This data is processed exclusively through the Platform's secure HTTPS verification portal.

We collect data related to deposits, withdrawals and betting activity including: transaction amounts in the applicable currency, payment method identifiers (not full card numbers), transaction dates and times, and transaction status records. We do not store full payment card numbers on our systems.

We automatically collect certain technical data when you access the Platform, including: IP address, browser type and version, operating system, device type and identifiers, screen resolution, referring URL, and access timestamps. This data is used for security monitoring, fraud detection and platform performance analysis.

We collect data about how you interact with the Platform, including: pages visited, games played, betting history, session duration, feature usage patterns and responsible gambling tool settings. This data helps us deliver a relevant experience and identify potentially problematic gambling patterns for responsible gambling purposes.

When you contact our support team by email, live chat or any other channel, we retain records of those communications for quality assurance, dispute resolution and regulatory compliance purposes.

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to any Platform communication.
• Automatically — through your interaction with the Platform via cookies, server logs, analytics tools and session-tracking technologies.
• From third-party service providers — including identity verification agencies, payment processors, fraud detection services and game content providers, to the extent necessary to operate the Platform and comply with regulatory requirements.
• From publicly available sources — including public databases used for fraud screening and sanctions checks, as required by AML obligations.

We do not collect data from social media profiles without your explicit consent, and we do not purchase third-party marketing lists that contain your personal data.

We process your personal data only where we have a valid legal basis to do so. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform the contract between you and wowpk1 — specifically, to register your account, process your bets, handle deposits and withdrawals, and provide customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML reporting, age verification and record-keeping obligations imposed by the applicable license jurisdiction.
• Legitimate Interests: Processing necessary for the legitimate business interests of wowpk1, including fraud prevention, platform security, responsible gambling monitoring and internal analytics — provided those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for a specific processing activity — such as sending you promotional communications — you may withdraw that consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

We use the personal data we collect for the following specific purposes:

To register and manage your account, authenticate your identity at login, process password resets, apply responsible gambling limits you have set, and communicate account-related notifications.

To verify your identity and age in accordance with KYC requirements, perform AML screening and sanctions checks, and maintain records required by the applicable license jurisdiction. This processing is a legal obligation and cannot be waived.

To process deposits, execute bet settlements, facilitate withdrawal requests and maintain accurate financial records. Transaction data is processed in accordance with applicable financial services regulations.

To detect, prevent and investigate fraudulent activity, money laundering, bonus abuse, multi-accounting and other prohibited conduct. Technical data including IP addresses and device identifiers are used for this purpose.

To monitor betting patterns and account activity for indicators of problem gambling, to apply responsible gambling limits you have set, and to contact you if our systems identify potentially harmful behaviour. This processing is in both your interest and our legitimate interest.

To respond to your support queries, investigate complaints, and maintain records of communications for quality assurance and dispute resolution purposes.

To analyse usage patterns, optimise Platform performance, identify technical issues, and develop new features. This processing uses aggregated or pseudonymised data wherever possible.

Where you have provided consent, to send you promotional communications about available offers, new game categories and Platform updates. You may withdraw consent at any time. We do not send unsolicited marketing communications.

wowpk1 does not sell, rent or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Identity Verification Providers: Third-party KYC and AML service providers that process identity documents and perform sanctions screening on our behalf under contractual data processing agreements.
• Payment Processors: Financial service providers that process your deposit and withdrawal transactions. These providers receive only the transaction data necessary to process payments; they do not receive your full betting history or communications data.
• Game Content Providers: Third-party game suppliers whose products are available on the Platform may receive limited technical data (e.g., session identifiers) necessary to deliver the game experience. They are bound by contractual data protection obligations.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, a court order, or a request from a competent regulatory authority, we may disclose personal data to the relevant authority. We will notify you of such disclosures where legally permitted to do so.
• Fraud Prevention Agencies: Shared transaction and identity data with recognised fraud prevention databases to detect and prevent financial crime.
• Corporate Transactions: In the event of a merger, acquisition, restructuring or sale of assets involving wowpk1, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer.

wowpk1 operates internationally and some of the third-party service providers we engage are located in jurisdictions outside of Pakistan. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data, including contractual arrangements with receiving parties that require them to maintain data protection standards equivalent to those applied by wowpk1. These arrangements may include standard contractual clauses or equivalent contractual data protection mechanisms recognised by the applicable regulatory framework.

You acknowledge and accept that cross-border data transfers may be necessary to deliver the services you have requested. If you have concerns about international data transfers as they affect your personal data, please contact us using the details in Section 15.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account Data: Retained for the duration of your active account and for a period of up to 5 years following account closure, as required for AML and regulatory record-keeping purposes.
• KYC Documents: Retained in accordance with the record-keeping obligations of the applicable license jurisdiction, typically for a minimum of 5 years from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years to satisfy financial record-keeping and AML reporting requirements.
• Communications Data: Support communications are retained for up to 3 years for dispute resolution and quality assurance purposes.
• Technical & Log Data: Server log data and technical records are retained for up to 12 months for security monitoring purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. You may request earlier deletion of certain data categories — subject to any overriding legal retention obligations — by contacting us as described in Section 15.

wowpk1 uses cookies and similar tracking technologies to deliver and improve the Platform experience. A cookie is a small text file placed on your device when you access the Platform. Cookies do not contain executable code and cannot access other data on your device.

• Strictly Necessary Cookies: Essential for the Platform to function. These enable you to log in, maintain your session and use core features. They cannot be disabled without preventing normal Platform use.
• Analytics Cookies: Used to collect aggregated information about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, identify suspicious session behaviour and enforce responsible gambling controls.
• Preference Cookies: Used to remember your settings and preferences — such as language selection and responsible gambling limit preferences — across sessions.

You may configure your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use core Platform features, including logging in and maintaining a session. Instructions for managing cookies are available in your browser's help documentation.

wowpk1 does not currently use third-party advertising or targeting cookies. If this changes in future, we will update this Policy and obtain consent where required.

Depending on the data protection law applicable to your use of the Platform, you may have some or all of the following rights in relation to your personal data. We are committed to facilitating the exercise of these rights promptly and transparently.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being disputed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests. We will comply unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.

To exercise any of these rights, please contact our support team as described in Section 15. We will respond to all valid requests within 30 days. Where a request is complex or numerous, this period may be extended to a maximum of 60 days, and we will notify you accordingly. We may request proof of identity before processing a data rights request.

wowpk1 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Access controls that restrict employee access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Incident response procedures for detecting, reporting and remedying data security breaches;
• Contractual security obligations imposed on all third-party data processors.

While we maintain industry-standard security practices, no method of electronic transmission or storage is completely immune to risk. In the event of a data security breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with applicable law.

You are also responsible for maintaining the security of your account credentials. You must not share your password with any third party and must notify us immediately if you suspect unauthorised access to your account.

The wowpk1 Platform is strictly intended for adults aged 18 or older — or such higher minimum age as may be required by the applicable operator or license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

Age verification is enforced during the registration and KYC process. Any account found to have been registered by or on behalf of a person below the minimum eligible age will be immediately closed and any associated data will be deleted or retained only to the extent required by law.

If you believe that we may have inadvertently collected personal data from a minor, please contact us immediately using the details in Section 15 so that we can take appropriate action.

wowpk1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or regulatory requirements. Where changes are material, we will notify registered users by email and/or by placing a prominent notice on the Platform prior to the effective date of the change.

The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed of how we are protecting your personal data.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any revised terms, you should discontinue use of the Platform.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, have a complaint about how we have handled your personal data, or wish to report a potential data security incident, please contact us using the following details:

• Support Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24/7 through the Platform (subject to operator confirmation)
• Response Time: Data rights requests and privacy queries are handled within 30 calendar days
• Language: Queries handled in English; Urdu assistance may be available on request

Please note that identity verification may be required before we can action a data rights request. Sensitive identity documents should only be submitted through the Platform's secure HTTPS portal — never via unsecured email or chat.

For general Platform information, you may also visit our FAQ page or About Us section.