wdpak Privacy Policy

1 About This Privacy Policy

This Privacy Policy applies to all personal data processed by wdpak in connection with your use of the wdpak platform, including the website accessible at wdpak.org, any mobile-optimised version of the site, and all associated services such as account management, gaming, deposits, withdrawals, customer support interactions, and promotional communications.

This Policy should be read alongside the wdpak Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and wdpak. In the event of any conflict between this Privacy Policy and another wdpak document, this Privacy Policy shall govern with respect to matters of personal data processing.

2 Personal Data We Collect

wdpak collects several categories of personal data in the ordinary course of operating the platform. The specific data collected depends on the nature of your interaction with the wdpak platform.

wdpak does not knowingly collect sensitive personal data beyond what is outlined above. CNIC data is used solely for identity verification and age confirmation purposes and is handled with heightened security controls.

3 How We Collect Your Data

wdpak collects personal data through the following channels:

3.1 Direct Collection

The majority of your personal data is provided directly by you when you register a wdpak account, complete identity verification (KYC), make a deposit or withdrawal request, contact customer support, or respond to a promotional communication. You are in control of what you provide, and wdpak will clearly indicate which fields are mandatory at the point of collection.

3.2 Automated Collection

When you visit wdpak.org or use the platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser configuration, and session activity data. This automated collection is necessary for the platform to function correctly and to maintain security. Please see Section 11 for our full Cookie Policy.

3.3 Third-Party Collection

In limited circumstances, wdpak may receive personal data about you from third parties. This includes identity verification results from our KYC provider (following your consent at registration), fraud screening signals from our payment processing partners (such as JazzCash and EasyPaisa), and, where applicable, information from regulatory bodies or law enforcement agencies where we are legally required to receive it.

4 Why We Use Your Personal Data

wdpak processes your personal data for the following specific purposes:

• Account Creation & Management: To register your wdpak account, maintain your profile, and enable you to access the full range of platform services including cricket betting, casino games, and instant-win products.
• Identity Verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment methods are registered in your own name — as required by responsible gaming standards and applicable compliance obligations.
• Payment Processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to facilitate your withdrawal requests in a timely and accurate manner.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and any other prohibited activities described in the wdpak Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide responsible gaming support where requested.
• Legal & Regulatory Compliance: To meet our obligations under applicable gaming regulations, anti-money laundering (AML) requirements, and any lawful requests from regulatory authorities or law enforcement agencies.
• Responsible Gaming: To monitor gaming behaviour patterns that may indicate problem gambling, to administer self-exclusion and deposit limit requests, and to send responsible gaming communications where appropriate.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via SMS or email — but only where you have given your explicit consent to receive such communications. See Section 12 for opt-out information.
• Platform Improvement: To analyse aggregated, anonymised usage data that helps us improve the wdpak platform, fix technical issues, and develop new features that better serve Pakistani players.

5 Legal Basis for Processing

wdpak processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the wdpak Terms & Conditions — including account management, payment processing, and game delivery. Without this processing, we cannot provide you with the wdpak service.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and cooperation with lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — where our legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications and non-essential cookies — where you have given clear, freely given, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Who We Share Your Data With

wdpak shares your personal data only with trusted third parties where it is strictly necessary for the purposes described in this Policy. We do not sell your data to any third party. The categories of recipients are as follows:

• KYC & Identity Verification Providers: Third-party services that help us verify CNIC documents, confirm age eligibility, and screen for politically exposed persons (PEPs) or sanctions list entries.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT network processors — solely to facilitate deposit and withdrawal transactions initiated by you.
• Fraud Prevention & Security Services: Specialist providers that help wdpak detect suspicious betting patterns, account takeover attempts, and financial crime indicators.
• Customer Support Infrastructure: Live chat and helpdesk platform providers that process support ticket data on our behalf under strict data processing agreements.
• Regulatory Authorities & Law Enforcement: Where wdpak is required by law, court order, or legitimate regulatory demand to disclose personal data. We will always seek to notify you of such disclosure unless legally prohibited from doing so.
• Business Successors: In the event of a merger, acquisition, or sale of wdpak's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party service providers who process personal data on behalf of wdpak are required to enter into data processing agreements that bind them to confidentiality obligations and restrict their use of your data to the specific purpose for which it was shared.

7 International Data Transfers

Some of the third-party providers used by wdpak may process personal data in countries outside Pakistan. Where such transfers occur, wdpak takes appropriate steps to ensure that your data receives an adequate level of protection, including through the use of standard contractual clauses, data processing agreements, and transfers only to providers in jurisdictions with recognised data protection frameworks.

wdpak's primary data infrastructure is hosted on servers located within or close to the Asian region to minimise latency for Pakistani players while maintaining strong data protection standards. Full details of international transfer arrangements are available upon request by contacting [email protected].

8 Data Security

wdpak implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS Encryption: All data transmitted between your device and wdpak.org is encrypted using Transport Layer Security (TLS 1.2 or higher), preventing interception during transit.
• AES-256 Encryption at Rest: Sensitive personal data — including CNIC information and financial records — is encrypted at rest using AES-256 encryption on our database servers.
• Two-Factor Authentication (2FA): wdpak strongly recommends and supports 2FA for all player accounts via your registered Pakistani mobile number, adding a second layer of protection to your login process.
• Access Controls: Access to personal data within wdpak's internal systems is strictly limited to authorised staff on a need-to-know basis, and all access is logged and audited.
• Penetration Testing: wdpak conducts regular security assessments of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: wdpak maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify affected users without undue delay.

9 Data Retention

wdpak retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our retention periods are as follows:

• Account & Identity Data: Retained for the duration of your active account, plus a minimum of 5 years following account closure — as required by standard AML and gaming compliance obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping requirements.
• Gaming Activity Data: Retained for 5 years from the date of the gaming session, for dispute resolution, regulatory audit, and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for 3 years from the date of the interaction, to enable resolution of subsequent related disputes.
• Marketing Consent Records: Retained for 3 years from the date of consent or withdrawal of consent, to demonstrate compliance with marketing permission obligations.
• Technical & Log Data: Retained for 12 months from collection, unless a security investigation requires extended retention for a specific log record.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player.

10 Your Data Rights

As a wdpak player, you have the following rights in relation to your personal data. These rights apply subject to any applicable legal exceptions and may be exercised by contacting us at [email protected] with the subject line "Data Rights Request":

wdpak will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for the delay. There is no fee for making a data rights request unless the request is manifestly unfounded or excessive.

11 Cookies & Tracking Technologies

wdpak uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, remember your preferences, and analyse how the platform is used. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the wdpak platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing use of the platform.
• Functional Cookies: Remember your preferences such as language settings, last-viewed game categories, and notification preferences to improve your experience on subsequent visits.
• Analytics Cookies: Collect anonymised data about how users navigate the wdpak platform — for example, which game categories are most visited and where users encounter technical difficulties — helping us improve the platform for Pakistani players.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional communications. These help us avoid sending you offers for games you have never played or products that are not relevant to your gaming activity.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the wdpak platform. A full cookie list is maintained internally and is available upon request.

12 Marketing Communications

wdpak may send you promotional messages, bonus offers, and platform update notifications via SMS to your registered Pakistani mobile number or via email, but only where you have given explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Logging into your wdpak account and updating your communication preferences in the Account Settings section;
• Replying STOP to any SMS received from wdpak; or
• Contacting wdpak support at [email protected] with the subject line "Unsubscribe".

Withdrawal of marketing consent will be actioned within 5 business days. Please note that even after opting out of marketing communications, wdpak may still send you essential transactional messages relating to your account — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the delivery of the service and are not subject to marketing opt-out.

13 Children's Privacy

The wdpak platform is strictly intended for adults aged 21 years and above. wdpak does not knowingly collect personal data from any person under the age of 21. CNIC-based age verification is applied to all accounts as part of our KYC process specifically to prevent underage access to the platform.

If wdpak discovers or is notified that it has inadvertently collected personal data from a person under 21 years of age, the relevant account will be immediately suspended, all personal data associated with that account will be deleted, and any deposits will be returned to the originating payment method following a review of account activity.

If you are a parent or guardian and believe that a person under 21 in your care has registered a wdpak account, please contact us immediately at [email protected] so that we can take prompt action.

14 Updates to This Privacy Policy

wdpak reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory requirements. Where changes are material — for example, if we introduce a new category of data processing or a new type of third-party sharing — we will notify registered players via SMS or email at least 14 days before the updated Policy takes effect.

For minor or administrative changes that do not affect the substance of how your data is processed, the updated Policy will be published on this page with a revised "Last Updated" date, without individual notification. We encourage you to review this page periodically to stay informed of how wdpak protects your privacy.

Your continued use of the wdpak platform after a revised Privacy Policy has taken effect constitutes your acknowledgment of the updated Policy. If you do not accept the revised terms, you should close your account and withdraw any remaining balance before the effective date of the changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wdpak handles your personal data, please do not hesitate to get in touch with our support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

For responsible gaming support specifically, please visit the wdpak Responsible Gaming page where you will find information on self-exclusion, deposit limits, and other tools available to Pakistani players who wish to manage their gaming activity.