aliwin Privacy Policy

This Privacy Policy ("Policy") describes how aliwin ("aliwin", "we", "us", "our"), the operator of the online gaming platform accessible at https://aliwin.pro, collects, processes, stores, and protects the personal data of its registered users and website visitors ("you", "User", "Player").

aliwin is committed to handling your personal information with care, transparency, and respect. We recognise that players on our platform — including users based in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan — trust us with sensitive personal and financial details. This Policy sets out clearly what we do with that information and what choices you have.

By registering an account on aliwin, depositing funds, or otherwise making use of our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the aliwin platform.

aliwin collects personal data across several categories depending on how you interact with the platform. The table below summarises the categories of data we may collect and the context in which each category is gathered:

aliwin does not knowingly collect sensitive personal data beyond what is strictly required for identity verification, responsible gaming compliance, and fraud prevention. We do not collect biometric data, health data, or political opinions.

aliwin collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical data collected automatically through cookies, server logs, and tracking technologies when you visit and interact with the aliwin platform. This includes IP addresses, device fingerprints, and session activity.
• Third-party sources: Identity and fraud verification agencies, payment processors such as JazzCash and EasyPaisa, anti-money laundering screening databases, and publicly available records where permitted by applicable law.

All data collected through third-party sources is handled with the same level of care and subject to the same security standards as data collected directly from you.

aliwin uses the personal data it collects for the following purposes:

• To create, maintain, and administer your aliwin account, including verifying your identity and age (21+ requirement) prior to enabling full account functionality.
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other approved payment methods.
• To detect, investigate, and prevent fraud, money laundering, account takeovers, and other forms of platform abuse.
• To comply with anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any other regulatory duties imposed by aliwin's international gaming licence.
• To provide customer support and respond to your enquiries, complaints, and disputes in a timely and accurate manner.
• To administer bonuses and promotions, including verifying eligibility, tracking wagering requirements, and resolving bonus-related disputes.
• To implement responsible gaming tools including deposit limits, session reminders, and self-exclusion arrangements where requested or required.
• To improve the aliwin platform through analysis of usage patterns, game performance data, and user experience feedback.
• To send you transactional notifications such as deposit confirmations, withdrawal updates, and security alerts. These communications are non-optional as they relate directly to your account activity.
• To send you optional promotional communications about aliwin offers, bonuses, and new products — subject to your marketing preferences as set in your account.

aliwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and aliwin — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC procedures, and gaming licence conditions.
• Legitimate interests: Processing carried out in aliwin's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by your rights.
• Consent: Where you have given explicit consent, for example to receive promotional communications from aliwin. Consent may be withdrawn at any time without affecting any prior lawful processing.

aliwin does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other authorised payment service providers for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity, age, and the legitimacy of your source of funds.
• Fraud prevention agencies: Organisations that help detect and prevent fraudulent activity on the aliwin platform and across the broader online gaming industry.
• Regulatory and law enforcement authorities: Government bodies, regulators, and law enforcement agencies where disclosure is required by applicable law, court order, or gaming licence obligation.
• Technology and infrastructure providers: Service providers who operate aliwin's hosting, security, analytics, and customer support infrastructure, all of whom are contractually bound to process data only on aliwin's instructions.
• Game content providers: Licensed game studios whose products are offered on the aliwin platform may receive limited session data necessary to deliver and audit their games.

aliwin retains your personal data for as long as your account remains active and for such further period as is required by applicable regulatory and legal obligations. Specific retention periods are determined by the nature of the data and the purpose for which it was collected:

• Account registration data and identity verification documents are retained for a minimum of five (5) years following account closure, in line with standard AML and gaming licence retention requirements.
• Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications are retained for three (3) years from the date of the last correspondence in a given case.
• Technical and usage data collected automatically is retained for a maximum of twenty-four (24) months from collection, after which it is anonymised or deleted.
• Marketing consent records are retained for the duration of the consent and for one (1) year following withdrawal of consent, for accountability purposes.

Where retention is no longer required by law or legitimate business purpose, aliwin will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

aliwin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• TLS encryption for all data transmitted between your device and the aliwin platform.
• Encryption of sensitive data fields at rest within aliwin's databases and storage systems.
• Strict role-based access controls limiting internal access to personal data to authorised personnel with a demonstrable business need.
• Regular security assessments, penetration testing, and vulnerability scanning of aliwin's infrastructure.
• Multi-factor authentication requirements for internal systems that process personal data.
• Incident response procedures to detect, contain, and notify affected parties in the event of a personal data breach, in line with applicable obligations under aliwin's licensing framework.

While aliwin takes data security seriously and maintains robust protections, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your aliwin account and to enable any available two-factor authentication feature.

The aliwin platform uses cookies and similar technologies (including local storage and session identifiers) to provide a functional and personalised experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functionality including maintaining your login session, remembering your currency preference (PKR), and processing transactions. These cannot be disabled without impairing your ability to use aliwin.
• Performance cookies: Used to collect aggregated, anonymised information about how users interact with the aliwin platform, allowing us to identify areas for improvement. No personally identifiable information is collected through these cookies.
• Functional cookies: Used to remember your account settings and preferences between sessions, such as language, notification settings, and responsible gaming tool configurations.
• Security cookies: Used to support fraud detection and account security features, including session integrity checks.

aliwin does not use cookies for cross-site behavioural advertising or for selling your browsing data to advertising networks. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent certain features of the aliwin platform from functioning correctly.

Subject to applicable law and the regulatory obligations aliwin operates under, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data aliwin holds about you, along with information about how it is processed.
• Right of rectification: You may request correction of any inaccurate or incomplete personal data. For basic account details, corrections can be made directly through account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to aliwin's legal retention obligations which may require us to retain certain data even after account closure.
• Right to restrict processing: You may request that aliwin limits the processing of your personal data in certain circumstances, for example where you contest the accuracy of data held.
• Right to data portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of personal data you have provided to aliwin.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty through your account settings or by contacting support.
• Right to object: You may object to processing carried out on the basis of aliwin's legitimate interests, subject to those interests being assessed against your rights on a case-by-case basis.

The aliwin platform is strictly intended for individuals aged 21 years and above. aliwin does not knowingly collect, process, or retain personal data relating to any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If aliwin becomes aware that personal data has been collected from an individual under the age of 21 — whether through misrepresentation at registration or by any other means — that account will be immediately closed, all balances and winnings will be forfeited, and any data held will be deleted except to the extent required by law or to support the investigation of the misrepresentation.

If you believe a minor has registered an account on aliwin, please notify us immediately at [email protected]. aliwin takes the protection of minors from online gambling extremely seriously and will act without delay on any credible report.

As an internationally licensed online gaming platform, aliwin may transfer your personal data to servers, service providers, and regulatory bodies located outside of Pakistan. Where such transfers occur, aliwin takes appropriate steps to ensure that your data is protected to a standard that is consistent with the terms of this Privacy Policy.

Safeguards applied to international transfers may include contractual data protection clauses with third-party processors, transfers to jurisdictions that maintain adequate data protection standards, and compliance with the data transfer requirements of aliwin's gaming licence.

By using the aliwin platform, you consent to the international transfer of your personal data where necessary for the delivery of aliwin's services, subject to the protections described in this section.

aliwin may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, regulatory requirements, or applicable law. When material changes are made, aliwin will notify registered users via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically so that you remain informed about how aliwin handles your personal data. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aliwin processes your personal data, please do not hesitate to reach out to our support team. We are available around the clock and aim to respond to all privacy-related enquiries within 24 hours.

For formal data subject access requests, please include your registered account email address and a clear description of the data rights request you wish to submit. Identity verification will be required before any action is taken on your request.