At epiwon, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains what personal data we collect from players across Pakistan, how we use and protect it, and what rights you have over your information. Please read it carefully alongside our Terms & Conditions.
epiwon gives every player in Pakistan meaningful control over their personal data. Here are the six core protections built into how we operate.
You have the right to request a complete copy of the personal data epiwon holds about you at any time. Submit your access request via our live chat support team or by writing to [email protected]. epiwon will respond within 30 days of receiving a verified request.
If any personal data epiwon holds about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly from within your epiwon account settings. For CNIC or identity-related corrections, contact support with updated documentation.
You may request deletion of your personal data where epiwon no longer has a lawful basis to retain it. Note that epiwon is required by applicable financial regulations to retain certain transaction and KYC records for a minimum of 7 years following account closure, which overrides erasure requests for those specific records.
You have the right to object to epiwon processing your personal data for direct marketing purposes at any time. Update your communication preferences within your epiwon account settings, or contact support directly. Objections to marketing processing take effect within 48 hours of confirmation.
Where technically feasible, you may request a structured, machine-readable copy of the personal data you have provided to epiwon. This right applies to data processed on the basis of your consent or for the performance of your account agreement, and will be provided in a standard CSV or JSON format.
Where epiwon processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal. Withdrawing consent does not affect your ability to maintain and use your epiwon account.
epiwon ("we," "us," "our," "epiwon") operates an online casino and sports betting platform accessible at epiwon.net, serving players primarily across Pakistan, including cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. We understand that entrusting us with your personal data is a significant act of confidence, and we take that responsibility seriously.
This Privacy Policy ("Policy") sets out the basis on which epiwon collects, receives, uses, stores, transfers, and otherwise processes personal data relating to our registered players, website visitors, and other individuals who interact with the epiwon platform. This Policy is written to meet internationally recognised data protection standards, including principles aligned with the General Data Protection Regulation (GDPR), and reflects our commitment to transparent, fair, and secure data handling.
This Policy should be read alongside the epiwon Terms & Conditions, which govern your contractual relationship with epiwon, and the Responsible Gaming Policy, which sets out our player welfare commitments. Capitalised terms used in this Policy have the same meaning as defined in the epiwon Terms & Conditions unless otherwise defined herein.
2.1 For the purposes of applicable data protection law, epiwon is the data controller in respect of all personal data collected from players and users of the epiwon platform. As data controller, epiwon determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.
2.2 epiwon operates the platform under international gaming licensing standards. Our data processing practices are aligned with international best practices for online gaming operators, including know-your-customer (KYC) requirements, anti-money-laundering (AML) obligations, and responsible gaming data management.
2.3 All data protection queries, subject access requests, and complaints should be directed to epiwon's support team via live chat at epiwon.net or by email to [email protected]. Please mark the subject line of any email with "Data Protection Query" to ensure it is routed to the correct team.
epiwon collects the following categories of personal data from players and users of the platform:
| Category | Data Types | Purpose |
|---|---|---|
| Identity Data | Full legal name, CNIC number, date of birth, CNIC scan (front and back) | Account registration, KYC verification, age verification |
| Contact Data | Pakistani mobile number, email address (optional), city of residence | Account communications, support, OTP verification |
| Financial Data | Payment method identifiers (JazzCash/EasyPaisa number, bank account details), deposit and withdrawal records, transaction history | Payment processing, AML compliance, withdrawal verification |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps, login history | Security monitoring, fraud prevention, platform optimization |
| Usage Data | Games played, wager amounts, win/loss records, session duration, bonus usage, betting history | Responsible gaming monitoring, personalization, regulatory compliance |
| Communications Data | Live chat transcripts, support ticket content, SMS interaction history | Support resolution, quality assurance, dispute resolution |
epiwon does not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health data except where gaming self-exclusion requests voluntarily disclose health-related information, which is treated with heightened confidentiality.
epiwon collects personal data through the following channels and mechanisms:
epiwon processes your personal data on the following legal bases:
epiwon uses the personal data we collect for the following specific purposes:
epiwon does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except for standard fraud detection screening that may result in temporary account restrictions pending manual review.
7.1 No Sale of Data. epiwon does not sell, rent, or otherwise commercially exploit your personal data to any third party. This is an unconditional commitment.
7.2 Service Providers. epiwon shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include: payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank network processors); KYC and identity verification service providers; fraud detection technology providers; cloud hosting and data storage providers; and customer support platform providers. All service providers are contractually bound to process your data only on epiwon's instructions and to implement appropriate security measures.
7.3 Game Providers. Where you play games provided by third-party casino game studios available on the epiwon platform, limited gameplay data (such as player session identifiers and game transaction records) may be shared with the relevant game provider for the purposes of game functionality and fairness auditing. Game providers do not receive your identity or payment data.
7.4 Regulatory Authorities. epiwon may be required to disclose personal data to regulatory, tax, or law enforcement authorities where required by applicable law, court order, or regulatory directive. epiwon will notify you of such a disclosure request where legally permitted to do so.
7.5 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of epiwon's assets, your personal data may be transferred to the acquiring entity as part of the transaction. epiwon will notify affected players prior to any such transfer and provide an opportunity to exercise applicable data rights.
8.1 What Are Cookies. Cookies are small text files placed on your device when you visit the epiwon website. They help us recognise your browser, remember your preferences, maintain your login session, and analyse how the platform is being used.
8.2 Types of Cookies Used by epiwon.
8.3 Cookie Control. You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the epiwon platform. Essential and security cookies cannot be disabled without preventing platform access.
9.1 Technical Safeguards. epiwon implements the following technical security measures to protect your personal data: 256-bit SSL/TLS encryption for all data transmitted between your device and epiwon's servers; encryption of sensitive stored data including CNIC numbers, payment method identifiers, and passwords; access controls restricting data access to authorised epiwon personnel on a need-to-know basis; automated intrusion detection and 24/7 security monitoring; regular independent security audits and penetration testing of platform infrastructure.
9.2 Organisational Safeguards. epiwon's internal data protection measures include: mandatory data protection training for all staff with access to player data; strict data handling policies and confidentiality obligations for all epiwon employees and contractors; data minimisation practices ensuring only necessary data is collected and retained; segregation of duties preventing any single individual from having unchecked access to sensitive player data.
9.3 Data Breach Notification. In the event of a personal data breach that poses a risk to your rights and freedoms, epiwon will notify affected players as soon as reasonably practicable after becoming aware of the breach, and no later than 72 hours after confirmation of the breach. Notification will be sent to your registered mobile number or via in-platform notification, describing the nature of the breach, the data categories affected, and the steps epiwon has taken in response.
10.1 Active Accounts. epiwon retains personal data for the duration of your active account relationship with us. Data actively used for account management, gameplay, and payment processing is maintained throughout the life of your account.
10.2 Closed Accounts. Following account closure, epiwon retains certain categories of personal data for a minimum period of 7 years in compliance with applicable financial record-keeping and AML regulatory requirements. This includes identity data, KYC documentation, financial transaction records, and AML monitoring records.
10.3 Shorter Retention Periods. Certain categories of data are retained for shorter periods: support chat transcripts are retained for 2 years; marketing preference records are retained for 3 years; analytics and usage data is retained in identifiable form for 18 months before anonymisation.
10.4 Self-Excluded Players. Where a player has activated self-exclusion, epiwon retains a record of the self-exclusion for the duration of the exclusion period plus 5 years thereafter, to prevent re-registration by previously self-excluded individuals. This record is the minimum data required to honour the self-exclusion commitment and is stored securely in a restricted-access database.
11.1 How to Submit a Request. To exercise any of your data rights described in this Policy (access, rectification, erasure, objection, portability, or consent withdrawal), contact epiwon's support team via live chat at epiwon.net or by email to [email protected] with the subject line "Data Rights Request."
11.2 Verification. For security purposes, epiwon will verify your identity before processing any data rights request. This typically involves confirming your registered mobile number via OTP. For sensitive requests such as erasure, additional verification may be required.
11.3 Response Timelines. epiwon will acknowledge your request within 5 business days and will aim to fulfil it within 30 calendar days. In cases of particular complexity, epiwon may extend this period by a further 60 days and will inform you of the extension within the initial 30-day period.
11.4 Refusal of Requests. epiwon may refuse a data rights request where fulfilling it would conflict with applicable legal obligations (for example, AML record-keeping requirements that override erasure requests). epiwon will explain the reason for any refusal in writing.
The epiwon platform is strictly restricted to individuals who are 21 years of age or older. epiwon does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered players using CNIC documentation issued by NADRA.
If epiwon becomes aware that personal data has been collected from an individual under the age of 21, the associated account will be immediately suspended, all balances will be voided, and the personal data of the underage individual will be securely deleted as soon as operationally practicable, subject only to any overriding regulatory record-keeping requirements.
Parents and guardians in Pakistan who are concerned that a minor may have registered on the epiwon platform should contact epiwon Support immediately via live chat. epiwon takes all such reports seriously and will investigate and respond within 24 hours.
13.1 Opt-In. epiwon sends marketing communications — including promotional offers, bonus alerts, and platform news — only to players who have explicitly consented to receive them during the registration process or via their account settings. Marketing communications are sent via SMS to your registered Pakistani mobile number and via in-platform notifications.
13.2 Opt-Out. You may withdraw your marketing consent and opt out of all promotional communications at any time by: (a) updating your communication preferences within your epiwon account settings; (b) responding "STOP" to any SMS marketing message received from epiwon; or (c) contacting epiwon Support via live chat. Opt-outs take effect within 48 hours of confirmation.
13.3 Service Communications. Withdrawing marketing consent does not affect epiwon's ability to send transactional and service-related communications, including withdrawal confirmations, account security alerts, KYC requests, responsible gaming notifications, and Terms & Conditions updates. These communications are essential to the operation of your account and are not subject to opt-out.
The epiwon platform may contain links to third-party websites, services, or payment platforms (such as JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank payment portals). This Privacy Policy applies only to epiwon and does not cover the data practices of third-party websites or services.
When you leave the epiwon platform to access a third-party service, you will be subject to that third party's privacy policy and terms of use. epiwon is not responsible for the privacy practices or content of third-party websites and recommends that you review their privacy policies before providing any personal data.
epiwon selects payment partners and service providers based in part on their data protection standards, but epiwon cannot control or be held responsible for how those third parties ultimately handle your data once it has been transferred to them for the purposes of completing a transaction or service.
15.1 Right to Amend. epiwon reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. The "Last Updated" date displayed at the top of this Policy indicates when it was most recently revised.
15.2 Notification of Material Changes. Where amendments to this Policy result in a material change to how epiwon processes your personal data, epiwon will notify registered players via SMS to their registered mobile number and via in-platform notification at least 30 days before the amended Policy takes effect.
15.3 Continued Use. Continued use of the epiwon platform following notification of an updated Privacy Policy constitutes acceptance of the amended Policy. If you do not agree with the amended Policy, you may close your epiwon account in accordance with the process set out in the Terms & Conditions.
For questions, complaints, or data rights requests relating to this Privacy Policy or epiwon's data practices, please contact us using one of the following methods:
epiwon is committed to resolving all data protection queries and complaints within 30 days of receipt. Where a complaint cannot be resolved to your satisfaction through epiwon's internal process, you retain the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
Your Privacy Matters
By using the epiwon platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data collection, use, and processing practices described herein. epiwon is committed to protecting your personal data and respecting your privacy rights. If you have any questions or concerns about how your data is handled, please do not hesitate to contact our support team at any time.
21+ The epiwon platform is for adults aged 21 and over only. epiwon does not knowingly collect data from individuals under 21 years of age.
epiwon is built on transparency. Here's what sets our data practices apart from other gaming platforms.
We have never sold player data and never will. This is a permanent policy.
No legal jargon hiding what we do. Every data use is explained in clear English.
Request your data and receive it within 30 days — guaranteed, not aspirational.
Our standards meet international benchmarks even where local law doesn't require it.
Our support team is available 24/7 to answer any questions about how epiwon collects, uses, and protects your personal data. Contact us via live chat or email anytime.
256-bit SSL GDPR-Aligned No Data Sales 7-Year Retention Max
21+ By registering at epiwon, you confirm you are 21 or older and accept the Privacy Policy and Terms & Conditions.