Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing
- 6. Legal Basis for Processing
- 7. Data Sharing
- 8. Data Retention
- 9. User Rights
- 10. Cookies & Tracking
- 11. International Transfers
- 12. Children's Privacy
- 13. Security Measures
- 14. Policy Updates
- 15. Contact Us
Introduction
Wanpar ("we", "us", "our", "the Platform") is an English-language online betting and live casino information platform designed for Pakistani users. This Privacy Policy ("Policy") applies to all personal data collected, processed and stored by Wanpar in connection with your use of the website located at wanpar.cam and all associated services.
This Policy is designed to be transparent and accessible. We have written it in plain English because we believe every user — whether browsing from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — deserves to understand exactly how their data is handled without needing a legal background to follow along.
By accessing or using the Wanpar platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the platform and contact us to request account closure and data deletion.
Definitions
The following defined terms are used throughout this Privacy Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, CNIC number, date of birth, IP address and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, restriction, erasure or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Wanpar.
- "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, pursuant to a documented instruction and contractual obligation.
- "KYC" means Know Your Customer — the identity verification process required for account approval, payment processing and regulatory compliance.
- "AML" means Anti-Money Laundering — the compliance and monitoring framework that governs the detection and reporting of suspicious financial transactions.
- "Cookies" means small text files stored on your device by your web browser at the instruction of the platform, used to record session information and preferences.
- "User" means any individual who accesses, browses or registers an account on the Wanpar platform.
Personal Data We Collect
We collect the following categories of personal data, depending on how you interact with the platform:
3.1 Registration & Identity Data
Collected when you create an account:
- Full legal name (as shown on your CNIC, passport or other government-issued ID);
- Date of birth (for age verification);
- Residential address;
- Email address;
- Mobile phone number;
- Username and encrypted password.
3.2 Identity Verification (KYC) Data
Collected when you submit documents for account verification or withdrawal processing:
- Copy of government-issued photo identification (CNIC, passport, driving licence);
- Proof of address documentation (utility bill, bank statement);
- Proof of payment method ownership;
- Source of funds documentation (where required by AML procedures).
3.3 Financial Transaction Data
Collected in connection with deposits and withdrawals:
- Payment method type and partial payment identifier (e.g., last four digits of a card, or wallet account reference);
- Transaction amounts in PKR;
- Transaction timestamps and reference numbers.
3.4 Behavioural & Technical Data
Collected automatically when you access the platform:
- IP address and approximate geolocation;
- Device type, operating system and browser version;
- Session duration, pages visited and navigation path;
- Betting and gaming activity logs (markets wagered, stakes, outcomes).
3.5 Communications Data
Collected when you contact our support team:
- Content of support enquiries, complaints and dispute records;
- Chat logs and email correspondence.
How We Collect Your Data
We collect personal data through the following methods:
| Collection Method | Examples |
|---|---|
| Direct Submission | Registration form, KYC document upload, payment transactions, support contact forms |
| Automatic Collection | Cookies, web beacons, server logs, device fingerprinting, session tracking |
| Third-Party Sources | Identity verification providers, fraud prevention services, payment processors, sports data feeds |
| Account Activity | Betting history, login records, account setting changes, bonus claims |
How We Use Your Personal Data
We process your personal data for the following purposes:
5.1 Account Management
To create, maintain and administer your account; to authenticate your identity at login; to communicate with you regarding account status and activity.
5.2 Transaction Processing
To process deposits, withdrawals and wager settlements accurately and securely; to reconcile payment records; to respond to payment disputes.
5.3 Regulatory Compliance (KYC/AML)
To verify your identity and age prior to account activation and withdrawal; to monitor transactions for suspicious activity in compliance with applicable AML regulations; to fulfil reporting obligations to regulatory authorities where legally required.
5.4 Platform Security & Fraud Prevention
To detect and investigate fraudulent activity, prohibited conduct (as described in our Terms & Conditions), multiple account registrations and technical attacks on our systems.
5.5 Service Improvement
To analyse anonymised usage patterns, identify technical issues, optimise platform performance for Pakistani mobile users and improve the overall user experience.
5.6 Marketing Communications (where consent is given)
To send promotional offers, bonus notifications and platform updates by email or push notification, where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected].
5.7 Responsible Gambling Monitoring
To identify patterns of behaviour consistent with problem gambling and to trigger responsible gambling interventions — such as account flagging, session prompts or self-exclusion activation — in accordance with our Responsible Gambling obligations.
Legal Basis for Processing
Our processing activities are underpinned by the following legal bases:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, transaction processing and identity verification;
- Legal Obligation: Processing required to comply with applicable AML regulations, age verification requirements and other legal obligations under our operating licence;
- Legitimate Interests: Processing undertaken to pursue our legitimate interests in fraud prevention, platform security, service optimisation and responsible gambling monitoring, provided those interests are not overridden by your fundamental rights;
- Consent: Processing based on your freely given, specific, informed and unambiguous consent — applicable primarily to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Data Sharing & Third Parties
Wanpar does not sell your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
7.1 Service Providers (Data Processors)
Third-party vendors who process data on our behalf and under our documented instruction, including: identity verification and KYC providers; payment processing infrastructure providers; fraud detection and risk management services; cloud hosting and data storage providers; customer support platform operators.
7.2 Regulatory & Legal Authorities
We may disclose personal data to competent regulatory authorities, law enforcement agencies or courts of law where we are legally obliged to do so — for example, pursuant to a court order, AML reporting requirement or fraud investigation.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify affected users prior to any such transfer taking effect.
7.4 Sports Data & Game Technology Partners
Anonymised or aggregated data (with no personally identifiable information) may be shared with sports data partners and game technology providers for the purpose of market calibration and platform service delivery. No individually identifiable data is shared for this purpose.
Data Retention
We retain personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC identity documents | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| Financial transaction records | 7 years from transaction date | Legal obligation / financial record-keeping |
| Betting / gaming activity logs | Duration of account + 3 years post-closure | Dispute resolution / responsible gambling |
| Customer support records | 3 years from last interaction | Legitimate interests / dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent / legal accountability |
| Anonymised analytics data | Indefinitely (no personal identifiers) | Legitimate interests / service improvement |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup or archival systems, data will be quarantined and deleted at the next scheduled purge cycle.
Your Rights as a Data Subject
Subject to applicable data protection law and any overriding legal obligations (such as AML retention requirements), you have the following rights with respect to your personal data:
Right of Access
Request a copy of the personal data we hold about you and information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no legitimate or legal basis for continued retention.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as while a dispute is resolved.
Right to Portability
Request your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing. We will cease such processing unless compelling grounds exist.
Withdraw Consent
Withdraw consent for consent-based processing (e.g., marketing emails) at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with the applicable data protection supervisory authority in the operator's licence jurisdiction.
To exercise any of these rights, please contact our Privacy team at [email protected]. We will respond to verified requests within 30 calendar days. We may require proof of identity before processing your request.
Cookies & Tracking Technologies
10.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our platform. They allow us to recognise your device across sessions, remember your preferences and collect analytical data about how you interact with the platform.
10.2 Categories of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens | Session / short-term |
| Functional | Language and display preferences, login persistence | Up to 12 months |
| Analytical | Anonymised usage statistics, navigation paths, page performance metrics | Up to 24 months |
| Marketing | Campaign attribution, promotional offer targeting (consent required) | Up to 12 months |
10.3 Managing Cookies
You may configure your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies may impair the functionality of the platform, including preventing you from logging in or completing transactions. Instructions for managing cookies are available in your browser's help documentation.
International Data Transfers
Wanpar operates under an international framework and may transfer your personal data to countries outside of Pakistan and outside of the European Economic Area, including countries where your data was collected. Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:
- Standard Contractual Clauses approved by the applicable data protection authority;
- Binding Corporate Rules where the recipient is part of a corporate group;
- Adequacy decisions recognising the destination country's data protection standards.
By using the Wanpar platform, you acknowledge that your personal data may be transferred to, processed and stored in countries with different data protection standards from those in Pakistan. We take reasonable steps to ensure that such transfers are conducted securely and with appropriate contractual protections in place.
Children's Privacy
The Wanpar platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's licence jurisdiction, whichever is greater. We do not knowingly collect personal data from persons under this age threshold.
Age verification is mandatory at the point of account registration. We use KYC procedures to verify that all registered users meet the applicable minimum age requirement before any betting or gaming activity is permitted.
Security Measures
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Our security framework includes:
- TLS/SSL encryption for all data transmitted between your device and our platform;
- Encryption at rest for all personal data stored on our servers;
- Access controls — staff access to personal data is restricted to authorised personnel on a need-to-know basis;
- Regular security audits and penetration testing of our platform infrastructure;
- Multi-factor authentication for administrative system access;
- Incident response procedures for the detection, containment and notification of data security incidents.
While we take robust measures to protect your data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access promptly.
Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law or platform functionality. Any material changes will be communicated to registered users via the email address associated with their account and/or by a prominent notice on the platform prior to the changes taking effect.
The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy regularly. Your continued use of the platform following any update constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way Wanpar processes your personal data, please contact us using the details below. All email addresses are displayed as plain text only and are not clickable links.
Privacy & Data Requests
[email protected]General Support
[email protected]Responsible Gambling
[email protected]We aim to respond to all privacy-related requests within 30 calendar days of receipt. Where a request is particularly complex or where a high volume of requests has been received, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window.