Super Win Privacy Policy – How We Protect Your Data

Super Win operates the online gaming platform available at superwin-app.net. For the purposes of this Privacy Policy, "Super Win", "we", "us", and "our" refer to the operators of the platform. "You" and "your" refer to any individual who accesses, browses, registers on, or uses the Super Win platform in any capacity.

Super Win is the data controller responsible for the personal information collected through this platform. This means we determine why and how your personal data is processed. If you have any questions about our role as data controller or about this policy in general, the contact details are in Section 13.

Super Win collects personal data through several channels: information you provide directly, information generated automatically by your use of the platform, and information received from third-party service providers such as payment processors. Here is a full breakdown of what we collect and why:

Super Win does not collect sensitive personal data such as health information, religious beliefs, or political opinions. We do not collect data from your device's contacts list, microphone, or camera beyond what is explicitly needed for identity verification purposes when requested.

Every piece of data Super Win collects has a specific, legitimate purpose. We do not collect data speculatively or for purposes we haven't identified. Here is exactly what we use your data for:

• Account management: Creating and maintaining your Super Win account, verifying your identity, and enabling login and security features.
• Payment processing: Processing your deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Detecting and preventing payment fraud.
• Game delivery: Running the games you play, calculating outcomes, recording results, and crediting winnings to your balance.
• Bonus and promotion administration: Verifying eligibility for promotions, crediting bonuses, tracking wagering requirements, and detecting bonus abuse.
• Customer support: Responding to your questions, resolving disputes, and reviewing support interactions to improve service quality.
• Responsible gaming: Monitoring for signs of problem gambling behaviour and applying limits or interventions where appropriate. This includes analysing gaming data patterns to identify at-risk players.
• Regulatory compliance: Fulfilling anti-money laundering (AML) obligations, conducting Know Your Customer (KYC) checks, reporting to relevant authorities as legally required, and maintaining records required by applicable regulations.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and identify areas for improvement.
• Security and fraud prevention: Detecting and investigating suspicious account activity, preventing multi-accounting, and protecting the platform and its players from fraud.
• Communications: Sending you important account notifications, transactional messages, and — where you have given consent — promotional communications about offers and new features.

Super Win processes your personal data on the following legal grounds, depending on the specific purpose:

• Contract performance: Processing necessary to provide the services you've registered for — including account management, payments, and game delivery. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, tax reporting obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement — where our legitimate interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies. You can withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Super Win does not sell your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum financial data required to process your transactions. These processors operate under their own privacy policies and are bound by contractual data protection obligations with Super Win.
• Identity verification providers: When KYC verification is required, your identity documents are shared with our accredited third-party verification provider. Documents are processed securely and are not retained by the verification provider beyond the verification period.
• Game software providers: Providers of live dealer games and RNG game software may receive session data (game outcomes, bet amounts) for the purpose of delivering and auditing game results. They do not receive your identity or contact information.
• Anti-fraud and security services: Technical data such as IP addresses and device fingerprints may be shared with fraud prevention services to identify and block suspicious activity.
• Regulatory and law enforcement authorities: Super Win will disclose personal data to authorities where legally required — including in response to court orders, regulatory inspections, or AML investigations. We are not required to notify you when such disclosures are made if doing so would compromise the investigation.
• Analytics providers: Aggregated, anonymised behavioural data may be shared with analytics services to understand platform usage trends. No personally identifiable information is included in these data transfers.

All third-party service providers who receive personal data from Super Win are contractually required to maintain appropriate data security standards and to use the data only for the specified purpose. Super Win does not authorise third parties to use your data for their own marketing purposes.

Data only travels to third parties when strictly necessary — never for advertising or marketing.

Super Win uses cookies and similar tracking technologies to make the platform function correctly and to improve your experience. A cookie is a small text file stored on your device when you visit the platform. Here is what we use:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in, security tokens, and cookies that remember your account preferences. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your language preference, game lobby filters, and other personalisation settings. These improve your experience but are not strictly essential.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited, where users drop off, how long sessions last. This data helps Super Win improve the platform. No personally identifiable information is collected via analytics cookies.
• Security cookies: Used to detect suspicious login attempts, block brute-force attacks, and identify potentially fraudulent sessions.

Super Win does not use advertising cookies or third-party tracking pixels for retargeting purposes. We do not run ads on external websites, and we do not allow ad networks to place tracking cookies through our platform.

You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent you from logging into your Super Win account. On your first visit, a cookie consent notice allows you to accept or customise non-essential cookies.

Super Win takes data security seriously and has implemented multiple layers of protection to keep your personal information safe. Our security measures include:

• 256-bit SSL/TLS encryption on all connections between your device and the Super Win platform — the same standard used by major Pakistani banks.
• Encrypted data storage for all sensitive personal and financial data at rest, using industry-standard encryption algorithms.
• Access controls — only authorised Super Win personnel with a legitimate need can access personal data, and all access is logged and audited.
• Two-factor authentication (2FA) available for player accounts to add an additional layer of login security.
• Regular security audits conducted by independent third-party security specialists to identify and address vulnerabilities before they can be exploited.
• Intrusion detection systems that monitor for unauthorised access attempts and unusual activity patterns in real time.

Despite these measures, no internet-connected system can guarantee absolute security. Super Win will notify affected users without undue delay in the event of a personal data breach that poses a risk to your rights and freedoms, in accordance with applicable data protection law.

You also have a role in keeping your account secure. Use a strong, unique password for your Super Win account, never share your login credentials with anyone, and contact support immediately if you suspect unauthorised access to your account.

Super Win retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention approach is as follows:

• Active account data: Retained for the full duration of your account being active on Super Win.
• Account closure: Following voluntary account closure, your data is retained for a minimum of 5 years to fulfil AML regulatory requirements and to handle any disputes or legal claims that may arise after closure.
• KYC and identity documents: Retained for 5 years after the end of the business relationship, as required by anti-money laundering regulations.
• Transaction records: Financial transaction history is retained for 7 years for accounting, audit, and regulatory compliance purposes.
• Support communications: Live chat transcripts and email correspondence are retained for 3 years and then securely deleted.
• Analytics data: Anonymised aggregate analytics data is retained indefinitely as it cannot be traced back to any individual.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account to honour your preferences.

When the retention period for a category of data expires, that data is securely deleted or anonymised so that it can no longer be linked to you. Super Win does not retain data beyond what is necessary for the stated purpose.

You have the following rights in relation to your personal data held by Super Win. To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days in most cases:

Super Win is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation that you are 18 or older, and we conduct age verification checks as part of our KYC process.

If Super Win discovers that a minor has registered or has been allowed to access the platform, that account will be immediately suspended, all balances forfeited, and the personal data associated with that account deleted in accordance with our data retention policy. If you believe a minor has registered on Super Win, please notify us immediately at support@superwin-app.net.

Parents and guardians who share devices with minors are encouraged to use their device's parental control features to restrict access to online gaming platforms. Super Win supports the use of parental control software and internet filtering tools to keep minors away from age-restricted content.

The Super Win platform does not contain links to third-party websites for general browsing. All navigation on the platform stays within the Super Win domain. Any external links that do appear — such as links to payment provider websites — are clearly identified and open in a new tab.

Super Win is not responsible for the privacy practices of external websites or services. If you follow a link to an external site, the privacy policy of that site governs the collection and use of your data from that point forward. We encourage you to review the privacy policy of any external site before providing personal information to it.

Super Win may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When we make material changes, we will notify registered players via their registered mobile number or email address with a minimum of 7 days' notice before the updated policy takes effect.

The current version of this policy is always available at superwin-app.net/privacy-policy. The "Last Updated" date at the top of the page reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed about how Super Win handles your data.

Your continued use of the Super Win platform after a revised policy takes effect constitutes your acceptance of the revised terms. If you disagree with changes to this policy, you may request account closure before the revised policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact the Super Win privacy team:

• Email: support@superwin-app.net (mark the subject line "Privacy Request")
• Live Chat: Available 24/7 after logging in — ask to be connected to the privacy team
• Languages: Urdu and English
• Response time: Privacy requests are handled within 30 days. Urgent matters (suspected data breach, account compromise) are escalated and responded to within 24 hours.

Super Win takes all privacy complaints seriously. If you submit a complaint, we will acknowledge it within 3 business days and provide a full response within 30 days. If you are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.