Winli Slot Privacy Policy — Pakistan Data Protection Commitment

This Privacy Policy explains how Winli Slot ("we", "us", "the platform") collects, uses, stores and protects personal data provided by or collected about members, visitors and prospective members ("you") when you use the Winli Slot platform at winlislot.com.

Winli Slot operates as the data controller in respect of your personal information. This means we decide why and how your data is processed. We take that responsibility seriously and have put considerable effort into making sure your data is handled with care, transparency and genuine respect for your privacy.

This policy applies to all data collected through:

• Registration and account management on the Winli Slot platform
• Deposits, withdrawals and payment transactions in PKR
• Gameplay across all Winli Slot game categories including PSL Betting, Teen Patti, Poker, Andar Bahar, live casino and slots
• Use of the VIP Club and Refer a Friend programme
• Interactions with Winli Slot's customer support team
• Browsing any page on winlislot.com

Winli Slot collects different categories of personal data at different stages of your relationship with the platform. The categories, specific data points and how they are collected are set out below:

Winli Slot does not intentionally collect sensitive personal data such as health information, religious beliefs or biometric data beyond facial photographs used for identity verification in accordance with KYC requirements.

Every piece of data Winli Slot collects is collected for a specific, legitimate purpose. We do not collect data speculatively or store data that has no defined use. The purposes for which your data is processed are:

• Account creation and management: To register your Winli Slot account, verify your identity, maintain your account balance and preferences, and manage your membership status including VIP Club tier. Core Service
• Payment processing: To accept deposits in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard; to process withdrawal requests to your registered payment method; and to maintain a complete transaction history for your records. Core Service
• Regulatory compliance: To meet our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, which require us to verify member identities and monitor transaction patterns for suspicious activity. Legal Obligation
• Platform security and fraud prevention: To detect and prevent unauthorised access to accounts, identify patterns consistent with fraudulent activity, protect the integrity of all games and betting markets, and prevent the platform from being used for money laundering or other financial crimes. Legitimate Interest
• Customer support: To respond to your queries, resolve disputes, process responsible gaming requests such as self-exclusion, and maintain a record of your interactions with the support team. Contractual Obligation
• Responsible gaming monitoring: To identify patterns that may indicate a member is developing problem gambling behaviour and to proactively offer responsible gaming tools or interventions where appropriate. Legitimate Interest
• Platform improvement: To analyse aggregated, anonymised usage patterns to improve game performance, interface design and feature development at Winli Slot. Legitimate Interest
• Marketing communications: To send promotional offers, bonus notifications and platform updates to members who have opted in to receive communications. You can opt out at any time through your account settings. Consent (opt-in)

Winli Slot processes personal data only where there is a valid legal basis for doing so. The legal bases we rely on are:

• Contract performance: Processing your registration data, managing your account balance, handling deposits and withdrawals, and operating the games and betting markets you access are all necessary to fulfil the contract between you and Winli Slot when you create an account.
• Legal obligation: KYC identity verification, AML transaction monitoring and record-keeping required by applicable financial crime regulations are obligations Winli Slot is required to fulfil regardless of individual member consent. These cannot be opted out of.
• Legitimate interest: Fraud detection, platform security, responsible gaming monitoring and platform analytics are processed on the basis of Winli Slot's legitimate interest in maintaining a secure, fair and reliable service. In each case, we have assessed that our legitimate interest is not overridden by your privacy interests.
• Consent: Marketing communications — promotional emails, SMS notifications about bonuses and platform updates — are sent only where you have explicitly opted in. You can withdraw this consent at any time through your account settings without affecting any other aspect of your Winli Slot membership.

Know Your Customer verification is a standard and legally required practice for online financial and gaming platforms. At Winli Slot, KYC verification is required before your first withdrawal is processed. You will not be required to complete full KYC verification simply to register an account or make a deposit.

What KYC verification at Winli Slot involves:

• A clear copy of your valid CNIC (Computerised National Identity Card) — both front and back
• A recent selfie photograph for facial comparison against the CNIC
• In some cases, proof of payment method — for example, a screenshot of your Easypaisa or JazzCash account showing your registered name and mobile number

KYC documents submitted to Winli Slot are processed by our verified identity verification partner under strict data handling agreements. Your CNIC number and facial photograph are used only for identity verification purposes and are never used for any other processing purpose or shared with any third party outside of the verification process.

All financial transactions at Winli Slot are conducted in Pakistani Rupees (PKR) through the payment methods most familiar to Pakistani users: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers and Visa/Mastercard cards.

Winli Slot does not store full card numbers, CVV codes or online banking passwords. Payment data is handled by PCI DSS compliant payment processors under direct data processing agreements. Winli Slot receives and stores only the minimum payment reference data required to:

• Match your deposit to your Winli Slot account balance
• Process your withdrawal to your registered payment method
• Maintain a transaction history for your records and for regulatory compliance purposes
• Identify and investigate any disputed transactions

Your complete PKR transaction history — every deposit and withdrawal — is visible in the Transactions section of your Winli Slot account at any time. If you believe any transaction in your history is incorrect, contact support at support@winlislot.com within 30 days of the transaction date.

Winli Slot uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences and to understand how members use the site so we can improve it. The cookies used by Winli Slot fall into three categories:

Winli Slot does not use third-party advertising cookies, behavioural profiling cookies or any cookie that shares your personal data with advertising networks or data brokers. Your browsing behaviour on the Winli Slot platform is not tracked by external parties.

Winli Slot does not sell, rent or trade your personal data to any third party for any purpose. Data sharing is limited strictly to what is necessary to operate the platform and meet legal obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and our card processing partner receive only the transaction data necessary to process your specific payment. They operate under data processing agreements with Winli Slot and are not permitted to use your data for any purpose other than processing your transaction.
• Identity verification provider: Our KYC verification partner receives the identity documents you submit during verification. This partner is contractually bound to use your data only for identity verification on behalf of Winli Slot and to delete verification documents once the process is complete.
• Fraud prevention services: Anonymised or pseudonymised data about transaction patterns may be shared with fraud prevention networks to identify and block fraudulent activity. This sharing does not involve your full name, CNIC or payment account details.
• Regulatory bodies and law enforcement: Where Winli Slot is legally required to disclose member data — for example, in response to a court order, formal regulatory request or a statutory AML reporting obligation — we will comply. We will notify you of such disclosure where we are legally permitted to do so.
• Professional advisers: Our legal, accounting and compliance advisers may access member data where strictly necessary to provide their professional services. They are bound by confidentiality obligations.

Winli Slot retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

• Account data (active members): Retained for the full duration of your membership and for 5 years after the closure of your account. This retention period is required by our AML compliance obligations, which mandate that financial transaction records be kept for a minimum of 5 years.
• KYC verification documents: Retained for 5 years after the date of verification or account closure, whichever is later. This is a regulatory requirement applicable to all licensed gaming and financial platforms.
• Transaction records: PKR deposit and withdrawal records are retained for 7 years to comply with applicable financial record-keeping requirements.
• Support communications: Customer support conversations are retained for 3 years from the date of the last message in each thread. This retention period covers the standard timeframe for any related dispute to be raised and resolved.
• Marketing data: If you opt out of marketing communications, your opt-out preference is retained indefinitely to ensure we do not re-contact you. All other marketing profile data is deleted within 90 days of opt-out.
• Technical and analytical data (anonymised): Anonymised usage data with no connection to your personal identity may be retained indefinitely for platform improvement purposes.

Data security is not an afterthought at Winli Slot — it is a core part of how the platform was built and how it operates every day. The technical and organisational measures in place to protect your personal data include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the Winli Slot servers is encrypted using industry-standard 256-bit SSL/TLS. This applies to every page, every login, every transaction and every piece of data submitted to the platform.
• Secure data storage: All member data is stored on servers with restricted access controls, regular security patching and continuous intrusion detection monitoring. Physical access to server infrastructure is limited to authorised personnel only.
• Password hashing: Your account password is never stored in plain text. Passwords are hashed using a modern, one-way cryptographic algorithm. Even Winli Slot's own technical team cannot retrieve your password — only reset it through the verified account recovery process.
• Access controls: Internal access to member data is restricted on a strict need-to-know basis. Customer support staff can access account information relevant to their support role. They cannot access your payment credentials or your full transaction history beyond what is needed to resolve a specific query.
• Security incident response: Winli Slot maintains a documented security incident response plan. In the event of a data breach that poses a material risk to members, affected members will be notified promptly with clear guidance on protective steps they should take.

As a member of the Winli Slot platform, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, send a request to privacy@winlislot.com. We aim to respond to all data rights requests within 30 calendar days.

• Right to access: You can request a copy of all personal data Winli Slot holds about you. We will provide this in a clear, readable format within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request that we correct it. For most account data, you can update this directly through your account settings without needing to contact us.
• Right to erasure: You can request deletion of your personal data. This right applies where we no longer have a legal basis for retaining your data. Where regulatory retention obligations apply — for example, the 5-year AML record-keeping requirement — we cannot delete data before the end of the mandatory retention period, but we will delete it as soon as the obligation expires.
• Right to restrict processing: In certain circumstances — for example, where you contest the accuracy of data we hold — you can request that we pause processing of your data while the matter is resolved.
• Right to data portability: You can request a copy of data you have provided to Winli Slot in a structured, machine-readable format, where technically feasible.
• Right to object: You can object to processing of your data based on Winli Slot's legitimate interest. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — for example, marketing communications — you can withdraw that consent at any time without affecting any other aspect of your Winli Slot account.

Winli Slot reviews this Privacy Policy periodically and updates it when our data practices change or when legal requirements require amendment. The current version of this policy is dated 1 June 2025 and supersedes all previous versions.

Where changes to this policy materially affect how we process your personal data, we will notify you by email to your registered address at least 14 days before those changes take effect. Continued use of the Winli Slot platform after the effective date of an updated policy constitutes acceptance of the updated terms.

The current version of this policy is always accessible at winlislot.com/privacy-policy. We recommend bookmarking this page if you would like to check for updates periodically.

Contact details for privacy-related matters:

• Privacy email: privacy@winlislot.com
• General support: support@winlislot.com
• Response time for data rights requests: within 30 calendar days
• Support hours: 24 hours a day, 7 days a week