Privacy Policy
Your privacy matters to Epiwin. This Privacy Policy explains in plain, formal terms what personal data we collect, how we use it, who we share it with, and what rights you have over it. We encourage you to read it carefully alongside our Terms & Conditions.
Privacy at a Glance
Six principles that guide every data decision we make at Epiwin.
Minimal Data Collection
We collect only the data that is genuinely necessary for the Platform to function and improve. We do not collect data speculatively or for purposes beyond what is described in this Policy.
No Sale of Personal Data
We do not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Any data shared with partners is strictly governed by data processing agreements and limited to what is operationally necessary.
Your Rights, Respected
You have the right to access, correct, restrict, or request deletion of your personal data. We honour these rights promptly and without requiring you to jump through unnecessary hoops.
Security by Design
We implement technical and organisational security measures appropriate to the nature of data we process. Encryption, access controls, and regular security reviews are standard practice, not afterthoughts.
Defined Retention Periods
We do not hold personal data indefinitely. Retention periods are tied to the purpose for which data was collected. When that purpose expires, data is deleted or anonymised in a structured, auditable manner.
Transparent Communication
If this Policy changes materially, we update the "Last Updated" date at the top of this page. We do not bury important changes in fine print. Continued use of the Platform after changes are posted constitutes acceptance.
// Contents
- 01 Introduction
- 02 Definitions
- 03 Data We Collect
- 04 How We Collect Data
- 05 Lawful Basis
- 06 Data Processing
- 07 Cookies & Tracking
- 08 Data Sharing
- 09 International Transfers
- 10 Data Retention
- 11 User Rights
- 12 Minors & Age
- 13 Security Measures
- 14 Third-Party Sites
- 15 Pakistan & Local Law
- 16 Policy Changes
- 17 Contact Us
Introduction
Epiwin ("we", "us", "our") operates the website accessible at epiwin.cam (the "Platform"). This Privacy Policy ("Policy") describes how Epiwin collects, processes, stores, discloses, and protects personal data relating to individuals who access or use the Platform ("you", "your").
Epiwin is an English-language online gaming information and entertainment platform designed primarily for users in Pakistan. Our Platform provides editorial and informational content relating to sports betting, online casino games, responsible gambling practices, and related topics. We do not operate as a gambling operator and do not process wagers of any kind.
This Policy applies to all personal data processed by Epiwin in connection with your use of the Platform, including data collected when you browse the site, submit enquiries, or interact with any feature. It should be read alongside our Terms & Conditions and Responsible Gambling page.
Definitions
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers, and browsing behaviour. |
| "Processing" | Any operation performed on Personal Data — including collection, recording, storage, use, disclosure, deletion, or destruction. |
| "Data Controller" | Epiwin, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Epiwin, subject to written instructions and data processing agreements. |
| "Cookies" | Small data files placed on your device by the Platform to enable functionality, analytics, and session management. |
| "Applicable Law" | All data-protection, privacy, and related legislation applicable in the jurisdiction of Epiwin's operations and, as relevant, in the user's jurisdiction. |
| "Third-Party Platform" | Any external website, gambling operator, or service provider referenced or linked to from the Platform. |
Data We Collect
Epiwin collects the minimum Personal Data necessary to operate and improve the Platform. The categories of data we may collect are described below.
3.1 Data You Provide Directly
- Enquiry Data: Name, email address, and the content of any message you submit via our contact or support channels.
- Correspondence: Records of communications between you and Epiwin's support team, including timestamps and resolution notes.
- Preference Data: Any preferences or settings you voluntarily indicate through the Platform's interface (e.g., content category interests).
3.2 Data Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
- Usage Data: Pages visited, time spent on each page, click paths, scroll depth, and interaction events recorded via analytics tools.
- Cookie Data: Session identifiers, preference cookies, and analytics tokens — described in further detail under Clause 7.
- Log Data: Server access logs recording requests made to the Platform, including timestamps, resource paths, and HTTP response codes.
3.3 Data We Do Not Collect
Epiwin does not collect or process the following categories of data:
- Payment card numbers, bank account details, or financial transaction records of any kind.
- Government-issued identity documents, national identity numbers, or CNIC data.
- Biometric data or health-related data.
- Gambling account credentials, betting histories, or wager amounts from third-party operators.
How We Collect Personal Data
Personal Data is collected through the following means:
- Direct Interaction: When you contact the support team via email, submit a query through the Platform's contact feature, or provide information voluntarily.
- Automated Technologies: When you browse the Platform, our servers and analytics tools automatically record technical and usage data as described in Clause 3.2.
- Cookies and Similar Technologies: Cookies, pixel tags, and local storage objects may be used to collect session and preference data — see Clause 7 for full details.
- Third-Party Analytics: We may use analytics service providers who collect aggregated, pseudonymised usage data on our behalf to help us understand how the Platform is used and where it can be improved.
We do not purchase Personal Data from data brokers. We do not collect data from social media platforms unless you choose to share a Platform URL from a social network, in which case standard social-sharing technical events may be recorded by those platforms under their own privacy policies.
Lawful Basis for Processing
Epiwin processes Personal Data only where a valid lawful basis exists under Applicable Law. The lawful bases we rely on are as follows:
| Processing Activity | Lawful Basis |
|---|---|
| Delivering Platform content and functionality | Legitimate interests — operating and maintaining a publicly accessible information platform. |
| Responding to support enquiries | Performance of a contract / legitimate interests in providing user assistance. |
| Analytics and Platform improvement | Legitimate interests in understanding usage patterns to improve content quality and user experience. |
| Security monitoring and fraud prevention | Legitimate interests in protecting the integrity of the Platform and its users. |
| Compliance with legal obligations | Compliance with Applicable Law — e.g., responding to lawful regulatory or law-enforcement requests. |
| Non-essential cookies and tracking | Consent — obtained via the Platform's cookie-consent mechanism where required by Applicable Law. |
Where we rely on legitimate interests, we have conducted a balancing test to ensure that our interests do not override your fundamental privacy rights. You may request details of this assessment by contacting us at the address in Clause 17.
How We Use Your Personal Data
Personal Data collected through the Platform is used for the following purposes:
- Platform Operation: Serving page content, managing sessions, and ensuring technical functionality across devices and browsers commonly used in Pakistan — including mid-range Android devices.
- Content Personalisation: Where applicable, adjusting content recommendations based on browsing behaviour and indicated preferences — using pseudonymised data only.
- Support & Communication: Responding to enquiries received via the support email, tracking open issues, and following up where necessary to resolve queries.
- Analytics & Performance: Analysing aggregated usage patterns to identify popular content, technical issues, and areas for improvement — including assessing which betting guides, responsible gambling articles, or PSL/cricket-related content receives the most engagement.
- Security & Fraud Prevention: Monitoring access logs for unusual activity, detecting abuse of the Platform's features, and protecting against unauthorised scraping or bot traffic.
- Legal Compliance: Retaining records as required by Applicable Law and responding to lawful requests from regulatory or law-enforcement authorities.
We do not use Personal Data for automated decision-making that produces legal or similarly significant effects on users. We do not build user profiles for sale to third-party advertisers.
Cookies & Tracking Technologies
Epiwin uses cookies and similar tracking technologies to enable core Platform functionality and to collect analytics data. The categories of cookies used are described below.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Enables core navigation, session management, and security features. The Platform cannot function properly without these cookies. | No — exempt |
| Analytics / Performance | Collects pseudonymised data on how users interact with the Platform — pages visited, time on site, bounce rate. Used to improve content structure and performance. | Yes — where required |
| Functional / Preference | Remembers user preferences such as content category selections or notification dismissals to improve return visits. | Yes — where required |
| Third-Party Analytics | Set by analytics service providers acting as Data Processors on our behalf. Data is aggregated and pseudonymised. No personal advertising profiles are built. | Yes — where required |
7.1 Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict specific categories of cookies. Please note that disabling strictly necessary cookies may impair Platform functionality.
Instructions for managing cookies in common browsers used in Pakistan — including Chrome on Android, Samsung Internet, and Firefox — are available in each browser's help documentation.
Data Sharing & Disclosure
Epiwin does not sell Personal Data. We share Personal Data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.
8.1 Service Providers (Data Processors)
We engage third-party service providers to support Platform operations — including hosting infrastructure, analytics platforms, and content delivery networks. These providers process Personal Data solely on our behalf, under written data processing agreements, and are prohibited from using it for their own purposes.
8.2 Legal & Regulatory Disclosure
We may disclose Personal Data to law-enforcement agencies, regulatory bodies, or courts where required to do so by Applicable Law, valid legal process, or to protect the rights and safety of Epiwin, its users, or the public. We will notify affected users of such disclosures where legally permissible.
8.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of Epiwin's business, Personal Data held by us may be transferred to the acquiring entity as part of that transaction. We will notify users through a prominent notice on the Platform prior to any such transfer, and the acquiring party will be required to honour the commitments made in this Policy.
8.4 Aggregated & Anonymised Data
We may share aggregated, anonymised analytics data — from which no individual can be identified — with content partners or for editorial research purposes. This does not constitute a disclosure of Personal Data.
International Data Transfers
Epiwin's Platform serves users primarily in Pakistan. Our infrastructure and service providers may be located in jurisdictions outside Pakistan — including within the European Economic Area (EEA) or in countries that have received adequacy determinations under applicable data-protection frameworks.
Where Personal Data is transferred to a country that does not provide equivalent data-protection standards to those applicable in the user's jurisdiction, Epiwin takes appropriate safeguards — including the use of standard contractual clauses or equivalent mechanisms — to ensure that your data remains protected to an adequate standard regardless of where it is processed.
You may request details of the safeguards applied to international transfers by contacting us at the address provided in Clause 17.
Data Retention
Epiwin retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by Applicable Law. Our general retention approach is as follows:
| Data Category | Retention Period |
|---|---|
| Support correspondence | 24 months from resolution of the relevant enquiry, then deleted or anonymised. |
| Analytics and usage data | Up to 26 months in pseudonymised form, after which aggregated only. |
| Server access logs | 90 days for standard logs; up to 12 months where security investigation is ongoing. |
| Cookie data | Session cookies expire at session end; persistent cookies expire per the schedule set at the time of placement (typically 12–24 months). |
| Legal compliance records | As required by Applicable Law — typically a minimum of 5 years for records relevant to legal proceedings or regulatory obligations. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or rendered permanently anonymous using industry-standard methods.
Your Rights as a Data Subject
Subject to Applicable Law, you have the following rights in relation to your Personal Data held by Epiwin. You may exercise any of these rights by contacting us at the details provided in Clause 17.
To exercise any of the rights above, please contact us as described in Clause 17. We may ask you to verify your identity before processing your request. We will respond within 30 days; in complex cases this may be extended by a further 60 days, with notice provided to you.
Minors & Age Restrictions
The Epiwin Platform is strictly intended for adults aged 18 and above, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect Personal Data from individuals below the age of 18.
If we become aware that Personal Data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data. If you believe that we may have inadvertently collected data from a minor, please contact us immediately at the address in Clause 17.
Security Measures
Epiwin implements technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- Encryption in Transit: All data transmitted between your browser and the Platform is encrypted using TLS (Transport Layer Security) protocols.
- Access Controls: Access to systems holding Personal Data is restricted to authorised personnel on a need-to-know basis, using role-based access controls and multi-factor authentication.
- Infrastructure Security: Platform infrastructure is hosted with providers that maintain recognised security certifications and conduct regular independent security audits.
- Incident Response: We maintain a documented incident response procedure. In the event of a data breach that presents a risk to your rights and freedoms, we will notify relevant supervisory authorities and affected users within the timeframes required by Applicable Law.
- Vendor Assessment: Third-party service providers are assessed for security practices prior to engagement and are contractually required to maintain appropriate security standards.
While we take all reasonable steps to protect your data, no transmission over the internet or electronic storage method is entirely secure. We cannot guarantee absolute security and encourage users to take precautions — such as avoiding public Wi-Fi for sensitive activities and keeping devices updated — particularly given network conditions that may be encountered across Pakistani cities.
Third-Party Sites & References
The Platform contains informational references to, and descriptions of, third-party gambling operators, payment providers, and other external services. Epiwin is not responsible for the privacy practices of any third party and makes no representations as to the adequacy of their data-protection measures.
Payment providers referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, and Bank Alfalah — are mentioned solely as examples of payment infrastructure familiar to Pakistani users. Epiwin does not share Personal Data with these providers and does not process any payment transactions. Each provider operates under its own privacy policy, which you should review before using their services.
Sports organisations mentioned on the Platform — including the Pakistan Cricket Board (PCB), Pakistan Super League (PSL), and the International Cricket Council (ICC) — are referenced for informational context only. Epiwin is not affiliated with, endorsed by, or in a data-sharing relationship with any of these organisations.
Pakistan & Applicable Local Law
Epiwin's Platform is designed and targeted primarily at users in Pakistan. We are aware that Pakistan's data-protection landscape is evolving, and that the Personal Data Protection Bill (in its current or future enacted form) may impose specific obligations on organisations processing the personal data of Pakistani residents.
We strive to operate in a manner consistent with internationally recognised data-protection principles — transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability — which broadly align with the direction of Pakistan's emerging data-protection framework.
Epiwin does not claim to be registered with, licensed by, or regulated by the National Information Technology Board (NITB), the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any other Pakistani regulatory body in connection with its data-processing activities. Users who have concerns about their data-protection rights under Pakistani law are encouraged to seek independent legal advice.
Changes to This Privacy Policy
Epiwin reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date displayed at the top of this page. We may also post a prominent notice on the Platform's homepage for a reasonable period following material changes.
It is your responsibility to review this Policy periodically. Your continued use of the Platform after any changes are posted constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must discontinue use of the Platform.
For significant changes that affect how we use data you have already provided — or that reduce your privacy rights — we will make reasonable efforts to provide advance notice before changes take effect.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data we hold about you, please contact the Epiwin data team using the details below.
Email (plain text — not a clickable link):
Please copy this address manually into your email client. We aim to acknowledge all privacy-related requests within 5 working days and to respond substantively within 30 calendar days.
When submitting a data-subject rights request, please include:
- Your full name and, if applicable, the email address associated with your enquiries.
- A clear description of the right you wish to exercise and any relevant context.
- Sufficient information to allow us to verify your identity before processing the request.
Your Data, Your Rights — Always Transparent
Epiwin is built on a foundation of honesty. Now that you understand how we handle your data, explore the rest of the Platform with confidence — from our responsible gambling guides to our Pakistan cricket betting content.