SpribeWin Privacy Policy — Your Data,
Protected at Every Step

SpribeWin is the data controller for all personal information collected through the spribewin.ws platform. SpribeWin operates an online gaming platform that provides cricket betting, live casino, jackpot slots, Andar Bahar, esports betting and related services primarily to players in Pakistan. All financial transactions on the SpribeWin platform are denominated in Pakistani Rupees (PKR).

For all data protection enquiries, you can contact SpribeWin's designated data team directly at support@spribewin.ws. We aim to respond to all data-related queries within 24 business hours.

This Privacy Policy applies to all personal data collected through the SpribeWin website, mobile browser experience, any promotional communications you receive from SpribeWin, and any interaction with SpribeWin's customer support team. It does not cover third-party websites or services that may be linked from our platform — though we do not link to external sites as a general practice.

SpribeWin collects personal data through several mechanisms. Here is a clear breakdown of each category:

Data You Provide Directly

• Account registration: Full name, date of birth, email address, mobile number, residential address (including city and province in Pakistan)
• KYC verification: Government-issued ID (CNIC, passport), proof of address documents, selfie or video verification where required
• Payment information: Easypaisa or JazzCash mobile number, NayaPay/SadaPay wallet ID, bank account details for IBFT, or card details for Visa/Mastercard payments. Note: SpribeWin does not store full card numbers — these are handled by our PCI-DSS certified payment processor
• Support interactions: Messages sent via live chat or email, including any personal details you choose to share when describing your issue
• Responsible gaming requests: Limit settings, self-exclusion requests and any information shared as part of a responsible gaming review

Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution
• Usage data: Pages visited on spribewin.ws, games played, betting history, session duration, click patterns and navigation paths
• Cookies and tracking technologies: Session cookies, persistent cookies and similar technologies (see Section 7 for full cookie details)
• Geolocation data: General location derived from IP address for fraud prevention and compliance purposes. SpribeWin does not use precise GPS-level location tracking

SpribeWin uses collected personal data for the following clearly defined purposes:

SpribeWin does not use personal data for automated decision-making that produces significant legal effects on players, with the exception of automated fraud detection systems which may trigger temporary account holds pending human review.

SpribeWin processes personal data under the following legal bases:

• Contractual necessity: Processing your account registration details, payment data and gameplay information is necessary to provide the SpribeWin service you have requested. Without this data, SpribeWin cannot operate your account or process your PKR transactions.
• Legal obligation: SpribeWin is required by its gaming licence to collect KYC documentation, maintain records of financial transactions and report suspicious activity. These obligations are non-negotiable and SpribeWin cannot waive them on request.
• Legitimate interests: SpribeWin processes IP addresses, device data and usage patterns for fraud prevention and platform security. These represent legitimate interests that do not override your fundamental rights as a player.
• Consent: Marketing communications — including promotional emails and bonus notifications — are sent only where you have given explicit consent. You may withdraw this consent at any time via the unsubscribe option in any marketing email or by contacting support.

SpribeWin never sells your personal data to third parties for marketing purposes. Full stop. The following is a complete list of circumstances in which your data may be shared outside of SpribeWin's own systems:

Payment Processors

To process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard, SpribeWin must share relevant account and transaction data with the corresponding payment service providers. These providers operate under their own privacy policies and are contractually bound to handle SpribeWin player data securely and only for the purpose of payment processing.

KYC and Identity Verification Partners

SpribeWin uses a third-party identity verification service to process CNIC and passport verification. This provider is subject to strict data processing agreements and handles your documents solely for the purpose of confirming your identity.

Game Providers

When you play live casino games, slots or other titles from SpribeWin's game providers (such as Evolution Gaming, Ezugi or Pragmatic Play), your account identifier and session data are shared with the relevant provider to deliver the game. These providers are certified and operate under their own regulatory obligations.

Regulatory and Law Enforcement Authorities

SpribeWin is legally required to share certain data with its licensing authority and, where required by law, with law enforcement or financial intelligence agencies. SpribeWin cannot refuse such disclosures where they are legally mandated.

SpribeWin processes all transactions in Pakistani Rupees (PKR). The security of your payment data is treated with the highest priority. Here is how SpribeWin handles financial information specifically:

• Easypaisa and JazzCash: Only your registered mobile number is stored by SpribeWin. Actual wallet authentication and fund movement happens through the provider's own secure API. SpribeWin never has access to your Easypaisa or JazzCash PIN.
• NayaPay and SadaPay: Similar to above — SpribeWin stores your linked wallet identifier but not your authentication credentials.
• Bank IBFT: Your account number and bank name are stored for withdrawal matching. These are handled under the same encryption standards as all other personal data at SpribeWin.
• Visa and Mastercard: SpribeWin uses a PCI-DSS Level 1 certified payment processor. Full card numbers are never stored on SpribeWin's servers. Only a tokenised reference is retained for refund and reconciliation purposes.

All payment-related data at SpribeWin is stored on servers with restricted access controls. Only personnel with a demonstrated operational need can access financial transaction records, and all such access is logged and audited.

SpribeWin uses cookies and similar technologies to operate the platform, remember your preferences, prevent fraud and improve your experience. Here is a breakdown of the cookies SpribeWin uses:

You can control cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the SpribeWin platform from functioning correctly. For all other cookie types, disabling them will not prevent you from using SpribeWin — it may simply result in a slightly less personalised experience.

SpribeWin retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account plus 5 years following account closure, in accordance with standard anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• KYC documents (CNIC, passport scans): Retained for 5 years from the date of verification or account closure, whichever is later.
• Financial transaction records: Retained for 7 years in compliance with financial record-keeping requirements under our gaming licence.
• Customer support interactions: Retained for 3 years to allow reference in case of disputes or follow-up queries.
• Marketing consent records: Retained for as long as your account is active and for 2 years following any withdrawal of consent, for compliance audit purposes.
• Anonymised analytics data: Retained indefinitely in anonymised form and is not linked to any individual player after anonymisation.

Once retention periods expire, SpribeWin securely deletes or anonymises the relevant data. Deletion requests submitted by players are handled in accordance with Section 10 of this policy.

SpribeWin implements a layered security architecture to protect personal data. The following measures are in place across the platform:

• 256-bit SSL/TLS encryption on all data transmitted between your device and SpribeWin's servers
• At-rest encryption for stored personal data and financial records using AES-256
• Role-based access controls ensuring that only authorised staff with a specific operational need can access personal data, with all access logged
• Two-factor authentication available for all player accounts and mandatory for administrative access to SpribeWin's backend systems
• Intrusion detection and monitoring running continuously across all production infrastructure
• Regular security audits and penetration testing conducted by independent third-party security firms
• Secure development practices including code review, dependency scanning and vulnerability assessments as part of the platform development lifecycle

In the event of a data breach that affects your personal information, SpribeWin will notify affected players as soon as reasonably practicable and in accordance with any applicable legal notification obligations. If you suspect unauthorised access to your SpribeWin account, please contact support immediately so we can take protective action.

You have a number of rights in relation to your personal data held by SpribeWin. These are genuine, exercisable rights — not theoretical ones buried in a policy document. Here is how each one works in practice:

To exercise any of these rights, email SpribeWin at support@spribewin.ws with the subject line "Data Rights Request" and describe what you are asking for. We will confirm receipt within 1 business day and complete your request within 30 days. If your request is complex or there are a high volume of requests, we may extend this to 60 days with notice.

SpribeWin is strictly an 18+ platform. SpribeWin does not knowingly collect or process personal data from anyone under the age of 18. If during the account registration or KYC process SpribeWin discovers or has reasonable grounds to believe that an account holder is under 18, the account will be immediately suspended and all associated data will be reviewed in accordance with applicable child protection obligations.

If you believe a minor has registered at SpribeWin, please contact support@spribewin.ws immediately. We will investigate and take appropriate action as a matter of priority. Parents and guardians who are concerned about under-age access to online gaming platforms are encouraged to use device-level parental controls and to visit the Responsible Gaming page for guidance and resources.

SpribeWin may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform functionality. When we make changes, the "Last Updated" date at the top of this page will be revised.

For material changes — those that significantly affect how we collect, use or share your personal data — SpribeWin will notify registered players by email at least 7 days before the change takes effect. For minor administrative updates, a notice on the SpribeWin platform will be sufficient.

Continuing to use SpribeWin after a privacy policy update takes effect constitutes your acceptance of the revised policy. If you do not agree with a material change, you have the right to close your SpribeWin account before the change takes effect. Previous versions of this policy are available on request from support@spribewin.ws.

For any question, concern or request relating to your personal data and SpribeWin's privacy practices, please contact us through any of the following channels:

• Email (preferred for data requests): support@spribewin.ws — use the subject line "Privacy Query" or "Data Rights Request" for fastest routing to our data team
• Live Chat: Available 24/7 directly from the SpribeWin platform. Live chat is best for general privacy questions. For formal data rights requests, email is recommended to create a documented record
• Response time: SpribeWin aims to acknowledge all privacy-related contact within 1 business day and to resolve or formally respond within 30 calendar days

If you are not satisfied with SpribeWin's response to a privacy concern, you have the right to escalate the matter to the relevant supervisory or regulatory authority under SpribeWin's licensing jurisdiction.