1. Who We Are
This Privacy Policy applies to the Superwin platform operated at superwin-khelo.net. References to "Superwin", "we", "us" or "our" in this policy refer to the operator of the Superwin platform. References to "you" or "your" refer to any individual who accesses, browses or uses the Superwin platform, whether as a registered account holder or as a visitor.
Superwin is the data controller for the personal information collected through superwin-khelo.net. As data controller, Superwin determines the purposes and means by which your personal data is processed. For payment processing, Superwin acts as a data controller jointly with its certified payment processing partners, each of whom operates under their own data protection obligations in addition to the obligations imposed by Superwin's agreements with them.
If you have questions about this Privacy Policy or about how Superwin handles your personal data, contact our support team at any time via live chat on superwin-khelo.net or by emailing support@superwin-khelo.net. Privacy-related queries receive priority handling within four hours on working days.
2. Personal Data We Collect
Superwin collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the website and app, and in some cases from third-party verification services. Below is a clear breakdown of each category.
2.1 Registration Data
When you create a Superwin account you provide your full legal name, date of birth, Pakistani mobile number, email address and, where prompted during KYC verification, your CNIC number and a copy of your national identity card. This information is required to create and maintain your account and to comply with anti-money-laundering (AML) obligations.
2.2 Financial and Transaction Data
Superwin records all deposits and withdrawals made through your account including the payment method used, the PKR amount, the timestamp and the transaction reference number. For Easypaisa and JazzCash transactions, Superwin stores only the mobile number associated with the wallet, not any wallet credential or PIN. Card transactions are processed through PCI-DSS certified gateways and Superwin does not store full card numbers on its own servers.
2.3 Gaming and Betting Activity
Superwin records all bets placed, games played, session durations, win and loss records and any bonus activity associated with your account. This data is used for account management, responsible gaming monitoring, dispute resolution and regulatory reporting where applicable.
2.4 Device and Technical Data
When you access Superwin, our systems automatically collect your IP address, browser type, operating system, device type, screen resolution, referring URL and pages visited on superwin-khelo.net. This data is used for security monitoring, fraud prevention and to improve the platform experience for Pakistani users.
2.5 Communications Data
Where you contact Superwin's support team, whether by live chat, email or any other channel, the content of those communications is retained for quality assurance, training, complaint resolution and regulatory compliance purposes.
| Data Category | Examples | Collected When |
|---|---|---|
| Identity | Name, DOB, CNIC | Registration / KYC |
| Contact | Mobile number, email | Registration |
| Financial | PKR transactions, wallet number | Each deposit / withdrawal |
| Gaming Activity | Bets, game sessions, bonuses | Platform usage |
| Technical | IP address, device info | Every site visit |
| Communications | Support chat logs, emails | When you contact support |
3. Why We Collect Your Data
Superwin collects personal data for specific, defined purposes. We do not collect data speculatively or build profiles beyond what is needed to run your account properly. The purposes for which Superwin processes your personal data are:
- Account operation: Creating and managing your Superwin account, authenticating your logins, processing your bets and transactions and communicating account-related updates.
- Identity and age verification: Confirming that you are at least 18 years old and that the identity information you provided during registration is genuine, in line with Superwin's legal obligations.
- Payment processing: Facilitating PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card, and processing withdrawal requests to your verified accounts.
- Anti-money-laundering (AML) compliance: Monitoring transaction patterns for signs of unusual financial activity and maintaining transaction records as required under applicable AML frameworks.
- Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting and other forms of platform abuse that harm genuine players.
- Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling and enabling the responsible gaming tools in your account dashboard.
- Customer support: Handling your queries, complaints and requests accurately and efficiently.
- Marketing communications (with consent): Sending promotional offers, free bet notifications, PSL odds alerts and other marketing messages to players who have opted in. You can withdraw this consent at any time.
- Platform improvement: Analysing anonymised and aggregated usage data to improve the Superwin platform for Pakistani players, prioritise new features and fix technical issues.
4. Legal Basis for Processing
Superwin processes your personal data under one or more of the following legal bases depending on the specific processing activity:
- Contract performance: Processing that is necessary to deliver the Superwin service you have signed up for – including account management, bet processing and payment handling – is based on the contractual relationship between you and Superwin.
- Legal obligation: Identity verification, AML transaction monitoring and record retention for prescribed periods are required by law. Superwin processes data for these purposes regardless of consent because it is legally obliged to do so.
- Legitimate interests: Fraud prevention, security monitoring, platform improvement and responsible gaming monitoring are carried out under Superwin's legitimate interest in operating a fair, secure and sustainable platform. These interests are balanced against your privacy rights and do not override them.
- Consent: Marketing communications and optional cookies are processed only where you have given explicit, freely given and withdrawable consent. Withdrawing consent does not affect any processing carried out before the withdrawal.
5. How and With Whom We Share Your Data
Superwin does not sell, rent or trade your personal data. We share data with third parties only to the extent required to operate the platform and only under strict contractual controls. The categories of recipients who may receive your data are:
5.1 Payment Processors
To process your PKR deposits and withdrawals, Superwin shares the minimum necessary data with Easypaisa, JazzCash, NayaPay, SadaPay, banking partners for IBFT and card payment gateways. These partners are PCI-DSS certified and are contractually prohibited from using your data for any purpose other than processing the specific transaction.
5.2 Identity Verification Providers
To meet KYC obligations, Superwin may share your name, CNIC details and document images with certified identity verification service providers. These providers operate under confidentiality agreements and data protection standards consistent with this policy.
5.3 Game Studios and Content Providers
Live casino studios and slot game providers receive anonymised session data to deliver game content. They do not receive your name, CNIC, payment details or contact information unless you interact directly with a live dealer chat feature, in which case your screen name is transmitted.
5.4 Legal and Regulatory Authorities
Superwin may disclose personal data to law enforcement agencies, regulatory bodies or courts where required by applicable law, a valid legal process or to protect Superwin's legal rights. Where permitted by law, Superwin will attempt to notify you of such disclosure before it occurs.
5.5 Service Providers
Superwin uses third-party providers for cloud hosting, customer support software and analytics. These providers act as data processors on Superwin's behalf and are bound by data processing agreements that restrict their use of your data to the delivery of those specific services.
Important: Every third party that receives data from Superwin is bound by a contractual obligation not to use that data for their own commercial purposes, not to sell it onward and to maintain security standards equivalent to those maintained by Superwin itself.
6. How We Handle Payment Data
Given that Superwin operates entirely in Pakistani Rupees and that most Pakistani players use mobile wallets or bank transfers, payment data security is a particular priority for us. Here is exactly how Superwin handles the financial information associated with your account.
For Easypaisa and JazzCash transactions, Superwin stores only the registered mobile number of the wallet used and the transaction reference number returned by the wallet provider's API. Superwin never receives, stores or processes your Easypaisa or JazzCash PIN. The authentication for these wallets happens entirely within those apps' own secure environments. Any message claiming to be from Superwin and asking for your Easypaisa or JazzCash PIN is fraudulent and should be reported to our support team immediately.
For card transactions, Superwin uses a PCI-DSS Level 1 certified payment gateway to collect and process card data. When you enter your card number, expiry date and CVV on the Superwin payment page, that data is transmitted directly to the gateway's secure servers using token-based encryption. Superwin's own systems see only a payment token that represents your card but contains no sensitive card information. This means that even in the extremely unlikely event of a data breach of Superwin's systems, your actual card details would not be exposed.
For IBFT bank transfers, the bank account details you provide to initiate the transfer remain with your own bank. Superwin records only the transaction reference number, the PKR amount, the sending bank and the timestamp for reconciliation and AML monitoring purposes.
7. Data Storage and Security Measures
Superwin stores account and transaction data on servers that are protected by multiple layers of security including firewalls, intrusion detection systems, access control lists and automated anomaly monitoring. Access to stored personal data is restricted to Superwin staff who require it to perform their specific job functions and is governed by role-based access controls and audit logging.
All data at rest is encrypted using AES-256 encryption. All data in transit between your browser or mobile device and Superwin's servers is protected by TLS 1.3, the most current version of the transport layer security protocol. Superwin conducts regular security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
Despite these measures, no internet-based service can guarantee absolute security. If Superwin becomes aware of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach and provide clear information about what data was affected and what steps we are taking to address it.
Your role in security: Superwin's technical measures protect data on our side of the connection. On your side, using a strong unique password for your Superwin account, never sharing your login credentials and logging out of the platform when using a shared device are all important steps that significantly reduce the risk of unauthorised access.
8. Cookies and Similar Technologies
Superwin uses cookies and similar browser technologies to provide certain platform functions, maintain your session and, where consented, to understand how Pakistani players use the site so we can improve it. Below is a breakdown of the types of cookies used on superwin-khelo.net.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent parts of Superwin from working correctly. Superwin does not use cookies to track your activity across other websites.
9. Your Data Rights
Every Superwin account holder has the following rights regarding their personal data. To exercise any of these rights, contact Superwin's support team at support@superwin-khelo.net. We process all data rights requests within seven days and will confirm receipt within 24 hours.
Right of Access
Request a copy of all personal data Superwin holds about you, along with information about how it is used and with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your Superwin account. Some corrections may require identity re-verification.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that financial transaction records must be retained for AML compliance periods.
Right to Restriction
Request that Superwin restricts processing of your data in certain circumstances – for example while you dispute the accuracy of data we hold about you.
Right to Data Portability
Request a structured, machine-readable copy of the personal data you provided to Superwin, suitable for transfer to another service if you choose.
Right to Withdraw Consent
Where processing is based on your consent – such as marketing emails or optional cookies – you can withdraw that consent at any time with immediate effect.
10. Children's Privacy
The Superwin platform is strictly for adults aged 18 and above. Superwin does not knowingly collect or process the personal data of anyone under the age of 18. If Superwin discovers that a registered account belongs to a person under 18, that account will be immediately suspended, all bets voided and deposits returned minus any withdrawals already processed. If you believe a minor has created a Superwin account, please contact our support team immediately at support@superwin-khelo.net.
Superwin takes the protection of minors seriously and invests in age verification technology specifically to prevent underage individuals from registering. Parents and guardians who are concerned about a family member's access to online gaming platforms should consider using parental control software on shared household devices.
11. Responsible Gaming and Sensitive Data
Superwin monitors gaming activity data for patterns that may indicate a player is experiencing difficulty with their gambling. This monitoring is carried out in the legitimate interest of player wellbeing and is a core part of how Superwin fulfils its responsible gaming obligations. Where patterns of concern are identified, Superwin may proactively contact a player or apply account-level restrictions.
If a player contacts Superwin to request self-exclusion, to discuss a gambling problem or to seek support, that communication is treated as highly sensitive. Information shared in the context of a responsible gaming interaction is never used for marketing purposes and is accessible only to a restricted group of trained support staff. Self-exclusion requests are actioned within one hour and are honoured absolutely – Superwin will not attempt to reverse a self-exclusion decision or apply pressure on a player who has chosen to step away from the platform.
Players who opt for self-exclusion are automatically removed from all Superwin marketing lists. Superwin will not send any promotional or account-activity communications to self-excluded players for the duration of the exclusion period and, where the exclusion is permanent, indefinitely. More information about the responsible gaming tools available on Superwin is available on the Responsible Gaming page.
12. Data Retention
Superwin retains personal data only for as long as necessary for the purpose it was collected or as required by applicable law. The following retention periods apply to the main data categories:
- Account and identity data: Retained for the duration of your active account and for a minimum of five years after account closure to meet AML record-keeping obligations.
- Transaction records: All PKR deposit and withdrawal records are retained for a minimum of five years in line with financial record-keeping requirements.
- Gaming activity data: Session and bet records are retained for five years for dispute resolution, regulatory reporting and responsible gaming monitoring purposes.
- Support communications: Chat and email logs are retained for three years for quality assurance and dispute resolution.
- Device and technical data: IP and session logs are retained for twelve months for security and fraud prevention purposes.
- Marketing consent records: Records of your consent or opt-out are retained for the lifetime of your account plus three years to demonstrate compliance.
When retention periods expire, data is deleted from Superwin's systems in a manner that prevents reconstruction or recovery.
13. Changes to This Privacy Policy
Superwin reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements or platform features. Where an update is material – meaning it affects your rights or the way Superwin uses your data in a significant way – Superwin will notify you by email and by an in-platform notification at least 14 days before the change takes effect.
Minor clarifications or corrections to existing practices will be updated on this page without separate notification. The "Last Updated" date at the top of this policy reflects the date of the most recent revision. Superwin recommends reviewing this page whenever you notice the date has changed. Continued use of the Superwin platform after a notified change takes effect constitutes acceptance of the updated policy.
14. Contact Us About Privacy
If you have any question about this Privacy Policy, want to exercise any of your data rights, or have a concern about the way Superwin handles your personal information, please get in touch through any of the following channels:
- Live Chat: Available 24/7 on superwin-khelo.net – the fastest way to reach the support team for any query including privacy-related requests.
- Email: support@superwin-khelo.net – privacy-related emails are flagged for priority handling and receive a response within four hours on working days.
Superwin is committed to resolving all privacy queries and data rights requests promptly, fairly and without bureaucratic obstruction. If you are not satisfied with how Superwin has handled a privacy concern after raising it with our support team, you have the right to escalate the matter through applicable regulatory or legal channels.
Related Policies: This Privacy Policy should be read alongside Superwin's Terms and Conditions and Responsible Gaming page, both of which contain additional information relevant to how your account data is managed.