Privacy Policy – How Nob Win Protects Your Data in Pakistan

Nob win is an online gaming platform operating at nobwin.app, offering casino games, live dealer tables, slots, fishing games, virtual sports, Ludo, card games, and a VIP loyalty programme to players in Pakistan. For the purposes of this Privacy Policy, nob win acts as the data controller — meaning we determine the purposes for which and the manner in which your personal data is processed.

When this policy refers to "nob win", "we", "us", or "our", it refers to the nob win platform and the team responsible for its operation. When it refers to "you", "the player", or "your", it refers to any individual who accesses, registers with, or uses the nob win platform in any capacity.

If you need to contact us about anything relating to your personal data, please use the support email address: support@nobwin.app

Nob win collects only the personal data that is genuinely necessary to provide our gaming services, verify player identities, process payments, and meet our legal obligations. We do not collect data speculatively or for purposes beyond those described in this policy. The categories of data we collect are set out below:

Data is collected by nob win through the following channels, each of which is relevant to a specific stage of your interaction with the platform:

• Direct submission at registration: When you create a nob win account, you provide your name, mobile number, email, and date of birth directly through the registration form.
• KYC verification uploads: When nob win requests identity verification, you submit a photograph of your CNIC or other identification document. This is processed by our verification partner under strict data handling agreements.
• Deposit and withdrawal transactions: Payment data including your mobile wallet details or bank reference numbers are submitted when you transact on nob win.
• Automated platform tracking: When you browse and play on nob win, technical data including your IP address, device information, session data, and clickstream activity is collected automatically through server logs and first-party analytics tools.
• Cookies and local storage: Nob win uses cookies to maintain your login session, store preferences, and analyse platform performance. See Section 9 for full cookie details.
• Support communications: Any contact you make with the nob win support team — via live chat or email — creates a record that is stored for quality assurance and dispute resolution purposes.

Every piece of data that nob win collects is used for a defined, legitimate purpose. We do not collect data and then decide later how to use it. The primary purposes for which your data is used at nob win are:

• Account management: To create, maintain, and manage your nob win player account, including authentication and preference management.
• Identity and age verification: To confirm that all nob win players are at least 18 years old and that accounts are registered by the actual person named on the account. This protects all players on the platform.
• Payment processing: To process your PKR deposits and withdrawals through your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card) accurately and securely.
• Gaming services delivery: To run game rounds, calculate and credit winnings, process bonus activations, and maintain your game and betting history.
• Fraud prevention and anti-money laundering: To monitor transaction patterns, detect suspicious activity, identify multi-accounting, and comply with anti-money laundering obligations. This protects honest players and the integrity of nob win.
• Customer support: To respond to your queries, resolve disputes, and provide account assistance.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance and features of nob win for all players.
• Responsible gaming: To monitor gaming behaviour patterns and, where tools suggest potential harm, to apply player protections or make relevant resources available.
• Legal compliance: To meet our obligations under applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account security alerts) and, where you have consented, promotional offers related to nob win.

Nob win processes your personal data on the following legal bases, each applying to different processing activities:

• Performance of a contract: The majority of data processing on nob win — account management, payment processing, game delivery — is necessary to perform our contractual obligations to you as a registered player. Without this processing, the nob win service cannot be provided.
• Legal obligation: Identity verification, anti-money laundering monitoring, and the retention of certain transaction records are required by applicable law and regulatory standards. These activities are not optional for nob win.
• Legitimate interests: Fraud detection, platform security monitoring, and platform improvement analytics are carried out on the basis of nob win's legitimate interests in operating a secure and high-quality service. These interests are balanced against your rights and do not override them.
• Consent: Marketing communications are sent only where you have provided specific, informed consent. Consent can be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

Nob win does not sell, rent, or trade your personal data to any third party. We share data only with the specific categories of recipient described below, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive only the payment information necessary to process your specific transaction. These providers operate under their own privacy frameworks and are subject to applicable financial regulations.
• Identity verification providers: Where KYC verification is required, your CNIC or passport data is submitted to an accredited identity verification service operating under strict data processing agreements with nob win.
• Game content providers: Third-party game studios providing titles available on nob win may receive session-level technical data (game round IDs, bet amounts, results) necessary to operate and audit games. They do not receive personally identifiable information beyond what is technically required.
• Fraud detection and AML services: Specialist third-party services assist nob win with transaction monitoring and fraud pattern detection. These providers process data under contractual data processing agreements.
• Regulatory and law enforcement authorities: Nob win will disclose player data to regulatory bodies or law enforcement agencies when legally required to do so, without prior notice to the affected player where legally permissible.
• Professional advisers: Lawyers, auditors, and accountants may access limited personal data in the context of their professional service engagements with nob win, all under appropriate confidentiality obligations.

Nob win retains your personal data for as long as it is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The general retention principles at nob win are:

• Active account data: Retained for the full period your nob win account is active, plus a minimum period after closure as required for dispute resolution and legal compliance.
• Transaction and gaming records: Financial transaction records and gaming history are retained for a minimum of five years from the date of the transaction, consistent with anti-money laundering regulatory requirements.
• Identity verification documents: Retained for the period required by applicable KYC and AML regulations, typically five years from account closure or the end of the business relationship.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years from the date of the communication, or longer if the communication relates to an ongoing dispute.
• Technical and analytics data: Anonymised aggregated analytics data may be retained indefinitely as it cannot be used to identify individual players. Non-anonymised technical logs are retained for up to 12 months.
• Marketing consent records: Records of consent to receive marketing communications are retained for as long as the consent is relevant and for a reasonable period thereafter as evidence of compliance.

When your data is no longer required, nob win deletes or irreversibly anonymises it. We do not retain data beyond the periods described above for convenience.

Nob win invests significantly in the security of your personal data. The measures we apply are designed specifically for a Pakistani mobile-first gaming platform and cover both technical and organisational dimensions:

• 256-bit SSL/TLS encryption: All data transmitted between your device and nob win servers is encrypted using industry-standard TLS protocols. This applies to login, registration, payment transactions, and all other platform interactions.
• Password hashing: Your nob win account password is stored as an irreversible cryptographic hash. No one at nob win can view your actual password — if you lose it, a reset process is required rather than retrieval.
• Two-factor authentication: Optional but strongly recommended two-factor authentication is available for all nob win accounts, adding a second verification layer to the login process.
• Access controls: Internal access to personal data is restricted to nob win staff who require it for their specific role. Access is logged and audited regularly.
• Continuous security monitoring: Automated systems monitor nob win infrastructure for intrusion attempts, unusual access patterns, and data anomalies around the clock.
• PCI-DSS compliant payment processing: Card payment data is handled exclusively by our PCI-DSS certified payment gateway provider, never stored on nob win systems.

Nob win uses cookies and browser local storage to maintain the functionality of the platform and to understand how players use nob win so we can improve it. The categories of cookies used are:

• Essential cookies: Required for the nob win platform to function. These maintain your login session, store your currency preference, and handle security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings and game lobby display preferences. These improve your experience but are not strictly necessary.
• Analytics cookies: First-party analytics cookies help nob win understand aggregate usage patterns — which games are most popular, where players encounter problems, and how performance can be improved. These do not identify you personally and data is analysed at an aggregated level.

Nob win does not use third-party advertising or tracking cookies. No data from nob win cookies is shared with advertising networks or used to build profiles for display advertising purposes outside of nob win.

You can manage cookie settings through your browser's privacy controls. Blocking essential cookies will affect your ability to log in and use the nob win platform normally.

As a nob win player, you have meaningful rights over your personal data. These rights can be exercised at any time by contacting our support team at support@nobwin.app. Nob win will respond to all data rights requests within 30 days.

The nob win platform is strictly intended for adults aged 18 and over. Nob win does not knowingly collect personal data from individuals under the age of 18. Our registration process includes date of birth collection and age verification steps specifically to prevent minors from accessing the platform.

If nob win becomes aware that personal data has been collected from a minor — either through a registration attempt that bypassed controls or through information subsequently provided — the relevant account will be immediately suspended and any personal data associated with that account will be deleted in accordance with applicable regulations, and any funds will be handled appropriately.

If you are a parent or guardian and believe that a minor has accessed nob win using your account or has created their own account, please contact our support team immediately at support@nobwin.app. We take these reports very seriously and will act swiftly.

Nob win uses gaming activity data — including bet frequency, session length, deposit patterns, and loss trajectories — as part of our responsible gaming monitoring programme. This use of your data is fundamental to our commitment to player welfare and is treated with the same care as all other personal data processing at nob win.

Where our monitoring systems identify patterns that may indicate a player is experiencing difficulties, nob win may use this information to:

• Display responsible gaming messages or prompts within the platform interface.
• Contact you directly to offer information about responsible gaming tools available on your nob win account.
• Apply temporary protective limits if there are strong indicators of potential harm and immediate intervention is appropriate.

This data is not shared externally for responsible gaming purposes and is used only within nob win's internal welfare framework. For more information about the tools available to manage your gaming, visit the Responsible Gaming section of the nob win platform.

Nob win will update this Privacy Policy when necessary — for example, when we introduce new data processing activities, when applicable law changes, or when our practices evolve in ways that affect how we handle your data. The date of the most recent update is always displayed prominently at the top of this page.

When we make material changes — changes that significantly affect your rights or how your data is used — nob win will notify registered players via the mobile number or email address associated with their account. We will also display a notice on the nob win platform for a reasonable period before the changes take effect.

Continued use of the nob win platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with changes made to this policy, you may request account closure as described in the Terms and Conditions.

If you have any question, concern, or request relating to your personal data or this Privacy Policy, please contact the nob win team directly. We are committed to responding to all privacy-related enquiries within five business days and to resolving substantive requests within 30 days.