bigwim Privacy Policy — How We Protect Your Data

bigwim is an online gaming and sports betting platform available at bigwim .onl. We operate an entertainment platform for adult members in Pakistan, offering Cricket and sports betting, Slots, Live Casino, Bingo and VIP rewards — all transacted in PKR.

For the purposes of this Privacy Policy, bigwim is the data controller responsible for your personal information. This means we determine how and why your data is processed. When you register an account, make a PKR deposit, place a bet or contact our support team, you are sharing personal data with bigwim as described in this policy.

This Privacy Policy applies to all bigwim members and visitors based in Pakistan. It covers all personal data collected through the bigwim website at bigwim.onl, the bigwim mobile app and any communications between you and bigwim including support conversations and promotional emails.

bigwim collects personal data from you directly when you register, when you use the platform and when you contact us. We also collect certain technical data automatically when you access the platform. Below is a summary of the categories of data we collect.

We do not collect sensitive personal data beyond what is necessary for identity verification and responsible gaming compliance purposes. We do not collect biometric data, health data or religious/political information.

bigwim uses your personal data only for legitimate purposes related to operating the platform and providing you with a safe, personalised gaming experience. We do not process your data for any purpose that is incompatible with the purposes listed below.

• Account management: To create and manage your bigwim account, verify your identity, process your KYC documents and maintain your account settings and preferences.
• Transaction processing: To process PKR deposits via JazzCash, Easypaisa, Raast and bank transfer, and to process your withdrawal requests to your registered payment method.
• Platform delivery: To provide access to betting markets, Slots, Live Casino, Bingo and the VIP programme, and to personalise your experience based on your activity and preferences.
• Security and fraud prevention: To detect and prevent fraud, money laundering, bonus abuse and prohibited activity as defined in our Terms and Conditions. This includes automated monitoring of account activity and transaction patterns.
• Responsible gaming: To monitor your gaming activity and, where necessary, prompt responsible gaming tools such as session reminders, deposit limits or self-exclusion where patterns suggest a risk to your wellbeing.
• Customer support: To respond to your support queries, resolve disputes related to bets or transactions, and maintain a record of communications for quality and training purposes.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates via email or SMS — but only if you have opted in to receive these communications. You can opt out at any time through your account settings.
• Platform improvement: To analyse usage patterns, understand how members interact with bigwim features and improve the overall quality and reliability of the platform.
• Legal compliance: To comply with applicable legal obligations, respond to lawful requests from authorities and enforce our Terms and Conditions.

Given that bigwim processes real-money transactions in PKR, we take the handling of financial data very seriously. When you make a deposit or request a withdrawal through JazzCash, Easypaisa, Raast or bank transfer, certain financial details are necessarily involved in completing that transaction.

• What we store: bigwim stores transaction records including deposit amounts, withdrawal amounts, dates, payment method type and transaction reference numbers. These records are necessary for account management, dispute resolution and financial reconciliation.
• What we do not store: bigwim does not store your full JazzCash or Easypaisa PIN, full bank account passwords or full card numbers. Payment authentication is handled through the respective payment provider's secure systems.
• Payment provider data sharing: To process a transaction, bigwim necessarily shares transaction-relevant data (such as the amount and your registered mobile number) with the relevant payment provider — JazzCash, Easypaisa, your bank or another approved processor. These providers have their own privacy policies governing their handling of that data.
• Transaction history: Your full PKR transaction history on bigwim is accessible from within your account dashboard and is retained for as long as your account is active plus the applicable retention period described in Section 7.

bigwim will never ask you to share your JazzCash PIN, Easypaisa MPIN or online banking password via support chat, email or any other channel. If you receive any such request claiming to be from bigwim, do not comply and report it to our support team immediately.

bigwim does not sell, rent or trade your personal data to third parties. There are, however, specific and limited circumstances where sharing your data with trusted third parties is necessary to operate the platform. In all such cases, we share only the minimum data necessary and require third parties to handle it securely.

• Payment processors: JazzCash, Easypaisa, Raast, participating banks and other approved payment processors receive transaction data necessary to complete your PKR deposits and withdrawals.
• Game providers: Third-party casino game and sports data providers receive limited technical data (such as session tokens and stake amounts) necessary to deliver game content and settle bets. They do not receive your full identity data.
• Identity verification services: When KYC verification is required, your submitted documents may be processed by a third-party identity verification provider operating under a strict data processing agreement with bigwim.
• IT and infrastructure providers: Cloud hosting, database management and cybersecurity service providers may have access to data as part of operating bigwim's technical infrastructure. These providers are bound by confidentiality agreements.
• Legal and regulatory authorities: bigwim may disclose personal data in response to a lawful request from a law enforcement agency, court order or other legally binding demand. We will notify affected members where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of bigwim assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer.

All third parties with whom bigwim shares data are required to implement appropriate security measures and to use your data only for the specific purpose for which it was shared. bigwim remains responsible for how your data is handled by these partners.

bigwim uses cookies and similar tracking technologies on the platform to provide core functionality, improve your experience and understand how the platform is being used. A cookie is a small text file stored on your device when you visit a website.

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your preferences and keep your account secure. You cannot opt out of essential cookies without affecting your ability to use bigwim.
• Analytics cookies: These help bigwim understand which features are most used, where members spend time on the platform and where technical issues occur. Analytics data is aggregated and does not identify you personally.
• Performance cookies: These measure page load times, error rates and platform responsiveness. They help bigwim's technical team identify and fix performance issues quickly.
• Marketing cookies: If you have opted in to receive promotional communications, marketing cookies may be used to personalise offers and avoid showing you promotions you have already seen or are not relevant to your activity.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will affect your ability to log in and use bigwim. bigwim's cookie settings panel, accessible from the footer of any page, allows you to manage non-essential cookie preferences without affecting platform functionality.

bigwim retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active account data: Personal data associated with your bigwim account is retained for the full duration your account is active. This includes your profile information, gaming history and transaction records.
• Closed account data: When you close your bigwim account, your personal data is retained for a period of five years from the date of closure. This is to comply with financial record-keeping obligations and to handle any disputes or legal claims that may arise after closure.
• KYC documents: Identity verification documents submitted for KYC purposes are retained for five years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum of five years for financial audit and dispute resolution purposes.
• Support communications: Records of support interactions, including chat logs and email correspondence, are retained for two years from the date of the interaction.
• Marketing data: If you have opted out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you again.

When data is no longer required to be retained, bigwim securely deletes or anonymises it so that it can no longer be associated with you personally. Anonymised data may be retained for statistical analysis and platform improvement purposes without any retention limit.

As a bigwim member, you have the following rights in relation to your personal data. To exercise any of these rights, contact bigwim support at [email protected] with your account username and the specific right you wish to exercise.

bigwim is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older and may require submission of age verification documents before withdrawals are processed.

If bigwim discovers that an account has been registered by or on behalf of a person under 18, the account will be closed immediately, all balances will be forfeited and any personal data collected will be deleted as soon as reasonably possible, subject to any legal retention obligations.

If you are a parent or guardian and believe that your child has registered a bigwim account, please contact us immediately at [email protected] with the account details. We will investigate and act promptly.

bigwim implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. While no system can be guaranteed to be 100% secure, bigwim takes reasonable and proportionate steps to protect your data at all times.

• SSL/TLS encryption: All data transmitted between your device and bigwim's servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when visiting bigwim.onl.
• Password hashing: Your bigwim account password is stored as an irreversible cryptographic hash. This means that even bigwim staff cannot see your plain-text password — which is also why bigwim will never ask you for it.
• Two-factor authentication: Where available, we encourage all members to enable two-factor authentication on their registered mobile number for an additional layer of account security.
• Access controls: Access to personal data within bigwim's internal systems is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular security reviews: bigwim conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and address potential security risks before they can be exploited.
• Incident response: bigwim maintains a security incident response plan. In the event of a breach affecting your personal data, we will notify you and take immediate remediation steps as described in the breach notification section of this policy.

Your own behaviour also plays a role in account security. Always use a strong, unique password for your bigwim account, do not share your credentials with anyone and log out from shared devices. If you suspect your account has been compromised, contact bigwim support immediately.

bigwim may update this Privacy Policy from time to time to reflect changes in how we operate, changes in data protection standards or changes in applicable law. When we make material changes to this policy, we will notify registered members via their registered email address at least 14 days before the changes take effect.

Minor updates — such as clarifications that do not change your rights, corrections to typos or changes to contact details — may be made without prior notice. The "Last updated" date at the top of this page will always reflect the most recent revision date.

Continued use of the bigwim platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any updated version of this policy, you should stop using the platform and may request account closure by contacting support.

The current version of this Privacy Policy is always available at bigwim.onl/privacy-policy. We recommend reviewing this page periodically to stay informed about how bigwim handles your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights or want to raise a concern about how bigwim handles your personal data, please get in touch with our support team. We are available seven days a week and respond to all privacy-related queries promptly.

• Support email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: Use "Privacy Request — [Your Username]" to ensure your query is routed to the correct team.
• Response time: Privacy queries and data rights requests are acknowledged within 5 business days. Full responses are provided within 30 days.
• Required information: When submitting a data rights request, please include your registered bigwim username, your registered mobile number and a brief description of your request. This helps us locate your records quickly and process your request without unnecessary delays.

For questions about our Responsible Gaming tools, deposit limits, session limits or self-exclusion, these can be managed directly in your account settings or by contacting support with "Responsible Gaming" in your subject line. More information is also available on our Responsible Gaming page.