Privacy Policy – Win Rupees Pakistan Online Gaming Platform

1. Overview

Win Rupees is committed to protecting the personal information of every player who uses our platform. We take privacy seriously — not because we have to, but because we know how important it is to the people who trust us with their details and their money.

This Privacy Policy describes how Win Rupees collects, stores, uses, and protects personal data. It covers all users of the Win Rupees platform regardless of which service they are using — cricket betting, casino games, fishing games, or any other feature available on the site.

The terms "Win Rupees", "we", "us", and "our" refer to the Win Rupees platform and its operating entity. The terms "you" and "your" refer to any individual who accesses or uses the platform in any capacity, including registered players, visitors, and prospective users.

This policy should be read alongside our Terms and Conditions and Responsible Gaming policy.

2. Data We Collect

Win Rupees collects personal data in several ways — directly from you when you register and use the platform, automatically through your device and browser, and occasionally from trusted third parties as part of our verification processes. Here is a breakdown of what we collect:

Information You Provide Directly

• Registration data: Full name, mobile phone number, date of birth, and any optional profile details you choose to add.
• KYC documents: When identity verification is required, we may collect copies of your CNIC, passport, or other government-issued identification, along with proof of address documents.
• Communication data: Messages, queries, and any other information you share with our customer support team through live chat, email, or other channels.
• Financial information: Payment method details used for deposits and withdrawals, including mobile wallet numbers, bank account details, and card information where applicable. We do not store full card numbers — see Section 6 for details.

Information Collected Automatically

• Device and browser data: Device type, operating system, browser type and version, screen resolution, and language settings.
• Log data: IP address, access timestamps, pages visited, features used, and session duration.
• Betting and gaming activity: Records of bets placed, games played, deposit and withdrawal history, and promotional offers used.
• Cookie data: Information collected through cookies and similar tracking technologies. See Section 7 for full details.

Information from Third Parties

• Identity verification providers may share results of document checks with us as part of the KYC process.
• Payment processors confirm transaction status and certain payment account details to facilitate deposits and withdrawals.
• Fraud prevention services may share risk signals associated with IP addresses, devices, or payment methods.

3. How We Use Your Data

Win Rupees uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are inconsistent with why it was collected, and we do not sell your personal information to third parties for marketing purposes.

If you receive promotional messages from Win Rupees and no longer wish to, you can opt out at any time by updating your notification preferences in your account settings or by contacting our support team.

4. Legal Basis for Processing

Win Rupees processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the contract between Win Rupees and the player — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws — including anti-money-laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate interests: Processing conducted for Win Rupees's legitimate business interests, including fraud detection, platform security, and improving our services — where those interests do not override your privacy rights.
• Consent: For optional activities such as receiving promotional communications. Consent can be withdrawn at any time without affecting the provision of core services.

5. Sharing Your Data

Win Rupees does not sell your personal data. We share your information only in the limited circumstances described below, and only with parties who are bound by appropriate data protection obligations.

Payment Processors

To process deposits and withdrawals, we share relevant financial information with our payment partners — including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, and card networks. These providers operate under their own privacy policies and comply with applicable financial data protection requirements.

Identity Verification Providers

Where KYC verification is required, we may share documentation with accredited third-party verification services to confirm your identity and age. These providers are not permitted to use your data for any purpose other than verification.

Fraud Prevention & Security Services

Win Rupees works with fraud prevention services that use device and transaction data to identify suspicious activity. Sharing data with these providers helps protect all players on the platform.

Game Software Providers

Game providers whose software is hosted on Win Rupees may receive certain anonymised session and activity data to operate and maintain their games. No personally identifiable information is shared with game studios without your knowledge.

Regulatory and Legal Authorities

Win Rupees may be required to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies in response to lawful requests, court orders, or to fulfil our reporting obligations. We will only disclose the minimum data necessary and will inform you where permitted by law.

6. Payment Data & Security

Financial data is among the most sensitive information we handle. Win Rupees applies strict controls to the way payment information is stored, transmitted, and accessed.

• Full card numbers are never stored on Win Rupees servers. Card transactions are processed through PCI-DSS compliant payment gateways that tokenise card data before it reaches our systems.
• Mobile wallet numbers associated with your account (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and are only accessible to authorised payment processing systems.
• Bank account details provided for IBFT withdrawals are stored securely and used exclusively for processing your withdrawal requests.
• Payment data is retained for the period required by financial regulations and anti-money-laundering obligations — typically five to seven years from the last transaction.
• Access to financial data within Win Rupees is restricted to employees whose roles require it for processing, compliance, or fraud investigation purposes.

All financial transactions between your device and Win Rupees are transmitted over encrypted HTTPS connections. We do not process any financial transaction over an unencrypted channel.

7. Cookies & Tracking Technologies

Win Rupees uses cookies and similar technologies to keep the platform running properly, remember your preferences, and understand how players interact with different parts of the site. Here is a breakdown of the types of cookies we use:

Essential Cookies

Required for the platform to function. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and display preferences. You cannot opt out of essential cookies without affecting your ability to use Win Rupees.

Analytics Cookies

We use anonymised analytics to understand which pages are most visited, how long players spend on different sections, and where users encounter difficulties. This data is aggregated and does not identify individual players. It is used purely to improve the platform.

Functional Cookies

These cookies remember choices you have made — such as your preferred game view or notification settings — so you do not have to reconfigure them each time you visit.

Managing Cookies

You can manage or delete cookies through your browser settings. Removing essential cookies will affect platform functionality. For a guide to cookie settings in common browsers, refer to your browser's help documentation.

8. Data Retention

Win Rupees retains personal data for as long as necessary to fulfil the purposes described in this policy and to meet our legal obligations. Here are the general retention periods we apply:

• Active account data: Retained for the duration of your account being active on Win Rupees.
• Transaction and financial records: Retained for a minimum of five years from the date of the last transaction, in line with anti-money-laundering regulations.
• KYC documents: Retained for five years following account closure or the last verified transaction, whichever is later.
• Customer support communications: Retained for up to three years to allow resolution of follow-up queries and disputes.
• Betting and gaming activity logs: Retained for up to five years for regulatory compliance and dispute resolution purposes.
• Log and technical data: Retained for up to 12 months for security and fraud monitoring purposes.

When data is no longer required for any of the purposes described, Win Rupees securely deletes or anonymises it so it can no longer be used to identify you.

9. Your Rights Over Your Personal Data

As a Win Rupees player, you have rights over the personal data we hold about you. Here is a plain-language explanation of what those rights mean in practice:

To exercise any of these rights, contact our support team at support@winrupees.bio. We aim to respond to all data rights requests within 30 days. Note that some requests may be limited where we have legal obligations to retain specific data.

10. Minors & Age Verification

Win Rupees is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm their age, and we conduct age verification checks as part of our KYC process.

If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. Any winnings generated on an underage account will be forfeited.

If you believe a minor may have registered on Win Rupees, please contact our support team immediately so we can investigate and act promptly.

11. Third-Party Services

Win Rupees works with a number of third-party service providers to deliver its platform. Each provider is selected carefully and is required to handle data in a manner consistent with this Privacy Policy and applicable data protection law.

Game software providers, payment processors, identity verification services, and technical infrastructure providers may process certain data as part of delivering their services to Win Rupees. All such providers operate under data processing agreements that restrict how they may use your information.

Win Rupees does not host third-party advertising content that tracks users across the web. The platform does not share your personal data with advertising networks or data brokers.

12. How We Protect Your Data

Win Rupees applies industry-standard security measures across all aspects of the platform to protect your personal data from unauthorised access, loss, alteration, or disclosure.

• SSL/TLS encryption: All data transmitted between your device and Win Rupees is encrypted using secure HTTPS connections.
• Two-factor authentication: Available on all Win Rupees accounts to provide an additional layer of login security.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Employee access is logged and monitored.
• Data storage security: Personal data is stored on secured servers with restricted physical and network access, protected by firewalls and regular security audits.
• Fraud monitoring: Automated systems continuously monitor transactions and account activity for signs of fraud, unusual behaviour, or unauthorised access.
• Incident response: Win Rupees has a defined process for responding to data security incidents. In the event of a breach affecting your data, we will notify you as quickly as possible in accordance with our legal obligations.

While we apply robust security practices, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, enable two-factor authentication, and never share your login details with anyone.

13. Policy Updates

Win Rupees may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

For significant changes that affect how your data is used, we will notify active players via their registered mobile number or through an in-platform notification prior to the changes taking effect.

We recommend reviewing this policy periodically. Continued use of Win Rupees after an update is published constitutes your acknowledgment of the updated policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or wish to raise a privacy concern, please contact the Win Rupees support team. We take privacy enquiries seriously and aim to respond within a few business hours.

If you are not satisfied with how Win Rupees has handled your personal data or a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.