1Who We Are
WinRupies ("we", "us", "our", or "the Platform") is an online sports betting and casino platform operated for players in Pakistan. For the purposes of data protection, WinRupies is the data controller responsible for your personal information — meaning we determine what data is collected, why it is collected, and how it is handled.
This Privacy Policy applies to all personal data collected through the WinRupies website, mobile web platform, and any related communications including email, SMS, WhatsApp, and Telegram. It covers all products and services offered by WinRupies including cricket betting, PSL betting, football betting, esports betting, live casino, Andar Bahar, jackpot slots, and card games.
By registering a WinRupies account or using any part of the WinRupies platform, you confirm that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree, please do not register or use WinRupies.
Our commitment: WinRupies will never sell your personal data to any third party for commercial marketing purposes. Your PKR payment details, identity documents, and personal information remain within the WinRupies ecosystem and are shared only where strictly necessary for operating your account or complying with applicable law.
2What Personal Data We Collect
WinRupies collects different categories of personal data depending on how you use the platform. The table below summarises the main data categories and what they include.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number | Registration and KYC verification |
| Contact Data | Mobile phone number, email address, city of residence | Registration and profile updates |
| Payment Data | JazzCash / Easypaisa mobile number, bank account details, Visa/Mastercard last four digits | Deposits, withdrawals, and KYC |
| Account Activity Data | Login timestamps, bet history, game session records, deposit and withdrawal records | Ongoing platform use |
| KYC Documents | CNIC scan, utility bill, bank statement, selfie verification | Identity and address verification |
| Technical Data | IP address, device type, operating system, browser type, session duration | Automatic collection on access |
| Communications Data | Support chat transcripts, emails, complaint records | Customer support interactions |
| Marketing Preferences | Opted-in communication channels, promotional preferences | Registration and account settings |
WinRupies does not collect sensitive special-category personal data such as biometric data, political opinions, religious beliefs, or health data unless you voluntarily disclose such information in the context of a responsible gaming enquiry, in which case it is treated with additional care and used only to provide appropriate support.
WinRupies Football Betting – Your Data Stays Safe While You Follow Every Match
3How We Collect Your Data
WinRupies collects personal data through the following channels:
- Direct from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings, you provide data directly to WinRupies.
- Automatically: When you access the WinRupies platform, our systems automatically collect technical data including your IP address, device identifiers, browser type, and session information. This data is collected through server logs and cookies.
- Payment processors: When you make a deposit or withdrawal via JazzCash, Easypaisa, NayaPay, SadaPay, IBFT, or Visa/Mastercard, our payment processing partners confirm transaction status and basic transaction metadata to WinRupies. WinRupies does not store full payment account credentials — these are held by the respective payment service providers.
- Third-party identity verification services: WinRupies uses third-party KYC service providers to assist with identity document verification. These providers confirm document authenticity and return a verification result to WinRupies. The full document data is processed securely in accordance with the provider's own data protection standards.
- Fraud prevention and risk management services: WinRupies uses industry-standard third-party fraud detection systems that analyse technical data including IP address and device fingerprinting to identify potentially fraudulent activity.
4Why We Use Your Personal Data
WinRupies uses personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or identifying a new lawful basis.
- Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to WinRupies services.
- Processing transactions: To process deposits and withdrawals in PKR via your chosen payment method, reconcile transactions, and maintain accurate financial records.
- Delivering betting and gaming services: To record and settle bets, operate live casino and slot games, and provide live cricket score and sports data services.
- Customer support: To respond to your enquiries, handle complaints, and resolve account issues via Live Chat, WhatsApp, Telegram, or email.
- Regulatory compliance and anti-money laundering: To comply with applicable Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations, and responsible gaming regulations.
- Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other violations of WinRupies' Terms and Conditions.
- Responsible gaming: To monitor betting patterns that may indicate problem gambling and to apply any self-imposed limits, cool-off periods, or self-exclusion settings you have activated.
- Platform improvement: To analyse aggregated and anonymised usage data to understand how Pakistani players use WinRupies and improve the platform's performance, navigation, and game offering.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time.
5Legal Basis for Processing
WinRupies processes your personal data based on one or more of the following lawful bases:
- Contractual necessity: Processing that is necessary to fulfil our contract with you — including account registration, payment processing, bet settlement, and customer support.
- Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML requirements, and responsible gaming obligations imposed by WinRupies' licensing authority.
- Legitimate interests: Processing undertaken in the legitimate interests of WinRupies or third parties, where those interests are not overridden by your rights — including fraud prevention, platform security, and product improvement using anonymised analytics.
- Consent: Where we rely on your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
WinRupies – Proudly Protecting the Privacy of Pakistani Players Across the Country
6PKR Payments and KYC Data
Because WinRupies processes real money transactions in Pakistani Rupees, the way we handle payment and identity data deserves specific attention. This section explains our approach to the most sensitive categories of personal data held by WinRupies.
Payment method data: When you deposit via JazzCash, Easypaisa, NayaPay, SadaPay, or IBFT, WinRupies records the mobile wallet number or bank account details associated with your transaction for the purposes of processing withdrawals to the same verified payment method and for fraud prevention. We do not store your JazzCash or Easypaisa PIN or any authentication credentials associated with your mobile wallet. Full card details for Visa and Mastercard transactions are handled exclusively by our PCI-DSS compliant payment gateway and are not stored on WinRupies servers.
KYC documents: Identity documents submitted for KYC verification — including your CNIC, passport, utility bills, and bank statements — are stored on encrypted servers with restricted internal access. Only KYC team members with a specific operational need to review your documents are authorised to access them. Documents are retained for the period required by WinRupies' regulatory obligations, typically a minimum of five years from the date of account closure, after which they are securely destroyed.
Transaction records: WinRupies maintains a complete record of all deposits, withdrawals, and bet transactions associated with your account. These records are essential for regulatory compliance, dispute resolution, and financial auditing. Transaction records are retained for a minimum of seven years as required by standard financial record-keeping obligations.
Third-party payments: WinRupies requires that all payment methods used on your account are registered in your own name. We verify the ownership of payment methods as part of the KYC process. Payments from third-party accounts are not permitted and will result in the funds being returned and possible account suspension.
7Who We Share Your Data With
WinRupies does not sell, rent, or trade your personal data to any third party for commercial marketing or advertising purposes. We share your data only in the limited circumstances described below:
- Payment service providers: JazzCash, Easypaisa, NayaPay, SadaPay, Visa/Mastercard acquiring banks, and IBFT processing partners receive the data necessary to process your PKR transactions.
- KYC and identity verification providers: Third-party providers assist WinRupies in verifying the authenticity of identity documents submitted for account verification. These providers are contractually bound to process data only for verification purposes.
- Fraud detection and risk management services: Industry-standard fraud prevention platforms receive technical data including IP addresses and device identifiers to assist in identifying potentially suspicious account activity.
- Responsible gaming third parties: Where a player requests referral to an external responsible gaming support organisation, limited contact details may be shared with the relevant support body with the player's knowledge and consent.
- Licensing and regulatory authorities: WinRupies' licensing authority and any other applicable regulatory body has the right to request and receive player account data as part of their supervisory and audit functions.
- Law enforcement: WinRupies will disclose personal data to law enforcement agencies or other government bodies where required to do so by law, court order, or other lawful authority.
- Business successors: In the event of a merger, acquisition, or transfer of all or part of WinRupies' business, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
All third parties with whom WinRupies shares personal data are required to handle that data in accordance with applicable data protection standards and are not permitted to use it for any purpose beyond the specific purpose for which it was shared.
8Data Retention
WinRupies retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following standard retention periods apply:
- Active account data: Retained for the full duration of your account plus a minimum of five years following account closure.
- KYC and identity documents: Retained for a minimum of five years from the date of account closure.
- Transaction and bet records: Retained for a minimum of seven years from the date of each transaction.
- Customer support and communications records: Retained for three years from the date of each interaction, or longer if the interaction is connected to an ongoing complaint or dispute.
- Self-exclusion records: Retained for a minimum of five years to prevent inadvertent re-registration by a self-excluded player.
- Technical and session data (logs): Retained for up to 12 months for security monitoring and fraud detection purposes, after which they are anonymised or deleted.
- Marketing preference data: Retained until you withdraw consent or request deletion, subject to the minimum retention requirements stated above for other data categories.
When personal data reaches the end of its retention period, WinRupies securely destroys or anonymises it so that it can no longer be associated with you as an individual.
WinRupies Live Baccarat – Encrypted Connections, Secure Data, Fair Play
9How We Keep Your Data Secure
WinRupies takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the WinRupies platform — the same encryption standard used by major Pakistani banks for online banking.
- Encrypted storage of all personal data and KYC documents at rest using AES-256 encryption on our secure server infrastructure.
- Strict access controls ensuring that only WinRupies employees with a documented operational need can access personal data, and only to the extent necessary for their role.
- Multi-factor authentication required for all WinRupies staff accessing internal systems that contain personal data.
- Regular independent security audits and penetration testing conducted by third-party security professionals to identify and remediate vulnerabilities.
- Incident response procedures that define how WinRupies will detect, contain, and notify affected players in the event of a data security incident.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, WinRupies will notify affected players without undue delay, providing details of the nature of the breach, the data involved, and the steps WinRupies is taking to address it.
Your role in security: The security of your WinRupies account also depends on you keeping your login credentials confidential. Never share your username or password with anyone. Enable two-factor authentication in your account security settings. If you suspect that your credentials have been compromised, contact WinRupies support immediately via Live Chat.
10Cookies and Tracking Technologies
WinRupies uses cookies and similar tracking technologies to operate the platform, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit WinRupies. The following categories of cookies are used:
You can manage your cookie preferences at any time through your WinRupies account settings or through your browser settings. Disabling non-essential cookies will not prevent you from using the WinRupies platform, but some personalisation features may not function as intended.
11Marketing Communications
WinRupies may send you promotional offers, bonus notifications, cricket and PSL event alerts, and other marketing communications via SMS, email, WhatsApp, and Telegram — but only where you have explicitly opted in to receive such communications during registration or subsequently through your account settings.
Each marketing communication from WinRupies will include clear instructions on how to opt out. You can also withdraw your marketing consent at any time by:
- Updating your communication preferences in the WinRupies account settings
- Clicking the unsubscribe link in any WinRupies marketing email
- Contacting the WinRupies support team via Live Chat, WhatsApp, or email with a request to stop marketing communications
Once you opt out, WinRupies will stop sending marketing communications within 48 hours of your request being processed. Opting out of marketing communications will not affect transactional communications related to your account — such as withdrawal confirmations, KYC requests, or security alerts — which are sent regardless of your marketing preferences as they are necessary for the operation of your account.
WinRupies does not purchase marketing lists or send unsolicited bulk communications to persons who have not registered a WinRupies account.
12Your Data Rights
As a WinRupies player, you have a number of rights in relation to your personal data. These rights can be exercised by contacting the WinRupies data team at the contact details provided in Section 15 of this policy.
Right of Access
You have the right to request a copy of the personal data WinRupies holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
Right to Rectification
If any personal data held by WinRupies is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly in your WinRupies profile settings.
Right to Erasure
You may request that WinRupies delete your personal data. This right is subject to legal and regulatory retention obligations — WinRupies may be required to retain certain data such as KYC documents and transaction records for the periods specified in Section 8 regardless of an erasure request.
Right to Restrict Processing
You may request that WinRupies temporarily restrict the processing of your personal data — for example while you contest the accuracy of data we hold about you or where you have objected to processing based on legitimate interests.
Right to Data Portability
Where WinRupies processes your data by automated means on the basis of your consent or a contract, you have the right to receive your data in a machine-readable format that can be transferred to another service provider.
Right to Object
You have the right to object to processing of your personal data for direct marketing at any time and without giving any reason. You may also object to processing based on WinRupies' legitimate interests, though WinRupies may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
WinRupies will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. If your request is complex or involves a large volume of data, WinRupies may extend this period by a further 30 days with prior notification to you.
13Children and Minors
WinRupies is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. Registration on WinRupies is restricted to adults who confirm at the point of registration that they are 18 years of age or older.
WinRupies conducts age verification checks as part of its KYC process. Where WinRupies discovers or has reasonable cause to believe that an account has been registered by or on behalf of a person under 18, the account will be immediately suspended, all balances frozen pending investigation, and any winnings forfeited. Deposited funds net of any winnings will be returned to the payment source following verification.
If you are a parent or guardian and believe that a minor has registered an account on WinRupies, please contact our support team immediately at support@winrupies.com so that the matter can be investigated and resolved promptly.
14Changes to This Privacy Policy
WinRupies may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform functionality. The effective date at the top of this page will always reflect the date of the most recent version.
When we make material changes to this policy — for example, changes to the types of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered WinRupies players via email to the address on file and via a prominent notification displayed on the platform when you next log in.
Your continued use of WinRupies after the effective date of an updated Privacy Policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you should stop using WinRupies and contact us to arrange account closure.
15Contact Us About Privacy
If you have any questions, concerns, or requests in relation to this Privacy Policy or the personal data WinRupies holds about you, please contact us through any of the following channels:
- Privacy / Data Requests Email: privacy@winrupies.com
- General Support Email: support@winrupies.com
- Live Chat: Available 24/7 directly from the WinRupies platform — please indicate that your query relates to a privacy or data protection matter
- WhatsApp / Telegram: Available 24/7 — contact details available in the WinRupies help centre
For formal data rights requests (access, erasure, portability, objection), please write to privacy@winrupies.com with the subject line "Data Rights Request" and include your full name and the email address registered to your WinRupies account so we can verify your identity before processing the request.
WinRupies also has a designated Data Protection Officer (DPO) who oversees compliance with data protection obligations. The DPO can be contacted at the privacy email address above.
Response times: WinRupies acknowledges privacy enquiries within 48 hours and provides a substantive response to data rights requests within 30 calendar days. For general privacy questions via Live Chat, our support team aims to respond within a few minutes around the clock.