Data Protection & Privacy

WinRupees Privacy Policy — Your Data, Protected

This Privacy Policy explains exactly what personal information WinRupees collects when you use our Pakistan betting and gaming platform, how we use it, who we may share it with, and what rights you have over your own data.

Last updated: 1 January 2026 — This policy applies to all WinRupees accounts and services.
This policy is written in plain English so every WinRupees player can understand it clearly. If any section is not clear, please reach out to our support team before registering or depositing.

1. Overview

WinRupees ("we", "us", "the platform") is committed to handling the personal information of our players responsibly. This Privacy Policy describes how WinRupees collects, uses, stores, and protects personal data when you use our website, mobile app, and all associated services — including sports betting on Cricket, PSL, T20, Football, and Esports, casino games, bingo, virtual sports, and PKR transactions via JazzCash, Easypaisa, Raast, and other supported payment methods.

By creating a WinRupees account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy. This policy forms part of our Terms and Conditions. If you do not agree with how we handle data, please do not use WinRupees.

We do not sell your personal data to third parties for their own marketing purposes. We do not share your information with anyone who does not need it to deliver WinRupees services to you. This policy explains the limited circumstances in which data sharing does occur and why it is necessary.

2. What We Collect

WinRupees collects personal data in two broad ways: information you provide directly when using the platform, and information that is automatically generated by your device and activity on our systems.

Information You Provide

  • Registration details: Full legal name, date of birth, email address, and mobile phone number.
  • Identity verification (KYC): CNIC or other government-issued identity document, and in some cases proof of address or a selfie for verification purposes.
  • Payment information: Your JazzCash or Easypaisa mobile wallet number, Raast ID, bank account details, or debit card details — only to the extent needed to process deposits and withdrawals in PKR.
  • Support communications: Messages, emails, or chat records you send to our support team, including any attachments or documents you share voluntarily.
  • Responsible gaming preferences: Deposit limits, loss limits, self-exclusion requests, and session time settings you configure in your account.

Information Collected Automatically

  • Device and technical data: IP address, device type, operating system, browser type, and screen resolution.
  • Usage data: Pages visited on WinRupees, games launched, bets placed, time spent on individual sections, and navigation patterns through the site and app.
  • Transaction logs: Deposit and withdrawal records, bet histories, game session logs, and bonus usage records — all denominated in PKR.
  • Cookies and similar tracking technologies: As described in Section 6 of this policy.
WinRupees only collects information that is genuinely necessary to operate the platform, verify player identities, process PKR transactions, and meet our obligations around responsible gaming and fraud prevention.

3. How We Use Your Data

WinRupees uses your personal data for specific, legitimate purposes only. The table below summarises the main purposes for which we process your data and the legal basis for doing so:

Purpose Details
Account management Creating and maintaining your WinRupees account, verifying your identity and age, and managing account security.
Transaction processing Processing PKR deposits via JazzCash, Easypaisa, Raast, bank transfer, and card; processing withdrawal requests to your verified payment account.
Platform delivery Delivering sports betting, casino, bingo, and virtual sports services; personalising your in-platform experience based on activity.
Fraud and security prevention Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the platform.
Responsible gaming Monitoring play patterns to identify potential problem gambling behaviour and enforcing limits or exclusions you have set yourself.
Customer support Responding to queries, resolving disputes, and handling complaints submitted through our support channels.
Marketing communications Sending promotional offers, bonus alerts, and platform news — only where you have opted in to receive these communications.
Platform improvement Analysing aggregated usage data to improve site performance, game selection, and the overall player experience.

WinRupees will never use your personal data for any purpose that is incompatible with the purposes listed above without first informing you and, where required, obtaining your consent.

4. Sharing Your Data

WinRupees does not sell, rent, or trade your personal data to any third party for their own commercial use. We share your data only in the following limited and necessary circumstances:

  • Payment processors: JazzCash, Easypaisa, Raast, and our banking and card processing partners receive only the minimum data necessary to process your PKR deposit or withdrawal. These providers are contractually bound to protect your data and use it only for payment processing.
  • Identity verification providers: Where additional KYC verification is required, we may share your name, date of birth, CNIC details, or a document image with a third-party verification service. This is done solely to confirm your identity and age.
  • Fraud detection and security services: We may share IP addresses, device fingerprints, and transaction patterns with fraud detection partners to protect the integrity of the platform and the safety of all players.
  • Technology and infrastructure providers: Our hosting, database, and platform technology partners may process data on our behalf as part of delivering the WinRupees service. All such providers are subject to strict data processing agreements.
  • Legal and regulatory obligations: We may disclose personal data where required by law, court order, or in response to a valid request from a competent authority. We will notify you of any such disclosure where we are legally permitted to do so.
  • Business transfers: In the event of a merger, acquisition, or sale of all or part of the WinRupees business, player data may be transferred to the acquiring entity, subject to the same protections as described in this policy.

Any third party that receives your data on our behalf is required to handle it with the same level of care that WinRupees applies. We do not permit our data processors to use your personal information for their own purposes beyond the specific task they are engaged to perform.

5. Payment Data

All financial transactions on WinRupees are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, WinRupees transmits your payment details to the relevant payment provider over encrypted connections. The specific data shared depends on the payment method you use:

  • JazzCash / Easypaisa: Your registered mobile wallet number and transaction reference are shared with the respective provider to initiate and confirm the transfer.
  • Raast: Your Raast ID and linked bank account details are used to process instant bank transfers in PKR.
  • Bank Transfer: Your bank account number and the account holder name are used to process deposits or route withdrawals directly to your bank account.
  • Debit Card / Mobile Wallet: Card or wallet details are handled by our PCI-compliant payment gateway. WinRupees does not store full card numbers on its own servers.

All deposits and withdrawals must be made from and to a payment account registered in your own name. Transactions from or to third-party accounts are not permitted and will be declined or reversed. This policy exists to protect players and to maintain the integrity of our anti-money laundering controls.

WinRupees retains records of all PKR transactions — including deposit amounts, withdrawal amounts, dates, and payment methods — for as long as is necessary for financial record-keeping, fraud prevention, and compliance purposes.

6. Cookies

WinRupees uses cookies and similar tracking technologies on our website and mobile app. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and analyse usage patterns.

Types of Cookies We Use

  • Essential cookies: These are necessary for the WinRupees platform to work. They manage your login session, remember your language and currency settings, and ensure that your account remains secure during your visit. You cannot opt out of essential cookies while using the platform.
  • Analytics cookies: These help us understand how players navigate WinRupees — which pages are visited most, how long players spend in the game lobby, and where players tend to drop off. We use this data in aggregate form to improve the platform. No individual player is identified from analytics data alone.
  • Functional cookies: These remember your preferences — such as your preferred sports markets, game categories, or responsible gaming settings — so you do not have to reconfigure them on every visit.
  • Marketing cookies: Where you have opted in to marketing communications, these cookies help us show you relevant promotions and bonus offers based on your activity on WinRupees. They do not track your activity on other websites.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect some features of the WinRupees platform but will not prevent you from placing bets or accessing your account.

7. How Long We Keep Your Data

WinRupees retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following general retention guidelines apply:

  • Active account data: Retained for the lifetime of your WinRupees account and for a minimum period after account closure to satisfy fraud prevention and dispute resolution requirements.
  • Transaction and betting records: PKR deposit, withdrawal, bet, and game session records are retained for a minimum of five years after the relevant transaction date, in line with standard financial record-keeping practices.
  • KYC and identity documents: Copies of identity documents provided during verification are retained for a minimum period after account closure as required by anti-money laundering obligations.
  • Support communications: Messages and emails exchanged with our support team are retained for up to three years to support dispute resolution and quality assurance.
  • Marketing preferences: Records of your marketing consent or opt-out are retained indefinitely so that we can demonstrate compliance with your preferences.

When data is no longer needed and there is no legal obligation to retain it, WinRupees securely deletes or anonymises it so that it can no longer be associated with any individual player.

8. Security

WinRupees takes the security of your personal data seriously. We apply a range of technical and organisational measures to protect the information we hold about you from unauthorised access, disclosure, alteration, or destruction. These measures include:

  • Encryption of data in transit using TLS (Transport Layer Security) for all communications between your browser or app and our servers.
  • Encryption of sensitive data at rest, including payment details and identity document copies, using industry-standard encryption algorithms.
  • Access controls that restrict which staff members can view personal player data, based on the principle of least privilege.
  • Regular security assessments and monitoring of our platform infrastructure to detect and address vulnerabilities.
  • Two-factor authentication options for player accounts to provide an additional layer of protection against unauthorised access.

Despite these measures, no online platform can guarantee absolute security. If you have reason to believe that your WinRupees account has been accessed without your permission, please contact our support team immediately so that we can investigate and take appropriate action to protect your account and funds.

You also play an important role in keeping your account secure. Choose a strong, unique password for WinRupees, do not share your login credentials with anyone, and always log out of your account when using a shared or public device.

9. Your Rights Over Your Data

As a WinRupees player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us via the email address provided in Section 12 of this policy.

Right of Access

You can request a copy of the personal data WinRupees holds about you at any time.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure

You may request deletion of your personal data where we no longer have a lawful basis for retaining it.

Right to Restriction

You can ask us to restrict processing of your data in certain circumstances while a concern is being resolved.

Right to Portability

Where technically feasible, you can request your data in a structured, machine-readable format.

Right to Object

You can object to processing of your data for marketing purposes at any time with immediate effect.

Please note that some rights are subject to limitations where we have a legal obligation to retain certain data — for example, transaction records required for anti-money laundering compliance. We will always explain clearly if a limitation applies to your request.

10. Minors

WinRupees is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is applied during the registration process and may be requested again at any point during the account lifetime.

If we become aware that a minor has registered an account or provided personal data to WinRupees, we will immediately close the account, void any bets placed, return any deposits to the originating payment account where possible, and delete all personal data associated with that account.

If you are a parent or guardian and believe that your child has registered a WinRupees account, please contact our support team immediately using the contact details in Section 12. We will investigate and act promptly.

11. Policy Updates

WinRupees may update this Privacy Policy from time to time to reflect changes to our platform, services, data processing practices, or applicable standards. When we make a material change to this policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via the email address registered on your account.

Your continued use of WinRupees after any update to this Privacy Policy constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically so you remain informed about how we handle your personal data.

Previous versions of this Privacy Policy are available on request by contacting our support team.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how WinRupees handles your personal information, please contact our Data Support Team:

Email: [email protected] — Please include "Privacy Request" in your subject line so we can route your message to the right team. We aim to respond to all privacy-related queries within 5 business days.

For general account and betting support, please visit our FAQ page which covers the most common questions about deposits, withdrawals, bonuses, and account management on WinRupees.

Our Privacy Commitments to You

Six principles that shape how WinRupees handles every piece of your personal data.

Data Encrypted End-to-End

Every connection between your device and WinRupees is encrypted with TLS. Your CNIC details, payment information, and account credentials are never transmitted or stored in plain text.

Never Sold to Third Parties

WinRupees does not sell your personal data to advertisers, data brokers, or any other third party for commercial gain. Your information is used only to deliver our services to you.

PKR Transactions Stay Private

Your JazzCash, Easypaisa, Raast, and bank transfer details are shared only with the payment provider needed to process your specific PKR transaction — nobody else.

You Control Your Data

Request a copy of your data, correct inaccuracies, opt out of marketing, or ask for your account to be deleted. WinRupees respects your data rights and responds within 5 business days.

Minimum Data Collection

WinRupees only collects the data that is genuinely necessary to run your account, verify your identity, and process your PKR bets and payments. No unnecessary data is requested or stored.

18+ Verification Always Active

Age verification protects minors from accessing WinRupees. Any account found to belong to a person under 18 is closed immediately and all associated data is deleted without delay.

Your Privacy is Protected. Ready to Join WinRupees?

Now that you know exactly how WinRupees handles your data, create your free account and start betting on Cricket, PSL, T20, Football, and Esports in PKR — with JazzCash, Easypaisa, Raast, and more supported from day one.

18+ only · All transactions in PKR · Your data is never sold · Responsible gaming tools available in account settings