WinRupee Privacy Policy — How We Protect Your Data

1 Who We Are

WinRupee operates the online sports betting and casino platform available at winrupee.ws. For the purposes of this Privacy Policy, WinRupee is the data controller — meaning we are the organisation responsible for deciding how and why your personal information is collected and used.

WinRupee was built specifically for Pakistani players. Our platform handles PKR transactions, supports Pakistani mobile wallets and is staffed by a team that understands the context of our users. That local focus extends to how we handle data — we do not treat Pakistani players as an afterthought in a global privacy policy written for other markets.

If you have any questions about this policy, you can contact our dedicated privacy contact at support@winrupee.ws with the subject line "Privacy Query". We aim to respond to all privacy-related enquiries within five working days.

2 Data We Collect

WinRupee collects personal data in three main ways: directly from you when you register or use the platform, automatically when you interact with our website, and occasionally from third-party sources such as identity verification providers. Here is a breakdown of what we collect and why:

We do not collect sensitive personal data such as religious beliefs, political opinions or biometric data unless specifically required by law for identity verification purposes, in which case we will explain the requirement clearly before collecting it.

3 How We Use Your Data

WinRupee uses your personal data only for clear, legitimate purposes. We do not use your data in ways you would not reasonably expect. Here is exactly how your data is used:

• Account management: Creating and maintaining your WinRupee account, verifying your identity and age, managing your login credentials and account settings.
• Processing transactions: Handling deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard. Verifying that transaction amounts and payment accounts match your account records.
• Providing betting and casino services: Calculating and settling bets, delivering live casino streams, maintaining your game history and managing bonus eligibility and wagering progress.
• Customer support: Responding to your queries, processing complaints, investigating disputed transactions and maintaining records of support interactions for quality assurance.
• Responsible gaming: Monitoring for signs of problem gambling, applying the limits you set in your account, managing self-exclusion requests and sending mandatory responsible gaming messages.
• Security and fraud prevention: Detecting and blocking suspicious account activity, investigating potential fraud, preventing multiple accounts and protecting the integrity of our betting markets.
• Legal and regulatory compliance: Maintaining transaction records for the periods required by applicable law, responding to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: Analysing usage patterns in aggregate to improve platform features, fix bugs, optimise performance and develop new products relevant to Pakistani users.
• Marketing (with your consent): Sending promotional emails, SMS notifications or in-app messages about WinRupee offers and new features. This only happens where you have opted in or where we have a legitimate interest basis described in Section 4.

4 Legal Basis for Processing

WinRupee processes your personal data under the following legal bases. We rely on only one or more of these for each processing activity — we do not process data without a clear legal reason for doing so.

1. Contract performance: Most data processing at WinRupee is necessary to deliver the services you signed up for. Without processing your identity, payment and gaming data, we simply cannot run your account or pay your winnings.
2. Legitimate interests: We process some data — particularly technical and usage data — on the basis that we have a genuine, proportionate business interest in understanding how the platform is used so we can improve it and protect it from fraud. We always balance this against your right to privacy.
3. Legal obligation: Some data must be retained and processed because law requires it — for example, transaction records required for financial compliance.
4. Consent: Marketing communications beyond service-related messages are only sent where you have explicitly opted in. You can withdraw consent at any time — see Section 10.

5 Who We Share Your Data With

WinRupee does not sell your personal data to any third party. Period. We do share data with carefully selected service providers who help us operate the platform, but only to the extent necessary for their specific function. Every third-party processor WinRupee works with is required to handle your data securely and only for the purposes we have specified.

The categories of third parties who may receive some of your data include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners — to process your deposits and withdrawals. They receive only what is needed to complete the transaction.
• Identity verification providers: Where age or identity verification is required, a specialist provider may receive your identity details to confirm them. These providers do not retain your data beyond the verification process.
• Game technology providers: Third-party live casino and sports data providers receive session identifiers and game activity data to deliver live streams, settle bets and calculate results. They do not receive your full account or payment details.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics tools to help WinRupee understand platform performance. This data cannot identify individual users.
• Legal and regulatory authorities: WinRupee will disclose data to law enforcement or regulatory bodies when required by a lawful order or when we have a legal obligation to report. We will inform you of any disclosure where we are legally permitted to do so.
• Fraud prevention services: In cases of suspected fraud or match-fixing, relevant data may be shared with specialist investigation firms or sports integrity organisations.

6 Cookies and Tracking Technologies

WinRupee uses cookies and similar tracking technologies on winrupee.ws. A cookie is a small text file stored on your device when you visit a website. Cookies help us deliver a functional and personalised experience.

The types of cookies WinRupee uses:

• Essential cookies: These are necessary for the platform to function. Without them, you cannot log in, place bets or process payments. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, odds format and display options. These improve your experience but are not strictly essential.
• Analytics cookies: Help us understand which pages are visited most, where users drop off and how the platform performs on different devices. Data collected is aggregated and does not identify individual users.
• Security cookies: Used to detect and prevent suspicious activity, bot traffic and fraudulent login attempts. These are essential for account security.

When you first visit WinRupee, a cookie consent notice will allow you to accept or manage non-essential cookies. You can also manage cookies through your browser settings at any time. Disabling essential cookies will prevent core platform features from working.

7 How Long We Keep Your Data

WinRupee does not keep your data for longer than necessary. Retention periods depend on the type of data and the reason it was collected:

• Account data: Retained for the duration of your account and for a period of five years after account closure, to comply with financial record-keeping requirements and to handle any delayed disputes or regulatory enquiries.
• Transaction and betting records: Retained for five years from the date of the transaction. This period is consistent with standard financial compliance requirements.
• Support communications: Retained for three years from the date of the interaction, after which they are anonymised or deleted.
• Technical and usage data: Retained in identifiable form for up to 24 months, then aggregated or deleted.
• Marketing preferences and consent records: Retained for the duration of the marketing relationship plus two years to demonstrate compliance with consent requirements.
• Self-exclusion records: Retained permanently where a permanent self-exclusion has been applied, to ensure excluded players are not re-admitted to the platform in error.

When data is no longer needed, WinRupee deletes it securely or anonymises it so that it can no longer be linked back to you.

8 How We Keep Your Data Secure

WinRupee takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information. No system is completely immune to risk, but our security practices are designed to significantly reduce the likelihood and impact of any data incident.

• SSL/TLS encryption: All data transmitted between your device and WinRupee is encrypted using industry-standard SSL/TLS protocols. You will see the padlock icon in your browser address bar at all times on winrupee.ws.
• Password security: Account passwords are stored using one-way hashing — meaning WinRupee cannot read your password, only verify it. We enforce minimum password complexity requirements and recommend enabling two-factor authentication for additional protection.
• Access controls: Access to personal data within WinRupee is restricted to staff members who genuinely need it for their role. All staff with data access receive regular training on data handling obligations.
• Payment security: Financial data is handled by certified payment processors. WinRupee never stores full card numbers or mobile wallet PINs on its own infrastructure.
• Breach response: WinRupee has a documented incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected users promptly and take immediate steps to contain and investigate the incident.

9 Your Privacy Rights

As a WinRupee user, you have specific rights over your personal data. WinRupee is committed to honouring these rights. Here is what you are entitled to and how to exercise each right:

11 Minors and Under-18 Protection

WinRupee's services are strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe that a minor has created a WinRupee account or provided personal information to us, please contact us immediately at support@winrupee.ws.

Where WinRupee discovers that an account has been registered by a person under 18, the account will be suspended immediately, all betting activity voided and any deposits refunded to the payment source. The personal data of the minor will be deleted from our systems as soon as the refund process is complete.

WinRupee recommends that account holders with children at home enable parental control software and ensure that the WinRupee site is blocked for underage users on shared devices. Logging out of your account when not in use is also strongly recommended.

12 Changes to This Privacy Policy

WinRupee may update this Privacy Policy from time to time. The effective date shown at the top of this page will always reflect when the current version came into force. We will always make the latest version available at winrupee.ws/privacy-policy.

For material changes — those that meaningfully affect how we use your data or your privacy rights — WinRupee will notify registered users via email or an in-platform notification before the change takes effect. Non-material changes such as clarifications of existing practices, spelling corrections or format updates will not be separately notified.

Your continued use of WinRupee after a policy update constitutes acceptance of the updated Privacy Policy. If you disagree with a material change, you can request account closure before the new policy comes into effect, and we will return any withdrawable real-money balance per our standard process.

13 Contact WinRupee About Privacy

All privacy-related queries, data rights requests and concerns should be directed to the WinRupee privacy contact. We are committed to responding thoughtfully rather than sending a templated reply.

• Email (privacy): support@winrupee.ws — subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 from the WinRupee website when logged in. For privacy queries, ask to be transferred to the account team.
• Response commitment: Acknowledgement within 5 working days, full response within 30 days for standard requests.

If you feel that WinRupee has not handled your personal data appropriately and we have not resolved the issue to your satisfaction through our internal process, you have the right to raise a formal complaint with the relevant data protection authority in your jurisdiction.