winrupes Privacy Policy —
Your Data, Protected

1. Who We Are

winrupes ("winrupes", "we", "us", "our") operates the online gaming platform accessible at winrupes.net, offering sports betting, live casino, slot games, and fishing games to players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and Peshawar. winrupes operates under an international gaming license issued by a recognised offshore gaming regulatory authority.

winrupes is the data controller in respect of all personal data collected from players who register a winrupes account or otherwise interact with the platform. This Privacy Policy explains how winrupes fulfils its obligations as a data controller, what rights you hold as a data subject, and how to exercise those rights.

2. Data We Collect

2.1 Data You Provide Directly

When you register a winrupes account, complete KYC identity verification, make a deposit via EasyPaisa or JazzCash, contact the support team, or interact with any feature of the winrupes platform, you may provide us with personal data including:

• Your full legal name and CNIC number as they appear on your Pakistani national identity card.
• Your date of birth (used to enforce the mandatory 21+ age requirement).
• Your Pakistani mobile number (used as your primary account identifier and EasyPaisa / JazzCash withdrawal destination).
• Your email address (used for account communications and dispute correspondence).
• CNIC images (front and back) and a selfie photograph submitted during KYC verification.
• Bank account or mobile wallet details (EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, or USDT TRC20 wallet address) provided for deposit and withdrawal purposes.
• Any information you voluntarily provide when contacting winrupes support via live chat or email.

2.2 Data Collected Automatically

When you access the winrupes platform from any device, including mobile phones on Jazz, Telenor, Zong, or Ufone networks, our systems automatically record certain technical data, including:

• Your IP address and approximate geographic location derived from it.
• Device type, operating system version, and browser type.
• The pages and features you access on the winrupes platform and the time spent on each.
• Session start and end timestamps associated with each winrupes Login event.
• Error logs and crash reports generated during your use of the platform.

3. How We Use Your Data

winrupes uses the personal data it holds for the following purposes:

• Account Creation and Management: To register your winrupes account, authenticate your winrupes Login, maintain your account preferences, and manage your PKR balance.
• Identity Verification (KYC): To verify your identity and confirm that you meet the mandatory 21+ age requirement before processing any withdrawal from your winrupes account.
• Payment Processing: To process PKR deposits received via EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank, and to process withdrawals to your verified payment method.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised access to winrupes accounts.
• Responsible Gaming: To monitor your betting and gaming activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion as set out in our Responsible Gaming Policy.
• Customer Support: To respond to your queries, resolve bet settlement disputes, and manage formal complaints within the timeframes specified in our Terms and Conditions.
• Legal and Regulatory Compliance: To comply with the requirements of our international gaming license, anti-money laundering regulations, and any lawful request from regulatory or law enforcement authorities.
• Marketing (where consented): To send you promotional communications about winrupes bonuses, PSL cricket betting offers, and new platform features, where you have explicitly opted in to receive such communications.

4. Sharing Your Data

winrupes does not sell, rent, or trade your personal data to any third party. Your data may be shared only in the following strictly controlled circumstances:

• Payment Processors: Transaction data is shared with EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, and USDT network infrastructure as necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data protection obligations.
• KYC Verification Providers: CNIC images and identity data submitted during KYC may be processed by a licensed identity verification service provider on behalf of winrupes. Such providers are bound by strict data processing agreements and may not use your data for any purpose other than identity verification on our behalf.
• Fraud Prevention and Security Services: Technical data including IP addresses and device identifiers may be shared with licensed fraud prevention service providers for the purpose of detecting and preventing fraudulent access and financial crime.
• Regulatory and Law Enforcement Authorities: winrupes will disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where legally required to do so, including in relation to anti-money laundering investigations or licensing compliance audits.
• Game Content Providers: Certain game session data (such as bet amounts and game outcomes) may be shared with third-party game studios (including providers of slot games, live casino, and Fishing Kui Li) strictly to facilitate game play and resolve any technical disputes. No identity data is shared with game studios.

5. Cookies & Tracking Technologies

5.1 Types of Cookies Used

The winrupes platform uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you securely logged in after winrupes Login and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming tool configurations. These cookies improve your experience but are not essential. You may disable them via your browser settings.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the winrupes platform — such as which game categories are most visited and how long sessions typically last. This information is used solely to improve the platform. No individual player is identified in analytics reports.

5.2 No Third-Party Advertising Cookies

winrupes does not use third-party advertising cookies or cross-site tracking technologies. No data collected via winrupes cookies is shared with advertising networks, social media platforms, or any other party for commercial targeting purposes.

6. Data Security

winrupes implements a multi-layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• AES-256 encryption for all personal data stored at rest, including CNIC images and payment method details.
• TLS 1.3 encryption for all data transmitted between your device and the winrupes platform.
• Hashed and salted storage of all winrupes Login passwords — plaintext passwords are never stored or accessible to any member of staff.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access raw personal data.
• Regular third-party security penetration testing of the winrupes platform infrastructure.
• Automated fraud detection systems that monitor transaction patterns and winrupes Login activity in real time.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, winrupes will notify affected players via their registered email address as soon as reasonably practicable and will report the breach to the relevant regulatory authority in accordance with our licensing obligations.

7. Data Retention

winrupes retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, subject to applicable legal and regulatory minimum retention periods. The following retention periods apply:

• KYC Identity Documents (CNIC, selfie): Retained for a minimum of five years from the date of account closure, in accordance with anti-money laundering regulations applicable under our international gaming license.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, for audit and AML compliance purposes.
• Account and Bet History: Retained for the duration of your account's active status plus five years following account closure.
• Support Communications: Retained for three years from the date of the communication, for dispute resolution and service improvement purposes.
• Marketing Preferences: Retained until you withdraw your consent, after which your opt-out status is retained indefinitely to prevent accidental re-enrolment into marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with winrupes's internal data destruction procedures.

8. Your Rights

As a winrupes player, you hold the following rights in respect of the personal data that winrupes holds about you. To exercise any of these rights, contact the winrupes support team via live chat or by emailing [email protected].

9. Children & Minors

The winrupes platform is strictly prohibited for use by persons under the age of 21. winrupes does not knowingly collect personal data from anyone under the age of 21. All accounts are subject to CNIC-based age verification before withdrawal privileges are activated. If winrupes discovers that a registered account belongs to a person under 21 years of age, all data held on that account will be immediately flagged, the account suspended, and the matter investigated in accordance with our licensing authority's minor protection requirements.

If you are a parent or guardian and believe that a person under 21 in your care has registered a winrupes account, please contact our support team immediately via live chat so that the account can be investigated and, if confirmed, permanently closed.

10. International Data Transfers

As winrupes operates under an international gaming license and uses globally distributed infrastructure, your personal data may be processed on servers located outside of Pakistan. Where personal data is transferred internationally, winrupes ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under our licensing authority's data protection framework. These safeguards include:

• Standard contractual clauses incorporated into data processing agreements with all international service providers.
• Transfer impact assessments conducted prior to any new international data transfer arrangement being established.
• Technical security measures (AES-256 encryption, TLS 1.3 in transit) applied uniformly regardless of where data is processed.

By registering a winrupes account and submitting your personal data — including your CNIC details and EasyPaisa or JazzCash information — you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where such transfers are necessary for the operation of the winrupes platform.

11. Marketing Communications

winrupes sends promotional communications — including PSL cricket betting offers, winrupes Casino bonus notifications, new game launch announcements for titles such as Fishing Kui Li and Treasures of Aztec, and seasonal promotions — only to players who have explicitly opted in to receive such communications during account registration or via the preferences section of their account dashboard.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your winrupes account dashboard.
• Clicking the unsubscribe link included in any winrupes marketing email.
• Contacting the winrupes support team via live chat and requesting immediate removal from all marketing lists.

Please allow up to 48 hours for opt-out requests to take full effect across all communication channels. Withdrawing consent for marketing communications does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal status updates, and account security alerts, which are sent regardless of marketing preferences as they are essential to your use of the winrupes platform.

12. Third-Party Services

The winrupes platform integrates with third-party game providers, payment gateways, and analytics tools to deliver its services. While winrupes selects all third-party partners carefully and requires them to maintain appropriate data protection standards, winrupes is not responsible for the privacy practices of third-party services that operate under their own privacy policies.

Where your data is processed by a third party on behalf of winrupes (as a data processor), that third party is bound by a data processing agreement that restricts its use of your data solely to the services it provides to winrupes. Where a third party operates as an independent data controller in its own right (for example, EasyPaisa or JazzCash processing their own side of a payment transaction), their processing of your data is governed by their own privacy policies, which winrupes encourages you to review.

13. Policy Amendments

winrupes reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations under our international gaming license, or the introduction of new platform features. When a material amendment is made — for example, a change to the categories of data we collect, the third parties with whom we share data, or our data retention periods — winrupes will notify all registered players via the email address on their account at least seven calendar days before the change takes effect.

For minor amendments such as typographical corrections or clarifications that do not alter the substance of how your data is processed, winrupes may update this Privacy Policy with immediate effect. The effective date displayed at the top of this page will be updated each time an amendment is published. Your continued use of the winrupes platform following any amendment to this Privacy Policy constitutes your acceptance of the revised policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how winrupes has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly from the winrupes platform after winrupes Login. This is the fastest way to reach our data protection team for urgent requests.
• Email: [email protected] — please include "Privacy Request" or "Data Complaint" in the subject line so your message is routed directly to the appropriate team.

winrupes aims to acknowledge all data rights requests and privacy complaints within 48 hours and to resolve them fully within 30 calendar days of acknowledgement. Where a request is particularly complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

If you are not satisfied with how winrupes has responded to your privacy complaint, you have the right to escalate the matter to the dispute resolution body designated by our international gaming licensing authority, whose contact details are available upon request from the winrupes support team.