Who this policy applies to: This Privacy Policy applies to all individuals who visit winrupees.im, register an account, deposit funds, play any game or otherwise interact with the WinRupees platform ("the Platform"). It governs how WinRupees ("we", "us", "our") handles your personal information.
WinRupees takes the privacy of Pakistani players seriously. We collect the minimum data necessary to operate the Platform effectively, process payments in PKR, comply with applicable legal obligations and deliver a high-quality gaming experience. We do not sell your personal data to third parties for marketing purposes, and we do not share it beyond the specific circumstances described in this policy.
This policy should be read alongside the WinRupees Terms and Conditions and the Responsible Gaming Policy, both of which reference data handling in their respective contexts.
If you have any questions about how your data is handled at WinRupees, contact our team at support@winrupees.im. We aim to respond to all privacy-related queries within 48 hours.
1Data We Collect
WinRupees collects personal data in several categories. The specific data collected depends on how you interact with the Platform — a visitor who browses without registering will have less data collected than a registered player who deposits and plays.
Registration and Account Data
When you create a WinRupees account, we collect the following information:
- Full name as it appears on your identity documents
- Pakistani mobile number used for account registration and two-factor authentication
- Date of birth (for age verification purposes)
- Email address, if provided
- Username and encrypted password
- City or region of residence within Pakistan
Identity Verification (KYC) Data
When a withdrawal is requested for the first time, or when required by our compliance processes, we may collect:
- Copy of your CNIC (Computerised National Identity Card) or other valid Pakistani identity document
- Selfie or facial photograph for identity confirmation
- Proof of payment method ownership (e.g. screenshot of registered Easypaisa or JazzCash account)
Transaction and Payment Data
- Deposit amounts and timestamps
- Withdrawal requests, amounts and processing status
- Payment method identifiers (mobile wallet numbers, masked card numbers) — full card numbers are never stored on WinRupees servers
- Transaction reference numbers from payment processors
Gaming Activity Data
- Games played, bet amounts, win/loss records and session durations
- Bonus claims, free spins used and wagering requirement progress
- VIP Club tier status and loyalty points balance
Technical and Device Data
- IP address at time of login and during sessions
- Device type, operating system and browser version
- Approximate geographic location derived from IP address
- Session timestamps and navigation patterns within the Platform
2How We Collect Your Data
WinRupees collects data through the following channels:
- Directly from you — when you complete the registration form, submit identity verification documents, contact support or update your account profile.
- Automatically through your use of the Platform — session data, device information and in-game activity are recorded automatically as you use the site.
- Through cookies and similar technologies — the Platform uses cookies to maintain your login session, remember preferences and measure site performance. Full details are in Section 8.
- From payment processors — when you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card networks, transaction confirmation data is passed back to WinRupees from those processors.
- From identity verification providers — where a third-party KYC service is used to verify your identity documents, that service returns a verification result to WinRupees.
WinRupees never purchases data lists from third parties or engages in any form of unsolicited data acquisition. All data we hold was provided by or generated through your direct interaction with the Platform.
3How We Use Your Data
WinRupees uses the data we collect for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Name, mobile number, date of birth, password |
| Processing deposits and withdrawals | Payment method details, transaction records, KYC documents |
| Age and identity verification | CNIC, selfie, date of birth |
| Delivering gameplay and VIP rewards | Gaming activity data, VIP tier, loyalty points |
| Customer support | Account data, transaction history, support communications |
| Fraud prevention and security | IP address, device data, login history, transaction patterns |
| Responsible gaming monitoring | Session duration, bet frequency, deposit amounts |
| Legal and regulatory compliance | Identity documents, transaction records |
| Platform improvement | Anonymised usage patterns, navigation data |
| Communications about your account | Mobile number, email address |
WinRupees does not use your personal data for automated profiling that produces legal or similarly significant effects on you as an individual, and does not use your data to build marketing profiles for sale to third parties.
4Legal Basis for Processing
WinRupees processes your personal data under the following legal bases:
- Contractual necessity — processing required to provide the gaming services you have signed up for, including account management, payment processing and game delivery.
- Legal obligation — processing required to comply with applicable laws including age verification requirements, anti-money laundering obligations and financial record-keeping rules.
- Legitimate interests — processing required for fraud prevention, platform security, responsible gaming monitoring and overall service improvement, where these interests are not overridden by your data protection rights.
- Consent — where we send optional marketing communications about platform promotions, we rely on your consent. You may withdraw consent at any time by contacting support@winrupees.im.
5Data Sharing and Third Parties
WinRupees does not sell your personal data. We share data with third parties only in the specific circumstances described below:
- Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, bank networks and card payment providers receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
- Identity verification providers — where a third-party KYC service processes your identity documents, that provider receives the documents you submit for the specific purpose of verification. The result is returned to WinRupees and the third party does not retain your documents beyond the verification process.
- Technology infrastructure providers — cloud hosting, database management and content delivery services that support the Platform's technical operation may process data as part of service delivery. These providers are contractually bound to process data only as instructed by WinRupees and not for their own purposes.
- Game providers — some game software is provided by third-party game studios. These providers may receive anonymised session data to support game performance and fault resolution, but do not receive your personal identification data.
- Legal and regulatory authorities — WinRupees will disclose data to law enforcement agencies, regulators or courts where required by valid legal process or where we believe disclosure is necessary to prevent fraud or protect the security of the Platform.
WinRupees never shares your data with advertising networks, data brokers or social media platforms for marketing targeting purposes.
6Data Retention
WinRupees retains personal data for as long as your account remains active and for a defined period after account closure. Specific retention periods by data category are as follows:
- Account registration data — retained for the duration of your account plus five years after closure, to meet legal record-keeping obligations.
- Transaction and payment records — retained for a minimum of five years from the date of each transaction, in line with standard financial record requirements.
- KYC and identity documents — retained for five years from the date of verification or account closure, whichever is later.
- Gaming activity logs — retained for three years for responsible gaming monitoring and dispute resolution purposes.
- Support communications — retained for two years from the date of the most recent communication in a thread.
- Technical and device data — retained for 12 months from collection for security and fraud analysis purposes.
After the applicable retention period expires, data is securely deleted or irreversibly anonymised. Anonymised aggregate data (with no connection to individual players) may be retained indefinitely for statistical and product development purposes.
7Data Security
WinRupees implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:
- TLS encryption — all data transmitted between your device and the WinRupees servers is encrypted in transit using current Transport Layer Security standards.
- Encrypted storage — sensitive data including passwords and identity documents is stored in encrypted form. Passwords are hashed using industry-standard algorithms and the original value is never stored or recoverable.
- Access controls — access to personal data within WinRupees is restricted to staff who require it for their specific job function. All access is logged and reviewed.
- Payment security — full payment card numbers are never stored on WinRupees servers. Card transactions are processed by PCI DSS-compliant payment providers.
- Two-factor authentication — WinRupees supports two-factor authentication for player accounts to reduce the risk of unauthorised access.
- Regular security reviews — the Platform undergoes periodic security assessments to identify and remediate vulnerabilities.
While WinRupees takes all reasonable steps to protect your data, no internet transmission or digital storage system can be guaranteed to be 100% secure. In the event of a data breach that materially affects your rights, WinRupees will notify affected players promptly and take steps to limit any harm.
8Cookies and Tracking Technologies
WinRupees uses cookies and similar technologies to enable core platform functionality, improve performance and understand how players use the site. A cookie is a small text file placed on your device when you visit a website. The cookies WinRupees uses fall into the following categories:
Most browsers allow you to control cookie settings through their preferences menu. Disabling cookies other than strictly necessary ones may affect some Platform features but will not prevent you from accessing your account or playing games.
WinRupees does not use third-party advertising cookies or any tracking technology that shares your browsing data with advertising networks.
9Your Privacy Rights
As a WinRupees player, you have the following rights in relation to your personal data. To exercise any of these rights, contact support@winrupees.im with your registered mobile number and a description of your request. WinRupees will respond within 30 days.
Right of Access
Request a copy of the personal data WinRupees holds about you, including what categories of data are held, why it is held and with whom it has been shared.
Right to Correction
Request correction of any inaccurate personal data held about you. You can update most account details directly in your account settings without contacting support.
Right to Deletion
Request deletion of your personal data where it is no longer necessary for the purposes it was collected. Note that legal retention obligations may mean some data must be kept for a defined period after account closure.
Right to Object
Object to processing of your data for purposes based on legitimate interests, including any optional communications. Objections will be reviewed and responded to within 30 days.
Right to Restrict Processing
Request that WinRupees restricts use of your data to storage only — for example, while a correction or objection request is being reviewed.
Right to Portability
Request your personal data in a structured, machine-readable format where processing is based on consent or contract, so you can transfer it to another service if you choose.
10Children's Privacy
WinRupees is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to register an account or use the Platform in any way.
If a parent or guardian believes a minor has registered an account on WinRupees, they should contact support@winrupees.im immediately. WinRupees will investigate, close the account and delete all associated personal data promptly.
Age verification is an active part of our KYC process. Accounts where the registered player is found to be under 18 are closed immediately, all balances are withheld pending investigation and the matter is reviewed according to our compliance procedures.
11Changes to This Privacy Policy
WinRupees may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in the Platform's features or changes in applicable legal requirements. When material changes are made, registered players will be notified via their registered mobile number or in-platform notification before the new policy takes effect.
The most current version of this Privacy Policy will always be available at winrupees.im/privacy-policy. The "Last Updated" date at the top of this page shows when the most recent revision was made. Continued use of the Platform after an updated policy is published constitutes acceptance of the revised terms.
For changes that involve significant new uses of personal data, WinRupees will seek fresh consent from affected players rather than relying on continued use of the Platform as implied consent.
12Contact Us About Privacy
For any privacy-related question, data access request, correction request or complaint about how WinRupees handles your personal information, please get in touch:
- Email: support@winrupees.im — include "Privacy Request" in the subject line
- Live Chat: Available 24/7 in your WinRupees account dashboard
- Response Time: Privacy queries are acknowledged within 24 hours and fully responded to within 30 days
WinRupees takes privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you may escalate the matter through the appropriate legal channels in your jurisdiction.