WinRups Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to WinRups and all services available through the website at winrups.com, including sports betting, casino games, jackpot slots, fishing games, esports betting, and live cricket scoring. Throughout this document, "WinRups", "we", "us", and "our" refer to the platform and its operating entity.

WinRups is the data controller responsible for your personal information. This means we determine how and why your data is collected and processed. If you have any questions about this Privacy Policy or about how WinRups handles your personal data, you can reach our data protection team directly at support@winrups.com.

WinRups collects personal data in several ways — directly from you when you register or use the platform, automatically through your device and browser, and occasionally from third-party sources such as payment processors. Here is a clear breakdown of what we collect and when:

WinRups collects only the personal data that is genuinely necessary for the purposes described in this Privacy Policy. We do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance.

WinRups uses your personal data for the following clearly defined purposes. We do not use your data for anything not listed here without first seeking your explicit consent:

• Account Creation & Management: To create and maintain your WinRups account, verify your identity, and enable you to log in securely. Without this data, WinRups cannot provide its services to you.
• Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard. Financial data is passed to payment processors only to the extent necessary to complete transactions.
• Regulatory Compliance & KYC: To meet Know Your Customer (KYC) and anti-money laundering (AML) obligations. WinRups is required to verify the identity of players before processing withdrawals above certain thresholds.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account sharing, bonus abuse, and other security threats. IP addresses, device identifiers, and betting patterns are analysed for this purpose.
• Responsible Gaming: To monitor gaming behaviour and identify players who may need responsible gaming support. This includes tracking deposit frequency, session length, and loss patterns to trigger appropriate interventions.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Platform Improvement: To analyse how players use WinRups, identify technical issues, and improve the overall experience. This analysis is conducted on anonymised or aggregated data wherever possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive marketing from WinRups, or where we have a legitimate interest and you have not opted out.

Every time WinRups processes your personal data, we do so on one of the following legal grounds:

• Contractual Necessity: Processing is required to fulfil the contract between you and WinRups — creating your account, processing bets, handling deposits and withdrawals. Without this processing, WinRups cannot deliver its services.
• Legal Obligation: Processing required to comply with applicable regulations — particularly KYC identity verification, AML transaction monitoring, and responsible gaming record-keeping obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, technical improvement, and certain direct marketing activities where the interest is balanced against your privacy rights.
• Consent: Where WinRups relies on your consent — such as for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

WinRups does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. Data is shared only in the following limited, specific circumstances:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, affiliated banks, and card networks receive the minimum financial data necessary to process your transactions. These processors are contractually bound to handle your data securely and not use it for any other purpose.
• Identity Verification Providers: When KYC verification is required, your identity document data may be shared with our licensed verification partner for the purpose of confirming your identity. Verification partners are bound by strict data processing agreements.
• Game Providers: Our casino game and fishing game software providers may receive anonymised session data necessary to deliver their games through the WinRups platform. No directly identifiable personal data is shared for this purpose.
• Fraud Prevention Networks: WinRups participates in industry fraud prevention and AML sharing mechanisms where legally required or permitted. Data shared is limited to indicators of fraud or suspicious activity.
• Legal & Regulatory Authorities: WinRups will disclose personal data to law enforcement, regulators, or courts when legally compelled to do so, or when disclosure is necessary to protect the rights, safety, or property of WinRups, our players, or the public.

WinRups uses cookies and similar tracking technologies to make the platform work properly, remember your preferences, and understand how players use the site so we can make it better. Here is what we use and why:

• Essential Cookies: Required for the platform to function — session management, login authentication, bet slip state, and security tokens. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences — language settings, odds format, last-visited game category. These improve your experience but are not strictly essential.
• Analytics Cookies: Collect anonymised data about how players navigate WinRups — which pages are visited, how long sessions last, and where players encounter errors. This data helps us improve the platform and is never linked to your personal profile.
• Security Cookies: Help WinRups identify unusual login patterns, detect bot activity, and prevent account takeover attacks.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using WinRups but may reduce the quality of your experience. Disabling essential cookies will prevent you from logging in or placing bets.

WinRups takes the security of your personal data seriously. We have implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and loss.

• SSL/TLS Encryption: All data transmitted between your device and WinRups servers is encrypted using industry-standard SSL/TLS protocols. The padlock you see in your browser is not cosmetic — it represents active encryption of every request you make.
• Encrypted Storage: Sensitive data — including payment details and identity document copies — is stored in encrypted form at rest. Encryption keys are managed separately from the data they protect.
• Two-Factor Authentication: WinRups supports two-factor authentication (2FA) for account login. We strongly recommend enabling this feature from your account security settings.
• Access Controls: WinRups employee access to player data is restricted on a strict need-to-know basis. Support staff can access the account information necessary to resolve your query — nothing more. Access logs are maintained and reviewed regularly.
• Regular Security Audits: WinRups platforms and systems undergo regular penetration testing and security reviews by independent specialists. Identified vulnerabilities are remediated according to a risk-based prioritisation system.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights, WinRups will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

WinRups retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the lifetime of your WinRups account plus 5 years following account closure. This period is required for regulatory compliance and to respond to any retrospective legal queries.
• Financial Transaction Records: Retained for 7 years from the date of each transaction in accordance with standard financial record-keeping requirements.
• Identity Verification Documents: Retained for 5 years following the completion of KYC verification or account closure, whichever is later.
• Gaming Activity Logs: Retained for 5 years for responsible gaming monitoring, dispute resolution, and regulatory inspection purposes.
• Support Communications: Retained for 3 years from the date of each communication unless a longer period is required for an ongoing dispute or legal matter.
• Marketing Consent Records: Retained indefinitely as evidence of your consent decision, even after you unsubscribe from marketing communications.

After the applicable retention period has elapsed, WinRups will securely delete or anonymise your personal data so that it can no longer be linked back to you.

As a WinRups player, you have the following rights over your personal data. These rights can be exercised at any time by contacting support@winrups.com. WinRups will respond to all valid requests within 30 calendar days.

WinRups may send you promotional communications about bonuses, new games, sports betting offers, and platform updates. We do this only where you have consented to receive marketing from us, or where we have a legitimate interest balanced against your privacy rights.

You can update your marketing preferences at any time:

• Log in to your WinRups account and navigate to Account Settings → Notifications to update your email, SMS, and push notification preferences.
• Click the "Unsubscribe" link at the bottom of any WinRups marketing email to stop all email marketing immediately.
• Contact support@winrups.com to opt out of all WinRups marketing channels at once.

Unsubscribing from marketing communications does not affect transactional messages — you will still receive emails about your deposits, withdrawals, account security, and important policy changes. These service communications are not optional as they form part of the WinRups service contract.

WinRups is strictly for adults aged 18 and over. We do not knowingly collect, process, or store personal data from anyone under 18 years of age. If you are under 18, you must not attempt to register for or use any WinRups service.

If WinRups discovers that an account belongs to someone under 18, the account will be immediately closed, all funds held pending review, and the matter treated as a priority responsible gaming case. Any winnings generated by an underage player will be forfeited.

If you are a parent or guardian and believe that a minor has registered a WinRups account without your knowledge, please contact us immediately at support@winrups.com. We will investigate and close the account as a matter of urgency.

WinRups may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable regulations, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

For changes that significantly affect your privacy rights or the way we handle your data, WinRups will provide advance notice by email to all registered players before the updated Policy takes effect. We recommend reviewing this page periodically to stay informed.

If you have any questions, concerns, or requests related to this Privacy Policy or the way WinRups handles your personal data, please get in touch. We are committed to responding to all privacy-related queries within 30 calendar days:

• Email: support@winrups.com (mark the subject line "Privacy Request" for fastest routing)
• Live Chat: Available 24/7 after logging in to your WinRups account

WinRups takes privacy complaints seriously. If after contacting us you feel your privacy concern has not been addressed satisfactorily, you have the right to escalate the matter through applicable data protection channels.