Your privacy is a core obligation at winrup, not an afterthought. This Privacy Policy explains, in plain and precise terms, what personal data winrup collects from Pakistani players, why we collect it, how we use and protect it, who we share it with, and what rights you hold over your own information. This document governs all data processing activities across the entire winrup platform, including the sportsbook, winrup Casino, slots, Mines Gold, and all account-management functions.
winrup collects only the personal data genuinely required to operate your account, verify your identity, process PKR transactions, and comply with anti-money laundering obligations. We do not collect data for its own sake. If a data point is not needed, we do not ask for it.
All data transmitted between your device and winrup's servers is protected by 256-bit SSL/TLS encryption — the same standard used by international banking institutions. Data stored on winrup's servers is encrypted at rest. Your password is never stored in plain text under any circumstance.
winrup does not sell, rent, or trade your personal data to third-party marketers. Data is shared only with: regulated payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) for transaction processing; KYC verification providers; and regulatory or law-enforcement authorities under lawful obligation.
As a winrup player, you have the right to request a complete copy of all personal data we hold about you. You also have the right to request erasure of your data, subject to winrup's legal obligations to retain certain records under anti-money laundering and gaming licensing regulations.
winrup uses cookies strictly for platform functionality, session management, fraud prevention, and performance monitoring. We do not deploy third-party advertising trackers or behavioural profiling cookies. Section 9 of this Policy explains every cookie category winrup uses and how to manage your preferences.
For any privacy-related request — data access, erasure, rectification, portability, or complaint — winrup's dedicated contact is available at [email protected]. All privacy requests are acknowledged within 48 hours and resolved within 30 days in accordance with applicable data protection standards.
Please Read Carefully: This Privacy Policy applies to all winrup players regardless of their location within Pakistan. By creating a winrup account or using the winrup platform in any capacity, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree, please do not use winrup.
The data controller responsible for your personal data processed through the winrup platform is the company operating winrup.one under applicable international gaming licensing authority standards. For the purposes of this Privacy Policy, the data controller is referred to as "winrup," "we," "us," or "our."
All privacy-related communications and requests should be directed to: [email protected] with the subject line "Privacy Request — [Your winrup Account Username]." winrup will acknowledge your request within 48 hours of receipt.
winrup collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of data collected and the context in which each is gathered:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, gender | Account registration and KYC verification |
| Contact Data | Pakistani mobile number, email address | Account registration, OTP delivery, support |
| Financial Data | JazzCash/EasyPaisa account number, bank account details (HBL, UBL, Meezan Bank), transaction history, PKR balances | Deposit and withdrawal processing |
| Document Data | CNIC images, proof of address (utility bill), source-of-funds documents | KYC and AML compliance verification |
| Gaming Activity Data | Bet history, game session data, win/loss records, bonus usage, responsible gaming settings | Platform operation, dispute resolution, regulatory compliance |
| Technical Data | IP address, device type, browser type, operating system, session timestamps, login history | Security monitoring, fraud prevention, platform optimisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support delivery and quality assurance |
| Preference Data | Preferred payment methods, favourite games, language settings, marketing preferences | Platform personalisation and account management |
When you access winrup, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, the device and browser you are using, the pages you navigate to within winrup, and the duration of each visit. This data is used for security monitoring, platform performance analysis, and fraud detection — not for profiling or targeted advertising.
winrup may receive limited personal data about you from regulated third-party sources, including KYC verification providers used to validate your identity documents and payment processors used to confirm transaction details. Such data is received and processed in accordance with this Privacy Policy and the data sharing agreements winrup maintains with those providers.
winrup uses personal data for specific, documented purposes. We do not repurpose data collected for one purpose to serve an unrelated secondary purpose without providing you with prior notice and, where required, obtaining your consent. The principal uses of your data on the winrup platform are:
winrup processes your personal data on the following legal bases, as recognised under applicable international data protection frameworks:
Important: winrup does not sell your personal data to any third party, under any circumstances. Data sharing described in this section is limited to what is strictly necessary to deliver our services and meet our legal obligations.
To process deposits and withdrawals in PKR, winrup shares necessary financial and identity data with regulated payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These processors receive only the data required to execute the specific transaction and are contractually bound by data protection obligations consistent with this Policy.
winrup engages regulated identity verification service providers to assist with the KYC process. These providers receive copies of the documents you submit for identity verification and return a verification result. They do not retain your documents beyond the period required for regulatory compliance and are bound by strict confidentiality obligations.
winrup's platform is hosted on third-party cloud infrastructure and uses licensed game software from providers including Evolution, Pragmatic Play, NetEnt, and others. These technology partners operate as data processors acting on winrup's instructions and are contractually prohibited from using player data for their own purposes.
winrup may be required to disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction in response to lawful requests. winrup will notify affected players of such disclosures to the extent permitted by law and where doing so would not prejudice an active investigation.
In the event of a merger, acquisition, asset sale, or restructuring of the business operating winrup, personal data held by winrup may be transferred to the acquiring entity as part of that transaction. Players will be notified in advance of any such transfer and provided with information about how their data will be handled post-transaction.
winrup retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to mandatory retention obligations imposed by gaming licensing and AML regulations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | 5 years after account closure | Licensing obligation / AML compliance |
| Financial and transaction records | 7 years after transaction date | AML / financial regulatory obligation |
| KYC documents | 5 years after account closure | Licensing and AML obligation |
| Gaming activity logs | 5 years from date of activity | Licensing obligation / dispute resolution |
| Support communications | 3 years from date of communication | Legitimate interest / dispute resolution |
| Technical / security logs | 12 months from date of log | Legitimate interest / fraud prevention |
| Marketing consent records | Until consent is withdrawn, plus 2 years | Legal obligation to demonstrate consent |
Upon expiry of the applicable retention period, winrup securely deletes or anonymises the relevant data in accordance with its data destruction policy. Anonymous or aggregated data derived from your information may be retained indefinitely for statistical and analytical purposes.
As an internationally licensed gaming operator, winrup's servers and some of its service providers may be located outside Pakistan. When personal data is transferred internationally, winrup ensures that appropriate safeguards are in place including: contractual data protection clauses binding recipient organisations to equivalent data protection standards; transfer to jurisdictions with recognised adequate data protection frameworks; and restrictions on onward transfer without winrup's written authorisation.
Where personal data is processed by game studios, payment processors, or infrastructure providers outside Pakistan, winrup maintains data processing agreements with those entities requiring them to apply data protection standards consistent with this Privacy Policy.
winrup implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:
Note: While winrup applies robust technical security measures, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their winrup account, to enable 2FA, and to report any suspicious activity on their account immediately to [email protected].
Cookies are small text files placed on your device by the winrup website when you visit. They allow the platform to recognise your browser across page loads within a session, remember your preferences, and maintain your login state. winrup uses cookies only for the purposes described in this section and does not deploy advertising-network cookies or third-party behavioural trackers.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, winrup login state, security tokens, CSRF protection | Session / up to 24 hours |
| Functional | Language preferences, last-visited game category, remembered deposit method | Up to 30 days |
| Performance / Analytics | Page load times, error logging, game stream quality metrics — all anonymised | Up to 13 months |
| Fraud Prevention | Device fingerprinting signals for fraud and bot detection — stored server-side | Up to 12 months |
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to winrup and use the platform. Disabling functional cookies will prevent winrup from remembering your preferences between sessions. Blocking performance cookies will not affect your ability to play but will reduce winrup's ability to identify and resolve technical issues affecting your experience.
As a winrup player, you hold the following rights in relation to your personal data. All requests should be submitted to [email protected] with the subject line "Privacy Rights Request."
The winrup platform is strictly for players aged 21 and above. winrup does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data of a minor has been collected, it will be deleted immediately.
winrup enforces age verification at the point of account registration and during KYC processing. Any account found to belong to a player under 21 will be closed and all data held in relation to that account will be deleted in accordance with our data retention policy. If you believe a minor has accessed winrup using falsified details, please notify us immediately at [email protected] so that we may take prompt action.
winrup may send you marketing communications about new promotions, bonus offers, game launches, and platform updates, subject to your having provided consent to receive such communications at account registration or subsequently. Marketing is delivered by email and/or SMS to your registered contact details.
You may withdraw consent to marketing communications at any time by: (a) clicking the "Unsubscribe" link in any winrup marketing email; (b) updating your communication preferences in your winrup account settings; or (c) contacting [email protected] with the subject "Unsubscribe." Withdrawal of marketing consent does not affect winrup's ability to send you transactional communications related to your account, deposits, withdrawals, and responsible gaming obligations.
Note: winrup does not share your contact details with third-party marketing companies. All winrup marketing communications originate from winrup and relate exclusively to winrup products and promotions.
The winrup platform may contain links to third-party websites in certain contexts (for example, responsible gaming support resources). Once you leave the winrup platform by following such a link, this Privacy Policy no longer applies. The third-party website's own privacy policy governs data collected on that site. winrup is not responsible for the privacy practices of any third-party website and recommends that you review the privacy policy of any external website before submitting personal data.
winrup reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data practices, or the range of services offered on the platform. Material changes will be communicated to players by email to their registered winrup address no fewer than 14 days before the change takes effect, along with a prominent notice on the winrup platform.
The "Effective Date" shown at the top of this page reflects the date of the most recent update. Continued use of the winrup platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you should cease using winrup and may withdraw your available account balance prior to closing your account.
All historical versions of the winrup Privacy Policy are retained and are available upon written request to [email protected].
For all privacy-related matters — including data access requests, erasure requests, complaints, or general enquiries about how winrup handles your personal data — please use the following contact method:
When submitting a privacy request, please include your winrup account username, the nature of your request, and any relevant details that will help us respond accurately and efficiently. For data access and erasure requests, we may ask you to verify your identity before proceeding — this is to protect your data from being disclosed or deleted in response to unauthorised requests.
winrup handles your personal data with the same seriousness we apply to every aspect of the platform. Log in or create your winrup account and experience cricket betting, live casino, 4,000+ slots, and Mines Gold — all in PKR. Strictly 21+ only. Play responsibly.