WinRopes Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to the WinRopes platform, accessible at winropes.app and all associated mobile-optimised interfaces. When we say "WinRopes", "we", "us" or "our", we mean the company that operates the WinRopes platform and is responsible for the personal data of the players who use it.

WinRopes is the data controller for all personal data collected through the registration process, account use, payment transactions, and any other interactions you have with the WinRopes platform. As data controller, WinRopes determines what data is collected, why, and how it is handled. If you have questions about how WinRopes uses your data, the right place to start is this Privacy Policy and, if needed, a direct query to the WinRopes support team at support@winropes.app.

WinRopes collects different categories of personal data depending on how you interact with the platform. Here is a clear breakdown of what we collect and at which stage.

WinRopes does not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification purposes as mandated by our regulatory obligations.

WinRopes collects personal data through several distinct channels and mechanisms. Understanding where your data comes from helps you understand how WinRopes builds the picture it needs to operate the platform safely and compliantly.

• Directly from you when you register an account, complete your profile, submit a KYC document, make a deposit or withdrawal, contact customer support, or respond to a WinRopes survey or promotion.
• Automatically through your use of the platform via server logs, session tracking tools, and analytics that record how and when you interact with WinRopes pages and features. This includes IP addresses, device identifiers, and clickstream data.
• From payment providers such as Easypaisa, JazzCash, NayaPay, SadaPay, and card processors, who share transaction confirmation data with WinRopes so that deposits and withdrawals can be matched to the correct account.
• From identity verification partners who validate the accuracy of the identity documents you submit during the KYC process. These partners confirm whether a document is genuine and whether the details on it match your WinRopes registration information.
• Through cookies and similar technologies placed on your device when you visit winropes.app. Cookie usage is explained in detail in Section 10 of this Privacy Policy.

WinRopes uses the personal data it collects for specific, defined purposes. We do not use personal data for purposes beyond those listed here without informing you and, where required, obtaining your consent.

• To provide the WinRopes service: Processing your bets and casino game outcomes, crediting winnings to your account, processing deposits and withdrawals in PKR, and giving you access to all features of the platform.
• To verify your identity: Confirming that you are who you say you are when you register and when you make significant withdrawals, as required by our regulatory obligations and anti-money-laundering procedures.
• To keep the platform secure: Detecting and preventing fraud, account takeovers, money laundering, multiple account creation, and other prohibited conduct described in the WinRopes Terms and Conditions.
• To comply with legal and regulatory requirements: Maintaining transaction records, reporting as required by our licence obligations, and cooperating with lawful requests from regulatory authorities.
• To provide customer support: Accessing your account history, transaction records, and communication history when you contact WinRopes with a query, dispute, or complaint.
• To improve the platform: Analysing aggregated, anonymised usage patterns to identify where the WinRopes platform can be made faster, clearer, or more useful for Pakistani players generally.
• To send you relevant communications: Informing you about your account, transactions, security alerts, and — where you have not opted out — promotional offers from WinRopes.
• To support responsible gaming: Monitoring betting patterns to identify players who may benefit from responsible gaming support and to administer any deposit limits, cooling-off periods, or self-exclusions you have applied to your account.

WinRopes processes personal data only when there is a valid legal basis for doing so. The main legal bases that apply to WinRopes data processing activities are as follows.

• Contract performance: Processing your data is necessary to provide the WinRopes service you have signed up for. Without processing your identity and payment data, WinRopes cannot create your account, settle your bets, or process your withdrawals.
• Legal obligation: WinRopes is required by our gambling licence and applicable anti-money-laundering regulations to verify player identities, retain transaction records for defined periods, and report suspicious activity. Processing for these purposes is non-optional.
• Legitimate interests: WinRopes has a legitimate interest in maintaining platform security, preventing fraud, and improving the service. This processing is always balanced against your privacy interests and does not override them.
• Consent: For marketing communications and for any non-essential cookies, WinRopes relies on your consent. You can withdraw consent for these uses at any time without affecting WinRopes' ability to provide the core service to you.

WinRopes does not sell, rent, or share your personal data with third parties for their own commercial or marketing use under any circumstances. The only parties with whom WinRopes shares personal data are those whose services are directly necessary to operate the WinRopes platform for you.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive transaction data necessary to process your deposits and withdrawals. They operate under their own privacy policies and are subject to their own regulatory obligations.
• Identity verification providers: Third-party KYC partners receive copies of the identity documents you submit to WinRopes. These partners confirm document authenticity and return a verification result to WinRopes. They do not retain your documents beyond what their own legal obligations require.
• Technology infrastructure providers: Cloud hosting, database, and security service providers who process data on WinRopes' behalf under contractual obligations that require them to maintain the same data protection standards as WinRopes.
• Regulatory and law enforcement authorities: WinRopes shares data with regulators and law enforcement agencies when required by law, court order, or valid regulatory request. WinRopes will inform you of any such disclosure where legally permitted to do so.
• Fraud prevention services: Aggregated or anonymised signals may be shared with industry fraud prevention databases to help protect all players from account takeover and payment fraud.

Because WinRopes handles real PKR transactions and operates under a gambling licence, identity verification is a legal requirement rather than an optional extra. The KYC (Know Your Customer) process exists to protect players as much as it protects WinRopes — it prevents criminals from using the platform to launder money, protects legitimate players from having their accounts taken over, and ensures the platform remains compliant with the regulatory conditions under which it operates.

When you make your first withdrawal, or when a deposit or withdrawal triggers an AML threshold, WinRopes will request identity verification documents. Standard documents accepted include a clear photo or scan of your Pakistani CNIC (front and back), a recent utility bill or bank statement showing your name and address in Pakistan, and proof of payment method ownership where a payment method cannot be automatically verified.

KYC documents submitted to WinRopes are processed by our verification partner and then stored securely. Document images are encrypted at rest and accessible only to WinRopes compliance staff with a specific business need to review them. WinRopes retains KYC documents for the minimum period required by our regulatory obligations and then deletes them securely.

Payment card details are never stored in full on WinRopes systems. Card transactions are processed through PCI-DSS compliant payment infrastructure and WinRopes stores only a tokenised reference that allows repeat transactions without requiring you to re-enter your full card details.

WinRopes retains personal data only for as long as there is a clear, legitimate reason to keep it. Once the relevant purpose has expired and there is no overriding legal requirement to retain the data, it is securely deleted or anonymised.

• Account data and transaction records: Retained for the duration of your active account plus a minimum of 5 years after account closure, as required by anti-money-laundering regulations applicable to our gambling licence.
• KYC verification documents: Retained for the period required by our regulatory obligations following the completion of the verification process, then securely deleted.
• Customer support correspondence: Retained for 3 years from the date of the most recent interaction, to allow reference in the event of a related complaint or dispute.
• Cookies and session data: Session cookies are deleted when you close your browser. Persistent cookies expire on the schedule described in Section 10. Analytics data is retained in aggregated, anonymised form for up to 24 months.
• Marketing consent records: Retained until you withdraw consent plus a further 12 months as an audit trail confirming when consent was given and withdrawn.

Data security is taken seriously at WinRopes. We apply technical and organisational measures that are appropriate to the sensitivity of the data we hold and the risk of unauthorised access, disclosure, or loss.

On the technical side, WinRopes applies TLS encryption to all data in transit, AES-256 encryption to sensitive data at rest, tokenisation of payment card data, hashing of passwords (never stored in plaintext), multi-factor authentication for internal admin access, network security including firewalls and intrusion detection systems, and regular third-party penetration testing of the WinRopes platform.

On the organisational side, access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are trained on data protection obligations. Data processing agreements are in place with all third-party service providers. WinRopes maintains a data breach response plan and will notify affected players and relevant authorities in the event of a significant data breach within the timeframe required by applicable regulation.

Despite these measures, no internet-connected platform can guarantee absolute security against every possible threat. WinRopes strongly encourages players to protect their own accounts by using strong, unique passwords, enabling two-factor authentication, and contacting WinRopes support immediately if they suspect unauthorised activity on their account.

WinRopes uses cookies — small text files stored on your device — and similar technologies to make the platform work correctly, remember your preferences, and understand how players use the platform. Here is what each category of cookie does on WinRopes.

You can manage your cookie preferences through your browser settings at any time. Blocking all cookies will prevent the WinRopes platform from functioning correctly. We recommend allowing at least strictly necessary and security cookies for a safe and working experience.

As a WinRopes player and as an individual whose personal data we process, you have a set of rights over that data. WinRopes is committed to facilitating the exercise of these rights promptly and without unnecessary friction.

WinRopes may send you promotional communications by email and SMS about new games, promotions, deposit bonuses, and platform updates. These communications are sent only to players who have not opted out of marketing.

You can opt out of WinRopes marketing communications at any time using any of the following methods: clicking the unsubscribe link in any WinRopes marketing email, replying STOP to any WinRopes marketing SMS, toggling off marketing preferences in your WinRopes account settings, or contacting WinRopes customer support directly.

Opting out of marketing communications does not affect transactional communications — WinRopes will still send you messages that are directly necessary for your account, such as deposit confirmations, withdrawal notifications, security alerts, and responses to support queries you have initiated.

WinRopes is an adult gaming platform and does not knowingly collect personal data from anyone under the age of 18. The platform employs age verification procedures during registration to prevent under-18s from creating accounts.

If WinRopes becomes aware that personal data has been collected from a minor — through discovery during a KYC check, a complaint, or any other means — the relevant account will be immediately closed, all data associated with that account will be deleted (subject only to any legal obligation to retain records of the underage access incident), and any deposits made will be returned to the payment method used.

Parents or guardians who believe a minor may have registered on WinRopes should contact WinRopes customer support immediately at support@winropes.app. WinRopes will investigate and act on all such reports promptly.

WinRopes may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we use, or changes in applicable data protection law. When we make material changes, we will notify you by email and by displaying a notice on the WinRopes platform at least 7 days before the changes take effect.

Non-material updates — such as clarifying existing text without changing any substantive rights or practices — may be made without advance notice. The "Last updated" date at the top of this page always reflects when the policy was most recently revised. Continuing to use WinRopes after an updated policy takes effect constitutes acceptance of the revised terms.

We encourage you to revisit this page periodically. The current version of the WinRopes Privacy Policy is always available at winropes.app/privacy-policy.

If you have any questions, concerns, or requests related to this Privacy Policy or to how WinRopes handles your personal data, please contact our support team. We take privacy queries seriously and will respond promptly and thoroughly.

• Email: support@winropes.app — use the subject line "Privacy Query" for the fastest routing to our data protection team.
• Live Chat: Available 24/7 on the WinRopes platform. For formal data rights requests, email is preferred as it creates a written record.
• Response time: WinRopes acknowledges privacy queries within 48 hours and provides a substantive response within 30 calendar days.

If you are not satisfied with how WinRopes has handled a privacy concern after raising it with us directly, you have the right to escalate to the relevant data protection authority. Details of the appropriate authority can be provided by WinRopes customer support on request.