Win Ropes Privacy Policy — How We Collect, Use & Protect Your Data

This Privacy Policy is published by Win Ropes (referred to throughout as "Win Ropes", "we", "us", or "our"). Win Ropes operates the online gaming platform accessible at winropes.com and through associated mobile applications. Win Ropes is the data controller responsible for the personal information collected through these channels.

This policy applies to all registered users of the Win Ropes platform, as well as to visitors who browse the website without registering. It covers data collected through the website, the mobile application, our customer support channels, and any promotional communications you receive from Win Ropes.

By registering an account on the Win Ropes platform, using any of our services, or continuing to browse our website, you confirm that you have read and understood this Privacy Policy. If you disagree with anything in it, please do not use the Win Ropes platform and do not create an account.

Win Ropes collects different categories of personal data at different points in your use of the platform. Below is a clear breakdown of exactly what we collect and when.

Data Collected at Registration

• Full legal name (as it appears on your CNIC)
• Date of birth (for age verification)
• Pakistani mobile number
• Email address
• Username chosen by you
• Your city and province of residence

Data Collected During Account Verification (KYC)

• CNIC number and scanned copy (front and back)
• Selfie photograph holding your CNIC
• Proof of payment method ownership (Easypaisa / JazzCash account name confirmation, bank statement header, or similar)

Data Collected During Platform Use

Win Ropes does not collect sensitive personal data such as biometric identifiers, medical records, political opinions, or religious beliefs. The only biometric-adjacent data we collect is the CNIC selfie photograph used for identity verification, which is handled and stored under strict access controls.

Every piece of personal data Win Ropes collects is collected for a specific, documented purpose. We do not collect data speculatively. The legal bases and purposes for our data processing are as follows:

To Provide the Win Ropes Service (Contractual Necessity)

The majority of data we collect is necessary to fulfil the contract between you and Win Ropes when you register an account. Without this data, we cannot create or operate your account, process PKR deposits and withdrawals via Easypaisa, JazzCash, or bank IBFT, or record and settle your bets and game play. This is the primary and most significant basis for our data processing.

To Comply with Legal and Regulatory Obligations

Win Ropes is required to collect and retain certain data by applicable financial and anti-money laundering regulations. KYC identity verification, transaction records, and IP logs fall into this category. We cannot waive these requirements — they are mandatory obligations, not choices.

To Protect Platform Security and Prevent Fraud

Win Ropes uses device data, login logs, IP addresses, and behavioural patterns to detect and prevent fraudulent activity, account takeovers, and platform abuse. This processing is in our legitimate interest and in the interest of all genuine Win Ropes players. Fraud on the platform harms every user.

To Communicate with You About Your Account

We use your email address and mobile number to send transactional communications — account confirmations, withdrawal notifications, security alerts, and support responses. We also send promotional communications where you have opted in to receive them. You can opt out of promotional communications at any time from your account settings.

To Provide Responsible Gaming Support

Win Ropes uses your gaming activity data to identify patterns that may indicate problem gambling, and to comply with responsible gaming obligations. This includes monitoring for sudden changes in betting volume or frequency. Where such patterns are identified, our responsible gaming team may reach out proactively.

Win Ropes takes data security seriously. The measures below reflect genuine implementation — not a checkbox exercise.

• Encryption in Transit: All data exchanged between your device and Win Ropes servers is protected by TLS 1.2 or higher encryption. This applies to the web platform and both iOS and Android applications.
• Encryption at Rest: Sensitive personal data — including CNIC documents, KYC records, and payment method information — is encrypted at rest using AES-256 encryption on our servers.
• Access Controls: Internal access to personal data at Win Ropes is role-based and logged. Only employees with a legitimate need to access your data can do so — a customer support agent handling your query will see what is relevant to that query; they cannot access your full financial history without a specific reason.
• Payment Data Isolation: Win Ropes does not store card numbers or CVV codes. Card transactions are processed entirely by certified third-party payment gateways. We receive only a secure token reference.
• Regular Security Reviews: Win Ropes conducts periodic security reviews of its data infrastructure. Critical vulnerabilities, if discovered, are treated as P1 priorities with immediate remediation.
• Breach Response: In the event of a data breach affecting personal information, Win Ropes will notify affected users without undue delay and take all reasonable steps to contain the breach and prevent further exposure.

Win Ropes does not sell personal data. We do share data with a limited set of third-party service providers where it is necessary to operate the platform. Every third party we share data with is bound by contractual data processing obligations and is not permitted to use your data for any purpose other than the specific service they provide to Win Ropes.

Categories of Third Parties We Work With

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners, and Visa/Mastercard gateway providers receive the minimum data necessary to process your deposits and withdrawals. Transaction reference data is shared; your full account profile is not.
• Identity Verification Providers: When KYC verification requires automated document checking, a certified identity verification provider may process your CNIC image. These providers are contractually bound to use your data only for the verification task and to delete it after processing.
• Fraud Prevention Services: Win Ropes uses fraud detection tools that process device fingerprint data, IP addresses, and behavioural signals. This data is pseudonymised before transmission and is not matched against your personal identity by the fraud provider.
• Cloud Infrastructure: Win Ropes' platform is hosted on cloud infrastructure. Data stored on these servers is protected by the encryption and access control measures described in Section 04.
• Legal and Regulatory Authorities: Win Ropes will share account data, transaction records, and IP information with Pakistani law enforcement, financial intelligence authorities, or other competent regulatory bodies when required to do so by a valid legal request, court order, or regulatory obligation. Win Ropes does not volunteer player data to authorities beyond what is legally required.

Win Ropes does not share personal data with data brokers, advertising networks, social media platforms, or any entity for commercial marketing purposes. We do not share data across unrelated business lines or with partner brands outside the Win Ropes platform.

Win Ropes uses cookies and similar local storage technologies to make the platform work correctly and to understand how players use it. We do not use cross-site tracking cookies or third-party advertising cookies of any kind.

You can manage cookie settings through your browser preferences at any time. Deleting all cookies will log you out of your Win Ropes session and reset any saved preferences. Win Ropes does not use advertising cookies, retargeting pixels, or any technology that tracks you across websites outside the Win Ropes platform.

Win Ropes is strictly an adult platform. We do not knowingly collect personal information from any individual under the age of 18. Our registration process requires a date of birth confirmation and, for higher transaction volumes, CNIC verification that confirms age.

If Win Ropes discovers that a registered account belongs to a person under 18, the account will be immediately and permanently closed. Any funds deposited will be returned to the payment method used for the deposit, and all gaming history will be voided. Win Ropes will also review how the minor gained access to the platform and implement any additional verification steps needed to prevent recurrence.

If you are a parent or guardian and believe your child has registered an account at Win Ropes, please contact our support team immediately at support@winropes.com. We will investigate and take action within 24 hours of receiving your report.

As a Win Ropes player, you have the following rights in relation to your personal data. These rights are genuine entitlements, not just theoretical ones — Win Ropes will action them properly when you exercise them.

Win Ropes does not retain personal data indefinitely. Retention periods are set based on the specific data category and the legal or operational requirement that justifies keeping it. The table in Section 02 above shows retention periods for each category of data we collect.

The primary driver of longer retention periods is financial regulation. Transaction records and KYC documents are retained for a minimum of seven years to comply with anti-money laundering record-keeping obligations. This is not a policy choice — it is a mandatory legal requirement that applies to all financial service providers in this space.

When a Win Ropes account is closed — whether voluntarily by the player or by Win Ropes for a Terms breach — data is not immediately deleted. The account and its associated records are retained for the applicable retention periods and then securely deleted or anonymised once those periods expire.

Win Ropes' primary data infrastructure is designed to serve Pakistani players. Some of the third-party service providers we use — particularly cloud infrastructure providers and fraud detection services — may process data on servers located outside Pakistan.

Where data is processed outside Pakistan, Win Ropes ensures that appropriate contractual safeguards are in place to maintain equivalent levels of data protection to those described in this Privacy Policy. We do not transfer data to jurisdictions that do not offer adequate data protection standards without implementing additional contractual protections.

Payment data shared with Easypaisa, JazzCash, NayaPay, SadaPay, and Pakistani bank IBFT partners remains within Pakistan's financial infrastructure and is processed in accordance with regulations set by the State Bank of Pakistan.

Win Ropes will update this Privacy Policy from time to time as our practices evolve, new legal requirements emerge, or our services expand. When material changes are made — changes that affect how we collect, use, or share your personal data in ways you would find significant — we will notify you via email or via an in-platform notification at least 14 days before the changes take effect.

Minor updates — such as clarification of existing language, correction of typographical errors, or adding detail that does not change the substance of our practices — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision, regardless of how significant the change was.

If you disagree with any change to this Privacy Policy, please contact our support team. If the disagreement relates to a change in how we handle data you consider essential to your use of the platform, you may wish to close your Win Ropes account — your real money balance will be returned to your verified payment method in full.

For any question, concern, or request relating to this Privacy Policy or the personal data Win Ropes holds about you, please use the contact methods below. A human member of the Win Ropes team will respond — not an automated bot.

When submitting a data request, please include your Win Ropes username and the email address or mobile number registered to your account so we can locate your records efficiently. For security, we may ask you to verify your identity before fulfilling any data access request — this is to protect you, not to create obstacles.