Wen Rupees Privacy Policy – How We Protect Your Data

This Privacy Policy explains how wen rupees ("we", "us", "our") collects, uses, stores, and protects the personal information of players who register and use the wen rupees online gaming platform at wenrupees.com. It applies to all Pakistani players and covers all personal data processed in connection with your use of the platform.

Wen rupees is committed to handling your personal data responsibly and in a manner consistent with the expectations of Pakistani players and applicable data protection principles. This policy has been written in plain English — not in deliberately confusing legal language — because we believe you should genuinely understand what happens to your data.

By registering for a wen rupees account or continuing to use the platform, you acknowledge that you have read this Privacy Policy and understand how your data is processed. If you have questions at any point, the contact details at the end of this document are available 24/7.

Wen rupees collects personal data in several categories. The table below describes each category, what specific data it includes, and the purpose for which it is collected.

Wen rupees collects personal data through the following channels:

Direct Collection — You Provide It to Us

Most personal data is collected directly from you when you register for a wen rupees account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account profile. You choose what information to provide in these interactions.

Automated Collection — Platform Activity

As you use the wen rupees platform, certain technical and gaming activity data is collected automatically. This includes your IP address, device information, pages visited, games played, bet history, and session duration. This data is collected using standard web technologies including server logs, session tokens, and first-party cookies. Wen rupees does not use invasive tracking methods or third-party behavioural advertising trackers.

Third-Party Collection — Payment Providers

When you complete a transaction via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or a card network, wen rupees receives confirmation data from those providers sufficient to process and record the transaction. This typically includes transaction reference numbers, amounts, timestamps, and the payment method identifier. Wen rupees does not receive your full wallet PIN, account passwords, or full card details from payment providers.

Wen rupees uses personal data for specific, legitimate purposes. Every use of your data falls into one of the following legal bases:

• Contract performance: Processing deposits and withdrawals in PKR, operating your account, delivering game services, and honouring bonus terms — all require using your data to perform the contract between you and wen rupees.
• Legal obligation: KYC identity verification, anti-money laundering checks, and retention of financial transaction records are required by applicable regulations. Wen rupees must process this data to comply with the law.
• Legitimate interests: Platform security monitoring, fraud detection, responsible gaming activity monitoring, and customer support quality assurance are conducted in wen rupees' and players' legitimate interests. These activities are conducted proportionately and with minimum privacy intrusion.
• Consent: Where wen rupees sends promotional communications (such as email notifications about new bonuses or promotions), this is done with your explicit consent provided at registration. You can withdraw this consent at any time through your account settings without affecting your access to the platform.

Wen rupees does not use your personal data for automated decision-making that produces legal or similarly significant effects, except in the context of automated fraud detection — and even in those cases, material decisions such as account suspension are reviewed by a human member of the compliance team before action is taken.

Wen rupees does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial purposes. Full stop. The only circumstances in which your data is shared with external parties are:

• Payment providers: Easypaisa, JazzCash, NayaPay, SadaPay, relevant banks (for IBFT), and card networks receive only the data required to process a specific transaction — typically your account identifier, the transaction amount, and a reference number. No gaming history or profile data is shared with payment providers.
• Identity verification services: Where KYC verification is required, your identity documents (CNIC) may be processed through a third-party identity verification service operating under a data processing agreement with wen rupees. These services are contracted specifically to verify your identity and are prohibited from using your data for any other purpose.
• Regulatory authorities: Where required by Pakistani law or lawful regulatory demand, wen rupees may be obligated to disclose specific player data to relevant authorities. In such cases, wen rupees discloses only the minimum data required and notifies the affected player where legally permitted to do so.
• Legal proceedings: Where wen rupees is party to legal proceedings involving a specific player, relevant data may be disclosed to legal advisers and courts as required. This data is disclosed under confidentiality obligations.

Wen rupees retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet legal obligations, or to resolve disputes. The retention periods for each category of data are set out below:

• Account and identity data: Retained for the duration of your account, plus five years following account closure — as required by financial regulations for anti-money laundering compliance.
• Transaction and financial records: Retained for seven years following the date of each transaction, in line with financial record-keeping requirements under Pakistani law.
• Gaming activity data: Retained for three years following each gaming session. Aggregated and anonymised gaming data (with no link to individual players) may be retained indefinitely for platform analysis purposes.
• Support communications: Retained for three years following the resolution of the relevant support interaction, or longer if the communication relates to an ongoing dispute.
• Technical and access logs: Retained for 12 months, after which they are deleted or fully anonymised.

Following the expiry of retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Wen rupees performs scheduled data deletion reviews on a quarterly basis.

Protecting your personal data from unauthorised access, loss, or misuse is a technical and operational priority at wen rupees. The security measures in place include:

• 256-bit SSL/TLS encryption across all data transmitted between your device and wen rupees servers — the same encryption standard used by Pakistan's leading commercial banks.
• Encrypted data storage: Sensitive data fields including passwords (stored only as irreversible hashes), financial identifiers, and identity documents are stored encrypted at rest.
• Access control: Access to player personal data within wen rupees is restricted on a strict need-to-know basis. Only staff whose role specifically requires access to personal data are authorised to view it, and all access is logged.
• Two-factor authentication (2FA): Optional 2FA is available for all player accounts and is strongly recommended. Internal wen rupees systems require 2FA for all staff access to player data systems.
• PCI-DSS compliance: Payment card data is handled through PCI-DSS level-certified payment processing infrastructure. Full card numbers are never transmitted to or stored on wen rupees application servers.
• Regular security testing: Wen rupees conducts periodic security assessments of its systems including vulnerability scanning and penetration testing by qualified security professionals.

Despite these measures, no internet-connected system can guarantee absolute security. In the event of a data breach that affects your personal information, wen rupees will notify you promptly through your registered contact details and take all reasonable steps to contain and remediate the breach.

Wen rupees uses cookies and similar technologies to operate the platform, maintain your session, and understand how the platform is used. The cookies used on wen rupees fall into the following categories:

Wen rupees does not use third-party advertising cookies, cross-site tracking pixels, social media trackers, or any cookie that shares your data with an external commercial entity. All analytics cookies are first-party only — the data stays within wen rupees systems and is not shared externally.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the platform from functioning correctly — you will not be able to log in or complete transactions without session and security cookies active.

As a wen rupees player and data subject, you have the following rights regarding your personal data. These rights apply regardless of when you registered and can be exercised at any time by contacting the wen rupees privacy team.

To exercise any of the above rights, contact the wen rupees privacy team at support@wenrupees.com with the subject line "Data Rights Request" and a description of your request. Identity verification will be required before processing access or deletion requests, to ensure your data is not released to an unauthorised party. All requests are processed within 30 days of receipt, with an acknowledgement sent within 72 hours.

If wen rupees becomes aware that personal data has been collected from an individual who was under 18 at the time of registration — whether through an age verification failure, subsequent disclosure, or any other means — the following steps are taken immediately:

• The account is permanently closed without notice.
• All associated personal data is securely deleted, except where transaction records must be retained for regulatory compliance purposes.
• Any balance in the account is not paid out — it is forfeited and held in accordance with applicable regulations.

Parents or guardians who believe a minor may have registered on wen rupees are encouraged to contact the support team immediately at support@wenrupees.com. Wen rupees will investigate and act promptly on any such report.

Wen rupees is a platform built for Pakistani players. Data processing operations are primarily located in facilities serving the Pakistani and South Asian region. However, certain technical infrastructure components — such as cloud hosting services and security monitoring systems — may involve data being processed in servers located outside Pakistan.

Where personal data is transferred outside Pakistan for processing, wen rupees ensures that appropriate safeguards are in place to protect your data to the same standard as required within Pakistan. These safeguards include data processing agreements with applicable security and confidentiality obligations.

Personal data shared with payment providers (Easypaisa, JazzCash, NayaPay, SadaPay, banks for IBFT, and card networks) is processed by those providers in accordance with their own privacy policies and applicable financial regulations. Wen rupees shares only the minimum data necessary for payment processing with these providers.

Wen rupees may update this Privacy Policy from time to time — to reflect changes in how we operate, changes in applicable regulations, or in response to player feedback. The date of the most recent update is shown at the top of this page and in the hero section above.

Where changes are material — meaning they significantly affect how your personal data is used or the rights available to you — wen rupees will notify registered players by email to their registered address at least seven days before the changes take effect. Minor changes such as clarifications, structural edits, or updates to reflect existing practices may be made without advance notice.

Continuing to use your wen rupees account after the effective date of an updated Privacy Policy constitutes acceptance of the updated terms. If you disagree with any material change, you have the right to close your account before the change takes effect — your real-money balance will be paid out in full on closure.

For any privacy-related question, data rights request, or concern about how wen rupees handles your personal information, contact the privacy team directly. For general platform support, the main support team handles all queries around the clock.