BetRupees Privacy Policy – How We Protect Your Data in Pakistan

2Why BetRupees Collects Your Data

Every category of data that BetRupees collects is collected for a specific, legitimate purpose. We do not collect data speculatively or "just in case". The purposes are:

• Account operation: To create and maintain your BetRupees account, process logins, and enable you to place bets and play games in PKR.
• Payment processing: To execute deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card. Payment data is shared only with the specific payment processor needed to complete your transaction.
• Identity and age verification: To confirm that every BetRupees player is at least 18 years of age and to verify identity as required for account security and compliance purposes. BetRupees does not allow underage players under any circumstances.
• Legal and regulatory compliance: BetRupees is obligated to retain certain records, conduct due diligence on financial transactions, and cooperate with law enforcement or regulatory authorities where legally required.
• Fraud and security: To detect and prevent fraudulent activity, unauthorised account access, multi-accounting, and other forms of platform abuse that harm genuine players.
• Customer support: To respond to your queries, resolve account issues, and process responsible gaming requests efficiently. Support chat and email records are retained to provide context for ongoing issues and to improve service quality.
• Platform improvement: Anonymised and aggregated usage data helps BetRupees understand which features Pakistani players use most frequently, identify navigation issues on mobile, and prioritise development work.
• Service communications: To send you essential account notifications – deposit confirmations, withdrawal updates, security alerts, and policy change notices. BetRupees does not send unsolicited marketing emails without your separate consent.

3How BetRupees Stores and Secures Your Data

BetRupees takes data security seriously. The following measures are in place across the platform to protect your personal information:

• Transport encryption: All data transmitted between your device and BetRupees servers is encrypted using 256-bit SSL/TLS. This applies to account pages, the betting interface, the payment flow, and support chat.
• At-rest encryption: Sensitive personal and financial data stored in BetRupees databases is encrypted at rest. This means that even in the unlikely event of a server breach, encrypted data cannot be read without the decryption keys.
• Payment tokenisation: BetRupees does not store full card numbers. Visa and Mastercard transactions are tokenised via our certified payment processor. Easypaisa and JazzCash wallet numbers are stored in encrypted form and never transmitted in plain text.
• Access controls: Internal access to BetRupees player data is restricted on a strict need-to-know basis. Support agents can see account information relevant to resolving player queries but do not have access to full payment credentials or CNIC documents beyond what is necessary for verification.
• Security monitoring: BetRupees infrastructure is monitored around the clock for anomalous activity, including unusual login patterns, bulk data access attempts, and payment irregularities.
• Breach notification: In the event of a data breach affecting your personal information, BetRupees will notify affected players as promptly as possible and take immediate action to contain and remediate the incident.

4When BetRupees Shares Your Data

BetRupees does not sell, rent, or trade your personal data with any third party. Data is shared only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-linked banking partners, and Visa/Mastercard processors receive only the minimum data required to execute your specific transaction. Each provider has its own privacy and security obligations.
• Identity verification services: BetRupees uses certified third-party identity verification tools to confirm CNIC authenticity and match document details. These partners handle identity data under strict confidentiality agreements and are not permitted to use your data for any purpose beyond the specific verification task.
• Legal and regulatory authorities: BetRupees will disclose personal data to law enforcement, financial regulators, or other competent authorities when legally required to do so. BetRupees will inform you of any such disclosure unless legally prohibited from doing so.
• Platform infrastructure providers: Hosting, cloud storage, and security monitoring providers that support BetRupees' technical operations may process personal data as part of service delivery. These providers are contractually bound to the same data protection standards as BetRupees itself.
• Business succession: In the event of a merger, acquisition, or sale of the BetRupees business, player data may be transferred to the acquiring entity. Players will be notified in advance and will have the option to close their account before any such transfer takes effect.

5Cookies and Tracking Technologies

BetRupees uses cookies and similar browser-based technologies to make the platform work correctly and to understand how Pakistani players use it. Here is what each type of cookie does:

• Essential cookies (always active): These are required for the BetRupees platform to function. They maintain your login session, remember your account preferences, and ensure the betslip and payment flow work correctly. You cannot disable essential cookies without breaking the platform – if you block them, BetRupees will not work as intended.
• Analytics cookies (optional, consent required): These help BetRupees understand which pages are most visited, where players encounter problems, and how the mobile interface performs on Pakistani networks. Analytics data is anonymised and aggregated before use. You can decline analytics cookies via the cookie consent banner when you first visit BetRupees.
• Security cookies: Short-lived cookies used to detect fraudulent or bot-driven activity. These are essential for account and platform security and cannot be disabled.

BetRupees does not use third-party advertising cookies or tracking pixels for retargeting or cross-site behavioural tracking. Your activity on BetRupees is not shared with advertising networks.

You can manage cookie preferences at any time in your browser settings. Note that disabling essential cookies will prevent BetRupees from functioning correctly. For the full list of cookies in use, contact support@betrupees.biz.

6Your Data Rights

As a BetRupees player you have the following rights regarding your personal data. To exercise any of these rights, contact BetRupees at support@betrupees.biz with the subject line "Data Rights Request".

• Right of access: You can request a copy of all personal data BetRupees holds about you at any time. BetRupees will provide this in a commonly used electronic format within 30 days of a verified request.
• Right to rectification: If any personal data BetRupees holds about you is inaccurate or incomplete, you can request that it be corrected. Basic account details like mobile number and email can be updated directly in your account settings.
• Right to erasure: You can request that BetRupees delete your personal data. This right is subject to our legal obligations – certain transaction records must be retained for a legally specified period regardless of deletion requests. BetRupees will inform you of any data that cannot be deleted and why.
• Right to restrict processing: You can ask BetRupees to stop using your data for specific purposes – for example, to stop sending service notifications – while retaining your account.
• Right to data portability: You can request your BetRupees account data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You can object to BetRupees processing your data for any purpose beyond what is strictly necessary to operate your account and comply with our legal obligations.

7How Long BetRupees Retains Your Data

BetRupees retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your BetRupees account plus up to five years after account closure, to comply with financial record-keeping obligations.
• Transaction records: Deposit, withdrawal, betting, and gaming transaction history is retained for a minimum of five years following each transaction. This is required for financial compliance and dispute resolution purposes.
• Identity verification documents: CNIC copies and associated identity documents are retained for a minimum of five years following account closure or the last transaction date, whichever is later.
• Support communications: Live chat and email support records are retained for two years from the date of the conversation. Records relating to formal complaints are retained for five years.
• Analytics data: Anonymised and aggregated analytics data has no fixed deletion schedule as it contains no personal identifiers once anonymised.

After the applicable retention period expires, BetRupees securely destroys or irreversibly anonymises personal data in accordance with its data disposal procedures.

8Children's Privacy

BetRupees does not knowingly collect or process personal data from any person under the age of 18. The platform is strictly for adult users only. All registrations are subject to age verification and BetRupees will immediately close and refund any account found to belong to a person under 18.

If you believe a minor has registered on BetRupees using false information, contact support@betrupees.biz immediately with the relevant details. BetRupees will investigate and take appropriate action without delay.

Parents and guardians concerned about a young person accessing online gambling platforms are encouraged to use parental control software and to utilise BetRupees' self-exclusion tools, which can be requested by a third party on behalf of a player in certain circumstances. Contact BetRupees support for guidance.

9Changes to This Privacy Policy

BetRupees reviews this Privacy Policy periodically and updates it when required – for example when platform features change, when new payment methods are added, or when relevant legal requirements change. The "Last Updated" date at the top of this page reflects the most recent revision.

When a material change is made to this Privacy Policy – meaning a change that meaningfully affects how your data is processed – BetRupees will notify registered players via email and/or an in-platform notification. You will be given the opportunity to review the changes before they take effect. Continued use of BetRupees after the effective date of a revision constitutes your acceptance of the updated policy.

If at any point you no longer agree with the BetRupees Privacy Policy, you are entitled to close your account and request deletion of your data subject to the retention obligations described in Section 7.

10How to Contact BetRupees About Privacy

For all privacy-related enquiries, data rights requests, or concerns about how BetRupees handles your personal information, use the following contact details:

• Email: support@betrupees.biz – subject line "Privacy Query" or "Data Rights Request" as appropriate
• Live Chat: Available 24/7 on the BetRupees platform – fastest option for straightforward queries
• Language: Support available in Urdu and English
• Response time: Standard privacy queries are responded to within 48 hours. Formal data rights requests receive a response within 30 days.

BetRupees takes privacy concerns seriously. If you are not satisfied with how a privacy matter has been handled, you have the right to escalate the matter through BetRupees' formal complaints process described in the Terms and Conditions.