BetRupee Privacy Policy – How We Protect Pakistan Players

BetRupee ("BetRupee", "we", "us", "our") is an online gaming and betting platform operating at betrupee.app, built specifically for Pakistani players. BetRupee is the data controller in respect of all personal information collected from players registered on the platform.

This Privacy Policy applies to all personal data collected through the BetRupee website, any associated mobile-optimised interface and all services offered through the platform including but not limited to account registration, gameplay, deposits, withdrawals, bonuses, the VIP Club and the Refer a Friend programme.

By creating a BetRupee account, you confirm that you have read and accepted this Privacy Policy. If you have any questions about how your data is handled before registering, please contact our support team — the details are at the end of this document.

BetRupee collects only the personal data that is necessary to operate the platform, verify player identity, process PKR transactions and comply with applicable legal obligations. We do not collect data speculatively — if we collect it, there is a specific reason for it explained below.

BetRupee does not collect sensitive personal data such as biometric data (beyond the selfie used for KYC matching), religious information, political opinions or health records. If you voluntarily disclose such information in a support conversation, it is not retained beyond the resolution of that specific support interaction.

BetRupee uses the personal data described above for the following purposes. Each purpose has a clear legal basis — either contractual necessity (we need the data to perform the agreement between us), legal obligation (applicable laws require us to collect or retain it), or legitimate interest (we have a genuine operational need that does not override your privacy rights).

• Account management: Creating and maintaining your BetRupee account, processing your registration and enabling login.
• Identity and age verification: Confirming that you meet the 18+ eligibility requirement and that you are who you say you are before processing withdrawals.
• Payment processing: Executing PKR deposits to your account balance and processing PKR withdrawals to your verified payment method.
• Game operation: Recording bets, calculating results, crediting winnings and maintaining accurate account balance records.
• Bonus and VIP administration: Calculating loyalty points, tracking wagering requirements, crediting cashback and referral rewards, and managing VIP tier status.
• Customer support: Responding to queries, resolving complaints and providing assistance via live chat, WhatsApp and Telegram.
• Fraud prevention and security: Detecting and preventing multiple accounts, bonus abuse, payment fraud, money laundering and unauthorised account access.
• Platform improvement: Analysing aggregated usage patterns (not individual player behaviour) to improve game offerings, promotional design and platform performance.
• Legal compliance: Fulfilling obligations under applicable anti-money laundering regulations, financial crime prevention requirements and other legal duties.
• Marketing communications: Sending you relevant BetRupee promotions and bonus notifications by email or SMS — only where you have opted in or where it is permitted under applicable law. See Section 11 for opt-out details.

Because BetRupee operates exclusively in PKR and uses Pakistani payment infrastructure — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Pakistani bank cards — payment data handling follows both BetRupee's internal standards and the practices of these payment providers.

BetRupee does not store full card numbers. When you make a deposit via a Pakistani bank card, the card details are processed by a PCI-DSS compliant payment gateway — BetRupee only retains the last four digits of the card number and the card type for identification and fraud prevention purposes. Full card details are never transmitted to or stored on BetRupee's systems.

Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form linked to your BetRupee account to enable withdrawal processing and to verify that withdrawals go to a payment method registered in your name. This information is accessible only to BetRupee's payment operations team and is not shared with any third party beyond the payment provider needed to execute each transaction.

All payment transaction records — deposits, withdrawals, bonus credits and refunds — are retained for a minimum of seven years as required by standard financial record-keeping obligations. These records may be accessed by BetRupee's compliance team, by authorised auditors and by regulatory authorities if legally required. They are not accessible to any commercial third party.

BetRupee does not sell, rent or trade your personal data to any third party. Data is shared only in the following specific and limited circumstances:

• Payment processors: To execute your deposits and withdrawals, BetRupee shares necessary transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners or card payment gateways. Only the data necessary for the transaction is shared.
• Identity verification providers: BetRupee uses a third-party identity verification service to assist with KYC document checking. This provider receives only the documents required for verification and is contractually prohibited from using your data for any other purpose.
• Fraud and security service providers: BetRupee uses specialist fraud detection tools that may process IP addresses, device identifiers and behavioural patterns to identify suspicious activity. These providers are bound by strict data processing agreements.
• Legal and regulatory authorities: BetRupee will disclose personal data to law enforcement, regulatory bodies or courts where required to do so by applicable law, or where necessary to protect BetRupee or its players from criminal activity, fraud or serious harm.
• Professional advisers: Lawyers, auditors and accountants may access limited personal data in the course of their professional services for BetRupee. All such access is governed by professional confidentiality obligations.

All third parties with whom BetRupee shares personal data are required to handle it securely and only for the specific purpose for which it was shared. BetRupee reviews its third-party data processors regularly and will update this Privacy Policy if new processors are engaged for purposes that materially affect players.

BetRupee retains personal data for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your BetRupee account and for five years following account closure, to enable dispute resolution and compliance with any post-closure legal claims.
• KYC documentation: Retained for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Payment transaction records: Retained for seven years following each transaction, as required by standard financial record-keeping obligations.
• Gameplay and betting records: Retained for five years following the relevant activity, to support dispute resolution and regulatory compliance.
• Support and communication records: Retained for three years following the closure of the relevant support interaction.
• Technical and device data: Retained for two years from collection, used primarily for security and fraud prevention monitoring.

BetRupee uses cookies and similar tracking technologies on its website to ensure the platform works correctly, to improve performance and to understand how players are using the site. Cookies are small data files stored in your browser. They do not contain your personal financial information and cannot execute any code on your device.

You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to block or delete specific cookie types. Note that disabling essential or security cookies will affect BetRupee's functionality and may prevent you from logging in or accessing your account balance. BetRupee does not use third-party advertising cookies or any tracking technology connected to external advertising networks.

BetRupee applies a comprehensive set of technical and organisational security measures to protect your personal data and PKR account balance. These measures are reviewed and updated regularly to address evolving security threats.

• 256-bit SSL/TLS encryption: All data in transit between your device and BetRupee's servers is encrypted. This applies to login credentials, account data, payment information and gameplay records.
• Data at rest encryption: Sensitive data stored on BetRupee's servers — including KYC documents, payment details and account credentials — is encrypted at the database level using AES-256 encryption.
• Two-factor authentication (2FA): Available on all BetRupee accounts and strongly recommended. With 2FA enabled, an attacker who obtains your password cannot access your account without also accessing your registered phone.
• Real-time fraud monitoring: BetRupee's security systems monitor login activity, payment patterns and gameplay behaviour in real time. Anomalous activity triggers automatic account holds pending manual review.
• Access controls: Access to player data within BetRupee's systems is restricted to staff members who need it for their specific role. All internal access is logged and audited.
• Penetration testing: BetRupee's systems undergo regular independent security assessments. Identified vulnerabilities are remediated on a priority basis.

Despite these measures, no digital system is completely immune from security risks. In the event of a data breach that poses a risk to your rights, BetRupee will notify affected players as quickly as possible and take immediate steps to contain and remediate the breach.

BetRupee respects your rights over your personal data. The following rights are available to all registered BetRupee players and can be exercised by contacting our support team or submitting a request through your account dashboard.

To exercise any of the above rights, contact BetRupee's support team via Live Chat, WhatsApp, Telegram or email at support@betrupee.app. Identity verification may be required before a request is processed to ensure data is not released to an unauthorised person. BetRupee will respond to all rights requests within 30 calendar days.

BetRupee is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is required during account registration, and BetRupee reserves the right to request CNIC documentation to confirm age at any stage of the account lifecycle.

If BetRupee becomes aware that personal data has been collected from a person under the age of 18, the account will be immediately closed, all associated data will be deleted from our systems and any funds in the account will be handled in accordance with applicable legal requirements. If you believe your child has registered on BetRupee, please contact our support team immediately at support@betrupee.app so we can take prompt action.

BetRupee may send you promotional communications about bonuses, new games, VIP Club updates and platform improvements. These communications are sent by email and/or SMS to the contact details registered with your BetRupee account.

You can opt out of marketing communications at any time in the following ways:

• Use the unsubscribe link at the bottom of any BetRupee marketing email.
• Reply STOP to any BetRupee marketing SMS.
• Contact BetRupee's support team and request removal from marketing communications.
• Update your communication preferences in your BetRupee account settings dashboard.

BetRupee may update this Privacy Policy when our data practices change, when we introduce new platform features that affect data collection, or when legal or regulatory requirements are updated. The "Last Updated" date at the top of this page will always reflect the most recent revision.

For material changes — those that substantially affect how your data is collected, used or shared — BetRupee will notify registered players by email or in-platform notification at least 14 days before the change takes effect. This gives you time to review the updated policy and, if you do not agree with the changes, to close your account before the new terms become binding.

Minor updates such as corrections to wording, clarifications that do not alter the substance of any clause, or additions of new data processing that is directly equivalent to existing practices, may be made without prior notification. Continued use of BetRupee after the effective date of any Privacy Policy update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, about how BetRupee handles your personal data, or if you wish to exercise any of your data rights, please contact us through any of the following channels — all of which are staffed by Pakistani agents available 24/7:

• Live Chat: Available directly on the BetRupee website — fastest response, typically under 3 minutes.
• WhatsApp: Contact details provided in your BetRupee account dashboard after registration.
• Telegram: Contact details provided in your BetRupee account dashboard after registration.
• Email: support@betrupee.app — for formal data rights requests and privacy complaints. Response within 24 hours, resolution within 30 days.

BetRupee is committed to resolving all privacy-related queries fairly and in a timely manner. If you submit a formal complaint about our data practices and are not satisfied with BetRupee's response, you may seek independent recourse through a recognised data protection authority or dispute resolution service applicable in your jurisdiction.