wrewards Privacy Policy – How We Collect, Use and Protect Your Data in Pakistan

01 Introduction

This Privacy Policy describes how wrewards ("we", "us", "our") collects, processes, stores, and protects the personal data of players ("you", "your") who register and use the wrewards platform, available at wrewards.bet. wrewards is committed to handling your personal information responsibly and transparently.

Pakistani players trust wrewards with sensitive information — their name, CNIC number, mobile number, financial account details, and transaction history. That trust is something we do not take lightly. This policy is written in plain English because we believe you deserve to understand exactly what happens with your data, not just receive a document dense with legal language that most people never read past the first paragraph.

This Privacy Policy forms part of the overall agreement between you and wrewards, alongside the Terms and Conditions and the Responsible Gaming policy. In the event of any conflict between documents, the Terms and Conditions take precedence.

02 Data We Collect

wrewards collects personal data in two broad categories: information you provide directly when you register or use the platform, and information collected automatically as you interact with the service. Here is a specific breakdown of each type.

Information You Provide Directly

• Identity data: Your full legal name as it appears on your CNIC, date of birth, gender, and nationality.
• Contact data: Your Pakistani mobile phone number, email address, and residential address.
• Verification documents: CNIC (front and back), utility bill or bank statement for address confirmation, and documentation related to your payment methods as required by KYC procedures.
• Financial data: Your Easypaisa or JazzCash mobile number, NayaPay or SadaPay wallet identifier, bank account number for IBFT, or the last four digits and billing address of any Visa/Mastercard used. wrewards does not store full card numbers — these are processed by our payment partners and are not retained on our own systems.
• Account credentials: Your chosen username and a hashed (encrypted) version of your password. Your actual password is never stored in readable form.
• Support communications: The content of any messages, emails, or live chat conversations you have with the wrewards support team.

Information Collected Automatically

• Device and technical data: IP address, device type (mobile, tablet, desktop), operating system, browser type, and screen resolution.
• Usage data: Pages visited on wrewards, time spent on each page, games played, bet amounts, deposit and withdrawal amounts, session duration, and navigation paths through the platform.
• Transaction data: Full records of all financial transactions — deposits, withdrawals, bets placed, winnings received, bonuses credited, and promotional activity.
• Cookie and tracking data: As described in Section 7 of this policy.

03 How We Collect Your Data

wrewards collects your personal data through the following channels:

• Registration form: When you create a wrewards account, you enter your name, mobile number, email, date of birth, and create your login credentials.
• KYC verification: When you upload identity documents as part of the Know Your Customer process required for withdrawals above threshold amounts or triggered by account review.
• Deposit and withdrawal transactions: Financial data is collected each time you initiate a deposit or withdrawal, including the payment method used, amount, and timestamp.
• Gameplay: Betting activity, game selections, and session data are logged automatically as part of normal platform operation and for responsible gaming monitoring purposes.
• Customer support interactions: When you contact wrewards by live chat or email, the content and metadata of that conversation is recorded for quality and compliance purposes.
• Automated technical collection: Standard web server logs, analytics scripts, and session management systems collect technical and usage data automatically during each visit to wrewards.bet.
• Third-party payment processors: Payment confirmation data — transaction IDs, amounts, and status codes — is received from Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card networks when transactions are processed.

04 How We Use Your Data

wrewards uses the personal data it collects for specific, legitimate purposes. We do not use your data for any purpose beyond what is described here without either seeking your explicit consent or being required to do so by law.

05 Legal Basis for Processing

wrewards processes your personal data on the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to provide the wrewards service you have signed up for — account management, payment processing, and gameplay. Without this processing, wrewards cannot operate your account.
• Legal obligation: Processing required by applicable laws — KYC verification for anti-money laundering compliance, transaction records for regulatory reporting, and age verification to comply with gambling laws.
• Legitimate interests: Processing for purposes that are in the legitimate operational interests of wrewards and do not override your fundamental rights — fraud detection, platform security, and usage analytics for platform improvement.
• Consent: Processing that is optional and only carried out with your explicit agreement — direct marketing communications. You can withdraw this consent at any time without affecting the operation of your wrewards account.

06 Sharing Your Data

wrewards does not sell, rent, or trade your personal data to any third party for their own marketing purposes. That is an absolute commitment, not a conditional one. Your data is not a product we monetise.

There are specific, limited circumstances in which wrewards does share your data with third parties, and each one is explained here:

Payment Processors

When you deposit or withdraw funds, wrewards shares the minimum necessary data — transaction amount, your wallet identifier or card details, and a transaction reference — with the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, or card networks). This sharing is required to execute your transaction. Each processor is contractually bound to process your data only for the purpose of executing the transaction.

Identity Verification Providers

For KYC purposes, wrewards may use a licensed third-party identity verification service to validate the authenticity of documents you submit. These providers operate under strict data processing agreements and are not permitted to use your data for any purpose beyond the verification task.

Regulatory and Law Enforcement Authorities

wrewards may be required by law or by a competent regulatory authority to disclose player data — including transaction records, identity information, or account activity. wrewards will comply with such requests to the extent required by applicable law. Where legally permitted to do so, wrewards will notify the affected player that such a request has been made.

IT and Infrastructure Providers

The wrewards platform is hosted on secure servers. Our hosting and infrastructure providers have access to server-level data as part of normal operations. These providers are under strict contractual and technical controls and may not use player data for any purpose other than providing infrastructure services to wrewards.

07 Cookies & Tracking Technologies

wrewards uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how the site is used. Here is a breakdown of the types of cookies in use:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your preferences (such as language), and support security functions. You cannot opt out of essential cookies while using wrewards — without them, the platform does not work.
• Analytics cookies: Used to understand how Pakistani players navigate wrewards — which pages are most visited, where users drop off, and how the mobile experience compares to desktop. This data is aggregated and anonymised. wrewards uses this information exclusively to improve the platform.
• Functional cookies: Remember optional preferences you set — such as your preferred chip size in Roulette or your preferred table in Teen Patti — so you do not have to reconfigure them on every visit.
• Marketing cookies: Used to deliver relevant promotional content when you are logged in to wrewards. These are only active if you have consented to receive marketing communications. You can opt out of marketing cookies at any time via your account settings.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from using the wrewards platform. Disabling analytics or marketing cookies will not affect your ability to log in, deposit, play, or withdraw.

08 Data Security

wrewards takes the security of your personal data seriously and implements technical and organisational measures appropriate to the sensitivity of the data being protected. Key security measures in place at wrewards include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the wrewards platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser address bar when visiting wrewards.bet.
• Password hashing: Your account password is stored as a one-way cryptographic hash. wrewards staff cannot read your password, and it cannot be extracted from our systems even in the event of a data breach. If you forget your password, it must be reset — it cannot be retrieved.
• Access controls: Personal data is accessible only to wrewards staff who have a specific operational need to access it. Access is logged and reviewed. Staff with access to sensitive data are vetted and bound by confidentiality obligations.
• Secure data centres: wrewards hosting infrastructure operates in data centres with physical security controls, redundant systems, and regular security audits.
• Transaction monitoring: All financial transactions on wrewards are monitored in real time for anomalies that may indicate fraud, unauthorised access, or money laundering activity.

No digital system is completely immune to security incidents. In the unlikely event that a breach affecting your personal data occurs, wrewards will notify affected players promptly in accordance with applicable notification obligations and will take immediate remedial action.

09 Data Retention

wrewards retains your personal data for as long as is necessary to fulfil the purposes described in this policy and to comply with applicable legal and regulatory obligations. The specific retention periods that apply are:

• Account data and transaction records: Retained for a minimum of 5 years from the date of the last transaction on your account. This retention period is required by anti-money laundering regulations applicable to licensed gaming platforms.
• KYC documents: Retained for 5 years from the date of verification or the date of account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the conversation, or longer if the conversation relates to an unresolved dispute or regulatory matter.
• Analytics and usage data: Aggregated and anonymised after 24 months. Individual-level usage data is not retained beyond 24 months unless there is a specific compliance reason to do so.
• Marketing consent records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.

When data is no longer required for any legitimate purpose, it is securely deleted or permanently anonymised so that it can no longer be linked to an individual player.

10 Your Rights Regarding Your Data

As a wrewards player, you have specific rights concerning your personal data. wrewards respects these rights and will respond to all valid requests within 48 business hours of receipt.

What These Rights Mean in Practice

• Right to access: You can request a copy of all personal data wrewards holds about you. We will provide this in a clear, readable format within 48 business hours of a verified request.
• Right to correct: If any personal data wrewards holds about you is inaccurate or out of date, you can request a correction. Standard contact information can be updated directly in your account settings. Document-level corrections require contacting support.
• Right to delete: You can request deletion of your personal data. wrewards will delete all data it is not legally obligated to retain. Note that transaction records and KYC documents must be retained for 5 years under anti-money laundering law — this obligation cannot be overridden by a deletion request.
• Right to restrict processing: You can request that wrewards limits how your data is processed while a dispute is being resolved, for example while a correction request is under review.
• Right to data portability: You can request that wrewards provides your data in a structured, machine-readable format so that you can transfer it to another service if you choose.
• Right to object: You can object to processing based on legitimate interests, including profiling for marketing purposes. You can opt out of direct marketing communications at any time via your account settings or by emailing support@wrewards.bet.

To exercise any of these rights, contact the wrewards data team at support@wrewards.bet with the subject line "Data Rights Request". We will ask you to verify your identity before processing the request.

11 Children's Privacy

wrewards is strictly for players aged 18 and above. The platform does not knowingly collect personal data from individuals under the age of 18. Age verification is enforced at the point of registration and again during the KYC process prior to first withdrawal.

If wrewards becomes aware that personal data has been collected from a player who is under 18, all data associated with that account will be immediately and permanently deleted, the account will be closed, any deposited funds will be returned to the original payment source, and all winnings will be voided in accordance with the Terms and Conditions.

If you are a parent or guardian and believe that your child has created an account on wrewards, please contact support@wrewards.bet immediately. We will treat this as a priority and act within 24 hours of being notified.

12 Marketing Communications

wrewards may send you direct marketing communications — via SMS, email, or in-platform notifications — about promotions, new games, VIP Club updates, and other platform news. We will only send you marketing communications if you have explicitly opted in to receive them, either during registration or by updating your preferences in your account settings.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your wrewards account settings
• Clicking the unsubscribe link in any marketing email we send
• Replying STOP to any marketing SMS from wrewards
• Emailing support@wrewards.bet with the subject line "Marketing Opt-Out"

Opting out of marketing communications does not affect the delivery of transactional communications — account notifications, deposit confirmations, withdrawal updates, and security alerts. These communications are operational and will continue regardless of your marketing preferences.

13 Third-Party Links

The wrewards website does not contain links to external third-party websites as a matter of policy. However, if wrewards ever does link to external content for informational purposes, please be aware that those external sites have their own privacy policies which are entirely outside wrewards' control. wrewards is not responsible for the content, security, or privacy practices of any external website.

Payment processor interfaces — such as the Easypaisa or JazzCash payment pages you may interact with during a deposit — are operated by those third parties under their own privacy policies. wrewards shares only the minimum data necessary to execute the transaction and has no control over how those providers handle data on their own systems.

14 Updates to This Privacy Policy

wrewards reviews this Privacy Policy periodically and updates it when our data practices change, when we introduce new features that involve new data processing, or when applicable regulations require updates to our practices or disclosures.

When material changes are made to this policy, wrewards will notify registered players via a platform notification or via email to the address registered on the account. The updated policy will take effect 7 days after notification is issued, giving you time to review the changes before they apply.

The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We recommend Pakistani players review this page periodically to stay informed about how wrewards protects their data.

Continued use of the wrewards platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using the platform and contact support to request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wrewards handles your personal data, please reach out through any of the following channels:

• Email: support@wrewards.bet — subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 on the wrewards platform
• Response time: Standard data queries — within 48 business hours · Data rights requests — within 48 business hours · Urgent security concerns — within 4 hours

wrewards is committed to responding to all privacy-related queries clearly and in plain English. If you raise a concern and feel it has not been adequately resolved, you have the right to escalate the matter to the relevant data protection authority in the jurisdiction under which wrewards is licensed.