This Privacy Policy explains exactly what data prp win collects when you use the platform, why we collect it, who we share it with (and who we absolutely do not), how long we keep it, and what rights you have as a player. It is written in plain English because privacy policies that nobody reads help nobody.
Six core privacy commitments that every prp win player benefits from, automatically — no opt-in needed.
Every piece of data that travels between your device and prp win — login credentials, payment details, personal information, game history — is encrypted using 256-bit SSL. The same standard used by major international banks. Your data cannot be intercepted in transit.
prp win does not sell, rent, or trade your personal data to any third party for any purpose — marketing, analytics, data brokers, or otherwise. Your name, mobile number, CNIC, and wallet details exist in our system solely to deliver the service you signed up for.
Your Easypaisa number, JazzCash account, bank details, and card information are handled through encrypted payment processor connections. prp win's own servers do not store complete card numbers. Payment data is used only to process the specific transaction you requested.
Not every prp win employee can see your data. Access to personal information is restricted on a role-based basis — support staff can see what they need to help you, but financial data, KYC documents, and sensitive personal details are on a strict need-to-know basis.
prp win does not keep your data indefinitely. Active account data is retained while your account is open. Data is deleted within 90 days of account closure, subject to legal retention requirements for financial records (7 years for transaction logs, as required by financial regulations).
The data rights listed in this policy are real and enforceable — you can request to see your data, correct it, export it, or have it deleted. Requests are responded to within 24 hours and fulfilled within 30 days. Contact support@prpwin.biz to exercise any right.
prp win operates the online gaming and sports betting platform accessible at https://prpwin.biz. In the context of this Privacy Policy, prp win is the data controller — meaning we are the entity that determines why and how your personal data is processed.
All data collected through the prp win registration process, payment system, gaming activity, and customer support interactions is controlled by prp win. If you have any questions about how we handle your data, or if you wish to exercise any of your rights described in this policy, you can contact us at support@prpwin.biz.
This Privacy Policy applies to all personal data collected through the prp win website, any future prp win applications, and all interactions with our customer support team regardless of the channel (email, live chat, or telephone).
When you register an account at prp win, we collect the information you enter in the registration form:
When identity verification is required — for example before processing a withdrawal above Rs 50,000, or when unusual account activity is detected — we collect:
When you make deposits or request withdrawals, we collect:
During your use of prp win, we automatically collect certain technical data:
When you contact prp win's support team, we retain records of those communications — including the content of chat transcripts and emails — for quality assurance, training, and dispute resolution purposes.
prp win uses your personal data for the following purposes, and no others:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Name, mobile, email, password | Contract |
| Identity verification (KYC) | CNIC, selfie, proof of address | Legal obligation |
| Processing deposits and withdrawals | Wallet numbers, bank details, transaction data | Contract |
| Fraud prevention and security | IP address, device data, transaction patterns | Legitimate interest |
| Customer support | Account data, communication history | Contract |
| Responsible gaming compliance | Gaming history, betting patterns, deposit activity | Legal obligation |
| Anti-money laundering checks | Identity data, transaction history | Legal obligation |
| Platform improvement | Anonymised usage data | Legitimate interest |
| Communications about your account | Email, mobile number | Contract |
prp win relies on the following legal bases to process your personal data:
Most of the data processing at prp win is necessary to fulfil the contract you entered into when you registered your account. Creating and maintaining your account, processing payments, providing games, and handling your customer support queries all fall under this basis. Without processing this data, we literally cannot provide the service.
Certain processing is required by law. KYC identity verification, anti-money laundering screening, and responsible gaming data monitoring are examples of obligations that prp win must fulfil under applicable financial and gaming regulations. We do not have a choice about whether to perform this processing — it is a condition of operating the platform.
For fraud prevention, platform security, and anonymised platform improvement, we rely on the legitimate interest basis — meaning we have a genuine business reason to process this data that does not override your fundamental privacy rights. We have assessed this balance and believe it is appropriate.
prp win shares your personal data only with the following categories of recipient, and only to the extent necessary for the stated purpose:
When you make a deposit or withdrawal, transaction data is shared with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, your bank's IBFT system, or the card payment gateway. These processors receive only the data necessary to execute your specific transaction and are contractually bound to protect it.
KYC document verification may be performed by an automated identity verification service. Documents submitted for KYC are handled under strict data processing agreements and are not retained by the verification provider beyond the period necessary to complete the verification.
Live dealer and slot game providers may receive a player session identifier to manage your game session. They do not receive your personal identity data or payment information.
prp win will share data with regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law or a valid legal order. We will notify you of such disclosures where permitted to do so.
Given that prp win handles real Pakistani Rupee transactions, payment data security deserves specific attention. Here is exactly how financial data is handled at prp win:
Your Easypaisa, JazzCash, NayaPay, and SadaPay numbers are stored in encrypted form and used only to process transactions you initiate. They are verified against your CNIC details as part of the identity matching process. They are never displayed in full on your account dashboard or in any communication — only the last 4 digits are shown for reference.
Bank account numbers for IBFT are stored encrypted and used only for withdrawal processing. Account numbers are verified against your registered identity before any withdrawal is processed to a new bank account.
prp win does not store full card numbers on its own servers. Card payment processing is handled by a PCI-DSS compliant payment gateway. The gateway returns only a tokenised reference and masked card details (last 4 digits) to prp win, which is what appears in your account transaction history.
Your complete transaction history — deposits, withdrawals, game wins, losses, and bonus activity — is stored for regulatory compliance purposes. This data is retained for 7 years as required under applicable financial record-keeping obligations. It is accessible to you at any time from your account dashboard.
prp win uses cookies and similar technologies to make the platform work correctly and to understand how it is being used. Here is what each category of cookie does:
prp win does not use advertising or retargeting cookies. There are no third-party advertising networks on the platform. Analytics cookies are operated by prp win using anonymised data that cannot be traced back to you personally.
You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent prp win from functioning correctly, but disabling analytics cookies will not affect your ability to play or transact.
prp win retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. Specific retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 90 days after closure | Service delivery, then security buffer |
| KYC identity documents | 5 years from last verification | Anti-money laundering regulations |
| Transaction records | 7 years | Financial record-keeping regulations |
| Customer support records | 3 years | Dispute resolution and quality assurance |
| Game history | 7 years | Regulatory compliance |
| Security logs (IP, device) | 12 months | Fraud investigation |
| Analytics data | 13 months rolling | Platform improvement, anonymised |
After the applicable retention period, data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and research purposes.
As a prp win player, you have the following rights over your personal data. These are real rights, not just words on a page — contact support@prpwin.biz to exercise any of them:
Request a complete copy of all personal data prp win holds about you. We will provide this in a readable format within 30 days of your request, at no charge.
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected. Most basic account information (name, email, mobile) can be updated directly from your account settings.
Request deletion of your personal data. This right applies where data is no longer necessary for its original purpose, or where you withdraw consent. Legal retention requirements (transaction records, KYC) may limit how much can be deleted immediately.
Request your personal data in a structured, machine-readable format (CSV or JSON) so you can take it elsewhere. Applies to data you provided directly — account details, transaction history, and game history.
Request that prp win limit the processing of your data in certain circumstances — for example, while a dispute is being resolved, or while you verify whether data we hold is accurate.
Object to processing based on legitimate interests — including any form of automated decision-making or profiling. Requests are reviewed individually and we will explain why we believe the legitimate interest basis applies or update our processing accordingly.
prp win takes the security of your personal data seriously. The following technical and organisational measures are in place:
While prp win takes every reasonable precaution to protect your data, no internet-based system is completely immune to risk. You can also help protect yourself by using a strong, unique password for your prp win account and enabling two-factor authentication from your account security settings.
prp win does not knowingly collect personal data from anyone under 18 years of age. The platform is strictly for adults. Our registration process includes a date of birth field that is validated, and age verification is part of the KYC process.
If prp win discovers that personal data has been collected from a person under 18, that account will be immediately suspended, the data will be deleted, and any deposits returned to the original payment method following an investigation. If you are a parent or guardian and believe your child has registered on prp win, contact support@prpwin.biz immediately and we will take action within 24 hours.
prp win may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform that affect how data is collected or used.
When we make material changes to the policy, we will notify registered players by email at the address associated with their account, and we will update the "Last Updated" date at the top of this page. The notification will summarise what has changed in plain language.
Your continued use of prp win following notification of a policy update constitutes acceptance of the revised policy. If you do not agree with any update, you should stop using the platform and close your account. Your data rights on closure are described in Section 9 above.
For any questions about this Privacy Policy, about how prp win handles your personal data, or to exercise any of your data rights, contact us through the following channels:
Register your account knowing your personal data, your wallet numbers, and your CNIC are protected by 256-bit encryption and a clear privacy policy. No hidden data collection. No selling. No surprises.
18+ only · Terms & Conditions · Responsible Gaming