Privacy Policy – Rumislot Pakistan Data Protection Guide

Rumislot is an online gaming and sports betting platform operating at rumislot.im. We serve players across Pakistan, offering cricket betting, football betting, casino games including live Baccarat, Teen Patti, fishing games and a range of other entertainment products. All transactions on Rumislot are conducted in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, "Rumislot", "we", "us" and "our" refer to the platform operator. "You" and "your" refer to any registered player or visitor to the Rumislot platform. "Personal data" refers to any information that can be used to identify you — directly or indirectly — including your name, mobile number, email address, transaction records and device identifiers.

If you have any questions about this Privacy Policy or about how Rumislot handles your personal data, you can reach the privacy team at any time by emailing support@rumislot.im. We take all data-related queries seriously and respond to privacy requests within two business days.

Rumislot collects personal data in three ways: data you provide directly, data generated automatically by your use of the platform, and data we receive from third-party service providers who help us operate the platform. Below is a full breakdown of each category.

2.1 Data You Provide Directly

When you register an account or interact with Rumislot, you may provide the following information:

• Full name as it appears on your Pakistani CNIC or NICOP
• Date of birth (used for age verification)
• Pakistani mobile number (used for account verification, OTP delivery and support)
• Email address (used for account communications and optional marketing)
• Residential address (collected during verification for higher withdrawal tiers)
• Identity document details (CNIC number, document image) when verification is required
• Payment account details — Easypaisa or JazzCash mobile numbers, IBFT account details or card details — as required for transactions

2.2 Data Generated Automatically

When you use Rumislot, the platform automatically collects certain technical and behavioural data:

• IP address and approximate geographic location (city-level, not precise)
• Device type, operating system version and browser type
• Pages visited on Rumislot and time spent on each
• Games played, bets placed and transaction history
• Session start and end times, and frequency of platform use
• Error reports and platform performance logs

2.3 Data From Third Parties

In certain circumstances Rumislot receives data from third-party providers. These providers include identity verification services (which may confirm the validity of a CNIC number), payment processors (which confirm transaction status) and fraud prevention services. Data received from these sources is used solely to fulfil the purpose for which it was requested and is not combined with your profile for unrelated marketing purposes.

Rumislot uses your personal data for specific, legitimate purposes directly connected to operating the platform and providing you with a safe, functional gaming experience. We do not process your data in ways that go beyond what is reasonably necessary to run the service.

3.1 Account Management

Your registration information is used to create and maintain your Rumislot account, verify your identity when you log in, and process requests such as password resets or contact details updates. This is the most fundamental use of your data — without it, the platform cannot function for you.

3.2 Transaction Processing

Every deposit and withdrawal you make on Rumislot requires your payment data to be processed. This includes routing your request to the correct payment provider (Easypaisa, JazzCash, bank transfer or card), verifying the transaction amount and confirming your balance is updated correctly. Payment data is handled with the same care as all other personal information on the platform.

3.3 Legal and Regulatory Compliance

Rumislot is required to maintain records of financial transactions, identity verification data and, in certain circumstances, to report suspicious activity to relevant authorities. This is a legal obligation rather than a commercial choice. Data held for compliance purposes is stored securely and accessed only by authorised personnel when specifically required.

3.4 Platform Improvement and Analytics

Aggregated, anonymised behavioural data is used to understand how Pakistani players use Rumislot — which features are most popular, where users encounter difficulties and how the platform performs across different devices and connection types. This analysis directly informs product improvements. Individual player data is not used for this analysis in a way that allows identification of specific people.

3.5 Responsible Gaming Monitoring

Rumislot uses session and transaction data to support responsible gaming features, including monitoring for patterns of play that may indicate a player is at risk. This is not surveillance — it is a player protection measure. Where responsible gaming tools such as deposit limits or self-exclusion have been activated by a player, the associated data is used to enforce those restrictions consistently.

Given that Rumislot is a real-money gaming platform, payment data is among the most sensitive information we handle. We take the security of financial data with particular seriousness and have specific controls in place beyond the general data protection measures described elsewhere in this policy.

Rumislot does not store full card numbers or full bank account details on its own servers. Payment card data processed through Visa or Mastercard flows through a PCI-DSS compliant payment gateway that handles encryption and tokenisation. Rumislot receives and stores only a tokenised reference that allows future transactions — not the underlying card number itself.

Easypaisa and JazzCash mobile wallet numbers are stored in encrypted form. They are used to route withdrawals to the correct account and are accessible only to authorised payment processing staff. Your mobile wallet number is never displayed in full on screen after initial registration — it appears in masked form (e.g., 0300 **** 7812) in your account settings.

Your full transaction history on Rumislot — including all deposits, withdrawals, wagers placed and bonuses received — is stored in your account and is accessible to you at all times from the transaction history section. This record is retained for a minimum of five years for regulatory compliance purposes, even if you close your account.

Rumislot shares personal data only with parties that are strictly necessary for the operation of the platform. We do not sell data. We do not share data with advertising networks. Below is a complete list of the categories of third parties who may receive your data and the reasons why.

Every third party with whom Rumislot shares personal data is required to handle that data in accordance with confidentiality obligations and, where applicable, data protection standards comparable to those applied by Rumislot itself. We do not permit third parties to use your data for their own marketing or commercial purposes.

Rumislot retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable law. The retention periods below reflect our standard policy:

• Active account data — retained for the lifetime of your account plus five years after closure, to meet financial record-keeping requirements.
• Identity verification documents (CNIC images, address proof) — retained for five years from the date of verification, in line with financial compliance obligations.
• Transaction records — retained for a minimum of five years from the transaction date.
• Support communications — retained for two years from the date of the last communication, unless the matter involves an unresolved legal dispute, in which case records are kept until resolution.
• Technical and session logs — retained for thirteen months from creation, after which they are anonymised or deleted.
• Marketing preferences — retained until you withdraw consent, after which marketing is stopped and preferences are updated accordingly.

When the retention period for a category of data expires and there is no legal basis for keeping it longer, the data is deleted or irreversibly anonymised so it can no longer be connected to you as an individual.

Rumislot uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Rumislot uses cookies to keep you logged in between sessions, remember your preferences and understand how different parts of the platform are being used so we can improve them.

Types of Cookies Used by Rumislot

* Cookie preferences shown above are illustrative. Manage your actual cookie settings through your browser or by contacting support@rumislot.im.

As a Rumislot player, you have specific rights over the personal data we hold about you. These rights are real and exercisable — they are not just statements of principle. To exercise any of the rights below, contact us at support@rumislot.im with your account details and a description of your request.

Rumislot takes the security of your personal data seriously and has implemented technical and organisational measures appropriate to the sensitivity of the information we hold. These measures include but are not limited to:

• SSL/TLS Encryption — all data transmitted between your device and the Rumislot platform is encrypted using industry-standard TLS protocols. The padlock icon in your browser address bar confirms this is active whenever you access the platform.
• Encryption at Rest — sensitive data stored in Rumislot's databases — including payment account references, identity documents and personal details — is encrypted at the storage level. Raw data cannot be accessed even if underlying storage media were compromised.
• Access Controls — only authorised Rumislot personnel have access to player personal data, and only to the extent required by their specific role. Access to financial and identity data is further restricted to payment and compliance teams.
• Two-Factor Authentication — Rumislot supports OTP-based login verification to protect accounts from unauthorised access, even if login credentials are obtained by a third party.
• Regular Security Reviews — the platform undergoes periodic security assessments to identify and address vulnerabilities. Findings from these reviews are prioritised and remediated according to severity.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any security vulnerability affecting Rumislot or suspect your account has been compromised, please contact support@rumislot.im immediately.

Rumislot is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. The platform uses date-of-birth data collected at registration to screen for underage users, and may request identity verification documents to confirm age where there is any doubt.

If Rumislot discovers that an account belongs to a person under 18, all personal data associated with that account will be deleted immediately — except to the extent that retention is required by law — and the account will be permanently closed. Any winnings or balance held in that account will not be paid out.

Rumislot sends marketing communications — including promotional SMS messages, email newsletters and in-platform notifications about bonuses and offers — only to players who have explicitly opted in to receive them. Opting in is voluntary and you may withdraw your consent at any time without any effect on your account status or access to the platform.

To stop receiving marketing communications, you can: (a) click the unsubscribe link in any marketing email you receive from Rumislot; (b) reply STOP to any promotional SMS; (c) update your notification preferences from the settings section of your account; or (d) email support@rumislot.im with a request to opt out of all marketing.

Opting out of marketing does not affect transactional communications — messages about your account status, deposit confirmations, withdrawal notifications, security alerts and support responses are sent regardless of marketing preferences, as they are necessary for the operation of your account.

Rumislot reviews this Privacy Policy at least once per year and updates it whenever there are material changes to how we collect or use personal data. When significant changes are made, we will notify registered players via the mobile number or email address associated with their account, or via a prominent notice on the platform, at least seven days before the changes come into effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Rumislot platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with a change, you can close your account and request deletion of your data before the new policy takes effect.

For all privacy-related queries, data rights requests or concerns about how Rumislot handles personal information, contact us at support@rumislot.im — we respond to all privacy communications within two business days.