Pak Rumi Privacy Policy – How We Protect Your Data

1. About This Policy

This Privacy Policy describes how Pak Rumi collects, processes, stores, and protects the personal information of every user who accesses or registers on the Pak Rumi platform at pakrumi.bet. It applies to all services offered by Pak Rumi including online casino games, Andar Bahar, sports betting, virtual sports, and all payment and account management features.

By registering an account on Pak Rumi, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. This policy should be read alongside our Terms and Conditions and Responsible Gaming policy, both of which form part of the overall agreement between you and Pak Rumi.

Pak Rumi takes the privacy of Pakistani players seriously. The platform was built for the Pakistani market, and this policy reflects the data handling practices appropriate for that context — including how we work with local payment providers like Easypaisa and JazzCash, and how we process identity documents such as the CNIC.

2. Data We Collect

Pak Rumi collects only the personal data necessary to operate the platform, process transactions, verify identities, and comply with applicable regulations. We do not collect data beyond what is required for these purposes. The categories of data we collect include:

Pak Rumi does not collect sensitive personal data such as biometric information, racial or ethnic origin, political opinions, or medical history. The CNIC is collected solely for age and identity verification and is not used for any other purpose.

3. How We Collect Data

Pak Rumi collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in any promotion on the Pak Rumi platform.
• Automatically: When you use the Pak Rumi website or mobile browser interface, we collect technical and behavioural data through server logs, cookies, and similar tracking technologies. This data is collected even if you are browsing without a logged-in account.
• From payment providers: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, or Visa/Mastercard, we receive transaction confirmation data from those providers. We do not receive your full payment account credentials — only the confirmation and reference data necessary to credit or debit your Pak Rumi balance.
• From third-party identity verification services: In some cases, Pak Rumi uses third-party KYC services to verify identity documents. These services process your CNIC data in accordance with their own privacy policies and return a verification result to Pak Rumi.

4. How We Use Your Data

Pak Rumi uses the data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your Pak Rumi account, processing login requests, and enabling account recovery.
• Payment Processing: Crediting deposits to your account balance, processing withdrawal requests to your verified payment method, and maintaining a complete transaction history accessible through your account.
• Identity Verification (KYC): Confirming that you meet the age requirement of 18 years or older, and that the payment accounts you use are registered in your name. This is a regulatory and fraud-prevention requirement.
• Fraud Prevention and Security: Detecting and investigating suspicious activity including account sharing, duplicate accounts, money laundering, and unauthorised access attempts. Device data and IP information are used for this purpose.
• Customer Support: Responding to queries, resolving disputes, investigating complaints, and providing assistance with account or payment issues.
• Responsible Gaming: Monitoring account behaviour for patterns that may indicate problem gambling, including unusual deposit frequency, rapid loss patterns, or activity inconsistent with a player's established behaviour. This data is used to trigger responsible gaming prompts and, where necessary, account interventions.
• Platform Improvement: Analysing how players use the Pak Rumi platform to identify improvements to the interface, game selection, payment flow, and mobile performance.
• Legal Compliance: Retaining records as required by applicable regulations and responding to lawful requests from regulatory or law enforcement authorities.

5. Sharing Your Data

Pak Rumi does not sell, rent, or share your personal data with third parties for marketing purposes. Your data is shared only in the following limited circumstances:

• Payment Providers: To process your deposits and withdrawals, Pak Rumi shares transaction data with the relevant payment provider (e.g., Easypaisa, JazzCash, your bank). This data is limited to what is necessary to execute the transaction.
• Identity Verification Services: Where third-party KYC services are used to verify your CNIC, your document data is shared with that service solely for verification purposes. These providers are contractually bound to handle your data securely and not to use it for any other purpose.
• Legal and Regulatory Authorities: Pak Rumi will disclose personal data if required by law, court order, or a lawful request from a government or regulatory authority. Where possible, we will notify you of such a request unless prohibited by law from doing so.
• Service Providers: Pak Rumi works with trusted technical service providers — including hosting, analytics, and customer support platforms — who process data on our behalf. These providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to Pak Rumi.

All third-party processors used by Pak Rumi are required to maintain security standards consistent with those applied by Pak Rumi itself. We do not allow third parties to use data collected on our behalf for their own purposes.

6. Cookies & Tracking

Pak Rumi uses cookies and similar technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players use the site. The categories of cookies used by Pak Rumi are:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in while navigating between pages, and security cookies that help detect and prevent fraudulent access. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and game view configurations. These improve your experience without affecting the platform's security.
• Analytics Cookies: Collect anonymised data about how pages are used — which sections are visited, how long sessions last, and which games are most commonly played. This data is used in aggregate to improve the platform and is never linked to individual player identities without separate consent.
• Security Cookies: Used for fraud detection and to identify devices associated with known malicious activity. These run in the background and are not visible during normal use.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect how the Pak Rumi platform behaves — some features may not work correctly if functional cookies are disabled.

7. Data Retention

Pak Rumi retains your personal data for as long as your account is active and for a period following account closure as required by applicable regulations and legitimate business purposes. The general retention periods applied by Pak Rumi are:

• Account and registration data: Retained for the duration of your account and for five years following permanent closure.
• Transaction records: Retained for seven years from the date of the transaction. This is consistent with standard financial record-keeping requirements.
• KYC documents (CNIC copies): Retained for the duration of your account and for five years after closure. After this period, documents are securely deleted.
• Customer support communications: Retained for two years from the date of the last interaction, unless the communication relates to an unresolved complaint or dispute, in which case it is retained until resolution plus two years.
• Technical and device data: Retained for 12 months for analytics purposes, after which it is anonymised or deleted.

When data reaches the end of its retention period, Pak Rumi deletes or anonymises it in a secure manner. Players who request data deletion before the end of the applicable retention period will have their request fulfilled to the extent permitted by regulatory and legal obligations.

8. Data Security

Pak Rumi applies multiple layers of technical and procedural security to protect the personal data of every registered player. The security measures in place include:

• 256-bit SSL Encryption: All data transmitted between your device and the Pak Rumi platform is encrypted using industry-standard TLS/SSL technology. This applies to account logins, payment transactions, and all personal data submitted through the platform.
• Encrypted Data Storage: Personal data is stored in encrypted form. Payment details and identity documents are never stored in plain text and are accessible only to authorised personnel with a legitimate operational need.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. Employees who access player data for support or compliance purposes are subject to confidentiality obligations and access logging.
• Two-Step Verification: Sensitive account operations — including withdrawal requests above a defined threshold and changes to verified payment details — require additional confirmation steps to prevent unauthorised changes.
• Fraud Detection Systems: Automated systems monitor account and transaction activity for patterns associated with fraud, identity theft, and unauthorised access. Suspicious activity triggers review by the Pak Rumi security team.
• Regular Security Review: Pak Rumi's technical security infrastructure is reviewed regularly and updated in line with current best practices for online gaming and financial services platforms.

While Pak Rumi takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also have a responsibility to keep your account credentials secure — do not share your password with anyone and contact support immediately if you suspect your account has been accessed without your authorisation.

9. Children's Privacy

Pak Rumi does not knowingly collect personal data from any person under the age of 18. The platform is strictly for adults, and registration requires agreement to the age eligibility condition stated in the Terms and Conditions.

If Pak Rumi becomes aware that personal data has been collected from a person under 18, the account will be immediately closed and any associated data will be deleted in accordance with applicable regulations. Any balance held in such an account will be handled in accordance with Pak Rumi's underage gambling policy.

If you are a parent or guardian and believe your child has registered an account on Pak Rumi, please contact us immediately at support@pakrumi.bet with the relevant account details.

10. Your Rights

As a Pak Rumi player, you have specific rights over the personal data we hold about you. These rights are described below and can be exercised by contacting the Pak Rumi support team:

11. Payment Data

All payments at Pak Rumi are processed in Pakistani Rupees (PKR). Payment data handling at Pak Rumi follows these specific practices:

• No storage of full payment credentials: Pak Rumi does not store full Easypaisa PINs, JazzCash PINs, bank account passwords, or full card numbers. Only the reference information necessary to identify a verified payment method (such as the last 4 digits of a card or a partial mobile number) is retained.
• Matching requirement: The name on your Pak Rumi account must match the name on the payment account used for deposits and withdrawals. This prevents third-party payment fraud and protects your account from unauthorised withdrawals.
• Transaction logs: Every deposit and withdrawal is logged with a timestamp, amount, payment method, and reference number. These logs are accessible in your account history and are retained for seven years as described in Section 7.
• Payment provider data: When you deposit or withdraw, your payment provider (e.g., Easypaisa, JazzCash, your bank) has access to the transaction data as required to process it. Their handling of your data is governed by their own privacy policies, which are separate from this one.

12. Policy Changes

Pak Rumi may update this Privacy Policy from time to time to reflect changes in how we operate, in applicable regulations, or in response to player feedback. When material changes are made, we will notify registered players via email and/or a notice on the Pak Rumi platform before the changes take effect.

The updated policy will be published on this page with a revised "last updated" date. Your continued use of the Pak Rumi platform after any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically so you are always aware of how we handle your data.

If you disagree with any changes to this policy, you have the right to close your account and request deletion of your data as described in Section 10.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a privacy concern relating to your Pak Rumi account, you can reach us through the following channels:

• Live Chat: Available 24/7 on the Pak Rumi website. The fastest way to get a response for urgent privacy or account queries.
• Email: support@pakrumi.bet — for formal data requests, privacy complaints, or detailed enquiries. Please include your account information (without sharing your password) and the nature of your request in the subject line.

Pak Rumi aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 days. For subject access requests or deletion requests, we may ask for additional verification before processing to protect your account from fraudulent requests.