Privacy Policy – Rummi Slot Pakistan Online Gaming Platform

Rummi Slot is an online gaming and sports betting platform operated specifically for the Pakistani market. This Privacy Policy governs the collection and processing of personal data across all parts of the Rummi Slot platform – including the website at rummislot.com, any associated mobile applications, live casino services, sports betting products, and customer support interactions.

When we say "personal data" in this policy, we mean any information that can identify you as an individual – your name, CNIC number, phone number, email address, financial details, device information, or any combination of these. When we say "processing," we mean anything we do with that data: collecting it, storing it, using it, sharing it, or deleting it.

This policy is written for Pakistani players who want to understand clearly how Rummi Slot handles their information. If you have a question about a specific data practice that this policy does not answer clearly, contact our support team and we will respond directly.

Rummi Slot collects personal data in three ways: information you provide directly when registering and using the platform, data generated automatically by your use of the platform, and data obtained from third-party service providers for verification and compliance purposes.

We do not collect sensitive personal data such as biometric information beyond what is required for identity document verification, and we do not collect political opinions, religious beliefs, or health data.

Every piece of data Rummi Slot collects is collected for a defined purpose. We do not collect data speculatively or "in case it becomes useful later." Here is a clear breakdown of what we use your data for:

• Account Operation: Your registration data – name, email, phone number – is used to create and maintain your Rummi Slot account, authenticate your logins, and enable communication with you about your account.
• Payment Processing: Financial data is used to process your deposits and withdrawals through your chosen payment methods (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard). We do not store full card numbers or mobile banking PINs.
• Legal Compliance: Identity documents and transaction records are retained to comply with our anti-money laundering (AML) obligations, age verification requirements, and any requests from competent legal authorities.
• Fraud Prevention & Security: Device data, IP addresses, and session logs are used by our security systems to detect suspicious activity, prevent bonus abuse, identify unauthorised access attempts, and protect the integrity of our games.
• Responsible Gaming: Gaming activity data is used by our player protection systems to flag unusual patterns that may indicate problem gambling, enabling our responsible gaming team to reach out where appropriate.
• Platform Improvement: Aggregated and anonymised usage data helps us understand how the platform performs and where player experience can be improved. This data does not identify individual players.
• Marketing (with your consent): Where you have opted in, we use your contact details to send you information about promotions, new games, and Rummi Slot VIP Club offers. You can withdraw consent at any time.
• Customer Support: Communication data is used to resolve your queries, investigate complaints, and maintain records of interactions for quality assurance.

Every data processing activity at Rummi Slot is carried out on one of the following legal grounds:

• Contractual Necessity: Processing your registration data, gaming activity records, and payment information is necessary to fulfil our contract with you – to operate your account and provide the services you have requested.
• Legal Obligation: Collecting and retaining your identity documents and transaction history is required by our AML compliance obligations and other applicable regulatory requirements.
• Legitimate Interests: Processing device and session data for fraud prevention and platform security is in the legitimate interests of both Rummi Slot and the wider player community. We have assessed that these interests are not overridden by your privacy rights.
• Consent: Sending you marketing communications and placing non-essential cookies on your device is done only with your explicit consent. You may withdraw this consent at any time.

Rummi Slot does not sell your personal data to any third party. We share data only in the following defined circumstances, and only to the minimum extent necessary for the purpose:

• Payment Processors: To process your deposits and withdrawals, we share your payment method identifier and transaction details with the relevant payment service provider (for example, Easypaisa or JazzCash). These providers process your data under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: Your KYC documents may be processed by a third-party identity verification service acting on our behalf. These providers are contractually bound to use your data only for verification purposes and are prohibited from retaining it for any other purpose.
• Technology & Infrastructure Providers: We use third-party cloud hosting and content delivery services to operate the Rummi Slot platform reliably. These providers may have incidental access to personal data as part of their service provision but are bound by strict data processing agreements.
• Fraud Prevention Services: We may share limited device and session data with fraud prevention networks to identify and block known fraudulent patterns across the gaming industry.
• Legal & Regulatory Authorities: We are required to share transaction records and identity data with competent authorities upon receipt of a lawful request. We will notify you of such requests where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of the Rummi Slot business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this privacy policy that result from it.

In all cases where we share data with third parties, we have contractual safeguards in place requiring those parties to maintain appropriate security standards and to use the data only for the specified purpose.

As an online gaming platform, Rummi Slot is required to verify the identity of players before processing withdrawals and for ongoing AML compliance. This process, commonly known as Know Your Customer (KYC), involves you providing proof of identity and, in some cases, proof of address or source of funds.

The following documents are accepted for identity verification on Rummi Slot:

• Primary ID: Pakistani CNIC (Computerised National Identity Card) – both front and back image required, or a valid Pakistani passport.
• Proof of Address: A recent utility bill, bank statement, or official document bearing your full name and residential address (required where enhanced verification is triggered).
• Source of Funds: Bank statements or payslips may be requested for accounts with significant withdrawal volumes as part of our AML programme.

KYC documents are processed securely and stored in encrypted form. They are retained for the legally required period following account closure. They are not used for any purpose beyond identity verification, age confirmation, and AML compliance. Our identity verification team and any contracted third-party providers handling these documents are bound by strict confidentiality obligations.

Financial privacy is something Pakistani players are rightly concerned about, and Rummi Slot takes specific measures to protect your payment data:

• We do not store full bank account numbers, full card numbers, or mobile banking PINs on our servers at any point. Payment processing is handled by the payment provider, with Rummi Slot receiving only transaction confirmation and a tokenised payment reference.
• Your registered payment methods are stored as masked references (for example, Easypaisa wallet ending in XXXX) sufficient only to identify which method to use for a withdrawal, never in a form that could be used to initiate a transaction without your action.
• All transactions through Rummi Slot are denominated in Pakistani Rupees. There is no foreign currency conversion that would require sharing your data with international payment networks for standard PKR transactions.
• Transaction history – amounts, dates, and methods – is retained as required by AML regulations. This data is accessible to you in your account transaction history at any time.
• Withdrawals are only processed to payment methods that are verified as belonging to the same person as the registered account. This protects you against unauthorised withdrawal requests.

Rummi Slot uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device that helps websites remember information about your visit. Here is an explanation of the types we use:

You can manage your cookie preferences through the cookie settings available on the platform. Withdrawing consent for optional cookies will not affect your ability to play or transact on Rummi Slot.

Rummi Slot retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data (active accounts): Retained for the duration of your account being active on the platform.
• Account Data (closed accounts): Following account closure, registration data and gaming activity records are retained for a minimum of five years to meet AML and regulatory record-keeping requirements.
• KYC Documents: Identity verification documents are retained for five years after the account is closed, in line with standard AML retention obligations.
• Transaction Records: Financial transaction data is retained for a minimum of seven years following the transaction, consistent with financial record-keeping requirements.
• Support Communications: Customer support correspondence is retained for three years to enable effective complaint handling and quality assurance review.
• Marketing Data: If you unsubscribe from marketing communications, we retain a record of your opt-out status to ensure we do not inadvertently contact you again. The underlying contact data used only for marketing is deleted within 30 days of opt-out.

When the retention period for any data category expires, the data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

Protecting your personal data is a technical and organisational commitment at Rummi Slot, not just a policy statement. The measures we have in place include:

• Encryption at Rest and in Transit: All personal data stored on Rummi Slot infrastructure is encrypted using industry-standard algorithms. All data transmitted between your device and our servers is protected by TLS (Transport Layer Security) encryption.
• Access Controls: Personal data is accessible only to staff members who have a genuine operational need. Access is role-based, logged, and subject to regular review. No employee can access financial data without authorisation specific to their role.
• Regular Security Audits: Our platform infrastructure undergoes regular penetration testing and security reviews. Any identified vulnerabilities are addressed according to a defined severity and remediation timeline.
• Incident Response: We maintain a data breach response procedure. In the event of a security incident that affects your personal data and poses a risk to your rights, we will notify you without undue delay and within the timeframe required by applicable regulations.
• Staff Training: All Rummi Slot staff who handle personal data receive training on data protection obligations and our internal privacy policies. Compliance is monitored and reinforced regularly.

While we apply all reasonable measures to protect your data, no system is entirely immune to all possible threats. We encourage you to also protect your own account with a strong password and by enabling two-factor authentication where available.

As a player registered with Rummi Slot, you have the following rights over your personal data. You can exercise any of these rights by contacting our support team with your request:

To exercise any of these rights, contact our support team with your registered account email and a description of your request. We will verify your identity before processing the request and respond within 30 days. Complex or multiple requests may take up to 60 days, and we will inform you if this is the case.

Rummi Slot is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm their age, and we verify this through our KYC programme.

If we become aware that we have inadvertently collected personal data from a person under 18 years of age, we will immediately close the associated account, delete or anonymise all data collected, and return any deposited funds. If you believe a minor has registered on Rummi Slot, please contact our support team immediately so that we can investigate and act promptly.

Rummi Slot sends marketing communications – including promotional emails, SMS about bonuses, and in-platform notifications about new games and events – only to players who have explicitly opted in to receive them. We do not send unsolicited marketing to players who have not consented.

You can opt out of marketing at any time through any of the following methods:

• Click the unsubscribe link at the bottom of any Rummi Slot marketing email.
• Reply STOP to any marketing SMS from Rummi Slot.
• Update your communication preferences in your account settings under Profile > Notifications.
• Contact our support team and request to be removed from all marketing lists.

Opting out of marketing does not affect essential account communications – we will still send you transaction confirmations, withdrawal notifications, security alerts, and mandatory account communications regardless of your marketing preference.

Players who have activated a self-exclusion or any responsible gaming restriction on their Rummi Slot account are automatically removed from all marketing communications for the duration of the restriction and will not be re-added without actively opting back in after the restriction has ended.

Rummi Slot may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we explain our policies. When we make changes:

• The revised policy will be published at rummislot.com/privacy-policy with an updated "Last Updated" date.
• For material changes that significantly affect how we process your personal data or your rights, we will notify registered players by email at least 7 days before the changes take effect.
• For minor clarifications or corrections that do not meaningfully change the substance of our data practices, changes may take effect without advance notice.
• Your continued use of the Rummi Slot platform after a revised policy has taken effect constitutes your acknowledgement of the updated practices.

We recommend bookmarking this page and checking it periodically. If any version of this policy is unclear or you have concerns about a specific change, contact our support team before continuing to use the platform.

If you have any questions, concerns, or requests relating to your personal data and how Rummi Slot processes it, please contact us through any of the following channels:

• Live Chat: Available directly within the Rummi Slot platform with average response times under 3 minutes during operating hours.
• Email: support@rummislot.com – for privacy-specific enquiries, please include "Privacy Request" in the subject line to ensure routing to the appropriate team.

We aim to respond to all privacy-related enquiries within 48 hours. Formal data subject rights requests (access, erasure, portability) are handled within 30 days of identity verification. If your concern is not resolved to your satisfaction through our internal process, you may escalate to the relevant supervisory authority in your jurisdiction.