Data Protection · Player Privacy

RumiSlot Privacy Policy — How We Protect Your Data in Pakistan

At RumiSlot, your personal information belongs to you. This Privacy Policy explains in plain English exactly what data we collect when you use our platform, why we collect it, how we store and protect it, who we share it with, and what rights you have over it at any time. We do not sell your data. We do not share it with advertisers. We use it to run the platform safely and fairly for every Pakistani player.

Last Updated: 1 January 2025 · Applies to: rumislot.ws

rumislot

1. Who We Are and Scope of This Policy

This Privacy Policy is published by RumiSlot ("we", "us", "the Platform"), the operator of the online gaming website at rumislot.ws. RumiSlot is a platform designed specifically for players in Pakistan, offering real-money gaming in Pakistani Rupees (PKR) via locally familiar payment methods including Easypaisa, JazzCash, NayaPay, and IBFT bank transfers.

This Policy applies to all personal data processed in connection with your use of the RumiSlot website and all services offered through it — including registration, deposits, gameplay, withdrawals, customer support interactions, and promotional communications. It applies whether you access RumiSlot via a desktop browser, mobile browser, or any native application made available by the platform.

By registering an account or using the RumiSlot platform in any way, you acknowledge that you have read and understood this Privacy Policy. If you have any questions at any point, our support team is available 24/7 in both Urdu and English via live chat or at support@rumislot.ws.

Plain language summary: This policy covers how RumiSlot handles your personal information from the moment you visit our site to the moment you close your account — and for the legally required period after that. It is written to be understood by real players in Pakistan, not just lawyers.

2. Personal Data We Collect

RumiSlot only collects personal data that is genuinely necessary to operate the platform and comply with legal obligations. We do not collect data speculatively or in bulk. Below is a precise breakdown of every category of data we may collect and the context in which we collect it:

2.1 Registration Data

When you create a RumiSlot account, we collect: your full legal name, date of birth, Pakistani mobile number, email address (if provided), and the password you create. This information is required to create and secure your account.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and confirm your eligibility to play, we may request a copy of your CNIC (Computerised National Identity Card), proof of address, or proof of your payment method. This data is collected only when KYC verification is triggered — not automatically at registration.

2.3 Payment and Transaction Data

When you make deposits or request withdrawals at RumiSlot, we record transaction details including the amount, date, time, payment method identifier (e.g. your Easypaisa mobile number or the last four digits of your bank card), and transaction status. We do not store full card numbers or complete payment credentials — these are handled by our certified payment processors.

2.4 Gameplay Data

We record data about your gameplay activity including: games played, session start and end times, bet amounts, game outcomes, and running balance. This data is necessary for dispute resolution, bonus progress tracking, responsible gaming tools, and platform improvement.

2.5 Device and Technical Data

When you access RumiSlot, our servers automatically log: your IP address, browser type and version, device type, operating system, screen resolution, and pages visited. This data is used for security monitoring, fraud detection, and ensuring the platform displays correctly on Pakistani devices.

2.6 Communications Data

If you contact our support team — via live chat, email, or any other channel — we retain a record of those communications. This helps us resolve disputes fairly and maintain quality of service.

Identity Mobile Number Payment Method ID Gameplay Activity Device & Browser Support Communications

What we do not collect: RumiSlot does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information — unless you voluntarily provide this in the context of a responsible gaming interaction (for example, mentioning a medical circumstance when requesting self-exclusion).

3. How We Use Your Personal Data

Every use of your personal data at RumiSlot has a specific, legitimate purpose. The table below maps each purpose to the category of data involved:

PurposeData Categories UsedNecessary?
Account creation & authenticationRegistration data, device dataYes
Identity & age verification (KYC)KYC documents, registration dataYes
Processing deposits & withdrawalsPayment & transaction dataYes
Enabling gameplay & game historyGameplay data, account dataYes
Fraud prevention & securityDevice data, transaction data, IPYes
Customer support & dispute resolutionCommunications, gameplay, payment dataYes
Responsible gaming toolsGameplay data, registration dataYes
Bonus tracking & promotionsGameplay, payment, account dataYes
Marketing communicationsRegistration data, gameplay preferencesConsent only
Platform analytics & improvementDevice data, anonymised gameplay dataLegitimate interest

RumiSlot does not use automated decision-making that produces legal or similarly significant effects without human review. If our fraud detection system flags an account for investigation, a human compliance team member reviews the case before any action is taken.

rumislot

4. Legal Basis for Processing

RumiSlot processes your personal data on the following legal bases:

  • Contract performance — Processing necessary to create and operate your account, process your transactions, and deliver the gaming services you have requested. Without this processing, we cannot provide the service.
  • Legal obligation — Processing required to comply with anti-money laundering laws, financial record-keeping requirements, and any other applicable legal or regulatory obligations. This includes KYC verification and transaction record retention.
  • Legitimate interests — Processing carried out for fraud prevention, security monitoring, platform improvement, and responsible gaming programme operation. We have assessed these interests against your privacy rights and determined they are proportionate.
  • Consent — Processing for marketing communications, where you have explicitly opted in to receive such communications. You may withdraw consent at any time through your account settings or by contacting our support team at RumiSlot.

5. Data Sharing and Third Parties

RumiSlot does not sell your personal data to any third party under any circumstances. We share data with external parties only in the limited situations described below, and only to the minimum extent necessary:

5.1 Payment Processors

To process your deposits and withdrawals, we share transaction-related data with certified payment processors including the operators of Easypaisa, JazzCash, NayaPay, SadaPay, and our banking partners for IBFT. These processors receive only the data necessary to complete your specific transaction and are contractually prohibited from using it for any other purpose.

5.2 Identity Verification Providers

Where automated KYC document checks are used to verify your CNIC or other identity documents, your verification data is processed by our contracted KYC service provider under strict data processing agreements. These providers do not retain your documents beyond the verification period.

5.3 Game Software Providers

Some games on the RumiSlot platform are provided by third-party game studios. These providers may receive a player identifier and gameplay data necessary to run the game and record its outcome. They do not receive your name, payment information, or other personal details.

5.4 Legal and Regulatory Disclosure

We may be required by Pakistani law enforcement authorities, courts, or regulatory bodies to disclose personal data. We will only comply with such requests where we are legally obligated to do so, and we will notify you of such a disclosure wherever permitted by law.

We will never share your data with: advertising networks for targeted advertising purposes, data brokers, other gaming platforms, or any commercial third party for their own marketing purposes. If you ever receive a communication claiming to be from RumiSlot through an unfamiliar channel, treat it with caution and verify through our official support channels.

6. Cookies and Tracking Technologies

RumiSlot uses cookies and similar tracking technologies on our website. A cookie is a small text file placed on your device when you visit a website. We use four categories of cookies:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your language preferences, and ensure secure access to your account. You cannot opt out of these cookies while using the platform — without them, the service cannot work.

6.2 Functional Cookies

These cookies remember your preferences — such as your preferred game view, display settings, and last-visited game category — to make your experience smoother on repeat visits to RumiSlot. They do not track you across other websites.

6.3 Analytics Cookies

We use anonymised analytics tools to understand aggregate patterns of platform usage — for example, which games are most popular among Pakistani players, which pages have the highest exit rates, and how deposit flows change around PSL season. This data is fully anonymised and cannot be linked back to individual players.

6.4 Security and Anti-Fraud Cookies

These cookies help us identify suspicious login patterns, detect bot activity, and prevent multiple account registrations from the same device. They form part of our fraud prevention infrastructure at RumiSlot.

Managing cookies: You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging into your RumiSlot account. Blocking other cookie categories may reduce the quality of your experience but will not affect access to core platform features.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. The following retention periods apply at RumiSlot:

Data CategoryRetention PeriodReason
Account registration data5 years post-closureAnti-money laundering legal obligation
KYC documents5 years post-closureRegulatory compliance requirement
Transaction records7 years post-transactionFinancial record-keeping obligation
Gameplay history3 years post-closureDispute resolution & responsible gaming
Support communications3 years post-interactionDispute resolution
Device & IP logs12 monthsSecurity monitoring & fraud prevention
Marketing consent recordsUntil consent withdrawnEvidence of consent

Once a retention period expires, data is securely deleted or irreversibly anonymised. We do not retain personal data beyond legally required periods for commercial reasons.

rumislot

8. How We Protect Your Data

Data security is not an afterthought at RumiSlot — it is built into our infrastructure from the ground up. We implement the following technical and organisational security measures:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and our servers — the same standard used by major Pakistani banks.
  • Encrypted storage for all personal and payment data at rest, with encryption keys managed separately from data.
  • Two-factor authentication (2FA) available for all player accounts and mandatory for all internal staff accounts.
  • Access controls — only authorised RumiSlot staff with a specific operational need can access personal data, and all access is logged and audited.
  • Regular penetration testing by independent security teams to identify and remediate vulnerabilities before they can be exploited.
  • 24/7 security monitoring for anomalous activity patterns, with automated alerts and human review of flagged events.
  • Secure data centre hosting with physical access controls, redundancy, and disaster recovery systems.

In the event of a data breach that poses a risk to your rights, RumiSlot will notify affected players and relevant authorities within 72 hours of becoming aware of the incident, in line with applicable data protection obligations.

Your responsibility: You play an important role in your account's security. Use a strong, unique password for your RumiSlot account. Enable 2FA if you have not already. Never share your login credentials with anyone. RumiSlot staff will never ask for your password via any channel.

9. Your Privacy Rights

You have specific rights over your personal data at RumiSlot. These rights can be exercised at any time by contacting our support team. Here is what each right means in practice:

You have the right to request a copy of all personal data that RumiSlot holds about you. We will provide this in a structured, commonly used format within 30 days of your request. There is no charge for a first data access request. To make a request, contact our support team with your account details and we will guide you through the verification process.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. For straightforward corrections — such as a misspelled name or outdated phone number — contact our support team and provide the correct information along with a supporting document if required. Corrections to KYC documents require the submission of updated verification materials.

You may request that RumiSlot delete your personal data. This right is subject to legal limitations — we are required to retain certain records (such as transaction data and KYC documents) for the periods specified in our retention policy to comply with financial and anti-money laundering laws. Where deletion is not possible due to legal obligations, we will inform you clearly of what data must be retained and why, and delete or anonymise everything else.

In certain circumstances — for example while a dispute about the accuracy of your data is being resolved — you have the right to request that RumiSlot restricts its processing of your data. During a restriction, we retain your data but pause processing activities beyond what is strictly necessary. We will lift the restriction once the relevant circumstances have been resolved.

If you have consented to receive marketing communications from RumiSlot — promotional emails, SMS notifications about new offers, or similar communications — you can withdraw that consent at any time. Simply update your communication preferences in your account settings, or contact our support team. Withdrawal of marketing consent does not affect the legality of any processing carried out before the withdrawal, and it does not affect your access to the platform or your account in any way.

To exercise any of these rights, contact RumiSlot support via live chat or at support@rumislot.ws. We will respond within 30 days. Where a request is complex or we receive multiple requests, we may extend this period by a further 30 days — in which case we will notify you promptly.

10. Children's Privacy

RumiSlot is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires a date of birth, and any account where the provided date of birth indicates the holder is under 18 is rejected immediately.

We conduct age verification as part of our KYC process. If at any point we determine that an account is held by a person under 18, that account will be immediately suspended, all transactions reversed where possible, and the matter reported to relevant safeguarding authorities. Any deposits made by underage users will be returned to the verified payment method rather than being retained by RumiSlot.

If you are a parent or guardian and believe a minor may have registered an account or accessed the RumiSlot platform, please contact us immediately at support@rumislot.ws with relevant details and we will investigate and act promptly.

Parental controls: We strongly recommend that parents and guardians with concerns about their children's online activity use device-level parental control tools to restrict access to online gaming platforms. Our Responsible Gaming page contains additional resources and guidance on this topic.

11. Changes to This Privacy Policy

RumiSlot may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the services we offer, or changes in applicable law. When we make material changes to this policy, we will notify registered players via the mobile number or email address held on their account at least 7 days before the changes take effect.

The date of the most recent update is always displayed at the top of this page. We recommend reviewing this Policy periodically. Continued use of the RumiSlot platform after the effective date of any updated Policy constitutes your acknowledgement of the changes.

For minor changes that do not materially affect how we process your data — for example corrections of typographical errors or clarifications that do not change the substance of any provision — we may update the Policy without individual notification, but will always update the "Last Updated" date at the top of the page.

12. How to Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how RumiSlot handles your personal information, please get in touch using one of the following channels:

  • Live Chat: Available 24/7 from any page on the RumiSlot platform — fastest response, typically under 90 seconds
  • Email: support@rumislot.ws — for detailed or formal privacy requests, recommended for creating a written record
  • Support Language: Both Urdu and English are available at all times

Privacy-related requests — including data access, correction, and deletion requests — will be acknowledged within 24 hours and resolved within 30 days. Where a request requires additional verification of your identity before we can act on it, we will ask for that verification promptly and the 30-day clock will run from the point your identity is confirmed.

Formal complaints: If you feel that RumiSlot has not handled your personal data appropriately and you are not satisfied with our response to your concern, you have the right to raise a formal complaint with the relevant data protection authority in your jurisdiction. Our support team can provide guidance on the appropriate authority to contact if you need it.


Privacy in Practice

Six Ways RumiSlot Protects Your Privacy

Privacy commitments should be visible in actual platform behaviour, not just in policy text. Here is specifically how RumiSlot's privacy principles show up when you use the platform day to day.

256-bit Encryption on Every Connection

Every byte of data that travels between your phone and RumiSlot's servers is encrypted with 256-bit SSL — the same standard used by Pakistan's largest banks. Your personal details, payment information, and login credentials are protected in transit at all times.

Data Access by Verified Humans Only

Your personal data can only be accessed by RumiSlot staff who have a specific, documented operational reason to view it. All internal data access is logged and audited. If a support agent views your account, that access is recorded — creating full accountability at every level.

We Never Sell Your Data

RumiSlot does not sell your personal information to advertisers, data brokers, or any commercial third party. Full stop. The only parties that ever receive your data are those directly necessary to process your transactions or comply with legal obligations — and they are contractually bound to use it for nothing else.

PKR-Native Payments — No Cross-Border Data Exposure

Because RumiSlot processes all transactions in PKR through Pakistani payment providers — Easypaisa, JazzCash, IBFT — your financial data stays within Pakistan's payment infrastructure. There is no cross-border currency conversion routing your payment data through unfamiliar international processors.

Clear Retention Limits — Data Doesn't Live Forever

RumiSlot only keeps your data for as long as legally required or operationally necessary. Once the retention period for a data category expires, it is securely deleted or anonymised. You can see exact retention periods for every data category in the table above. No indefinite storage, no data purgatory.

Easy, No-Friction Rights Requests

Exercising your data rights at RumiSlot does not require you to fill out a complicated form or wait for a lawyer's response. Contact our bilingual support team via live chat, explain what you need, and we handle it. Access requests are fulfilled within 30 days. For most corrections, the turnaround is same-day.

Your Data is Safe at RumiSlot — Play with Confidence

Privacy-first infrastructure, no data selling, instant PKR payouts, and 24/7 bilingual support. Register at RumiSlot today and experience a gaming platform that genuinely respects Pakistani players.

By registering you confirm you are 18+ and have read our Privacy Policy and Terms and Conditions · Responsible Gaming