Rumi Solt Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to the Rumi Solt platform, operated at rumisolt.com, and all associated services including the Rumi Solt mobile browser experience, customer support channels, and promotional communications. For the purposes of this document, "Rumi Solt," "we," "our," and "us" refer to the entity operating the rumisolt.com platform and responsible for the personal data it processes.

Rumi Solt is an online gaming platform built specifically for Pakistani players, providing a range of casino games — including slots, poker, card games, Andar Bahar, and jackpot titles — alongside a PKR-native payment infrastructure using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard bank cards.

As the operator of the Rumi Solt platform, we act as the data controller for all personal data collected through registration, account operation, payment processing, and customer support interactions. Questions about this policy or your data can be directed to our support team at support@rumisolt.com or via any of the contact methods described in Section 12 of this policy.

Rumi Solt collects personal data in the following categories. The data collected at each stage is limited to what is genuinely required for that specific purpose:

Every piece of data Rumi Solt collects has a specific, defined purpose. We do not collect data on a "might be useful later" basis. The legal grounds on which each category of data is collected are:

• Contractual Necessity: Registration data, payment data, and gaming activity data are collected because they are required to provide the service you signed up for. Without this data, we cannot operate your account, process PKR deposits and withdrawals, or run game sessions.
• Legal Obligation: KYC identity verification data is collected because we are legally required to conduct anti-money-laundering (AML) checks and verify player identities as part of operating a responsible gaming platform. This is a compliance requirement, not a discretionary one.
• Legitimate Interest: Device and technical data is collected to maintain platform security, detect fraud, prevent unauthorised account access, and ensure the technical integrity of the gaming experience. This data is processed under the legitimate interest of protecting players and the platform from harm.
• Consent: Where Rumi Solt sends you promotional communications (bonus offers, new game announcements, special promotions) by email or SMS, this is done on the basis of your consent, given during registration or at a later point. You can withdraw this consent at any time by contacting support or using the unsubscribe option in any marketing communication.

The personal data Rumi Solt collects is used for the following specific purposes:

• Account Creation and Operation: Your registration details are used to create and manage your Rumi Solt account, authenticate your identity each time you log in, and maintain the accuracy of your account records over time.
• Payment Processing: Payment data is used to process PKR deposits from and withdrawals to your registered payment methods. Transaction records are maintained for reconciliation, dispute resolution, and regulatory compliance.
• Identity Verification: KYC documents are used to verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your account and payment activity does not indicate money laundering or fraudulent behaviour.
• Responsible Gaming: Your gaming activity data — session duration, bet volumes, deposit frequency — is monitored by Rumi Solt's responsible gaming systems. If your activity patterns suggest possible problem gambling behaviour, responsible gaming tools may be proactively offered or our support team may reach out. This processing is for your benefit.
• Security and Fraud Prevention: Device data, IP addresses, and account activity patterns are used by Rumi Solt's security systems to detect and prevent unauthorised account access, bonus abuse, payment fraud, and multi-accounting.
• Customer Support: When you contact Rumi Solt support, your account information and the history of your support interactions are used to resolve your query effectively. Support communications are retained for quality assurance and dispute resolution.
• Platform Improvement: Aggregated, anonymised usage data is used to understand how players interact with the Rumi Solt platform — which games are most popular, where technical issues arise, how the lobby navigation is used. This data is analysed at an aggregate level and is not linked back to individual player accounts for this purpose.
• Marketing (with consent): Where you have opted in, your contact details are used to send you information about Rumi Solt promotions, new games, and platform updates. You can opt out of marketing communications at any time.

Rumi Solt does not sell personal data. Data is shared only in the following specific, limited circumstances:

• Payment Processors: To process your PKR deposits and withdrawals, Rumi Solt shares the minimum necessary payment data with the relevant payment service providers — Easypaisa, JazzCash, NayaPay, SadaPay, the IBFT banking network, and Visa/Mastercard processing partners. These providers operate under their own privacy policies and security standards appropriate to financial services.
• Identity Verification Services: KYC documentation may be processed through a third-party identity verification service that validates CNIC documents. These services are contractually required to process data only for the stated verification purpose and to maintain appropriate security standards.
• Game Software Providers: Game software providers whose titles appear in the Rumi Solt lobby may receive limited technical session data (such as player session tokens and game round IDs) necessary to operate games correctly. No personally identifiable information beyond what is technically necessary for game operation is shared with software providers.
• Legal and Regulatory Authorities: Rumi Solt will share personal data with law enforcement or regulatory authorities where legally required to do so — for example, in response to a valid court order, law enforcement request, or regulatory investigation. We will not share data with authorities beyond what is legally required.
• Professional Advisors: Legal, accounting, and compliance advisors may have access to certain account data in the context of providing professional services to Rumi Solt. All such advisors are subject to confidentiality obligations.

Rumi Solt uses cookies and similar tracking technologies to support the operation of the platform and improve the player experience. Cookies are small data files stored on your device when you visit the platform.

The categories of cookies used on Rumi Solt are:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies (which keep you logged in during a session), security tokens, and cookies that preserve your language and display preferences. These cannot be disabled without preventing the platform from working.
• Functional Cookies: Used to remember your preferences between sessions — for example, your last selected game category or responsible gaming tool settings. Disabling these cookies means your preferences won't be saved between visits.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and use the Rumi Solt platform. This data is used internally to identify technical issues and improve the user experience. No individual player is identified in analytics processing.
• Security Cookies: Used by Rumi Solt's fraud detection systems to identify unusual device or behaviour patterns that may indicate fraudulent account access or bonus abuse attempts.

You can control cookie settings through your browser settings. Please note that disabling essential cookies will prevent the Rumi Solt platform from functioning correctly. Instructions for managing cookies in major browsers are available through each browser's help documentation.

Rumi Solt implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in Transit: All data transmitted between your device and the Rumi Solt platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all connections — account access, payment processing, game play, and support communications.
• Encryption at Rest: Sensitive stored data, including identity documents and payment records, is encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is strictly limited based on job function. A customer support agent handling a routine query does not have access to your full KYC documents. Access rights are reviewed regularly and revoked when no longer required.
• Password Security: Player passwords are stored as salted, one-way cryptographic hashes. Rumi Solt staff cannot retrieve your password — if forgotten, it must be reset via the standard reset process.
• Intrusion Detection: The Rumi Solt platform operates continuous automated monitoring for unusual access patterns, potential intrusion attempts, and data anomalies. Security incidents trigger immediate internal alerts.
• Data Breach Response: In the event of a data breach that poses a risk to player data, Rumi Solt will notify affected players promptly, including a description of what data was involved and what steps are being taken in response.

Rumi Solt retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. Specific retention periods by category are:

• Account and Gaming Data: Retained for the duration of your account and for a period of five years after account closure. This retention period supports regulatory compliance and dispute resolution.
• KYC Identity Documents: Retained for a minimum of five years from the date of verification, in accordance with standard AML record-keeping requirements applicable to gaming platforms.
• Payment Transaction Records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• Support Communications: Retained for two years from the date of the last interaction. Older records may be retained longer where an open dispute or investigation requires them.
• Technical and Device Data: Retained for six months from collection, unless specific security or fraud investigation requires retention for longer.
• Marketing Consent Records: Retained for the duration of your account plus two years, as evidence of consent for any marketing communications sent during that period.

When data is no longer required and the retention period has expired, Rumi Solt securely deletes or anonymises it. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregated analysis and platform improvement purposes.

As a Rumi Solt player, you have the following rights in relation to the personal data we hold about you. All rights can be exercised by contacting support@rumisolt.com or via live chat with a clear description of your request:

Rumi Solt is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 18. All registration flows on the Rumi Solt platform include explicit confirmation that the registering individual is aged 18 or above, and age verification is conducted as part of the KYC process.

If Rumi Solt identifies, through its KYC or account monitoring processes, that an account holder is under 18 years of age, the account will be immediately suspended, all personal data associated with the account will be deleted, and any funds in the account will be handled in accordance with our Terms and Conditions regarding underage accounts.

If you are a parent or guardian and you believe a minor may have registered on Rumi Solt, please contact our support team immediately at support@rumisolt.com. We will investigate and act promptly. We also encourage the use of operating system-level parental controls on devices accessible to minors.

Rumi Solt may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we provide. When material changes are made — meaning changes that affect how your personal data is used or the rights you have — we will notify registered players via their registered mobile number or email address in advance of the change taking effect.

Minor changes (such as editorial corrections, clarifications of existing practices, or updates to contact details) may be made without individual notification. The version number and "Last Updated" date at the top of this policy always indicate the current version in effect.

Your continued use of the Rumi Solt platform following the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with an updated policy, please stop using the platform and contact support to request account closure and data deletion where applicable.

We recommend bookmarking this page and reviewing it periodically. You can also contact Rumi Solt support to request a summary of recent changes to the Privacy Policy if you have been absent from the platform for a period and want to understand what, if anything, has changed since your last visit.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data Rumi Solt holds about you, please get in touch through any of the following channels. Our support team is available 24 hours a day, 7 days a week:

• Email: support@rumisolt.com — for privacy requests, include "Privacy Request" in the subject line and provide your registered mobile number for faster processing.
• Live Chat: Available from the Rumi Solt platform when logged into your account.
• WhatsApp & Telegram: Contact details available on the FAQ page.

For data deletion requests or requests to exercise any of the rights described in Section 9, please contact us by email for a written record of the request and response. Rumi Solt aims to acknowledge all privacy-related requests within 2 business days and to resolve them fully within 30 days.

If you feel your privacy concerns have not been adequately addressed by Rumi Solt, you have the right to escalate your complaint. Details of the escalation process are available by contacting our support team.