Plain Language Summary: Pak Rumi collects the personal and financial information needed to run your account securely, process transactions, comply with anti-fraud and age verification requirements, and — if you opt in — send you relevant promotional offers. We do not sell your data. We do not share it with advertisers. You can request deletion of your data at any time.
1. Introduction
This Privacy Policy describes how Pak Rumi ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your") who register an account, visit the Pak Rumi website, or use any of our services — including sports betting, live casino, poker, virtual sports, esports betting, and associated promotional programmes.
Pak Rumi is the data controller for the personal information you provide. This means we are responsible for deciding how and why your personal data is used, and we are accountable for handling it in accordance with applicable privacy principles.
By using the Pak Rumi platform, you acknowledge that you have read and understood this Privacy Policy. This policy works alongside our Terms and Conditions and our Responsible Gaming Policy. Where any of those documents address privacy matters, this Privacy Policy takes precedence.
We recommend keeping a copy of this policy for your records. If we make material changes that affect your rights, we will notify you by email before those changes take effect.
2. Personal Data We Collect
Pak Rumi collects personal data through several channels — information you provide directly, information generated automatically when you use the platform, and in limited cases, information obtained from third-party verification services. Here is a clear breakdown:
2.1 Information You Provide Directly
| Data Type | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number | Registration & KYC verification |
| Contact Data | Email address, Pakistani mobile number | Account registration |
| Address Data | Residential address, city, province | KYC verification |
| Financial Data | Easypaisa / JazzCash account number, bank account details, card last four digits | Deposit & withdrawal processing |
| Identity Documents | CNIC copy, proof of address documents | KYC verification on request |
| Account Credentials | Username, hashed password, security answers | Account creation |
2.2 Information Generated Automatically
When you visit or use the Pak Rumi platform, we automatically collect certain technical data. This includes your IP address, device type and operating system, browser type and version, pages visited and time spent on each, referring URL, session timestamps, and in-platform actions such as bets placed and games launched.
This data is collected via server logs and cookies (see Section 6 for full cookie details). It is used primarily for security monitoring, platform performance optimisation, and fraud prevention.
2.3 Information from Third Parties
In some cases, Pak Rumi may receive personal data about you from authorised third parties, including:
- Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banks) who confirm the status and ownership of your payment method
- Identity verification service providers used for enhanced KYC checks
- Fraud prevention databases used to check account registration details against known fraudulent patterns
Any data received from third parties is handled under the same protections as data you provide directly to Pak Rumi.
3. How Pak Rumi Uses Your Personal Data
We only use your personal data for specific, legitimate purposes. We do not use it for anything beyond what's described here without obtaining your prior consent.
3.1 Account Management
Your identity and contact data are used to create and maintain your Pak Rumi account, authenticate your logins, process your requests, communicate account-related information (deposit confirmations, withdrawal notifications, security alerts), and manage your account settings and preferences.
3.2 Payment Processing
Your financial data is used exclusively to process deposits and withdrawals through your chosen Pakistani payment method. Pak Rumi does not store full payment credentials beyond what is technically necessary for transaction processing and fraud prevention.
3.3 Identity Verification and Compliance
KYC data — including your CNIC and address proof — is used to verify your identity before processing your first withdrawal, to comply with applicable anti-money-laundering requirements, and to confirm that you meet the minimum age requirement of 18 years. This is a legal obligation, not an optional process.
3.4 Platform Security and Fraud Prevention
Technical data including IP addresses, device fingerprints, and session patterns are used to detect and prevent fraudulent activity — including multiple account registration, bonus abuse, and automated betting software. This protects the integrity of the platform for all Pak Rumi users.
3.5 Improving Our Platform
Aggregated, anonymised usage data is used to understand how players interact with Pak Rumi — which features are most used, where performance bottlenecks occur, and how to improve the overall experience. This analysis does not identify you personally.
3.6 Marketing Communications
If you have opted in to marketing communications during registration, we will contact you about promotions, bonuses, and new features at Pak Rumi. You can withdraw this consent at any time — see Section 11 for full marketing opt-out details.
4. Legal Basis for Processing
Pak Rumi processes your personal data on the following legal grounds:
- Contract performance — processing your data is necessary to provide the services you have requested, including account management, payment processing, and bet settlement.
- Legal obligation — identity verification, age checking, and transaction record-keeping are required by applicable legal and regulatory frameworks.
- Legitimate interests — fraud prevention, platform security, and anonymised analytics serve the legitimate interests of Pak Rumi and its wider player community without overriding your fundamental privacy rights.
- Consent — marketing communications and non-essential cookies are processed only where you have provided specific, freely given consent that you can withdraw at any time.
5. How Pak Rumi Shares Your Data
Pak Rumi does not sell your personal data to any third party under any circumstances. We share personal data only in the following limited and controlled circumstances:
5.1 Payment Service Providers
When you make a deposit or request a withdrawal, the minimum necessary data is shared with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card network — to process the transaction. These providers are bound by their own privacy policies and applicable financial regulations.
5.2 Identity Verification Partners
For enhanced KYC checks, Pak Rumi may share specific identity data with authorised third-party verification providers. These providers are contractually bound to process your data solely for verification purposes and to delete it once the verification is complete.
5.3 Fraud Prevention Services
In cases of suspected fraud, Pak Rumi may share relevant data with industry fraud prevention databases and, where required by law, with relevant authorities.
5.4 Legal Requirements
Pak Rumi may disclose personal data to law enforcement or regulatory authorities if required to do so by a valid legal order, court ruling, or statutory obligation. We will notify you of any such disclosure where we are legally permitted to do so.
Our commitment: Pak Rumi will never share your personal data with advertisers, data brokers, marketing aggregators, or any third party for commercial purposes unrelated to the direct operation of your account.
6. Cookies and Tracking Technologies
Pak Rumi uses cookies and similar technologies to make the platform work properly, understand how it's being used, and — with your consent — deliver relevant content. Here's an honest breakdown of what we use and why.
6.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They don't execute code or carry viruses. Most browsers accept cookies by default, and you can adjust your browser settings to block or delete them — though some platform functions may not work correctly if you do.
6.2 Cookie Categories We Use
Toggle settings above are illustrative. Manage your actual cookie preferences through your browser settings or by contacting us at support@pakrumi.com.
7. How We Protect Your Data
Pak Rumi implements a layered approach to data security. No system is completely immune to breach, but we take every reasonable and industry-standard measure to protect your personal and financial information.
7.1 Technical Measures
- SSL/TLS encryption — all data transmitted between your device and Pak Rumi servers is encrypted in transit using industry-standard TLS protocols.
- Data encryption at rest — sensitive data including financial information and identity documents are encrypted in our databases.
- Password hashing — your Pak Rumi password is never stored in readable form. We use strong, salted hashing algorithms.
- Two-factor authentication (2FA) — available and recommended for all accounts. Prevents unauthorised access even if your password is compromised.
- Session management — idle sessions are terminated automatically. Suspicious login attempts trigger additional verification steps.
7.2 Organisational Measures
Access to personal data within Pak Rumi is restricted to staff who genuinely need it to perform their role — customer support agents handling your queries, the fraud team investigating flagged activity, and the payments team processing your transactions. All staff with access to personal data are trained in data protection and bound by confidentiality obligations.
7.3 What You Can Do
Your account security also depends on your own behaviour. We strongly recommend activating two-factor authentication, using a unique password for your Pak Rumi account (not shared with any other service), keeping your registered email address and mobile number up to date, and logging out of your account when using shared or public devices.
8. How Long We Keep Your Data
Pak Rumi retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal & compliance obligations |
| Transaction Records | 7 years from date of transaction | Financial record-keeping requirements |
| KYC Documents | 5 years from verification date or account closure | Anti-money-laundering regulations |
| Technical / Log Data | 12 months rolling | Security monitoring & fraud prevention |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
| Self-Exclusion Records | Duration of exclusion + 6 years | Responsible gaming obligations |
When data reaches the end of its required retention period, it is securely deleted or anonymised. Anonymised data — which cannot be used to identify you individually — may be retained indefinitely for statistical analysis purposes.
9. Your Privacy Rights
You have meaningful rights over your personal data held by Pak Rumi. Here is what each right means in practice and how to exercise it:
You can request a copy of all personal data Pak Rumi holds about you at any time. This is sometimes called a Subject Access Request (SAR). We will respond within 30 days of receiving your request with a full copy of your data in a readable format. Email support@pakrumi.com with the subject line "Data Access Request" from your registered email address.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. For most contact details, you can update these directly in your account settings. For identity data such as your legal name or CNIC number, please contact support with supporting documentation.
You can request that Pak Rumi delete your personal data. We will fulfil this request where we have no overriding legal obligation to retain the data — for example, transaction records must be kept for 7 years under applicable financial regulations, and we cannot delete this data even on request. We will tell you specifically what data has been deleted and what has been retained and why.
You can ask Pak Rumi to restrict processing of your data in certain circumstances — for example, while we investigate a complaint you've raised about the accuracy of your data, or while you object to processing based on legitimate interests. During a restriction, we will continue to store your data but will not actively process it beyond what is legally necessary.
For data you have provided to Pak Rumi directly and that we process on the basis of your consent or contract performance, you can request a copy in a structured, commonly used, machine-readable format (such as CSV or JSON). This allows you to transfer your data to another service if you choose to do so.
You have the right to object to your data being used for direct marketing at any time. If you object, we will stop using your data for this purpose immediately. You can do this through your account settings, by clicking "unsubscribe" in any marketing email, or by contacting our support team directly.
To exercise any of these rights, email support@pakrumi.com from your registered email address. We will acknowledge your request within 5 business days and respond fully within 30 calendar days. For complex requests, we may take up to 90 days and will notify you of this extension.
10. Children's Privacy
Pak Rumi's services are strictly for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. Our registration process includes a date-of-birth declaration, and age verification is conducted before the first withdrawal on every account.
If we discover that an account was registered by an individual under 18, we will immediately suspend the account, delete all personal data associated with it (unless required for regulatory reporting), and ensure that no winnings are paid. If you believe a minor has registered a Pak Rumi account, please contact us immediately.
Parents and guardians who are concerned about underage access to online gambling are encouraged to use parental control software to restrict access to betting sites. More information is available on our Responsible Gaming page.
11. Marketing Communications
Pak Rumi sends promotional emails, SMS notifications, and in-platform messages to players who have opted in to marketing communications at the point of registration or through their account settings.
Marketing communications from Pak Rumi will typically contain:
- Promotional bonus offers — welcome bonus reminders, reload bonuses, weekly cashback notifications
- Tournament announcements — scheduled MTT start times, freeroll reminders, VIP event invitations
- New feature launches — updates to the sportsbook, casino, poker, or platform interface
- Sport-specific promotions — enhanced odds for Pakistan cricket matches, PSL special events
You can withdraw consent for marketing at any time through one of the following methods:
- Click the "Unsubscribe" link at the bottom of any marketing email
- Update your notification preferences in your Pak Rumi account settings
- Email support@pakrumi.com with the subject line "Marketing Opt-Out"
Opt-out requests are processed within 10 business days. Transactional communications — deposit confirmations, withdrawal notifications, security alerts — are not marketing and will continue regardless of your marketing preference settings.
Self-excluded players are automatically removed from all marketing lists for the duration of their exclusion. Pak Rumi does not send promotional communications to players who have activated a self-exclusion or cooling-off period.
12. Changes to This Privacy Policy
Pak Rumi may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the features and services we offer. When we make material changes — changes that meaningfully affect your privacy rights or how we use your data — we will notify you through one or more of the following channels:
- An email notification to your registered Pak Rumi email address, sent at least 14 days before the changes take effect
- A prominent notice displayed when you next log in to your Pak Rumi account
- An update to the "Last Updated" date at the top of this page
For minor changes — such as clarifications of existing language, corrections of typographical errors, or updates to contact information — we may update this policy without direct notification, but the "Last Updated" date will always reflect the most recent revision.
Continued use of the Pak Rumi platform after being notified of material changes constitutes your acceptance of the updated policy. If you do not agree to the revised policy, you should stop using the platform and contact us to arrange withdrawal of your balance and account closure.
13. How to Contact Us About Privacy
If you have any questions, concerns, or requests related to this Privacy Policy or the way Pak Rumi handles your personal data, please get in touch through any of the following channels: