Privacy Policy — Rume Slots Pakistan Data Protection Policy

Rume Slots operates the online gaming platform accessible at rumeslots.com. When this Privacy Policy refers to "Rume Slots", "we", "us", or "our", it means the operating entity behind the Rume Slots platform — the data controller responsible for your personal data.

As the data controller, Rume Slots determines the purposes for which your personal data is processed and the means by which that processing happens. We are accountable for ensuring that all processing is carried out lawfully, fairly, and in a transparent manner consistent with the commitments set out in this policy.

If you have any question, concern, or request relating to your personal data, please contact our Data Protection team directly:

• Email: support@rumeslots.com
• Subject Line: "Privacy / Data Request" for fastest routing
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 10 business days.

Rume Slots collects personal data in two ways: information you provide directly when you register and use the platform, and information generated automatically through your use of the platform. Below is a clear breakdown of what falls into each category.

Data You Provide Directly

Data Generated Automatically Through Platform Use

Every use of your personal data at Rume Slots has a specific, documented purpose. We do not process your data for vague or unspecified reasons. The main purposes for which we use your personal data are as follows:

• Account creation and management — to register your account, verify your identity, and maintain your account records throughout your relationship with Rume Slots.
• Providing gaming services — to allow you to access and play games, process your bets, record outcomes, and credit or debit your account balance accordingly.
• Payment processing — to process deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, and to process withdrawal requests to your nominated payment method.
• Identity verification (KYC) — to verify that you are who you say you are, that you meet the age requirement of 18+, and that your payment methods belong to you. This is both a legal obligation and a player protection measure.
• Fraud prevention and security — to detect and prevent fraudulent account activity, unauthorised access, payment fraud, and bonus abuse. This includes automated monitoring of transaction patterns and login behaviour.
• Responsible gaming — to administer the deposit limits, self-exclusion requests, and cooling-off periods you set, and to monitor account activity for patterns that may indicate problem gaming where we have a duty of care obligation.
• Customer support — to respond to your enquiries, process your complaints, and resolve disputes using the account records and communications history we hold.
• Legal and regulatory compliance — to comply with applicable anti-money-laundering (AML) obligations, financial record-keeping requirements, and any other legal obligations that apply to the operation of the Rume Slots platform.
• Platform improvement — to analyse aggregate usage patterns (anonymised where possible) to improve the platform's performance, game selection, and user experience.
• Marketing communications — where you have opted in or where we have a legitimate interest, to notify you of relevant promotions, new games, and platform updates (see Section 11 for how to opt out).

Rume Slots processes your personal data only where there is a clear legal basis for doing so. The legal bases we rely on are:

• Contract performance — much of our data processing is necessary to deliver the service you signed up for. Processing your game activity, managing your account balance, and facilitating deposits and withdrawals are all necessary to perform the contract between you and Rume Slots.
• Legal obligation — identity verification (KYC), transaction record-keeping, and certain data retention requirements are obligations imposed on us by applicable law. Processing for these purposes is not optional.
• Legitimate interests — fraud prevention, platform security, responsible gaming monitoring, and service improvement are pursued on the basis of our legitimate interests, balanced against your right to data protection. We conduct assessments to ensure these interests do not override your fundamental rights.
• Consent — for marketing communications (email, SMS, push notifications), we process your data on the basis of your consent, which you can withdraw at any time.

Rume Slots does not sell personal data. We do not share your data with advertisers, data brokers, or any other commercial third parties for their own marketing purposes. Data sharing is limited to what is genuinely necessary to operate the platform.

The categories of third parties with whom we may share your data, and why, are:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive the minimum financial data necessary to process your deposit or withdrawal transactions. These processors are bound by their own security and data protection obligations.
• Identity verification providers — KYC and document verification services receive your identity documents and personal details for the purpose of verifying your identity. These are accredited third-party services operating under contractual data protection obligations.
• Game software providers — the studios whose games are hosted on Rume Slots receive anonymised player activity data necessary for game performance monitoring and RTP auditing. Individual personally identifiable information is not shared with game providers except where required for a specific dispute resolution.
• IT and infrastructure providers — cloud hosting, CDN, and security service providers who host and protect the Rume Slots platform have access to platform data in their capacity as data processors under contractual agreements.
• Legal and regulatory authorities — where required by applicable law, court order, or regulatory obligation, Rume Slots will disclose personal data to the relevant authorities. We will notify you of such disclosure where we are legally permitted to do so.
• Fraud prevention services — industry-standard fraud prevention and anti-money-laundering screening services may receive transaction data and identity data for the purpose of detecting and preventing financial crime.

The security of your personal data is taken seriously at Rume Slots. We maintain a range of technical and organisational measures designed to protect your data from unauthorised access, loss, alteration, or disclosure.

• 256-bit SSL/TLS encryption on all data transmissions between your device and the Rume Slots platform — the same standard used by banks and major financial institutions.
• Password hashing — your password is never stored in plaintext. It is cryptographically hashed using a strong algorithm. Even Rume Slots staff cannot retrieve your password — only reset it.
• Two-factor authentication (2FA) — available for all accounts and strongly recommended. Adds a second verification step at login.
• Access controls — internal access to personal data is restricted to staff who have a genuine operational need for it. Access is logged and audited.
• Regular security testing — the platform undergoes periodic security assessments including penetration testing to identify and address vulnerabilities.
• Data minimisation — we retain only the minimum personal data necessary for each purpose and delete or anonymise data when it is no longer needed.

In the event of a personal data breach that poses a risk to your rights and interests, Rume Slots will notify affected players as quickly as practicable and take immediate steps to contain and remediate the breach.

Rume Slots retains personal data for as long as it is necessary for the purpose for which it was collected, and in accordance with applicable legal retention obligations. The general retention framework is:

When the retention period expires, data is securely deleted or irreversibly anonymised. Anonymised data (where no individual can be identified) may be retained indefinitely for aggregate analysis and platform improvement.

Rume Slots uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how the platform is being used.

The types of cookies we use:

• Essential / Session Cookies — required for the platform to function. These keep you logged in during your session, maintain your game session state, and enable secure page navigation. These cannot be disabled without breaking platform functionality.
• Preference Cookies — remember your settings (such as language preferences, display settings, and responsible gaming tool configurations) so you don't have to re-enter them each visit.
• Analytics Cookies — used to collect aggregate, anonymised data about how players navigate the platform — which pages are visited, how long sessions last, which games are most popular. This data is used to improve the platform. We do not use analytics that track individual players across other websites.
• Security Cookies — used for fraud detection and account security monitoring, including detecting unusual login patterns or device changes.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the Rume Slots platform normally. For most players, the default cookie settings provide a good balance of functionality and privacy.

You have clear rights over the personal data that Rume Slots holds about you. These rights are real and exercisable — not just words on a page. To exercise any of the following rights, contact us at support@rumeslots.com with the subject line "Data Rights Request".

We will respond to data rights requests within 10 business days. We will not charge a fee for exercising your rights except in cases of manifestly unfounded or excessive requests. We may need to verify your identity before processing a rights request to ensure your data is not disclosed to someone else.

The Rume Slots platform is strictly intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. The minimum age requirement is enforced through our registration process and identity verification (KYC) procedures.

If we become aware that a player is under 18, or if a child has provided us with personal data without parental or guardian knowledge, we will:

• Immediately suspend the account
• Delete all personal data associated with the under-18 player as quickly as possible, subject to any legal obligations that require temporary retention
• Return any deposited funds to the payment source where technically possible

If you believe a minor has registered at Rume Slots, please contact us immediately at support@rumeslots.com. We take this seriously and will act on such reports promptly.

Rume Slots may send you marketing communications about new games, promotions, bonuses, and platform updates by email, SMS, or push notification (if you have the app installed). We will only do this where you have:

• Opted in to marketing communications during registration or in your account settings, or
• Previously engaged with similar promotions and have not opted out (legitimate interests basis, applicable to existing players only)

You can opt out of all marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting support@rumeslots.com and requesting removal from all marketing lists

Opting out of marketing communications has no effect on transactional communications — you will still receive account security alerts, verification notifications, and support responses.

Rume Slots reviews this Privacy Policy periodically and will update it when necessary — for example, when we add new features, use data in new ways, or when relevant laws change. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where changes are material — meaning they significantly affect how we process your data or the rights available to you — we will notify registered players by email at least 7 days before the changes take effect, giving you the opportunity to review the changes and take action if you choose.

Minor clarifications or non-substantive updates may be made without advance notice. The version displayed on this page is always the current operative version. If you continue using Rume Slots after a policy update has been communicated, you are considered to have acknowledged the updated policy.

For any privacy-related enquiry, data rights request, or concern about how your personal data is being handled at Rume Slots, please get in touch:

• Email: support@rumeslots.com
• Subject Line: Use "Privacy Request" or "Data Rights Request" to ensure your message is routed to the right team immediately
• Response Commitment: Acknowledgement within 48 hours; full substantive response within 10 business days

If you are not satisfied with the response you receive from Rume Slots regarding your privacy concerns, you have the right to escalate your complaint to the relevant data protection authority. Our support team can provide guidance on this process if needed.