PK Rumi Privacy Policy – How We Handle Your Personal Data

1. Who We Are

This Privacy Policy applies to PK Rumi, accessible at pkrumi.com (the "Platform"). PK Rumi is the data controller for all personal information collected through the platform. When this policy refers to "PK Rumi", "we", "us", or "our", it means the company operating pkrumi.com.

This policy applies to all visitors to our website and all registered players. By using the PK Rumi platform — whether you're browsing as a guest or playing with a registered account — you acknowledge that you have read this Privacy Policy and understand how we handle personal data.

PK Rumi is a Pakistan-facing platform operated for Pakistani players. All payment processing, identity verification, and customer support functions are carried out with Pakistani users and regulatory context in mind. We do not knowingly provide services to players in jurisdictions where online gaming of this kind is prohibited.

2. Data We Collect

We collect personal data in three ways: information you provide directly when registering or using the platform, information generated automatically when you use the platform, and in some cases information from third-party verification services. Here is a detailed breakdown:

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you use the PK Rumi platform, our systems automatically record certain technical and usage data. This includes your IP address, device type and model, operating system and browser version, the pages and features you access and when, session duration, game history and betting records, and any error or crash reports generated during your session. This data is used to maintain platform security, improve performance, and investigate disputes. It is not used for unsolicited marketing.

2.3 Information from Third Parties

When you make a deposit or withdrawal through Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or a card network, those providers share a transaction confirmation with us that includes the transaction reference and the account details you used. This is limited to what is necessary to verify the payment and associate it with your account. We do not receive your full financial account details from these providers — only what is needed for the transaction confirmation.

During KYC verification, we may use a third-party identity verification service to check the validity of your CNIC against official records. In these cases, only the specific data needed for verification is shared with the verification provider, under a confidentiality agreement.

3. How We Use Your Data

Every piece of data we collect has a specific purpose. We do not collect data speculatively or hold it indefinitely "just in case". Here is how each category of data is used by PK Rumi:

• Identity and contact data — to create and maintain your account, communicate with you about your account, verify your identity for KYC purposes, and comply with our legal obligations.
• Payment data — to process your deposits and withdrawals, verify that payments originate from accounts in your own name, and maintain accurate financial records as required by law.
• Game and activity data — to run the games you play, calculate and settle winnings, detect unusual patterns that may indicate fraud or collusion, and provide you with your account history and game logs.
• Technical and device data — to maintain platform security, detect and prevent account sharing, investigate suspicious access attempts, and diagnose technical issues affecting your experience.
• Support communications — to resolve your queries, investigate complaints, and improve the quality of our support service. Resolved support conversations are retained for a period to allow for follow-up.
• Marketing communications — only if you have opted in, to inform you about promotions, tournaments, and new features on PK Rumi. You can withdraw consent at any time.

4. Legal Basis for Processing

We process personal data only where we have a valid legal basis to do so. The legal bases we rely on are:

• Contract performance: Most data processing is necessary to provide the services you have registered for — running your account, processing payments, and allowing you to play games. Without this data we simply cannot provide the service.
• Legal obligation: We are required to collect and retain certain data to comply with identity verification, anti-money laundering, and financial record-keeping obligations. This data must be retained for defined periods regardless of your preferences.
• Legitimate interests: We process technical and security data to protect the platform, detect fraud, and maintain the integrity of the games. This processing is proportionate to the legitimate security needs of an online gaming platform.
• Consent: Marketing communications are sent only on the basis of your explicit consent given at registration or subsequently in your account settings.

5. Data Sharing

PK Rumi does not sell, rent, or trade your personal data. This is not a conditional statement — it applies absolutely and without exception. We share data only in the following limited and specific circumstances:

5.1 Payment Processors

When you make a deposit or withdrawal, we share the minimum data necessary with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, a Pakistani bank, or a card network — to complete the transaction. These providers process payment data under their own privacy policies, which govern how they handle data on their side. PK Rumi does not control third-party payment processors' privacy practices.

5.2 Identity Verification Services

To complete KYC verification, we may share your CNIC number and identity document images with a third-party identity verification provider that checks document authenticity against official records. This provider operates under a confidentiality agreement and may only use your data for the specific verification purpose.

5.3 Legal and Regulatory Disclosure

We will disclose personal data to law enforcement, courts, regulatory authorities, or other government bodies when required to do so by a valid legal order, court order, or regulatory requirement. We will notify you of such disclosures wherever we are legally permitted to do so.

5.4 Business Operations (Service Providers)

We use a small number of carefully selected third-party service providers to operate the platform — including cloud hosting, email delivery, and analytics. These providers operate under strict data processing agreements and may only process your data as we instruct. They have no right to use your data for their own purposes.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any legal retention obligations. In practical terms:

• Active account data — retained for the full duration your account is open on PK Rumi.
• Transaction records — retained for a minimum of five years from the date of the transaction, as required for financial compliance purposes. This applies even if your account is subsequently closed.
• KYC documents — retained for five years from the date of verification or from the date your account is closed, whichever is later, in compliance with anti-money laundering requirements.
• Support communications — retained for two years from the date the query was resolved, to allow for follow-up or dispute escalation within that period.
• Marketing data — if you withdraw marketing consent, your data is removed from marketing lists within 48 hours. It may remain in transactional databases under the relevant retention periods above.
• Technical logs — retained for up to 12 months for security and platform integrity purposes, then automatically purged.

When data is no longer required to be retained, it is deleted securely using methods appropriate to the sensitivity of the data involved.

7. Data Security

Protecting your personal data is a core technical and operational priority at PK Rumi. The security measures we implement include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and our servers is encrypted using current-standard TLS. Any attempt to intercept the data in transit will result in unreadable encrypted content.
• Encryption at rest: Sensitive personal data stored in our databases — particularly identity documents, CNIC data, and payment details — is encrypted at rest using AES-256.
• Access controls: Access to personal data within the PK Rumi team is restricted on a strict need-to-know basis. Customer support agents see only the data relevant to handling your query. Elevated access requires additional authentication and is logged.
• Two-factor authentication: All PK Rumi internal systems that access personal data require two-factor authentication for staff logins.
• Security monitoring: We operate continuous monitoring of our systems for signs of unauthorised access or unusual activity, with automated alerts and a human security response team.
• Penetration testing: The PK Rumi platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

8. Cookies and Tracking Technologies

PK Rumi uses cookies and similar technologies to operate the platform, understand how players use it, and in some cases personalise your experience. A cookie is a small text file stored on your device by your browser when you visit a website. Here is how we categorise and use them:

You can manage cookie preferences from your browser settings. Note that disabling essential cookies will prevent the platform from functioning correctly — you will not be able to log in or maintain a game session without them. Optional analytics and marketing cookies can be disabled without affecting the core platform experience.

9. Your Rights Over Your Data

As a PK Rumi player, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or email at support@pkrumi.com — we aim to respond within 24 hours and resolve all data requests within 30 days:

10. Marketing Communications

PK Rumi will only send you marketing communications — including promotional emails, SMS messages about bonuses, and notifications about tournaments — if you have explicitly opted in to receive them. This opt-in happens at registration (you choose whether to accept) and can be changed at any time in your account notification settings.

When you opt out of marketing: we remove your details from active marketing lists within 48 hours. You will still receive transactional messages that are necessary for your account — for example deposit confirmation, withdrawal confirmation, and important account notifications. These are not marketing messages and cannot be disabled without closing your account.

We do not use third-party advertising networks to display advertising to PK Rumi players on other websites. Our marketing communications come directly from PK Rumi to you, not through an advertising exchange.

11. Responsible Gaming and Privacy

The responsible gaming tools available on PK Rumi — deposit limits, cooling-off periods, and self-exclusion — generate data about your choices. This data is handled with particular care because of its sensitive nature.

Records of deposit limits and self-exclusion requests are retained for the full duration of their effect and for a further period thereafter, to ensure that a self-exclusion is honoured even if a player attempts to register a new account or requests reversal before the exclusion period ends. This retention is necessary to protect your own responsible gaming choices.

Responsible gaming data is never shared with third parties for commercial purposes. It is used internally solely to enforce the limits or exclusions you have requested and to allow our compliance team to conduct responsible gaming monitoring.

If you are concerned about your gaming and want to discuss your options privately, our support team can be reached 24/7 via live chat with full confidentiality. You can also find practical information on our Responsible Gaming page.

12. Children and Under-18 Protection

PK Rumi does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adult players only. If we become aware that a minor has registered an account or provided personal data through our platform, we will immediately suspend the account, delete the associated personal data (except any records required to document the incident and our response), and refund any deposited funds to the payment source.

If you believe a minor may have registered on PK Rumi, please contact us immediately at support@pkrumi.com. We take these reports seriously and investigate them promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time — for example if our data practices change, if we add new services, or if regulations change. When we make changes, we update the "Last Updated" date at the top of this page.

For changes that materially affect how we use your personal data or reduce your rights, we will notify you by email at least 14 days before the changes take effect. For minor or clarifying changes, we will update the page and the date without individual notification.

Continued use of the PK Rumi platform after any changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure before the effective date and we will return your Real Money Balance via the payment method on file.

14. Contact Us and Privacy Complaints

For any questions about this Privacy Policy or about how PK Rumi handles your personal data, you can contact us through the following channels:

If you raise a privacy complaint and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in Pakistan. We will always provide the contact details of the appropriate authority if asked.

Our full platform rules, including how your data interacts with account terms, are available in the Terms and Conditions.