Privacy Policy — Rubet Platform

Rubet operates the online sports betting and casino information platform accessible at rubet.cam ("the Platform"). This Privacy Policy ("Policy") describes how Rubet ("we", "us", "our") collects, processes, stores and protects personal data relating to individuals ("you", "User") who access or use the Platform.

We are committed to the responsible handling of personal data. This Policy is written in plain, professional English and is specifically oriented toward Pakistani users, reflecting the data-handling realities relevant to users based in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Where we reference familiar Pakistani payment services — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — this is for contextual clarity only. None of those providers endorse this Platform or have any data-sharing relationship with Rubet unless explicitly confirmed in their own documentation.

This Policy is incorporated by reference into our Terms & Conditions. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform immediately.

Throughout this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, device identifiers, IP address and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, Rubet.
• "Data Processor" means any third party that processes personal data on behalf of Rubet under a data processing agreement.
• "KYC Data" means identity and age verification documents including CNIC, passport, proof of address and liveness-check materials.
• "Cookies" means small data files placed on your device by the Platform for session management, analytics and functionality purposes.
• "Consent" means freely given, specific, informed and unambiguous agreement to the processing of your personal data for a stated purpose.
• "Sensitive Data" means personal data that warrants heightened protection, including financial data, identity documents and information relating to health or gambling behaviour.

Rubet, operating at rubet.cam, acts as the Data Controller in respect of personal data collected through the Platform. As Data Controller, Rubet determines the purposes for which your personal data is processed and is responsible for ensuring that processing is lawful, fair and transparent.

Rubet does not operate a physical office in Pakistan and does not hold a Pakistani gambling licence. Users in Pakistan interact with the Platform from their local jurisdiction and are responsible for complying with applicable local law.

The categories of personal data Rubet may collect in connection with your use of the Platform include the following:

Note: We do not collect special categories of sensitive personal data (e.g., racial or ethnic origin, political opinions, health data) unless compelled by law or voluntarily provided in a support context. We do not collect personal data from children under the age of 18.

Rubet collects personal data through the following primary means:

• Direct Input: Information you provide during account registration, KYC verification, deposit and withdrawal transactions, support requests and any voluntary form submissions on the Platform;
• Automated Collection: Technical and behavioural data collected automatically as you browse the Platform, including through cookies, web beacons, server logs and similar technologies;
• Third-Party Verification Providers: Identity and age verification data may be processed through secure third-party KYC and AML compliance services. These processors operate under data processing agreements with Rubet;
• Payment Processors: Transaction references and payment confirmation data may be received from payment processing partners. Rubet does not store full card numbers or wallet PINs;
• Analytics Services: Aggregated, anonymised usage data may be collected through platform analytics tools to understand performance and user experience at a population level.

We process your personal data only for specific, documented purposes and on a recognised legal basis in each case:

6.1 Account Management & Service Delivery

Processing your account data to provide access to the Platform, manage your preferences, process transactions and deliver support services. Legal basis: performance of a contract.

6.2 KYC, AML & Fraud Prevention

Verifying your identity and age in compliance with Anti-Money Laundering (AML) obligations and responsible gambling requirements. Detecting and preventing fraud, money laundering and other financial crime. Legal basis: legal obligation and legitimate interest.

6.3 Responsible Gambling Monitoring

Analysing behavioural and session data to identify patterns that may indicate problem gambling, in order to trigger responsible gambling tools or support interventions. Legal basis: legitimate interest and legal obligation where applicable.

6.4 Platform Security & Technical Operations

Using technical and log data to maintain platform security, prevent unauthorised access, detect cyber threats and ensure service continuity. Legal basis: legitimate interest.

6.5 Analytics & Platform Improvement

Using aggregated, anonymised usage data to understand how the Platform is used and to improve content, design and functionality. Legal basis: legitimate interest (anonymised data does not constitute processing of personal data in most frameworks).

6.6 Marketing Communications

Sending you promotional content about Rubet offers, sports events or platform updates where you have provided explicit consent. Legal basis: consent. You may withdraw consent at any time without detriment to your account.

6.7 Legal Compliance & Dispute Resolution

Retaining records as required by applicable law, including AML record-keeping obligations, and using data in connection with legal disputes or regulatory enquiries. Legal basis: legal obligation.

Rubet does not sell, rent or trade your personal data to any third party for their own commercial purposes. Data sharing is limited to the following categories of recipient, each engaged under appropriate contractual safeguards:

• KYC / AML Service Providers: Third-party identity verification and compliance screening services that process your identity documents and transaction data on our behalf to fulfil legal obligations;
• Payment Processors: Technical payment processing partners who handle transaction execution. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this context are illustrative of familiar Pakistani payment rails — data-sharing arrangements depend on the specific operator's live cashier integrations;
• Analytics Providers: Privacy-respecting analytics platforms that receive aggregated, anonymised usage data. No personally identifiable information is passed to analytics providers under standard configurations;
• Legal Authorities: Regulatory bodies, law enforcement agencies or courts where disclosure is required by law, court order or binding regulatory directive;
• Business Successors: In the event of a merger, acquisition or sale of assets, your data may be transferred to the successor entity subject to equivalent data protection obligations being in place.

KYC documents — including your CNIC or passport copy, proof of address and liveness-check materials — are among the most sensitive categories of personal data we process. They are subject to the following heightened handling standards:

• KYC documents are transmitted exclusively through the Platform's HTTPS-secured verification portal. They are never accepted via unsecured email, chat or any other non-secured channel;
• Access to KYC document stores is restricted to personnel with a documented compliance or fraud-prevention need to review them;
• Documents are retained for the minimum period required by applicable AML regulations and are securely deleted thereafter;
• We instruct users — and reiterate here — that they must never alter, obscure, crop or falsify identity documents submitted for KYC. Document falsification is a criminal offence under Pakistani law and international standards.

Financial data, including transaction amounts in PKR, is processed to the minimum extent necessary for payment processing and AML compliance. Full payment instrument numbers (card numbers, wallet PINs) are never stored by Rubet. Payment processing is handled by the operator's contracted payment infrastructure under PCI-DSS or equivalent security standards where applicable.

Rubet uses cookies and similar technologies (web beacons, local storage) to support Platform functionality, personalise your experience and analyse usage patterns. The table below describes the principal cookie categories used:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your use of the Platform. Disabling optional cookies will not prevent access but may reduce personalisation features.

Rubet retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following indicative retention principles apply:

• Account Data: Retained for the duration of your active account relationship and for a reasonable period thereafter to facilitate reactivation requests or resolve outstanding matters;
• KYC / Identity Documents: Retained for the minimum period required under applicable AML legislation — typically five years from the date of the relevant transaction or the end of the business relationship, whichever is later;
• Financial Transaction Records: Retained in accordance with AML record-keeping obligations, generally a minimum of five years;
• Technical / Log Data: Typically retained for up to twelve months for security analysis and fraud detection purposes, then deleted or anonymised;
• Marketing Consent Records: Retained for the duration of the consented marketing relationship and for a period sufficient to demonstrate compliance with consent obligations;
• Support Communications: Retained for a reasonable period following resolution to enable quality review and dispute reference.

When data is no longer required, it is securely deleted or anonymised in a manner that ensures the data subject can no longer be identified from the retained information.

As an online platform serving Pakistani users, Rubet may store and process personal data on servers located outside Pakistan. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect it, including:

• Contractual clauses in agreements with data processors that require equivalent standards of data protection to those applied by Rubet;
• Use of processors located in jurisdictions with recognised data protection frameworks where available;
• Encryption of personal data in transit and at rest.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan. If you have concerns about specific transfer destinations, you may contact us using the details in Section 16.

Subject to applicable law, you have the following rights in relation to your personal data held by Rubet. These rights may be exercised by contacting us at the details in Section 16:

To exercise any of these rights, please contact us at the details provided in Section 16. We will respond within a reasonable timeframe and in any event within the period required by applicable law. We may need to verify your identity before processing a data rights request.

The Platform is strictly for adults aged 18 or over, or the higher minimum age required by the operator's licence jurisdiction. Rubet does not knowingly collect personal data from persons under the minimum required age.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data, close the associated account and, where appropriate, refer the matter to our compliance team. Age verification (KYC) is a core mechanism through which we enforce this requirement — CNIC and passport verification are used to confirm that users meet the minimum age threshold.

If you are a parent or guardian and believe that a minor in your care has provided personal data to Rubet, please contact us immediately using the details in Section 16.

Rubet implements and maintains technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, alteration or disclosure. Key measures include:

• Transport Encryption: All pages and data transmissions are protected by SSL/TLS encryption. HTTPS is enforced site-wide;
• Access Controls: Access to personal data systems is restricted to authorised personnel on a need-to-know basis, with role-based access controls in place;
• Password Hashing: Account passwords are stored in hashed, salted form. Rubet does not store plaintext passwords;
• KYC Document Security: Identity documents are stored in access-controlled, encrypted document stores. Transmission occurs exclusively through the Platform's secure HTTPS verification portal;
• Incident Response: We maintain an incident response procedure for detecting, containing and notifying affected users of personal data breaches in a timely manner where required by applicable law;
• Periodic Reviews: Security measures are reviewed periodically and updated in response to emerging threats and regulatory guidance.

While we take reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. Users are responsible for maintaining the security of their own account credentials and for notifying us promptly of any suspected unauthorised account access.

Rubet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via their registered email address.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we handle your personal data.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your personal data has been handled, please contact us using the details below. The email address is displayed as plain text — it is not a clickable link.

For general platform support or account queries, our FAQ page addresses many common topics. For responsible gambling support, please visit our dedicated Responsible Gambling page.