Riobet Privacy Policy — How We Protect Your Data in Pakistan

Riobet is an online gaming and sportsbook platform operating at riobet.ws. For the purposes of this Privacy Policy, Riobet is the data controller — meaning we determine why and how your personal information is collected and processed. Our platform is designed specifically for players in Pakistan and all services, transactions, and communications are handled in the context of the Pakistani market.

Riobet operates under a valid international online gaming licence. Our data practices comply with the obligations imposed by that licence and with applicable data protection standards. The Data Protection Officer for Riobet can be contacted at support@riobet.ws for any privacy-related queries or requests.

Riobet collects personal data in several ways — directly from you when you register and use the platform, and automatically through technical systems as you interact with the site. Here is a full breakdown of the categories of data we collect:

We do not collect special category data (such as religious beliefs, health information, or biometric data) unless it is directly relevant to an identity verification requirement mandated by our licensing obligations — and even then, only with your explicit consent.

Riobet only collects data when there is a clear and legitimate reason to do so. We do not collect information speculatively or for purposes beyond what is needed to operate a safe, fair, and functional gaming platform for Pakistani players. The specific purposes are:

• Account creation and management: Your name, contact details, and date of birth are needed to create and identify your Riobet account, communicate with you, and verify your eligibility to play.
• Identity verification (KYC): Riobet is required by its licence to verify the identity of players, particularly before processing large withdrawals or investigating unusual account activity. CNIC data is collected solely for this purpose.
• Payment processing: Financial data is needed to process your PKR deposits and withdrawals via Easypaisa, JazzCash, IBFT, and card payments. We retain only the minimum information needed — full card numbers are never stored on Riobet's servers.
• Responsible gaming compliance: Gaming history and bet data are used to monitor for signs of problem gambling and to apply responsible gaming tools such as deposit limits and self-exclusion. This is a licensing obligation, not optional.
• Anti-fraud and security: Technical data including IP addresses and device identifiers are used to detect and prevent fraudulent account use, multiple account creation, and other prohibited activity.
• Anti-money laundering (AML): Transaction patterns are monitored as required by AML regulations. We report suspicious activity to relevant financial authorities when legally required to do so.
• Customer support: Communication records are retained to ensure continuity of service when you contact Riobet with a query or complaint.
• Marketing communications: With your consent, we may use your email address and mobile number to send you information about promotions, new games, and bonuses at Riobet. You can opt out at any time.

Riobet takes data security seriously. The following technical and organisational measures are in place to protect your personal information at all times:

• Encryption in transit: All data transmitted between your device and the Riobet platform is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms your connection to riobet.ws is secured at all times.
• Encryption at rest: Personal data and financial records stored in Riobet's systems are encrypted in our database infrastructure. Sensitive fields such as identity document numbers are additionally hashed.
• Access controls: Only specifically authorised Riobet staff with a verified business need can access personal player data. Access is logged and reviewed regularly. No general staff member has broad access to player databases.
• Payment card security: Riobet does not store full card numbers or CVV codes. Card payment processing is handled by PCI-DSS compliant payment processors — your card details go directly to the processor and are never stored on Riobet's own servers.
• Security testing: Riobet's systems undergo regular security assessments including penetration testing by independent security firms.
• Breach response: In the event of a data breach affecting your personal information, Riobet will notify you by email within 72 hours of becoming aware of the incident and will take immediate steps to contain it.

Riobet does not sell your personal data to any third party. That is an absolute position — not conditional on circumstances. The only sharing that occurs is with service providers who are necessary to operate the Riobet platform, and only under binding contractual data protection agreements.

The categories of third parties who may receive limited personal data in the course of operating Riobet include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateway operators receive the transaction details necessary to process your deposit or withdrawal. They receive only what is needed for the transaction — not your full gaming history or identity documents.
• KYC and identity verification providers: When identity verification is required, your CNIC or passport image may be processed by a certified third-party KYC service. These providers are contractually prohibited from using your data for any purpose other than the verification request.
• Game software providers: Providers of casino game software (slots, live dealer, fishing games) may receive anonymised session identifiers to deliver game functionality. They do not receive your name, CNIC, or financial data.
• Fraud prevention services: Anonymised technical data such as IP addresses and device fingerprints may be shared with fraud prevention systems to detect multi-account creation or suspicious betting patterns.
• Legal and regulatory authorities: Riobet will share data with law enforcement, financial regulators, or other official bodies when legally required to do so — for example, in response to a valid court order or mandatory AML reporting obligation.

All third-party data processors are assessed before engagement and required to maintain data protection standards equivalent to those applied by Riobet itself.

Riobet uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. A cookie is a small text file stored on your device when you visit a website.

• Essential cookies: Required for the platform to function. These include your session token (which keeps you logged in), language preference, and security identifiers. You cannot opt out of essential cookies without opting out of using the platform entirely.
• Analytics cookies: Used to understand how players navigate the Riobet platform — which pages are visited most, where players encounter issues, and how the betting and gaming flows perform on different devices. This data is aggregated and does not identify you personally.
• Preference cookies: Store your settings such as display preferences and notification choices so you do not need to reconfigure them each visit.
• Marketing cookies: If you have consented to marketing communications, these cookies help Riobet understand which promotions you've engaged with so we can send you more relevant offers. You can opt out through your account settings.

You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Riobet platform — for example, disabling session cookies will prevent you from staying logged in.

Because Pakistani players use mobile payment platforms like Easypaisa and JazzCash that are tied to personal CNIC-linked mobile numbers, Riobet applies heightened protection standards to payment data beyond our general data security measures.

• Easypaisa and JazzCash account references are stored in encrypted form and used only for transaction processing and withdrawal routing. They are never used for any other purpose.
• Bank account numbers provided for IBFT withdrawals are stored encrypted and deleted within 90 days of a player's last IBFT transaction.
• No full card numbers are stored on Riobet's servers at any time. Card payment processing is fully delegated to PCI-DSS Level 1 certified processors.
• Payment data is accessible only to Riobet's finance team and relevant payment processors — not to general support staff or game operations teams.
• Riobet monitors for any unusual pattern of payment method changes, which can indicate account takeover, and will temporarily suspend withdrawal processing pending identity re-verification in such cases.

As a Riobet player you have the following rights in relation to your personal data. All requests can be submitted by email to support@riobet.ws and will be responded to within 30 days.

Riobet sends marketing emails and SMS messages to players who have opted in to receive them. These communications include information about new games, deposit bonuses, PSL season promotions, and other platform offers. You consent to marketing communications during registration through a clearly labelled opt-in checkbox — it is not pre-ticked.

• Email marketing: Sent to your registered email address. Unsubscribe via the link in any marketing email or through your account notification settings.
• SMS marketing: Sent to your registered Pakistani mobile number. Reply STOP to any SMS message to unsubscribe immediately.
• Push notifications: If you allow browser notifications, Riobet may send promotional alerts. Disable through your browser notification settings at any time.

Opting out of marketing communications does not affect transactional communications — you will still receive account security alerts, withdrawal confirmations, password reset emails, and important policy update notices. These communications are part of the service and cannot be opted out of while your account is active.

Riobet does not share your contact information with third-party marketers. Promotional communications are sent only by Riobet directly.

Riobet retains your personal data only for as long as it is needed for the purpose it was collected or as required by applicable law. The key retention periods are:

• Active accounts: All personal data is retained for the full duration of your account's active status.
• Closed accounts — identity data: CNIC and passport copies are retained for 5 years from account closure to comply with anti-money laundering record-keeping requirements.
• Closed accounts — transaction records: PKR transaction history (deposits, withdrawals, bet settlements) is retained for 7 years from the date of each transaction in accordance with standard financial record-keeping obligations.
• Support communications: Customer support chat logs and email records are retained for 3 years from the date of the communication.
• Technical logs: IP access logs and device identifiers are retained for 12 months and then automatically deleted.
• Marketing data: If you have unsubscribed from marketing, your opt-out preference is retained indefinitely to ensure we do not accidentally re-add you to mailing lists.

After the applicable retention period expires, personal data is securely deleted from Riobet's systems using industry-standard data destruction methods. Anonymised aggregate data (e.g., statistical reports on platform usage) may be retained indefinitely as it cannot be used to identify any individual.

Riobet does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adult players. If we discover that personal data has been collected from a person under 18, we will delete it immediately, close the associated account, and refund any deposits made minus any bonus funds.

If you are a parent or guardian and believe your child may have created a Riobet account, please contact us immediately at support@riobet.ws. We will investigate and act within 24 hours of your report.

Riobet may update this Privacy Policy from time to time. Changes will be published on this page with an updated version number and effective date. For material changes — those that meaningfully affect your privacy rights or how your data is used — we will notify you by email to your registered address at least 7 days before the change takes effect.

If you continue using Riobet after the effective date of any Privacy Policy update, you will be deemed to have accepted the revised policy. If you do not accept a change, you may close your account and request deletion of your data subject to the retention obligations described in Section 10.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Riobet has handled your personal information, please contact us:

• Email: support@riobet.ws — please write "Privacy Request" in the subject line
• Live chat: Available on riobet.ws, 24 hours a day, 7 days a week
• Response time: Privacy requests are responded to within 5 business days; data subject access requests within 30 calendar days
• Language: Queries accepted in English and Urdu

Riobet takes privacy complaints seriously. If you are not satisfied with our response, you have the right to escalate your complaint to the data protection authority in the jurisdiction of our licence. Details of the relevant authority will be provided when we respond to your initial complaint.