Privacy Policy – Rainbet Pakistan Data Protection & Your Rights

Rainbet operates the online betting and gaming platform accessible at rainbet-jit.net ("the platform", "Rainbet", "we", "us"). This Privacy Policy explains how Rainbet collects, processes, stores and protects personal information about users ("you", "player") who register an account, visit the platform or interact with any Rainbet service.

Rainbet is the data controller for the personal information you provide in connection with your account and your use of the platform. By registering or using Rainbet you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, you should not use the platform.

For any privacy-related question or request, contact us at privacy@rainbet-jit.net or through the support channels listed in Section 13. We respond to all data-related queries within five business days.

Rainbet collects personal information in three main ways: information you give us directly, information generated through your use of the platform, and in limited cases, information from trusted third parties. The table below summarises what we collect and why.

We do not collect sensitive categories of personal information such as health data, religious beliefs, political opinions or biometric data unless specifically required by a regulatory obligation, in which case we will inform you at the time of collection.

Rainbet uses the personal information it collects for the following specific purposes. We do not use your data for any purpose not listed here without either obtaining your consent or notifying you in advance.

• Account creation and management: Processing your registration, verifying your identity, maintaining your account and enabling you to log in securely.
• Processing transactions: Handling your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card. Maintaining accurate transaction records as required by financial regulations.
• Providing games and services: Operating the betting, gaming and live dealer services you access through your Rainbet account, including recording bet and game outcomes.
• Customer support: Responding to your queries, resolving disputes, handling complaints and processing responsible gaming requests.
• Security and fraud prevention: Detecting and investigating suspicious account activity, potential fraud, bonus abuse, money laundering indicators and any breach of Rainbet's Terms and Conditions.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering, know-your-customer and financial reporting requirements, including cooperation with Pakistani financial authorities where legally required.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to improve features, performance and game selection.
• Communications: Sending you transactional notifications such as deposit confirmations, withdrawal alerts and account security updates. With your consent, sending you promotional communications about Rainbet offers and new game categories.
• Responsible gaming: Monitoring account behaviour to identify indicators of problem gambling and providing relevant support tools or interventions as described on the Responsible Gaming page.

Rainbet processes your data only to the extent necessary for each purpose. We do not profile players for the purpose of denying them access to games or services based on personal characteristics unrelated to platform use.

Rainbet relies on the following legal bases to process your personal information, depending on the specific purpose involved:

• Contractual necessity: Processing your account data, transaction records and game history is necessary to perform the contract between you and Rainbet – that is, to provide the betting and gaming service you have registered to use. Without this data, the service cannot operate.
• Legal obligation: Certain data processing is required by applicable law, including anti-money laundering regulations, know-your-customer requirements and financial reporting obligations. Rainbet must retain this data for the periods prescribed by law regardless of account status.
• Legitimate interests: Rainbet processes technical data, usage analytics and security monitoring data on the basis of its legitimate interest in operating a secure, fair and financially sound platform. These interests do not override your rights.
• Consent: Where Rainbet wishes to send you marketing communications or use optional cookies, it will request your explicit consent. You can withdraw consent at any time and doing so does not affect your account or the services available to you.

Rainbet does not sell your personal information to any third party. We share your data only where necessary to deliver the platform's services, comply with legal obligations or protect Rainbet's legitimate interests. Third parties who receive your data are bound by strict confidentiality and data protection obligations.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and card payment networks receive the payment data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are regulated financial service providers.
• Identity verification providers: Where enhanced KYC is required, a trusted identity verification service processes your identity documents. They act only on Rainbet's instruction and do not retain your data after verification is complete.
• Game content providers: Third-party game studios providing live dealer, slot or sports betting content may receive anonymised session data necessary to operate their games. They do not receive your name, contact details or payment information.
• Legal and regulatory authorities: Rainbet will disclose personal information to Pakistani financial intelligence units, law enforcement bodies or courts when legally compelled to do so or where disclosure is necessary to prevent serious harm.
• IT and infrastructure providers: Cloud hosting, database and security service providers who process data on Rainbet's behalf under binding data processing agreements.

Rainbet does not transfer personal data to third countries for processing purposes. All data processing occurs within systems accessible from Pakistan and subject to applicable Pakistani data protection standards.

Rainbet handles payment information with particular care given its sensitivity. The following specific rules apply to the payment data associated with your account:

• Your Easypaisa and JazzCash mobile numbers are stored in encrypted form. Full account numbers are never displayed in plain text on the platform or in support interfaces.
• Card payment details (where used) are not stored on Rainbet's systems. Card transactions are processed through a PCI-DSS compliant payment gateway. Rainbet retains only a masked reference for reconciliation purposes.
• All PKR deposit and withdrawal transactions are logged with timestamps, amounts, payment method references and outcome status. These records are retained for a minimum of five years for anti-money laundering compliance.
• Where a withdrawal is requested to a new payment method not previously used for deposits, Rainbet may require identity re-verification before processing. This is a security control, not a barrier to withdrawal.
• Rainbet does not process payments on behalf of third parties. Every deposit must come from a payment account in the registered name of the Rainbet account holder.

Rainbet employs a layered security approach to protect the personal and financial data held on the platform. Security is not an afterthought at Rainbet – it is part of how the platform was built from day one.

• Encryption in transit: All data exchanged between your device and Rainbet's servers is encrypted using TLS 1.2 or higher. The padlock you see in your browser confirms this encryption is active.
• Encryption at rest: Sensitive personal data including identity information, payment references and password hashes are encrypted within Rainbet's databases. Database access requires multi-factor authentication.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Support staff see only the information relevant to their role. Administrative access to backend systems is logged and audited.
• Security monitoring: Rainbet's systems are monitored continuously for unusual access patterns, attempted intrusion and anomalous account activity. Automated alerts trigger immediate investigation when thresholds are breached.
• Regular security reviews: Rainbet conducts periodic reviews of its security infrastructure and practices. Findings from these reviews are acted upon promptly.
• Incident response: In the event of a data security incident that may affect your personal information, Rainbet will notify affected users within a reasonable timeframe and take immediate remedial action.

While Rainbet takes all reasonable technical and organisational measures to protect your data, no internet-based service can guarantee absolute security. You also play a role in keeping your account secure by using a strong password, not sharing login credentials and reporting suspicious activity promptly.

Rainbet retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your active account plus five years after account closure. This period satisfies anti-money laundering record-keeping requirements.
• Transaction and betting records: A minimum of five years from the date of each transaction, as required by financial compliance regulations applicable to online gaming platforms.
• Identity verification documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for three years from the date of the interaction, unless a dispute is ongoing in which case records are retained until final resolution.
• Technical and log data: IP address logs and session data are retained for up to 12 months. Anonymised, aggregated analytics data may be retained indefinitely.
• Marketing consent records: Retained for three years from the date of consent or withdrawal of consent, to demonstrate compliance.

When data is no longer needed and no legal retention obligation applies, it is securely deleted or permanently anonymised so that it cannot be linked back to you.

You have rights over the personal information Rainbet holds about you. The following rights apply and can be exercised by contacting us at privacy@rainbet-jit.net or through Live Chat:

Rainbet uses cookies and similar technologies on the platform. A cookie is a small file stored on your device that helps the platform function correctly and improves your experience. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you play. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language setting, preferred game category and display options. These improve your experience on return visits.
• Analytics cookies: Collect anonymised data about how pages are used, which game categories receive the most visits and how long sessions typically last. This helps Rainbet improve the platform. This data is not linked to your identity.
• Security cookies: Help detect suspicious login attempts, repeated failed authentication and other security events. These are essential for platform security.

Rainbet does not use advertising or cross-site tracking cookies. Your browsing behaviour on other websites is not tracked by Rainbet. When you first access the platform, a cookie consent notice explains which cookies are in use and gives you the option to manage non-essential categories.

Rainbet's platform is strictly for adults aged 18 and above. Rainbet does not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has registered or is using a Rainbet account, contact us immediately at privacy@rainbet-jit.net or through Live Chat so we can investigate and close the account.

If Rainbet discovers during identity verification or account review that a user is under 18, the account will be immediately suspended, all bets placed will be voided, and any deposited funds will be returned to the original payment method after verification of the rightful account holder. Parents and guardians are encouraged to use appropriate internet filtering and parental controls on devices accessible to minors.

Rainbet may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer or applicable legal requirements. When changes are made:

• The "Effective date" at the top of this page will be updated to reflect when the changes take effect.
• Material changes – those that significantly affect how your personal data is used – will be communicated to you by email to your registered address and by an in-platform notification visible at next login, at least 14 days before taking effect.
• Minor corrections such as fixing typographical errors or clarifying existing language that does not change the substance of our practices may be made without advance notice.

Continued use of the Rainbet platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not accept a material change, you have the right to close your account and withdraw your balance before the change takes effect. Contact support to initiate this process.

For any privacy question, data subject request or concern about how Rainbet handles your personal information, reach out through any of the following channels:

• Privacy email: privacy@rainbet-jit.net – Dedicated to data protection queries. Responses within five business days.
• Support email: support@rainbet-jit.net – For general account and payment queries. Responses within 24 hours.
• Live Chat: Available 24/7 on the platform. Average response under 30 seconds for urgent data concerns.
• WhatsApp and Telegram: Available round the clock through the contact details in your account settings.

When submitting a data subject request, include your registered email address and mobile number so we can verify your identity before releasing or modifying any personal information. This verification step protects you from unauthorised requests made by third parties.

Rainbet takes all privacy complaints seriously. If you raise a privacy concern and are not satisfied with our response, you have the right to escalate the matter through applicable legal channels in Pakistan.