Rollbit Privacy Policy — How We Handle Your Personal Data

Rollbit is an online gaming and sports betting platform operating at rollbit.cc, built specifically for the Pakistani market. For the purposes of this Privacy Policy, "Rollbit", "we", "us", and "our" refer to the operating entity responsible for the rollbit.cc platform and all products and services offered through it.

Rollbit acts as the data controller for all personal data collected through the platform. This means we are the organisation responsible for deciding how and why your personal data is used. When we share data with third-party service providers — such as payment processors or identity verification providers — those parties act as data processors and are contractually required to handle your data only as Rollbit instructs.

Rollbit collects personal data through several channels: information you provide directly when you register or interact with the platform, information generated automatically by your use of the platform, and in limited cases, information from trusted third-party verification partners.

Rollbit does not collect sensitive categories of personal data — such as biometric data beyond what is required for document face-match verification, religious beliefs, or political opinions — except where explicitly required by law.

Every category of data Rollbit collects is tied to a specific operational or legal purpose. We do not collect data speculatively. The primary reasons we process your personal data are:

• Account Creation and Management: To open your Rollbit account, verify your identity and age, maintain your account balance, and allow you to log in securely.
• Payment Processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Payment data is shared with our payment processing partners solely for transaction execution.
• Legal Compliance and KYC: Pakistani and international anti-money laundering (AML) regulations require us to verify the identity of players, monitor transaction patterns, and report suspicious activity to the relevant authorities. This is a legal obligation — not a commercial choice.
• Platform Security and Fraud Prevention: To detect and prevent unauthorised access, multi-accounting, bot activity, collusion in poker, and other forms of prohibited conduct described in our Terms and Conditions.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling and to enable the voluntary responsible gaming tools — including deposit limits, session reminders, and self-exclusion — that Rollbit provides to all account holders.
• Customer Support: To provide effective support via live chat and email, including resolving disputes, answering queries, and processing complaints.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have opted in to receiving such communications. You can withdraw consent at any time.
• Platform Improvement: To understand how players use Rollbit, which features are most valuable, where friction exists, and where we can improve the experience for Pakistani users specifically.

Rollbit stores personal data on secure servers protected by multiple layers of security controls. The security measures in place include:

• Encryption in Transit: All data transmitted between your device and Rollbit servers is encrypted using TLS 1.2 or higher, ensuring it cannot be intercepted or read in transit.
• Encryption at Rest: Sensitive data categories — including identity documents and payment method identifiers — are encrypted at rest in our database systems.
• Access Controls: Access to personal data within Rollbit's organisation is restricted on a strict need-to-know basis. Customer support staff can access only the data needed to help you. Backend access is protected by multi-factor authentication and audit logging.
• Penetration Testing: Rollbit undergoes regular third-party security assessments to identify and address vulnerabilities before they can be exploited.
• Incident Response: In the unlikely event of a data breach, Rollbit has a documented incident response plan. Affected players will be notified without undue delay in accordance with applicable notification obligations.

While Rollbit implements all reasonable and appropriate technical and organisational security measures, no system connected to the internet is entirely invulnerable. You can help protect your own account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with anyone.

Rollbit does not sell your personal data to any third party. We share data only in the following circumstances, and only to the minimum extent necessary:

• Payment Processors: When you make a deposit or withdrawal, the relevant transaction data is shared with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank for IBFT, or the card network for Visa/Mastercard. These partners process your data under their own privacy policies and our data processing agreements with them.
• Identity Verification Providers: Where KYC verification is required, we may share your identity documents with a trusted third-party verification service operating under strict contractual data protection obligations. Your documents are not retained by verification partners beyond the time needed to complete the check.
• Regulatory and Law Enforcement Authorities: Rollbit will disclose personal data to Pakistani authorities, financial regulators, or law enforcement agencies when legally required to do so — for example, as part of AML reporting obligations or in response to a valid court order.
• Analytics Providers: Aggregated, anonymised usage data may be processed by analytics platforms to help us understand how players use Rollbit. This data cannot be used to identify individual players.
• Business Transfers: In the event of a merger, acquisition, or sale of Rollbit's business assets, personal data may be transferred to the acquiring entity. In such cases, registered players will be notified in advance and will have the option to delete their accounts.

Rollbit uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep you securely logged in, and understand how the platform is being used. Below is a breakdown of the cookie categories in use:

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies. Note that blocking strictly necessary cookies will prevent you from logging in and using the Rollbit platform.

Every Rollbit account holder has the following rights over their personal data. To exercise any of these rights, email support@rollbit.cc with the subject line "Data Rights Request". We will respond within 30 days.

Rollbit is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is performed as part of the registration process, and Rollbit reserves the right to request proof of age at any stage of account operation.

If Rollbit becomes aware that a registered account belongs to a person under 18, the account will be closed immediately, all real-money balances returned to the deposit source, and all personal data associated with the account deleted as soon as legally permissible.

If you are a parent or guardian and believe your child has registered on Rollbit, please contact us immediately at support@rollbit.cc. We will prioritise the investigation and take all necessary action within 24 hours of receiving your report.

Rollbit retains personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law. The general retention periods by data category are:

When data reaches the end of its retention period, it is either securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

Rollbit reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players by email or via a prominent in-platform notification at their next login.

The effective date at the top of this page is always updated to reflect the most recent version. We encourage you to review this page periodically even without a notification, particularly if you are a regular Rollbit user. Continued use of the platform after a policy update constitutes your acceptance of the changes.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Rollbit has handled your personal information, the right place to start is our support team.

Email: support@rollbit.cc — use the subject line "Privacy Query" or "Data Rights Request" so your message reaches the right team quickly. We aim to respond to all privacy-related queries within 72 hours and to complete all formal data rights requests within 30 calendar days.

For general account queries, payment questions, or technical issues, live chat is available 24 hours a day, seven days a week, directly within the Rollbit platform. Urdu-speaking agents are available during Pakistani prime-time hours.

If you are not satisfied with how Rollbit has handled a privacy concern after raising it with us directly, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.