Privacy Policy – rummy Pakistan

1About This Privacy Policy

This Privacy Policy describes how rummy (accessible at rummy.ml) collects, stores, uses and shares information about you when you use our platform. It applies to all users including those who browse the website without registering, registered account holders and anyone who accesses rummy through our Android application.

By using rummy — whether to read cricket odds, place a bet during a PSL match, play Casino games, use Fish Games or make a PKR deposit — you acknowledge that your data will be handled in accordance with this policy. If you do not agree with how we handle data, please do not use the platform.

This policy should be read alongside our Terms and Conditions, which govern your use of the rummy platform as a whole.

2Data We Collect

rummy collects different types of information depending on how you interact with the platform. Below is a breakdown of the main categories:

We do not collect sensitive personal data such as religious beliefs, political opinions or biometric data unless explicitly required for identity verification in compliance with applicable procedures, and only with your knowledge.

3How We Use Your Data

The personal data we collect is used for the following purposes:

• Account Management: To create and maintain your rummy account, verify your identity, manage your login credentials and keep your profile up to date.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods, and to maintain accurate financial records for your account.
• Platform Personalisation: To remember your preferences, display relevant cricket and PSL markets, suggest games you may enjoy and provide a more tailored experience within the Game Lobby and other platform sections.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints and provide assistance with account issues.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, bonus abuse, multi-accounting and other prohibited activities described in our Terms and Conditions.
• Responsible Gaming: To monitor account activity for signs of problem gaming behaviour and to apply deposit limits, session reminders or self-exclusion where requested or required.
• Marketing Communications: Where you have given consent, to send promotional offers, bonus notifications and platform news by email or SMS. You can opt out at any time.
• Platform Improvement: To analyse how the platform is used in aggregate, identify technical issues and improve the overall experience for all Pakistani players.

We do not use your data for automated decision-making that produces legal or similarly significant effects without human review, except where required for security screening purposes.

4Legal Basis for Processing

rummy processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions — including account operation, transaction processing and customer support.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, anti-money laundering monitoring and general platform improvement, where these interests are not overridden by your rights.
• Consent: For marketing communications and optional cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal Obligation: Where processing is required to comply with applicable legal or regulatory obligations, including identity verification and financial record-keeping requirements.

5Payment Data & PKR Transactions

All financial transactions on rummy are conducted in Pakistani Rupees (PKR). The platform supports JazzCash, Easypaisa, Raast, Bank Transfer, debit/credit cards and supported mobile wallets. When you make a deposit or request a withdrawal, relevant payment reference data is processed to complete the transaction.

Payment reference data — such as the last few digits of a card, a mobile wallet account number or a bank account reference — is retained for the period necessary to process transactions, handle disputes and meet financial record-keeping obligations. This data is not shared with third parties for marketing purposes.

Where a third-party payment gateway is used to process transactions, that gateway operates under its own privacy and security standards. rummy selects payment partners based in part on their data security practices.

6Sharing Your Data

rummy does not sell your personal data. We share data only in the following limited circumstances:

• Payment Processors: JazzCash, Easypaisa, Raast and other payment gateway providers receive the transaction data necessary to process your PKR deposits and withdrawals.
• Identity Verification Partners: Where KYC checks are required, identity data may be shared with a trusted verification provider to confirm your CNIC and personal details.
• Game & Technology Providers: Third-party game studios and live Casino providers may receive a pseudonymous player identifier to deliver game content. They do not receive your full name, contact details or financial data.
• Legal & Regulatory Obligations: Where required by law or by a competent authority, rummy may disclose information as legally required. We will inform you where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition or sale of platform assets, your data may be transferred to the successor entity. You will be notified of any such change.

7Data Retention

We retain your personal data for as long as your account remains active and for a reasonable period thereafter to meet our legal and operational obligations. Key retention periods are as follows:

• Account Data: Retained for the duration of your account plus a post-closure period required for legal and financial record-keeping.
• Transaction Records: PKR deposit and withdrawal records are retained for the period required by applicable financial record-keeping obligations.
• Support Communications: Chat and email records are retained for a defined period to support dispute resolution and service quality review.
• Marketing Consent Records: Retained for as long as necessary to demonstrate that consent was obtained and to process opt-out requests.

When data is no longer required and there is no legal basis for retention, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8Cookies & Tracking Technologies

rummy uses cookies and similar technologies to provide core platform functionality and to understand how users interact with the site. Cookies are small data files stored on your device. The main types we use are:

• Essential Cookies: Required for the platform to function — keeping you logged in, maintaining your session and remembering your language and currency preferences. These cannot be disabled without affecting core functionality.
• Analytics Cookies: Used to understand aggregate usage patterns — which pages are visited, how long sessions last and where technical issues occur. This data is processed in anonymised or pseudonymised form.
• Preference Cookies: Remember your display settings, game history and notification preferences to personalise your experience on return visits.

rummy does not use third-party advertising cookies or tracking pixels for retargeted advertising. You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to stay logged in and use core platform features.

9Security Measures

rummy takes the security of your personal and financial data seriously. The following measures are in place to protect your information:

• Encryption: Data in transit between your device and our servers is protected using TLS encryption. Sensitive data at rest is stored in encrypted form.
• Access Controls: Access to personal data within rummy is restricted to staff and systems that genuinely need it to perform their functions. Access is logged and reviewed.
• Two-Factor Authentication: You are encouraged to enable two-factor authentication on your account for an additional layer of login security.
• Fraud Monitoring: Automated systems monitor account activity for unusual patterns that may indicate unauthorised access or fraudulent behaviour.
• Incident Response: In the event of a data security incident that affects your personal data, rummy will take prompt steps to contain the incident and will notify affected users as required.

While we apply strong security measures, no internet-based platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and never share your login credentials with anyone.

10Your Rights Over Your Data

As a rummy user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team:

To submit a data rights request, contact rummy support via live chat or the support email listed in Section 13. We will acknowledge your request promptly and aim to respond fully within 30 days. Complex requests may require additional time, in which case we will keep you informed of progress.

11Children's Privacy

rummy is strictly an adult platform. We do not knowingly collect personal data from persons under 18 years of age. Registration requires confirmation that you are 18 or older, and age verification may be requested at any stage.

12Updates to This Privacy Policy

rummy may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable requirements. When we make material changes, we will notify registered users via email or an in-platform notification before the changes take effect.

The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically. Continued use of the rummy platform following any update constitutes your acceptance of the revised policy.

If you have concerns about any change to this policy, you are welcome to contact our support team before the changes take effect. If you do not accept the revised policy, you should close your account.

13Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a data-related concern, please get in touch with the rummy support team. We are available 24 hours a day, 7 days a week via live chat in the platform.

For formal data rights requests or privacy complaints, please mark your message clearly as a data rights or privacy matter. We will acknowledge receipt promptly and aim to provide a full response within 30 days. If your concern cannot be resolved through our support channels, you may escalate to our dedicated complaints team.

For general information about the platform, responsible gaming tools or account management, visit our FAQ page or the Responsible Gaming section.