Rummy App Privacy Policy

Welcome to the Rummy App Privacy Policy. This document covers all personal data processing activities carried out by Rummy App ("we," "us," or "our") in connection with the platform at RummyApp.vin. It applies to all users who register, browse, deposit, play, or otherwise interact with the platform.

We understand that handing over personal information requires trust, and we do not take that lightly. Whether you are using JazzCash to make a deposit in PKR, placing a bet on a PSL match, or simply browsing the Game Lobby, data is processed with a specific purpose — and only to the extent necessary for that purpose.

This Privacy Policy sits alongside our Terms and Conditions. By registering an account on Rummy App, you confirm that you have read this policy and understand how your data will be handled. If you have questions at any point, the contact details in Section 12 are available to you.

The data Rummy App collects falls into three broad categories: information you provide directly, information generated through your use of the platform, and technical information collected automatically.

We do not collect sensitive personal data such as biometric data, ethnicity, religious beliefs, or health information. Any identity document data collected for verification purposes is handled under strict access controls and is not used for any purpose beyond confirming your identity and age.

Every piece of data we collect has a clear, defined purpose. Below is a breakdown of how your information is used on the Rummy App platform:

• Account Management – Your registration data is used to create and maintain your account, authenticate your logins, and keep your profile accurate.
• Payment Processing – Transaction data is required to process PKR deposits via JazzCash, Easypaisa, Raast, Bank Transfer, cards, and mobile wallets, and to handle withdrawal requests back to your verified payment account.
• Identity Verification – We verify your age (18+) and identity to comply with responsible gaming commitments and to protect the platform from fraud.
• Platform Security & Fraud Prevention – Device and session data helps us detect suspicious activity, prevent unauthorised access, and protect the integrity of games and betting markets.
• Customer Support – Communication data is used to respond to your queries, resolve complaints, and improve support quality over time.
• Platform Improvement – Aggregated, anonymised gameplay and session data helps us understand how users interact with the platform so we can improve game offerings, site performance, and the overall experience.
• Responsible Gaming – Gameplay and transaction history may be reviewed internally to identify patterns that suggest problematic gambling behaviour, enabling proactive support outreach where appropriate.
• Promotions & Bonuses – Where you have opted in to receive offers, your account activity may be used to determine your eligibility for specific bonuses or promotions available on the platform.

We do not use your data for any automated decision-making that produces significant legal effects without human oversight. If any profiling is used in connection with bonus eligibility or fraud scoring, a human review process remains available upon request.

Rummy App does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data is shared externally only in the following specific and limited circumstances:

• Payment Providers – When you make a deposit or withdrawal, relevant transaction details are shared with your chosen payment provider (such as JazzCash, Easypaisa, or Raast) only to the extent required to complete the transaction.
• Identity Verification Services – Where third-party KYC (Know Your Customer) tools are used to verify identity documents, the minimum necessary data is shared for that verification step only.
• Fraud Prevention Partners – Device and behavioural data may be shared with fraud detection services to help protect the platform and its users from account takeover, money laundering, and bonus abuse.
• Technology Service Providers – Hosting, database, and analytics providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Legal Obligations – If required by law, court order, or a lawful request from an authorised authority, Rummy App may disclose personal data to the extent required by that obligation.

All financial transactions on Rummy App are conducted in PKR. When you use JazzCash, Easypaisa, Raast, bank transfer, card payments, or other supported mobile wallets, your payment credentials — such as your mobile wallet PIN or card number — are never stored on Rummy App's servers. Payment processing is handled end-to-end by your chosen payment provider.

What Rummy App does retain is a record of transaction amounts, timestamps, payment method type (e.g., JazzCash), and transaction status. This is necessary to maintain accurate account balances, resolve payment disputes, and produce the transaction history visible in your account dashboard.

Withdrawal requests are matched against your verified identity to ensure that funds are only returned to payment accounts registered in your name. This matching process uses the name and account reference you provided during registration and verification — it is a security measure designed to protect you from unauthorised withdrawals.

Rummy App uses cookies and similar technologies to make the platform work properly, remember your preferences, and understand how users navigate the site. Cookies are small text files stored in your browser. They do not contain executable code and cannot access other files on your device.

• Essential Cookies – Required for the platform to function. These include session authentication tokens that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Preference Cookies – Remember your settings such as language preference, display options, and game lobby layout choices so you do not have to reconfigure them on every visit.
• Analytics Cookies – Help us understand aggregated usage patterns — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used in anonymised form only.
• Security and Fraud Detection – Some tracking tokens are used to identify unusual login patterns, detect the same device across multiple accounts, and flag potentially fraudulent activity before it affects you.

You can manage cookie preferences through your browser settings. Blocking all cookies will affect platform functionality; in particular, essential session cookies are required to stay logged in. Most modern browsers allow you to accept or block specific categories of cookies independently.

We keep your personal data only for as long as it is necessary for the purposes described in this policy. Below is a general guide to our retention approach:

• Active Account Data – Retained for the duration of your account's active status plus a reasonable period thereafter to allow for dispute resolution and regulatory compliance.
• Transaction Records – Financial transaction records are retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping practices.
• Identity Verification Documents – Retained for the duration of the account relationship and a defined period after account closure, after which they are securely deleted or anonymised.
• Support Communications – Kept for as long as the underlying issue may reasonably remain relevant, typically no longer than three years after resolution.
• Voluntarily Closed Accounts – On account closure, non-essential personal data is scheduled for deletion or anonymisation within a reasonable timeframe. Transaction records are retained as described above.

When data is no longer required, it is either securely deleted from our systems or anonymised so that it can no longer be linked back to you as an individual.

Protecting the personal data of our Pakistani users is a core operational responsibility. Rummy App applies a layered approach to data security that covers both technical and organisational controls:

• Encryption in Transit – All data transmitted between your device and the Rummy App platform is encrypted using TLS (Transport Layer Security). This includes login sessions, game data, and payment flows.
• Encryption at Rest – Sensitive stored data, including passwords (stored as hashed values only) and identity document copies, is encrypted within our database infrastructure.
• Access Controls – Access to personal data is restricted to authorised personnel only, based on the principle of least privilege. Staff who do not need access to specific data categories do not have it.
• Fraud Monitoring – Continuous monitoring is in place to detect abnormal login patterns, unusual transaction behaviour, and signs of account compromise. Suspected breaches trigger an immediate review process.
• Regular Security Reviews – Platform security is reviewed on a regular basis, including assessment of third-party service providers to ensure they maintain appropriate standards.

No digital platform can guarantee absolute security. If you suspect that your Rummy App account has been accessed without your authorisation, contact support immediately at the address in Section 12 so we can take prompt protective action.

As a Rummy App user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us using the email address in Section 12:

• Right to Access – You can request a copy of the personal data we hold about you. We will respond within a reasonable timeframe and provide the information in a clear, readable format.
• Right to Correction – If any personal data we hold about you is inaccurate or out of date, you can request that we correct it. Some corrections can be made directly within your account profile settings.
• Right to Deletion – You can request deletion of your personal data. We will honour this where there is no legal or legitimate operational reason to retain it. Note that transaction records may need to be retained for financial compliance purposes even after account closure.
• Right to Restrict Processing – You can ask us to restrict how we use your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to Portability – Where technically feasible and applicable, you can request a structured, machine-readable export of your personal data.
• Right to Object – You can object to your data being used for certain purposes, including direct marketing communications. If you object to marketing, we will stop using your data for that purpose immediately.

Rummy App is strictly an adults-only platform. Registration and use of the platform is permitted only for individuals aged 18 years and over. We do not knowingly collect or process personal data from anyone under the age of 18.

Age verification is part of the registration and KYC process. If at any point we determine that a user is under 18, the account will be closed immediately, any balance held will be returned (less any bonus funds), and the personal data of the minor will be securely deleted from our systems.

If you are a parent or guardian and believe that someone under 18 in your household has created a Rummy App account, please contact us immediately at the address in Section 12 so we can take action. Please also ensure that devices used by minors in your household do not have saved login credentials for any online gaming platform.

Rummy App may update this Privacy Policy from time to time to reflect changes in platform functionality, data practices, or applicable requirements. When we make changes, the "Last updated" date at the top of this page will be revised accordingly.

For material changes that significantly affect how your personal data is used, we will make reasonable efforts to notify you — for example, through an in-platform notification or an email to your registered address. Your continued use of the platform after a policy update constitutes your acknowledgement of the revised policy.

We recommend revisiting this page periodically so you stay informed about how your data is handled on Rummy App.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data on Rummy App, our support team is available to help. We are committed to addressing privacy queries promptly and transparently.

We will acknowledge all privacy-related enquiries within a reasonable timeframe and aim to resolve them as quickly as possible. For complex data rights requests, we may need additional time to verify your identity before releasing or modifying account data — this is to protect you.