Pak Rummy Privacy Policy – How We Protect Your Personal Data

01 Introduction

Welcome to Pak Rummy. We take privacy seriously — not as a legal formality but as a genuine commitment to the players who trust us with their information. This Privacy Policy applies to all personal data collected through the Pak Rummy website, mobile interface, games, sportsbook, and any related communication channels.

When you register an account with Pak Rummy, deposit in PKR, play a game, or contact our support team, you share personal information with us. This document explains exactly what that information is, why we need it, who else might ever see it, how long we keep it, and what you can do if you want to change or remove it.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy. By using the Pak Rummy platform, you acknowledge that you have read and understood this Privacy Policy.

02 Data We Collect

Pak Rummy collects two broad categories of personal data: information you provide to us directly and information generated automatically when you use the platform. Below is a specific breakdown.

03 How We Collect Your Data

Data reaches Pak Rummy through several channels:

• Direct Submission: When you fill in the registration form, submit KYC documents, make a deposit, request a withdrawal, or write to support — you are directly providing us with data.
• Automated Collection: When you browse or use the platform, our servers automatically log technical data including IP address, device identifiers, and session activity. This happens whether or not you are logged in.
• Cookies and Similar Technologies: We use first-party cookies and analytics tools to understand how players use the platform and to keep you logged in securely. Full details are in the Cookies section below.
• Payment Processors: When you transact via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card, the payment provider shares a transaction reference and status with Pak Rummy to confirm the deposit or withdrawal. We do not receive your full payment credentials from these providers.
• Identity Verification Services: During KYC checks, we may use a third-party verification service that cross-references your submitted CNIC or passport details against official records. The verification service returns only a pass/fail result — it does not share the underlying document data with us beyond what you submitted.

04 Why We Use Your Data

Every piece of data Pak Rummy holds has a specific purpose. We do not collect data on a "just in case" basis. The table below maps each use to the data it requires.

• Running Your Account: Identity and contact data is used to create and maintain your account, verify ownership during password resets, and ensure only you can access your balance.
• Processing Payments: Financial and transaction data is used to credit your PKR deposits, process withdrawal requests, and maintain an accurate ledger of all account activity.
• Legal Compliance: Anti-money laundering (AML) and Know Your Customer (KYC) obligations require us to verify identity, record transactions, and flag unusual activity patterns. This is a legal requirement, not a choice.
• Responsible Gaming: Behavioural and transaction data helps identify players who may be showing signs of problematic gaming patterns — such as rapid large deposits or very long sessions — so we can reach out appropriately.
• Platform Improvement: Anonymised and aggregated behavioural data helps us understand which features are used, which games are popular, and where the user experience can be improved.
• Security: Technical data including IP addresses and session logs is used to detect fraud, account takeover attempts, and unusual access patterns.
• Communication: Contact data is used to send transactional messages (deposit confirmations, withdrawal notifications, support responses) and, where you have opted in, promotional communications.

05 Legal Basis for Processing

Pak Rummy processes personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract you entered into when you registered — specifically, to run your account, process bets, and pay out winnings.
• Legal Obligation: AML, KYC, and financial record-keeping obligations require us to collect and retain certain data regardless of consent.
• Legitimate Interests: We process technical and security data to protect the platform from fraud and to investigate breaches of our Terms and Conditions. These interests do not override your fundamental rights.
• Consent: Where we send marketing communications, we rely on your opt-in consent. You may withdraw this consent at any time without affecting the legality of prior processing.

06 Sharing Your Data

Pak Rummy does not sell personal data to any third party, ever. We share data only in the following limited circumstances:

• Payment Processors: Your name, PKR transaction amounts, and payment method reference are shared with Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, or card processors purely to execute your requested transaction.
• Identity Verification: Name and document details are shared with our KYC verification provider solely for the purpose of confirming your identity.
• Game Providers: When you play a game, your username and session stake data is shared with the relevant game provider (e.g., Evolution Gaming, Pragmatic Play, Jili) to run the game session. These providers are contractually prohibited from using this data for any purpose beyond delivering the game.
• Legal Authorities: We may disclose data to government agencies, law enforcement bodies, or financial regulators where we are compelled to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosure wherever legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Pak Rummy business, player data may be transferred to the successor entity. You will be notified before any such transfer takes place and given the option to delete your account.

07 International Data Transfers

Some of Pak Rummy's technology partners — including game providers and cloud infrastructure — operate servers outside Pakistan. Where your data is processed outside the country, we ensure that appropriate contractual safeguards are in place, including data processing agreements that require the receiving party to apply the same standard of data protection that governs our operations.

Your financial data relating to PKR transactions is processed and stored within payment systems that operate under Pakistani financial regulations, including the SBP framework where applicable.

08 Data Retention

Pak Rummy retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law.

• Active Accounts: Data relating to your account is retained for the lifetime of the account plus a minimum of 5 years after closure. This is required for financial and AML compliance purposes.
• KYC Documents: Identity verification documents are retained for 7 years from the date of the most recent KYC check, as required under anti-money laundering regulations.
• Transaction Records: All PKR deposit, withdrawal, and wagering records are kept for a minimum of 7 years for legal and audit purposes.
• Support Communications: Chat and email records are retained for 3 years from the date of the conversation.
• Technical / Log Data: Server logs and IP records are retained for 12 months and then automatically deleted unless flagged as part of an active security investigation.
• Marketing Consent Records: Records of your opt-in or opt-out preferences are retained for as long as you hold an account and for 3 years after closure.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to you.

09 Cookies & Tracking Technologies

Pak Rummy uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device that helps the platform remember your preferences and session state.

Types of Cookies We Use

You can manage non-essential cookie preferences above for illustrative purposes. To apply changes, contact support or use your browser's built-in cookie controls.

Pak Rummy does not use third-party advertising cookies or share cookie data with ad networks.

10 Your Rights Over Your Personal Data

As a Pak Rummy player, you have meaningful rights over your personal data. These are not token gestures — they are actionable and we will respond to every request within 30 days.

To exercise any of these rights, email support@pakrummy.best with your registered account name and a clear description of your request. Pak Rummy will acknowledge within 48 hours and provide a full response within 30 days. Requests are free of charge for the first copy of your data in any 12-month period.

11 Children's Privacy

Pak Rummy is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a person under 18 has registered an account, please contact us immediately at support@pakrummy.best. Upon confirmation, the account will be closed, any deposits will be returned (less any wagering activity), and all collected data will be deleted.

Parents and guardians can use parental control software to restrict access to online gaming platforms. We support any reasonable effort to keep minors away from the platform.

12 Security Measures

Protecting your personal and financial data is a technical priority at Pak Rummy, not just a policy statement. The following measures are in place:

• Transport Security: All data transmitted between your device and the Pak Rummy platform is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to the website, mobile interface, and API connections used by payment systems.
• Data at Rest: Sensitive fields — including identity document data and payment references — are stored in encrypted form in our database. Encryption keys are stored separately from the encrypted data.
• Access Control: Personal data is accessible only to staff who require it to do their jobs. All internal access is logged and access levels are reviewed quarterly.
• Intrusion Detection: Our infrastructure uses automated monitoring that flags unusual access patterns, potential brute-force attempts, and anomalous traffic in real time.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a one-way hashing algorithm with per-account salting. Even Pak Rummy staff cannot read your password.
• Penetration Testing: The platform undergoes periodic third-party security testing to identify and remediate vulnerabilities before they can be exploited.

13 Third-Party Links & Integrations

The Pak Rummy platform may contain functional integrations with third-party providers such as game studios and payment processors. These integrations are necessary to deliver the service and all such providers operate under data processing agreements with Pak Rummy.

However, Pak Rummy is not responsible for the privacy practices of entirely independent third-party websites that you may visit through links shared in communications or found elsewhere. This Privacy Policy applies only to the Pak Rummy platform itself.

14 Changes to This Privacy Policy

Pak Rummy may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When material changes are made, registered players will be notified by email or mobile number at least 7 days before the changes take effect. The updated Policy will always be available on this page with a revised "Last Updated" date at the top.

We recommend reviewing this page periodically. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Policy. If you disagree with a change, you may close your account before the revised Policy takes effect.

15 Contact & Complaints

For any privacy-related queries, requests to exercise your data rights, or complaints about how Pak Rummy has handled your personal information, please use the following contact details:

If you are dissatisfied with how Pak Rummy has handled your privacy complaint after exhausting the internal process, you may refer the matter to the relevant data protection authority. We will cooperate fully with any such investigation.