PakRummy Privacy Policy — How We Protect Your Personal Data

1. Introduction

This Privacy Policy describes how PakRummy ("we," "us," "our"), operating the online gaming platform at pakrummy.im, collects, uses, stores, and protects the personal information of registered players and website visitors in Pakistan.

We take data privacy seriously. Pakistani players trust us with real money and real personal information — that trust is something we do not take lightly. We have written this policy in plain, direct language so you can clearly understand what happens with your data. If anything in this policy is unclear, please contact us at support@pakrummy.im and we will explain it.

This policy covers all services accessible through pakrummy.im, including account management, game play, sports betting, VIP Club participation, and customer support interactions. It applies regardless of what device you use to access the platform.

2. Data We Collect

PakRummy collects the following categories of personal data from players. In each case, we explain what specific data falls within that category:

3. How We Collect Your Data

PakRummy collects your data through the following means:

• Direct submission: Information you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or adjust your account settings.
• Automated technical collection: Technical data (IP address, device information, session data) is collected automatically when you access pakrummy.im. This happens in the background and does not require any action from you.
• Cookies and similar technologies: Session cookies, functional cookies, and analytics tools collect behavioural data about how you interact with the platform. See Section 9 for full details on cookies.
• Third-party payment processors: When you make a deposit or request a withdrawal, our payment partners communicate transaction status and associated reference data back to PakRummy to update your account balance.
• Identity verification providers: For CNIC verification, we use a certified third-party identity verification service that processes your CNIC details and returns a verification status to PakRummy.

4. Why We Use Your Data

Every use of your personal data at PakRummy is tied to a specific, legitimate purpose. We do not process data unless we have a clear reason to do so. Here are the purposes for which we use your information:

• Account creation and management: Your name, mobile number, and email are required to create and maintain your player account on PakRummy.
• Identity verification and fraud prevention: CNIC verification ensures that accounts belong to real adults in Pakistan and helps us prevent fraud, money laundering, and underage gambling.
• Processing deposits and withdrawals: Your payment method details are required to credit deposits to your account and send withdrawal payments to your wallet or bank.
• Game operation and bet recording: Your gameplay activity is recorded to calculate winnings, maintain VIP Club points, and resolve disputes accurately.
• Customer support: Communication records allow our support team to understand the history of any issue you raise and resolve it effectively.
• Responsible gaming tools: Your deposit limit, cooling-off, and self-exclusion settings are processed to enforce the protections you have asked for.
• Security and risk management: IP addresses, device data, and login patterns are analysed to detect suspicious activity, protect accounts from unauthorised access, and maintain platform integrity.
• Legal and regulatory compliance: Where required by applicable law or regulation, we process and retain certain data to demonstrate compliance — including anti-money laundering record-keeping obligations.
• Service improvement: Aggregated, anonymised analytics data helps us understand how the platform is used and where it can be improved. This analysis does not identify individual players.
• Marketing (with consent only): Where you have given explicit consent, we use your contact details to send you promotional communications about PakRummy offers and new features. See Section 12 for details and opt-out options.

5. Who We Share Your Data With

PakRummy shares personal data only where necessary to operate the platform or comply with legal requirements. We do not sell your data. The categories of third parties with whom your data may be shared are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, and Visa/Mastercard processing networks receive the minimum data necessary to process your transactions.
• Identity verification providers: A certified third-party verification service processes your CNIC details to confirm your identity. This service operates under strict data processing agreements with PakRummy.
• Game software providers: Certified third-party game developers (including Pragmatic Play, NetEnt, Play'n GO and similar providers) may receive a player session token to load and operate games. They do not receive your personal identity or payment data.
• Platform infrastructure providers: Cloud hosting and server infrastructure providers store platform data in secure environments under contractual data protection obligations.
• Analytics providers: We use reputable analytics services to understand aggregate platform usage patterns. Data shared with analytics providers is anonymised or pseudonymised and does not identify individual players.
• Law enforcement and regulators: Where we are required by applicable law, a court order, or a regulatory authority to disclose personal data, we will comply with that requirement. We will notify the affected player where legally permitted to do so.

6. Payment Data & Financial Information

Given the financial nature of PakRummy, payment data deserves specific attention. Here is exactly how your financial information is handled:

Mobile wallet accounts (Easypaisa, JazzCash, NayaPay, SadaPay): We store your registered mobile number associated with your wallet to enable repeat deposits and to send withdrawals to the correct account. The underlying wallet security and authentication is managed entirely by your wallet provider.

Bank account details (IBFT): Where you provide bank account details for IBFT withdrawals, we store the account number and bank details necessary to process the transfer. These details are encrypted at rest in our systems.

Card payments: PakRummy does not store card numbers, expiry dates, or CVV codes. All card transactions are authenticated through a certified payment gateway using 3D Secure. We receive only a tokenised reference to identify your card for future transactions. The actual card data never passes through or is stored on PakRummy's servers.

Transaction records: A complete record of your deposit and withdrawal history is retained on PakRummy for account management, dispute resolution, and anti-money laundering compliance purposes. You can view your full transaction history in your account dashboard at any time.

7. How Long We Keep Your Data

PakRummy retains personal data for as long as it is necessary for the purposes described in this policy, and for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data (name, contact, account settings, game history): Retained for the lifetime of your active account plus a minimum of 5 years after closure.
• Transaction records (deposits, withdrawals, bet records): Retained for a minimum of 7 years in accordance with financial record-keeping requirements applicable to online payment processing.
• Identity verification documents (CNIC scan): Retained for the lifetime of your active account plus a minimum of 5 years after closure. Securely deleted after this period.
• Support and communication records: Retained for 3 years from the date of the last communication.
• Technical and session logs: Retained for 12 months on a rolling basis, then deleted or anonymised.
• Self-exclusion records: Where a player has self-excluded, a record of that exclusion is retained indefinitely to prevent re-registration.

When data reaches the end of its retention period, it is securely deleted or anonymised such that it can no longer be associated with an individual player. Anonymised, aggregated data may be retained indefinitely for statistical purposes.

8. Security Measures

PakRummy implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and pakrummy.im.
• Encryption at rest for sensitive stored data including payment details, identity documents, and account credentials.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal staff accessing player data.
• Role-based access controls — internal staff access to player data is restricted on a strict need-to-know basis. Support agents can only access the specific data needed to resolve a query.
• Regular security audits conducted by independent security specialists to identify and address potential vulnerabilities.
• Intrusion detection systems monitoring for unusual access patterns or unauthorised access attempts.
• Secure, certified hosting infrastructure with physical security controls and redundancy to ensure data availability and protection.

While we maintain robust security, no digital platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that affects your rights or freedoms, PakRummy will notify affected players promptly and take immediate steps to contain and remediate the incident.

You also play a role in keeping your account secure. Use a strong, unique password for PakRummy, enable 2FA, never share your login credentials with anyone, and contact support immediately if you suspect your account has been accessed without your authorisation.

9. Cookies & Similar Technologies

PakRummy uses cookies and similar browser-based technologies to operate the platform, maintain your session, and understand how the site is used. Here is how each category of cookie works:

• Essential / Session Cookies: These are strictly necessary for the platform to function. They maintain your login session, remember your account preferences during a visit, and enable core features like the game client and the deposit flow. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: These remember your preferences — such as language settings and recently played games — so you do not have to reset them every visit. They are enabled by default but can be disabled without affecting core platform functionality.
• Analytics Cookies: These help us understand how players use the platform in aggregate — which pages are visited most, where drop-offs occur, and how performance can be improved. Analytics data is processed in anonymised or pseudonymised form. You can opt out of analytics cookies through your browser settings.
• Security Cookies: Short-lived cookies that help identify and block suspicious session behaviour, protecting your account against session hijacking and cross-site request forgery (CSRF) attacks. These are essential to platform security and cannot be disabled.

PakRummy does not use third-party advertising cookies or behavioural tracking cookies that follow you across other websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in and using the platform.

10. Minors & Age Restriction

PakRummy is strictly for adults aged 18 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. Age verification is conducted during the registration process, and CNIC verification at the point of first withdrawal provides a further check.

If we become aware that personal data has been collected from a person under 18 — whether through our own detection or through a report — we will immediately close the associated account, void all gameplay records, return any deposited funds to the registered payment method, and delete all personal data associated with that account.

Parents and guardians who believe a minor has registered on PakRummy should contact us immediately at support@pakrummy.im. We take such reports seriously and will act on them promptly. We also recommend using parental control tools to restrict access to online gaming platforms from devices used by children.

11. Your Data Rights

PakRummy respects your rights over your personal data. The following rights are available to all registered players:

To exercise any of the above rights, contact support@pakrummy.im with your full name, registered mobile number, and details of your request. We will respond within 30 days. Identity verification may be required before processing requests to ensure that data is only disclosed to or modified by the account holder.

12. Marketing Communications

PakRummy sends promotional communications — including bonus offers, new game announcements, and VIP Club updates — only to players who have given explicit consent to receive them during the registration process or subsequently through their account settings.

If you no longer wish to receive marketing communications from PakRummy, you can opt out at any time by:

• Updating your communication preferences in your account settings under Notifications.
• Clicking the unsubscribe link in any email or SMS message from PakRummy.
• Contacting support@pakrummy.im with a request to be removed from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional communications — deposit confirmations, withdrawal notifications, security alerts, and account-related messages will continue to be sent regardless of your marketing preferences, as these are necessary for account management.

PakRummy does not send marketing communications to players who are self-excluded or who have indicated through the responsible gaming tools that they are limiting their play. Marketing suppression for responsible gaming purposes takes precedence over consent in all cases.

13. Changes to This Policy

PakRummy may update this Privacy Policy from time to time as our services evolve, as technology changes, or as regulatory requirements are updated. When changes are made, the revised policy will be published on this page with an updated "last updated" date at the top.

For material changes — those that significantly affect how your data is used or your rights in relation to it — PakRummy will provide advance notification to registered players via their registered mobile number or email address where reasonably practicable, at least 7 days before the change takes effect.

Continued use of PakRummy following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any changes, you may request account closure as described in the Terms and Conditions. We recommend reviewing this policy periodically to stay informed.

14. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, wish to report a potential data breach, or have any other privacy-related concern, please contact us:

• Email: support@pakrummy.im
• Subject line: Please mark privacy-related queries with "Privacy Request" in the subject for faster routing to the right team.
• Response time: Privacy requests are responded to within 5 business days for general queries and within 30 days for formal data rights requests.

PakRummy takes privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you are entitled to escalate the matter to the relevant data protection authority in your jurisdiction.