Privacy Policy – Rummy App Pakistan

1 Who We Are

This Privacy Policy applies to rummyapp.vu, an online gaming and sports betting platform designed for players in Pakistan. When we refer to "rummy app", "we", "us" or "our" in this policy, we are referring to the operator of rummyapp.vu.

rummy app operates as an entertainment platform offering sports betting — including cricket, PSL and T20 markets — alongside casino games, slots, live casino and related promotional services. All transactions on the platform are conducted in PKR and are supported by locally familiar payment channels including JazzCash, Easypaisa, Raast and bank transfer.

As the operator of this platform, rummy app acts as the data controller for the personal information of registered players and site visitors. This means we determine the purposes and means by which your personal data is processed. Where we use third-party service providers to assist with platform operations, those parties act as data processors under our direction.

2 Data We Collect

rummy app collects personal information in several ways — directly from you when you register or interact with the platform, automatically through your device and browser as you use the site, and from third-party payment providers when you make a deposit or withdrawal.

Information you provide directly:

• Full name, date of birth and gender (required at registration for age verification)
• Email address and mobile number
• CNIC or other identity document details when verification is requested
• Residential address
• Account username and password (password is stored in hashed form and is never readable by staff)
• Communication preferences and responsible gaming tool settings
• Any information you provide when contacting player support

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session duration and pages visited on rummyapp.vu
• Betting and gaming activity, including stake amounts, game selections and results
• Login timestamps and account access history
• Cookie data (described in detail in Section 8)

Information from payment providers:

• Confirmation of deposit and withdrawal transactions in PKR
• Payment method type (e.g. JazzCash, Easypaisa, Raast, bank transfer)
• Transaction reference numbers for verification and dispute resolution

3 How We Use Your Data

The personal information collected by rummy app is used for specific, clearly defined purposes. We do not use your data for purposes beyond what is described here without obtaining your prior consent.

4 Legal Basis for Processing

rummy app processes your personal data on the following legal grounds depending on the nature of the processing activity:

• Contract performance: Processing necessary to create and manage your account, process PKR transactions, and deliver platform services you have signed up for.
• Legitimate interests: Processing necessary to prevent fraud, maintain platform security, analyse platform performance, and detect responsible gaming concerns — where these interests are not overridden by your own rights.
• Legal obligation: Processing required to comply with applicable financial crime prevention requirements, age verification obligations, and responses to lawful requests from relevant authorities.
• Consent: Processing for direct marketing communications and non-essential cookies — where you have given clear, informed consent and retain the right to withdraw it at any time.

5 Sharing Your Data

rummy app does not sell your personal information. We share data with third parties only where it is necessary for the operation of the platform or where we are required to do so by law. The categories of third parties we may share data with are as follows:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners and other payment service providers receive the transaction data necessary to process your PKR deposits and withdrawals.
• Identity verification services: Where required, your identity document details may be shared with a third-party KYC provider to complete age and identity verification.
• Game studio providers: Live casino and slot game studios may receive a session token and anonymised player identifier to deliver game content. They do not receive your full name, contact details or financial information.
• Analytics and platform performance tools: Anonymised and aggregated usage data may be shared with analytics providers to help us understand how the platform is used and identify areas for improvement. No personally identifiable information is included in these reports.
• Fraud prevention and security partners: Where account activity indicates potential fraud, collusion or financial crime, relevant data may be shared with specialist fraud prevention services.
• Legal and regulatory authorities: rummy app will disclose personal data in response to a lawful request from a competent authority where we are legally required to do so. We will notify you of such requests where we are permitted to.

All third-party service providers acting on our behalf are required to handle your personal data securely, use it only for the purposes for which it was shared, and in accordance with applicable data protection standards.

6 PKR Payments & Financial Data

Given that all transactions on rummy app are conducted in PKR through locally supported payment channels, we want to be clear about how your financial data is handled.

When you make a deposit using JazzCash, Easypaisa, Raast or bank transfer, the actual payment authentication — meaning entering your MPIN, OTP or banking credentials — takes place entirely within the relevant payment provider's own interface. rummy app does not handle, intercept or store these credentials at any point.

What rummy app does retain is:

• The amount deposited or withdrawn in PKR
• The date and time of the transaction
• The payment method type used
• A transaction reference number provided by the payment processor
• The account to which the funds were credited or debited on rummyapp.vu

This transaction history is retained for account management, dispute resolution, and to comply with financial record-keeping requirements. It is not shared with third parties for marketing purposes.

7 Data Retention

rummy app retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods vary depending on the type of data and the purpose for which it was collected.

• Account and identity data: Retained for the lifetime of your account and for a minimum period after closure to meet legal and financial record-keeping obligations.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum period consistent with standard financial record requirements.
• Responsible gaming records: Self-exclusion and cool-off records are retained beyond account closure to prevent re-registration during active exclusion periods.
• Support communications: Records of player support interactions are retained for a reasonable period to support dispute resolution and service improvement.
• Marketing consent records: Records of your marketing opt-in and opt-out choices are retained to demonstrate compliance with communication preferences.

Once the applicable retention period has passed, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to any individual.

8 Cookies & Tracking Technologies

rummyapp.vu uses cookies and similar tracking technologies to make the platform function correctly, remember your preferences, keep your session active while you are logged in, and understand how players interact with the site.

The categories of cookies we use are:

• Strictly necessary cookies: These are essential for the platform to work. They manage your login session, maintain your account security, and ensure features like your betting slip and account dashboard function correctly. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language settings, preferred game category, and responsible gaming tool configurations. They improve your experience by not requiring you to re-enter preferences on each visit.
• Performance and analytics cookies: These collect anonymised information about how pages are used, which features are most popular, and where technical errors occur. This data is used in aggregate form to improve the platform and is not linked to your individual identity.
• Marketing cookies: These are used only where you have consented to receive promotional communications. They help us understand whether promotional content has been seen and allow us to avoid showing you the same promotion repeatedly.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of rummy app, though some preferences may not be remembered between sessions.

9 Your Rights Over Your Data

As a registered player on rummyapp.vu, you have the following rights in relation to your personal data. To exercise any of these rights, contact the rummy app support team with your account details and a description of your request.

• Right of access: You can request a copy of the personal data rummy app holds about you.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction.
• Right to erasure: You may request deletion of your personal data where it is no longer needed for the purpose it was collected, subject to legal retention requirements that may prevent immediate deletion.
• Right to restriction: In certain circumstances you may request that we limit processing of your data — for example, while an accuracy dispute is being resolved.
• Right to data portability: You may request a copy of data you have provided to rummy app in a structured, commonly used format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and to opt out of direct marketing at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all data rights requests within a reasonable timeframe. In some cases, identity verification may be required before a request can be fulfilled to protect your account from unauthorised data disclosure.

10 Children's Privacy

rummy app is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step during the registration process, and we reserve the right to request documentary proof of age at any point.

If we discover or are notified that a registered account belongs to a person under 18, the account will be closed immediately, all data associated with the account will be reviewed, and any deposited funds will be returned to the payment method used.

11 Security Measures

rummy app takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information against unauthorised access, disclosure, alteration or destruction.

• All data transmitted between your browser and rummyapp.vu is encrypted using TLS (Transport Layer Security).
• Account passwords are stored using one-way cryptographic hashing — they are never stored in a readable format and cannot be retrieved by platform staff.
• Access to personal data within our systems is restricted to staff who genuinely need it to perform their role, and all internal access is logged.
• Payment data is handled through PCI-compliant payment processors. rummy app does not store full card numbers or payment account credentials.
• Our systems are monitored continuously for unusual access patterns, potential breaches and security vulnerabilities.

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights or interests, we will notify affected players promptly and take all necessary steps to contain and remediate the incident.

12 Updates to This Privacy Policy

rummy app may update this Privacy Policy from time to time to reflect changes in platform operations, applicable legal requirements, or the way in which we use personal data. The effective date at the top of this page will be updated whenever the policy changes.

Where changes are material — meaning they significantly affect how we use your data or the rights available to you — registered players will be notified via email or a platform notification before the changes take effect. Continued use of rummyapp.vu after a policy update constitutes acceptance of the revised terms.

We encourage you to review this policy periodically so you are always aware of how your personal information is being handled.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how your personal information has been handled, please get in touch with the rummy app player support team.

For responsible gaming support, account self-exclusion, or deposit limit requests, you can also visit the Responsible Gaming page. For answers to common questions about your account, payments and bonuses, visit our FAQ page.