Privacy Policy — Rummy BD Data Protection Pakistan

1. Introduction

This Privacy Policy explains how Rummy BD ("the Platform", "we", "us") collects, processes, stores and protects the personal data of players and visitors who use the platform at rummybd.pro, including the mobile application and all associated services.

By registering an account or using any part of the Rummy BD platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described here. This Policy should be read alongside the Terms and Conditions.

We take our responsibility to handle your data with care seriously. The principles in this document are not just legal formalities — they reflect how the platform actually operates on a day-to-day basis. If you have any questions about how your data is used, the support team is available to provide clarification.

2. What Personal Data We Collect

The personal data we collect falls into the following categories:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data or biometric information. Rummy BD does not collect data about your activity on third-party websites or applications.

3. How We Collect Your Data

Your data is collected through the following channels:

• Direct registration: When you create your Rummy BD account, you provide your name, contact details and date of birth directly.
• Account activity: Gameplay, betting and transaction activity is automatically recorded as you use the platform — this is necessary to operate your account and settle bets and payments correctly.
• Identity verification: If you are asked to verify your identity, you may submit a copy of your CNIC or other documentation. These are handled securely and only used for verification purposes.
• Device and browser data: Technical information is collected automatically when you access the platform via a web browser or the mobile app. This includes your IP address, device type and operating system version.
• Cookies and tracking technologies: The platform uses cookies and similar technologies to maintain your session, remember your preferences and gather anonymous usage statistics. See Section 7 for full details.
• Support interactions: When you contact the support team, the content of those communications is stored so that we can track the resolution of your query and improve our service over time.

4. How We Use Your Data

Rummy BD uses your personal data for the following purposes, all of which are necessary to provide the platform's services:

• Account management: Creating, maintaining and securing your account, including login authentication and password recovery.
• Processing transactions: Handling PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, Bank Transfer and other supported payment channels, and keeping accurate financial records.
• Game and betting operation: Recording wagers, settling bets, calculating winnings and maintaining your gaming history across all platform products including Casino, Live Casino, Sports Betting and Fish Games.
• Identity verification: Confirming your age and identity when required, to ensure the platform is used only by eligible adults aged 18 and above.
• Customer support: Responding to your queries, resolving disputes and providing account assistance.
• Platform security: Detecting and preventing fraud, account takeover, money laundering and other prohibited activity. Your IP address and device data are used to identify unusual login patterns.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with the platform and to improve features, performance and the overall experience.
• Responsible gaming: Monitoring account activity to support the responsible gaming tools described in the Responsible Gaming section, including self-exclusion and deposit limits.
• Communications: Sending you important account notifications such as deposit confirmations, withdrawal updates, security alerts and, where you have opted in, promotional information about bonuses and new platform features.

5. Sharing Your Data

Rummy BD does not sell your personal data to third parties. We share data only in the following limited and necessary circumstances:

• Payment processors: To process your deposits and withdrawals, necessary transaction reference data is shared with the relevant payment provider — JazzCash, Easypaisa, Raast or your bank. These providers operate under their own privacy and security obligations.
• Game content providers: Some casino and live casino games are powered by third-party game studios. These providers may receive anonymised session data to operate the game correctly. They do not receive your full identity or payment details.
• Platform technology partners: Services that support the technical operation of the platform — such as server infrastructure, analytics tools and security monitoring — may process data on our behalf under strict contractual data protection requirements.
• Legal obligations: If required by applicable law, a court order or a lawful request from a recognised authority, Rummy BD may be required to disclose certain account or transaction data. We will only do so to the extent required by the specific legal obligation.

In all cases where data is shared with a third party, we ensure that appropriate safeguards are in place to protect your information and that the data shared is limited to what is strictly necessary for the specific purpose.

6. Payment Data & PKR Transactions

All financial transactions on the Rummy BD platform are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, the transaction is processed through your chosen payment channel. Here is how payment data is handled:

• Rummy BD stores transaction reference numbers, amounts, timestamps and the payment method type for each transaction. These records are necessary for account management, dispute resolution and financial reporting.
• We do not store full mobile wallet account numbers, bank account numbers or card numbers on our systems. The secure transmission of these details is handled entirely by the respective payment provider.
• Payment data is retained for the period required to meet financial record-keeping obligations. After this period, transaction data is either deleted or anonymised.
• If a withdrawal request requires identity verification, you may be asked to provide proof that the payment account belongs to you. This documentation is handled securely and is not used for any purpose beyond verification.

7. Cookies & Similar Technologies

Rummy BD uses cookies — small data files stored on your device — and similar technologies to make the platform work properly and to improve your experience. The types of cookies used are:

• Essential cookies: These are required for the platform to function. They maintain your login session, keep your account secure and remember your basic preferences. The platform cannot operate without these cookies and they cannot be disabled.
• Performance cookies: These collect anonymous information about how players use the platform — which pages are visited most, where errors occur, how long sessions last. This data is aggregated and not linked to individual accounts. It helps us identify and fix issues and improve the overall experience.
• Preference cookies: These remember optional choices you make, such as your preferred language or display settings, so that you do not have to re-set them every time you visit.

Most web browsers allow you to control cookies through their settings. Disabling essential cookies will affect the platform's ability to function correctly, including keeping you logged in. Performance and preference cookies can generally be disabled without impacting core functionality.

The Rummy BD mobile app uses equivalent device-level storage mechanisms to perform the same functions as cookies in the browser version.

8. Data Retention

We retain your personal data for as long as your account is active and for a period after closure as required by our operational and legal obligations. The general retention principles are:

• Active accounts: All data associated with your account is retained for as long as the account remains open and active.
• Closed accounts: After an account is closed, identity data, transaction records and gaming history are retained for the period required to meet financial record-keeping and fraud prevention obligations. After this period, data is deleted or anonymised.
• Support communications: Records of support interactions are retained for a reasonable period to help resolve any follow-up queries and to support quality improvement.
• Marketing data: If you have opted in to marketing communications, your contact preferences are retained until you withdraw consent. On withdrawal, your details are removed from marketing distribution lists promptly.

9. Your Data Rights

As a Rummy BD player, you have the following rights regarding your personal data. To exercise any of these rights, contact the support team through your account or via the support email:

We aim to respond to all data rights requests within a reasonable timeframe. Complex requests may take longer; we will keep you informed of progress.

10. Security Measures

Rummy BD applies a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:

• TLS encryption for all data transmitted between your device and the platform.
• Encrypted storage for account credentials — passwords are never stored in plain text.
• Role-based access controls ensuring that only authorised staff can access player data relevant to their specific function.
• Automated monitoring for unusual login activity, including multiple failed login attempts and logins from unfamiliar locations or devices.
• Regular security reviews of platform infrastructure and data handling processes.

While we apply strong security practices, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by using a strong password, not sharing your credentials, and reporting any suspicious activity to support promptly.

11. Minors

The Rummy BD platform is strictly intended for adults aged 18 and above. We do not knowingly collect or process personal data from anyone under 18 years of age. If you believe that a minor has registered an account or provided personal data to the platform, please contact support immediately so that the account can be reviewed and the data removed.

If during identity verification we identify that an account holder is under 18, the account will be closed and any remaining balance will be handled in accordance with our Terms and Conditions. For guidance on preventing minors from accessing online gaming platforms, please visit the Responsible Gaming page.

12. Changes to This Privacy Policy

Rummy BD may update this Privacy Policy from time to time to reflect changes in platform features, payment services, legal requirements or data handling practices. When material changes are made, we will notify registered players through a platform notification or via their registered contact details.

The updated Policy will display a revised review date at the top of this page. Continued use of the platform after an updated Policy has been published constitutes your acceptance of the revised terms. We recommend checking this page whenever you notice the review date has changed.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal data has been handled, please get in touch with the Rummy BD support team. You can reach us through the in-platform support channel for the fastest response.

For privacy-specific requests, please include your registered username and a clear description of your request so that it can be directed to the right team without unnecessary delay.