Privacy Policy – CardRummy Pakistan Data Protection

1. What We Collect

CardRummy collects personal information in several ways — directly from you when you register or use the platform, automatically through your device and browser, and from payment partners when you make a deposit or withdrawal. Below is a summary of what is collected and why.

We only collect information that is genuinely needed for the purposes described above. If we need to collect additional categories of data for a specific purpose, we will update this policy and notify you accordingly.

2. How We Use Your Data

CardRummy uses your personal information to run the platform, keep your account secure, and provide you with a smooth betting and gaming experience. Specifically, your data is used to:

• Create and manage your CardRummy account and verify your identity.
• Process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, and other supported payment methods.
• Provide customer support and respond to your queries or complaints.
• Monitor gaming activity to support responsible gaming tools including deposit limits, session reminders, and self-exclusion.
• Detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities.
• Send you transactional notifications such as deposit confirmations, withdrawal updates, and security alerts.
• Send you promotional communications about bonuses, sports betting markets, PSL fixtures, slot game launches, and VIP programme updates — only where you have opted in to receive such messages.
• Improve the performance and content of the CardRummy platform based on anonymised usage data.
• Comply with applicable legal and compliance obligations.

3. Payments and Transaction Data

When you make a deposit or request a withdrawal through CardRummy, your transaction is processed via your selected payment method — JazzCash, Easypaisa, Raast, standard bank transfer, debit or credit card, or another supported mobile wallet. All transactions on the platform are denominated in Pakistani Rupees (PKR).

What We Store

CardRummy stores a record of each transaction including the amount in PKR, the date and time, the payment method type used, and the transaction status. We do not store full card numbers, JazzCash PINs, Easypaisa wallet passwords, or any other sensitive authentication credentials. Payment credentials are handled directly by the relevant payment processor and are never passed through or stored on CardRummy servers.

Third-Party Payment Processors

To process PKR payments, CardRummy works with payment processing partners. When you initiate a transaction, certain data — such as your account reference, transaction amount, and payment method identifier — is shared with the relevant processor solely for the purpose of completing the transaction. These partners are bound by data processing agreements and are prohibited from using your payment data for any other purpose.

4. Sharing Your Data

CardRummy does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Your data may be shared in the following limited circumstances:

Service Partners

CardRummy works with a small number of carefully selected third-party service providers who assist with operating the platform. These include payment processors, identity verification providers, customer support software providers, and security and fraud detection services. All service partners are required to handle your data strictly in accordance with their data processing agreements with CardRummy and may not use your data for their own purposes.

Legal and Compliance Requirements

CardRummy may be required to disclose personal information in response to a valid legal request from a court or competent authority. In such circumstances, we will disclose only the minimum information necessary to satisfy the legal obligation, and where permitted by law, we will attempt to notify you of any such disclosure.

Business Transfers

In the unlikely event that CardRummy is subject to a merger, acquisition, or sale of assets, player data may be transferred as part of that transaction. Any successor entity would be required to honour the terms of this Privacy Policy or notify you of any material changes before applying them.

5. Cookies and Tracking Technologies

CardRummy uses cookies and similar technologies to make the platform work properly and to understand how it is being used. A cookie is a small text file placed on your device when you visit a website. CardRummy uses the following types of cookies:

• Essential Cookies — required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect your account. You cannot opt out of essential cookies without stopping use of the platform.
• Functional Cookies — remember your preferences such as language settings, preferred sports markets, and display options. These are not strictly necessary but improve your experience on the platform.
• Analytics Cookies — used to understand which features and pages are used most frequently, helping the CardRummy team improve the platform. Analytics data is aggregated and anonymised where possible.

CardRummy does not use third-party advertising or retargeting cookies. You will not see CardRummy banner advertisements following you around other websites based on your activity on this platform.

Most browsers allow you to manage cookie settings directly. Disabling functional or analytics cookies may affect the quality of your experience but will not prevent you from accessing core platform features.

6. Data Security

Keeping your personal data secure is a priority at CardRummy. We apply a range of technical and organisational measures to protect your information against unauthorised access, loss, or misuse. These measures include:

• Encryption of data in transit using industry-standard TLS protocols.
• Secure storage of account passwords using one-way hashing — meaning your actual password is never stored in readable form.
• Access controls that restrict internal access to personal data to only those team members who need it to perform their role.
• Regular security reviews and monitoring of the platform for unusual activity or potential vulnerabilities.
• Two-factor authentication options for player accounts to add an extra layer of protection beyond password alone.

Despite these measures, no online platform can guarantee absolute security. You also play an important role in protecting your account — use a strong, unique password, do not share your login credentials with anyone, and contact support immediately if you suspect any unauthorised access to your account.

7. Your Rights Over Your Data

As a CardRummy player, you have meaningful rights over the personal information we hold about you. You can exercise any of the following rights by contacting our support team:

To exercise any of these rights, contact our support team with your registered account details and a clear description of your request. We aim to respond within 30 days. In some cases, particularly for erasure requests, we may be required to retain certain data for legal or compliance reasons — we will always explain this clearly if it applies.

8. Data Retention

CardRummy retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal, financial, and compliance obligations. In general terms:

• Account and identity data is retained for the duration of your account and for a minimum period following closure to satisfy record-keeping obligations.
• Transaction records including deposit and withdrawal history in PKR are retained for the period required under applicable financial recordkeeping rules.
• Gaming activity data is retained to support responsible gaming monitoring and to allow investigation of any disputes raised after the fact.
• Support communications including live chat logs and email exchanges are retained for a reasonable period to maintain a record of resolutions and to improve service quality.
• Marketing preferences are retained until you update them or request deletion, even if your account is closed, to ensure we honour your opt-out choices.

When data is no longer required and no legal obligation requires us to retain it, it is securely deleted or anonymised so that it can no longer be attributed to you.

9. Minors and Under-18 Players

CardRummy is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18. During registration, players are required to confirm that they are 18 or older. If CardRummy becomes aware that an account has been registered by a person under 18, the account will be closed immediately, any deposited funds will be returned to the original payment source, and all associated personal data will be deleted from our systems as promptly as possible.

If you believe a person under 18 has registered an account on CardRummy, please contact our support team immediately so that we can investigate and take appropriate action without delay.

10. Changes to This Privacy Policy

CardRummy may update this Privacy Policy periodically to reflect changes in how we operate, changes in the services we offer to Pakistani players, or changes in applicable legal requirements. When we make material changes to the policy, we will notify registered players via email or through a notice displayed on the platform before the changes take effect. The updated policy will always be available on this page with a revised effective date at the top.

Your continued use of the CardRummy platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated policy, you should stop using the platform and may request account closure by contacting support.

11. Contact and Privacy Queries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled, please get in touch with our support team. We take privacy queries seriously and will respond as promptly as possible.

For general platform questions, account issues, and betting queries, our full FAQ is available at /faq. Further information about responsible gaming tools and self-exclusion options can be found on our Responsible Gaming page.