PK Rummy Privacy Policy — How We Handle Your Data

1 What Personal Data We Collect

When you interact with PK Rummy — whether registering, depositing, playing, or contacting support — we collect certain information about you. The categories of data we may collect include:

• Identity data: Your full name, date of birth, gender, and CNIC or passport number (required for identity verification).
• Contact data: Your email address, mobile number, and residential address in Pakistan.
• Account data: Your chosen username, account preferences, login history, and session information.
• Financial data: Payment method details (JazzCash account, Easypaisa number, Raast ID, bank account details), deposit amounts, withdrawal requests, and transaction history. Note: we do not store full payment card numbers — these are processed by our payment partners.
• Gameplay data: Records of games played, bets placed, wagers on cricket, PSL events or Live Casino tables, game outcomes, bonus usage, and balance history.
• Technical data: IP address, browser type, device type, operating system, and referral source. This is collected automatically when you visit or use PK Rummy.
• Communications data: Any messages sent to PK Rummy support, including live chat transcripts and email correspondence.
• Verification documents: Copies of identity documents uploaded during the KYC (Know Your Customer) verification process.

2 How We Collect Your Data

Personal data is collected through the following means:

• Directly from you — when you register, complete your profile, submit KYC documents, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, session tracking, and server logs when you visit or use the PK Rummy website or mobile app. This includes technical data such as your IP address and device information.
• Third-party services — payment processors (such as JazzCash, Easypaisa, Raast, and banking partners) may share transaction confirmation data with us. Identity verification partners may provide data from document checks. Fraud prevention services may flag activity patterns to us.

We do not purchase or acquire personal data about you from unrelated third-party marketing databases.

3 Why We Use Your Data

PK Rummy uses your personal data for specific, legitimate purposes only. We do not process data beyond what is necessary for those purposes:

We may also send you promotional communications about new games, cricket betting offers, PSL promotions, and platform updates if you have opted in to marketing messages. You can opt out at any time through your account settings or by contacting support.

4 Who We Share Your Data With

PK Rummy shares personal data only when genuinely necessary and only with parties who are bound by confidentiality and data protection obligations. The categories of recipients are:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners, and card processors — to complete your deposit and withdrawal transactions. These providers receive only the data required to process the specific transaction.
• Identity verification providers: Third-party KYC services that help us verify your identity documents, such as CNIC or passport checks. These providers operate under strict data agreements.
• Fraud prevention and security services: Specialist providers that help detect suspicious account activity, collusion patterns, bot usage, and unauthorised access attempts.
• Technology infrastructure providers: Hosting, cloud storage, and platform infrastructure partners that process data on our behalf under contractual data processing agreements.
• Legal and regulatory bodies: Where required by applicable law or in response to a valid legal request, PK Rummy may disclose data to relevant authorities. We will inform you of such requests where we are legally permitted to do so.

5 Data Storage and Security

Your data is stored on secure servers protected by industry-standard technical and organisational security measures. These include:

• SSL/TLS encryption for all data in transit between your device and PK Rummy servers.
• Encryption at rest for sensitive data including identity documents and financial records.
• Role-based access controls — only authorised staff with a specific operational need can access player data.
• Regular security audits and vulnerability assessments of our platform infrastructure.
• Intrusion detection systems and automated monitoring for unusual access patterns.
• Secure password hashing — we never store your password in plain text.

Despite our best efforts, no system can guarantee absolute security. In the event of a data breach that poses a risk to your rights, PK Rummy will notify affected players promptly and take immediate remedial action.

You also play a role in keeping your account secure. Use a strong, unique password for your PK Rummy account and never share your login credentials with anyone. If you suspect your account has been accessed by someone else, contact support immediately.

6 How Long We Retain Your Data

PK Rummy retains personal data for as long as necessary to fulfil the purposes for which it was collected, plus any additional period required by legal or regulatory obligations. As a general guide:

• Active account data is retained for the full duration of your account's existence plus a standard post-closure period to handle any disputes or regulatory enquiries.
• Transaction and financial records (deposits, withdrawals, game history) are retained for a minimum of five years following the transaction date to meet anti-money laundering and financial record-keeping obligations.
• Identity verification documents are retained for as long as legally required following account closure.
• Support communications are retained for up to three years to support dispute resolution and quality assurance.
• Technical and analytics data in aggregated, anonymised form may be retained indefinitely for platform improvement purposes.

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you.

7 Cookies and Tracking Technologies

PK Rummy uses cookies and similar tracking technologies to make the platform work correctly and to improve your experience. Here is what we use and why:

• Essential cookies: Required for core platform functions such as keeping you logged in during a session, remembering your preferences, and maintaining security checks. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to understand how players use PK Rummy — which pages are visited most, where users navigate from, and how long sessions last. This data is used in aggregated form to improve the platform and is not tied to your personal identity.
• Session cookies: Temporary cookies that expire when you close your browser, used to manage your current visit to the platform.
• Persistent cookies: Stored on your device for a set period to remember your preferences across sessions, such as language or display settings.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect how PK Rummy functions on your device. We do not use third-party advertising cookies or tracking pixels for external ad targeting.

8 Your Data Rights

As a PK Rummy player, you have the following rights regarding your personal data. To exercise any of these rights, contact PK Rummy support with your request and we will respond within a reasonable timeframe:

• Right of access: You can request a copy of the personal data PK Rummy holds about you, including what data we have, where it came from, and how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you can request that it be corrected.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Note that some data must be retained by law — for example, transaction records — and cannot be erased on request.
• Right to restrict processing: You may ask us to pause processing of your data in specific situations, such as while a dispute is being resolved.
• Right to data portability: You may request your data in a structured, machine-readable format where technically feasible.
• Right to object: You can object to us processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though we may have overriding grounds to continue.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9 Minors and Age Policy

PK Rummy is strictly an adults-only platform. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Our registration process includes an age declaration and we carry out age verification checks as part of our KYC process.

If a parent or guardian believes their child has registered an account on PK Rummy without consent, they should contact us immediately at [email protected]. Upon confirmation, the account will be closed and any identifiable personal data deleted in accordance with applicable obligations.

We also encourage parents and guardians to make use of parental control tools and internet filtering software to prevent underage individuals from accessing online gaming platforms.

10 Updates to This Privacy Policy

PK Rummy may update this Privacy Policy from time to time to reflect changes in how we operate, improvements to our security practices, or updates to applicable legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.

For material changes that meaningfully affect how your data is used, we will notify active players via email or an in-platform notification where practical. We encourage you to review this page periodically so you are always aware of how your information is being handled.

Continuing to use PK Rummy after a policy update has been published constitutes acceptance of the revised Privacy Policy. If you do not agree with an update, you should contact support to discuss your options, including account closure.

11 Contact Us About Privacy

If you have a question about this Privacy Policy, want to know more about how your specific data is used, or wish to make a data rights request, our support team is available around the clock.

When contacting us about a privacy matter, please include your registered account email address so we can locate your account securely, and describe your request clearly. We aim to acknowledge all privacy-related enquiries promptly.