PK Rummy Privacy Policy – How We Handle Your Personal Data

1. Introduction

PK Rummy ("we," "us," "the platform") operates the website pkrummy.bet and provides online gaming services to registered players. In the course of providing those services, pk rummy processes personal data relating to its players. This Privacy Policy describes how that data is collected, why it is used, with whom it may be shared, how long it is retained, and what rights you hold over it.

PK Rummy is committed to handling personal data responsibly and with transparency. This policy is written in plain English rather than technical legal language so that every pk rummy player — regardless of background — can understand exactly how their information is being managed. If any part of this policy is unclear, you are encouraged to contact pk rummy support for a plain explanation before continuing to use the platform.

The data controller for all personal data processed through pkrummy.bet is PK Rummy. All data-related enquiries, access requests, and deletion requests should be directed to support@pkrummy.bet.

2. What Personal Data We Collect

The following categories of personal data are collected by pk rummy:

PK Rummy does not collect sensitive categories of personal data such as biometric data, health information, political opinions, or religious beliefs.

3. How We Collect Your Data

PK Rummy collects personal data through the following means:

• Direct submission at registration: when you create your account, you provide your name, date of birth, email, and mobile number.
• KYC verification: when you submit identity documents for verification prior to your first withdrawal.
• Payment processing: when you deposit or withdraw, your payment provider communicates relevant transaction data to pk rummy.
• Platform usage: automatically as you navigate and use pkrummy.bet — device information, IP addresses, and session data are logged by our security systems.
• Support interactions: when you contact pk rummy's support team via live chat or email, the content of that communication is recorded.
• Cookies and similar technologies: as described in the Cookies section of this policy.

PK Rummy does not purchase personal data from third-party data brokers and does not accept data about you from sources other than those listed above without your explicit prior consent.

4. How We Use Your Data

PK Rummy uses your personal data for the following specific purposes, each supported by a lawful processing basis:

• Account management and access: maintaining your account, authenticating your login, and enabling platform features. Basis: performance of contract.
• Payment processing: verifying and processing deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Basis: performance of contract.
• Identity and age verification (KYC): confirming you are who you say you are and that you meet the 18+ age requirement. Basis: legal obligation.
• Anti-money laundering (AML) and fraud prevention: monitoring transactions for patterns consistent with financial crime and reporting as legally required. Basis: legal obligation.
• Responsible gaming monitoring: using your gaming activity data to identify patterns that may indicate problem gambling, and providing appropriate interventions. Basis: legitimate interest / legal obligation.
• Customer support: responding to your queries, resolving disputes, and maintaining support quality. Basis: performance of contract.
• Platform security: detecting and preventing unauthorised access, cheating, bot usage, and other security threats. Basis: legitimate interest.
• Service communications: sending you account-related notifications — balance alerts, withdrawal confirmations, and security alerts. Basis: performance of contract.
• Promotional communications: sending you bonus offers and promotions — only if you have opted in to receive them. You may opt out at any time through your account settings. Basis: consent.

5. Data Sharing

PK Rummy does not sell your personal data. The following categories of third parties may receive your data in the course of service delivery:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: specialised KYC service providers who assist in verifying the authenticity of identity documents submitted by players.
• Game software providers: third-party game developers whose software powers certain games on pk rummy may receive anonymised session data for quality and technical purposes.
• Legal and regulatory authorities: where required by law — including anti-money laundering reporting obligations — pk rummy may share data with the Financial Monitoring Unit (FMU) of Pakistan or other competent authorities.
• Platform security and fraud detection services: specialist security providers who assist pk rummy in detecting fraudulent activity and protecting platform integrity.

All third-party service providers are required to handle your data in accordance with applicable data protection standards and are only permitted to process your data for the specific purpose for which it was shared.

6. Data Retention

PK Rummy retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any legal retention obligations. General retention principles are as follows:

• Account data and KYC documents are retained for the duration of your active account and for a minimum of five years following account closure, in accordance with AML compliance requirements.
• Financial transaction records are retained for seven years from the date of the transaction, as required by Pakistani financial regulation.
• Gaming activity records are retained for the duration of your account and for two years following closure, for dispute resolution purposes.
• Technical and device logs are retained on a rolling 90-day basis and then securely deleted.
• Support communications are retained for three years from the date of the last interaction.

Upon the expiry of a retention period, data is securely deleted or anonymised so that it can no longer be linked to an individual player. If you request deletion of your account before a retention period has expired, pk rummy will delete all data that is not subject to a legal retention obligation and explain clearly what data must be retained and why.

7. Data Security

PK Rummy implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and pkrummy.bet.
• Encrypted storage for all personal data, identity documents, and financial records held in pk rummy's systems.
• Role-based access control — only staff members with a specific operational need to access certain categories of data are authorised to do so, and all such access is logged.
• Two-factor authentication options available for your pk rummy account to reduce the risk of unauthorised access.
• Regular security audits and penetration testing of platform infrastructure.
• Incident response procedures including breach detection, containment, and notification protocols.

No system is 100% immune to security threats. PK Rummy takes every reasonable measure to protect your data, but we cannot guarantee absolute security. You play an important role too — please use a strong, unique password for your pk rummy account and never share your login credentials with anyone.

8. Cookies and Tracking Technologies

PK Rummy uses cookies and similar tracking technologies on pkrummy.bet to support platform functionality, maintain your session, and improve the user experience. The following types of cookies are in use:

PK Rummy does not use third-party advertising cookies or tracking pixels for cross-site advertising purposes. Analytics cookies collect only anonymised, aggregated data and do not identify you personally. You can manage cookie preferences through your browser settings, though disabling essential cookies will prevent you from logging into your pk rummy account.

9. Your Data Rights

As a pk rummy player, you hold the following rights in relation to your personal data:

To exercise any of these rights, please contact pk rummy at support@pkrummy.bet. We will ask you to verify your identity before processing any data rights request to ensure the request is genuinely coming from the account holder.

10. Under-18 Policy

PK Rummy's services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.

Age verification is a mandatory step in the KYC process for all players on pk rummy. If we become aware that personal data has been collected from a person under the age of 18, we will immediately close the associated account, delete the data as rapidly as legally permissible, and if applicable, return any deposited funds to the originating payment method.

If you are a parent or guardian and believe your child has registered on pk rummy, please contact us immediately at support@pkrummy.bet with relevant details so we can take immediate action.

11. International Data Transfers

Some of pk rummy's service providers — particularly specialist KYC verification providers and certain game software partners — may be located outside Pakistan. Where personal data is transferred to these partners, pk rummy ensures that appropriate safeguards are in place to protect that data to a standard at least equivalent to that applied within Pakistan.

PK Rummy does not transfer financial transaction data or CNIC documents outside Pakistan except where strictly required for identity verification by a certified verification partner operating under a data processing agreement with pk rummy. All such transfers are subject to contractual data protection obligations and are logged for compliance purposes.

12. Changes to This Privacy Policy

PK Rummy may update this Privacy Policy from time to time. When significant changes are made, players will be notified via email or a platform-level notification before the changes take effect. The "Last Updated" date at the top of this page will always reflect when this policy was most recently revised.

Your continued use of pk rummy after a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with any change, you have the right to close your account and request deletion of your data as described in Section 9 above.

13. Contact & Data Requests

For any question, concern, or request relating to this Privacy Policy or your personal data held by pk rummy, please get in touch through the following channels:

• Email (preferred for data requests): support@pkrummy.bet
• Live Chat: available 24/7 from your pk rummy account dashboard — in Urdu or English
• Response time: data access and deletion requests are processed within 30 days of receiving your verified request

When submitting a data rights request, please state clearly which right you are exercising and include enough information for us to identify your account securely. We will ask for identity verification before processing any request that results in disclosure or deletion of personal data.