Your privacy genuinely matters to CardRummy. This policy explains — in plain English — exactly what information we collect when you use cardrummy.ws, why we collect it, how we keep it safe, and what rights you have over it as a Pakistani player.
Privacy at a Glance
CardRummy operates the online gaming platform accessible at cardrummy.ws ("the Platform"). We are the data controller responsible for the personal information collected from players who register, deposit, play games, or otherwise interact with the CardRummy Platform.
When this Privacy Policy says "CardRummy", "we", "us", or "our", it refers to the entity operating cardrummy.ws. When it says "you" or "your", it means you as a registered or visiting player on our Platform. This Privacy Policy forms part of and should be read alongside our Terms and Conditions.
We take our data responsibilities seriously. We collect only what we actually need, use it only for legitimate purposes, protect it with appropriate security, and give you meaningful control over your own information. If you have any questions about how CardRummy handles your data, you can reach us at support@cardrummy.ws at any time.
This Privacy Policy applies to all players using CardRummy from Pakistan. By registering an account or using the Platform, you confirm that you have read and understood this policy.
CardRummy collects personal data from you in different ways depending on how you interact with the Platform. The categories of data we collect are described below.
When you create a CardRummy account, we collect your full legal name, Pakistani mobile number, date of birth, and the username and password you choose. This information is mandatory — without it, we cannot create or maintain a valid account for you on the Platform.
For the purpose of age verification, anti-money laundering compliance, and fraud prevention, CardRummy may request additional identity documents from you. This can include a copy of your Computerised National Identity Card (CNIC), passport, or other government-issued photo identification. We may also collect a selfie or photograph for facial comparison purposes where required by our verification procedures.
When you make deposits or withdrawals on CardRummy, we collect details of the payment method used — including your Easypaisa or JazzCash mobile number, NayaPay or SadaPay account details, bank account number for IBFT transfers, or partial card details (card type, last four digits, expiry) for Visa/Mastercard transactions. CardRummy does not store full card numbers. All payment data is handled through our certified payment processor partners.
We maintain detailed records of all betting activity associated with your CardRummy account — including game types played, bet amounts, wager outcomes, bonus claims, and balance history. This data is used to operate the Platform accurately, resolve disputes, and meet our regulatory obligations.
When you access CardRummy through any browser or device, we automatically collect technical information including your IP address, browser type and version, device type, operating system, screen resolution, session duration, pages visited, and referring URL. This data helps us operate and improve the Platform and is used as part of our fraud and security monitoring processes.
If you contact CardRummy support by email, live chat, or any other channel, we retain records of those communications — including your messages and our responses — to assist with dispute resolution and to improve our support quality over time.
| Data Category | Examples | Mandatory? |
|---|---|---|
| Registration Data | Name, mobile number, date of birth | Yes |
| Identity Documents | CNIC, passport, selfie | When requested |
| Financial Data | Payment account details, transaction history | Yes (to transact) |
| Gameplay Data | Bets placed, winnings, game history | Yes (automated) |
| Technical Data | IP address, device info, session logs | Yes (automated) |
| Communications | Support tickets, chat transcripts | When you contact us |
CardRummy uses the personal data we collect for the following purposes:
CardRummy does not use your personal data to make fully automated decisions that produce legal or similarly significant effects on you without human review. Any account suspension or restriction triggered automatically by our fraud monitoring systems is reviewed by a human member of the CardRummy team before being made permanent.
CardRummy processes your personal data on the following legal grounds depending on the purpose involved:
CardRummy does not sell, rent, or trade your personal data to any third party. We share data only in the following limited circumstances and only to the extent necessary for each purpose:
To process your deposits and withdrawals, CardRummy shares necessary payment data with our certified payment processing partners — including Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners for IBFT and card transactions. These partners are contractually bound to process your data only for payment purposes and to maintain appropriate security standards.
Where CardRummy requires identity verification, we work with certified KYC (Know Your Customer) service providers. These providers receive only the information necessary to complete the verification process and are prohibited from using it for any other purpose.
CardRummy uses third-party providers for hosting infrastructure, cloud storage, analytics, and customer support software. These providers act as data processors under written agreements that restrict their use of your data to the specific service they provide to CardRummy.
CardRummy will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, or where we believe disclosure is necessary to protect the rights, property, or safety of CardRummy, our players, or the general public. We will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of CardRummy's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity before the transfer takes effect.
CardRummy primarily stores and processes player data within data centres located in or serving the Asia-Pacific region. However, some of our technical service providers — particularly cloud infrastructure and analytics platforms — may process data in other jurisdictions.
Wherever data is transferred internationally, CardRummy ensures that appropriate safeguards are in place, including contractual data protection obligations equivalent to the standards described in this Privacy Policy. We do not transfer data to jurisdictions that lack adequate data protection frameworks without implementing specific protective measures.
If you would like more information about the specific safeguards in place for any international data transfer involving your personal data, please contact us at support@cardrummy.ws and we will respond within 5 working days.
CardRummy retains your personal data for as long as your account remains active and for a minimum period of five years after your account is closed. This post-closure retention period exists to meet our obligations under anti-money laundering regulations, to enable resolution of any disputes that arise after account closure, and to comply with other applicable legal requirements.
Gameplay and transaction records are retained for a minimum of seven years after the transaction date regardless of account status, in accordance with financial record-keeping requirements.
Communications data — including support tickets and chat logs — is retained for two years from the date of the last interaction, after which it is deleted or anonymised unless it forms part of an ongoing dispute or regulatory investigation.
When a retention period expires, CardRummy securely deletes or irreversibly anonymises the data so that it can no longer be linked back to you as an individual.
CardRummy takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.
No online platform can guarantee absolute security. You also play an important role in keeping your account safe — use a strong, unique password for your CardRummy account and never share your login credentials with anyone.
CardRummy uses cookies and similar tracking technologies on its Platform. A cookie is a small text file stored in your browser when you visit a website. Here is how we use them:
These cookies are strictly necessary for the CardRummy Platform to function. They maintain your login session, store your game preferences, and ensure secure access to your account. Essential cookies cannot be disabled without breaking core platform functionality.
CardRummy uses analytics cookies to understand how players interact with the Platform — which pages are visited most frequently, where players encounter difficulties, and how they navigate between sections. This data is collected in aggregate form and is used only to improve the Platform. Analytics cookies do not track your activity outside of cardrummy.ws.
Functional cookies remember your preferences — such as your preferred language, display settings, and betting interface options — to provide a more personalised experience each time you visit CardRummy.
You can manage non-essential cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when new cookies are set. Please note that disabling cookies may affect how certain parts of the CardRummy Platform function for you.
As a CardRummy player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@cardrummy.ws. We will respond within 30 days.
CardRummy is strictly intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is carried out at registration and may be requested again at any point during your use of the Platform.
If CardRummy discovers that it has collected personal data from a minor, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe a minor has created a CardRummy account, please contact us immediately at support@cardrummy.ws with relevant details and we will investigate and act without delay.
The CardRummy Platform may from time to time contain references to or links from third-party websites or services. This Privacy Policy applies only to cardrummy.ws and the CardRummy Platform. CardRummy has no control over and accepts no responsibility for the privacy practices or content of any third-party websites.
If you follow a link from CardRummy to a third-party site, we recommend that you read the privacy policy of that site before submitting any personal data to it. The presence of a reference or link on CardRummy does not constitute an endorsement of the third party's privacy practices.
CardRummy may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the Platform's functionality. The date of the most recent update is shown at the top of this page.
When we make material changes to this Privacy Policy, we will notify registered players via the mobile number or email address on their account at least 7 days before the updated policy takes effect. For minor changes — such as clarifications that do not affect how data is used — we will update the page without individual notification.
Continuing to use CardRummy after any updated Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using CardRummy and close your account before the effective date of the update.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how CardRummy is handling your personal data, please contact our team:
We take every privacy concern seriously and will respond substantively to your request. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
Six concrete protections CardRummy has built into the Platform from day one to ensure your personal information stays private and secure.
Every byte of data travelling between your phone and CardRummy's servers is protected by TLS encryption. Sensitive records stored in our databases use AES-256 at rest. Your data is protected whether it's moving or sitting still.
CardRummy never stores your full card number. All card payment processing goes through our PCI DSS-compliant payment partners. What we hold is a secure token — useless to anyone trying to misuse your financial data.
Inside CardRummy, access to player personal data is restricted on a need-to-know basis. Every team member with data access is subject to a confidentiality agreement and regular security training. We audit access logs continuously.
CardRummy's automated monitoring systems watch for unusual login attempts, suspicious transaction patterns, and multi-account activity around the clock. Alerts are reviewed by humans — so real threats get real responses, not just automated flags.
CardRummy does not sell, rent, or trade your personal data to marketers, data brokers, or any third party for commercial gain. The only sharing that happens is what's necessary to process your payments or verify your identity — nothing more.
If a data breach occurs that poses a real risk to your rights, CardRummy will notify you promptly and take immediate containment action. We do not wait or stay silent — you will hear from us directly, with details of what happened and what we are doing about it.
CardRummy is Pakistan's trusted online gaming platform. Your data is handled with care, your payments are secure, and your winnings reach your Easypaisa or JazzCash account in under 15 minutes. Register free and play today.
🔞 18+ only · Play Responsibly · Responsible Gaming · Terms & Conditions