This Privacy Policy explains how cardrummy collects, uses, stores and protects your personal information when you use our platform. We know that handing over personal details to any online service requires trust — so we want to be completely clear about what we do with your data, why we do it, and what rights you have over it as a Pakistani player on cardrummy.
Before you read the full policy, here is a plain-language summary of the six most important privacy commitments cardrummy makes to every Pakistani player.
Every piece of data you send to cardrummy — registration details, payment information, betting activity — travels over TLS-encrypted connections. At rest, sensitive records are stored using industry-standard encryption so that even an internal breach cannot expose your raw personal data.
CardrRummy does not sell, rent or trade your personal information to third-party marketers. Full stop. Your data is used to operate your account, process your PKR transactions, and improve your experience on cardrummy — not to generate revenue through data brokerage.
When you pay via Easypaisa, JazzCash, NayaPay, or card, the full payment credentials are processed by the respective secure payment gateway. CardrRummy only receives a transaction confirmation token — your full card number or wallet PIN is never stored on our servers.
You can request a copy of all data cardrummy holds about you, ask us to correct inaccurate records, or request deletion of your account data at any time. Requests are processed within 30 days and are completely free of charge for all Pakistani players.
CardrRummy's player data is stored and processed on secured infrastructure. Transfers to any third-party processor are governed by strict data processing agreements requiring the same standard of protection we apply internally.
If we make a significant change to how cardrummy handles your personal data, we will notify you via SMS or in-platform alert before the change takes effect — not after. You always have the option to close your account if you do not agree with revised practices.
CardrRummy operates the online gaming platform available at cardrummy.best. We are the data controller responsible for the personal information you provide when you register, deposit, play games, place sports bets, or otherwise interact with our services. The cardrummy platform is designed specifically for Pakistani players and all account balances, transactions, and communications are handled in Pakistani Rupees (PKR).
This Privacy Policy applies to all information collected through the cardrummy website, mobile interface, and any associated services. It does not apply to third-party websites or services that may be linked to from the cardrummy platform — each of those has its own privacy practices which you should review independently.
If you have any questions about this policy or how cardrummy handles your data, the contact details in Section 13 are the right place to start. Our data team is reachable in both English and Urdu and aims to respond to all privacy queries within 48 hours.
CardrRummy collects personal information through several routes. Some information is provided directly by you during registration and account use. Some is generated automatically as you interact with the platform. Some comes from payment processors when you make transactions. Here is a clear breakdown:
| Data Category | Example | Collection Method | Required? |
|---|---|---|---|
| Identity | Name, CNIC, DOB | Registration / KYC | Yes |
| Contact | Mobile number | Registration | Yes |
| Payment | Easypaisa wallet ID | Deposit / Withdrawal | Yes |
| Device | OS, browser, device ID | Automatic | Automatic |
| Betting history | Stakes, outcomes, PKR amounts | Platform activity | Automatic |
| Communications | Support chat logs | Player-initiated | When used |
CardrRummy uses the data it collects for specific, defined purposes. We do not use your data for anything beyond what is described here without notifying you first.
Your identity data, mobile number and payment details are essential to create and maintain your cardrummy account, process PKR deposits and withdrawals, and verify that transactions are authorised by you. Without this data, we cannot provide the service at all.
CardrRummy uses device data, IP addresses, session patterns, and transaction history to detect and prevent fraudulent activity — including duplicate account creation, money laundering, bot usage, and payment fraud. This protects not just cardrummy but every genuine Pakistani player on the platform.
We monitor betting patterns and session data to identify players who may be showing signs of problem gambling behaviour. This allows cardrummy to apply protective interventions — such as displaying responsible gaming reminders or triggering a review — before harm escalates. Your responsible gaming preferences (limits, self-exclusion) are stored and enforced using your account data.
When you contact cardrummy support, we use your account data and communication history to identify you, understand the context of your query, and resolve it efficiently. Support interactions are logged for quality assurance and training purposes.
Aggregated and anonymised usage data helps cardrummy understand how Pakistani players interact with the platform — which games are most popular, where navigation breaks down, which features are underused — allowing us to prioritise improvements that genuinely matter to our users.
With your consent, cardrummy may send you promotional SMS messages about bonuses, new games, live cricket score alerts, and special events. You can withdraw consent for marketing communications at any time by replying STOP to any SMS or contacting support. Withdrawal of marketing consent does not affect your account or your ability to receive essential account communications.
No profiling for credit or insurance: CardrRummy does not use your data to make automated decisions that affect your access to credit, insurance, or other financial products. Our automated processing is limited to fraud detection and responsible gaming monitoring — both of which are reviewed by human staff when action is required.
CardrRummy processes your personal data on the following legal grounds, depending on the purpose:
CardrRummy does not sell your personal data. We share it only in the following limited circumstances and only to the extent strictly necessary:
When you deposit or withdraw on cardrummy, your transaction details are shared with the relevant payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card network. This sharing is essential to complete the transaction. Each payment processor operates under their own privacy policy and data security standards.
Where KYC verification is required, cardrummy may use a third-party identity verification service to confirm the authenticity of CNIC documents and verify liveness. These providers process your data on our behalf under strict data processing agreements and are not permitted to use your data for any purpose beyond verification.
CardrRummy uses cloud infrastructure, CDN services, and software platforms to operate the website and mobile interface. These providers may technically handle your data as part of providing their services but are contractually prohibited from accessing, reading, or using it for their own purposes.
CardrRummy may disclose personal data to Pakistani law enforcement, regulatory authorities, or courts when legally required to do so — for example, in response to a valid court order or as part of a financial crime investigation. We will notify you of any such disclosure where we are legally permitted to do so.
We do not share data with advertisers. CardrRummy does not share any player data with advertising networks, data brokers, or marketing platforms. Your browsing and gaming activity on cardrummy is not sold or exchanged for advertising revenue.
Payment security is one of the areas Pakistani cardrummy players ask about most, so we want to be specific here.
When you deposit via Easypaisa or JazzCash, the transaction is initiated through their respective secure payment interfaces. CardrRummy receives only a transaction ID and a confirmation status — we never see your Easypaisa PIN, JazzCash mobile money PIN, or any equivalent credential. The same applies to NayaPay and SadaPay.
For card payments (Visa/Mastercard), the card number, expiry date and CVV are entered directly into the payment gateway's PCI-DSS-compliant interface. CardrRummy's servers are never in the data path for raw card details. We store only the last four digits of any card used on your account, along with the card type and expiry month/year, for the purpose of allowing you to manage your saved payment methods.
All communication between your device and cardrummy uses TLS 1.2 or higher. Our authentication systems support multi-factor verification via OTP to your registered Pakistani mobile number. Internally, access to player account data is restricted to staff with a specific operational need and is logged for audit purposes.
In the event of a data breach affecting your cardrummy account, we will notify affected players as promptly as operationally possible and provide guidance on any protective steps you should take.
CardrRummy uses cookies and similar technologies (local storage, session tokens) to operate the platform and improve your experience. Here is what we use and why:
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Session Cookies | Keep you logged in during your cardrummy session, maintain your bet slip and game state | Session only | Yes |
| Security Cookies | CSRF protection, fraud detection signals, device fingerprinting for account security | 30 days | Yes |
| Preference Cookies | Remember your language, game lobby layout, and display preferences on cardrummy | 1 year | Optional |
| Analytics Cookies | Anonymised usage data to understand how Pakistani players navigate cardrummy and identify improvements | 90 days | Optional |
| Marketing Cookies | Track whether you arrived at cardrummy via a promotional link, to attribute bonus eligibility correctly | 30 days | Optional |
You can manage your cookie preferences through your browser settings. Blocking essential session and security cookies will prevent cardrummy from functioning correctly. Blocking optional analytics and preference cookies will not affect your ability to play, bet, deposit or withdraw.
CardrRummy does not use third-party advertising trackers or social media pixels. The analytics tools we use operate on anonymised, aggregated data and are configured to minimise personal data exposure.
CardrRummy does not keep your personal data for longer than necessary. The specific retention periods we apply are:
After account deletion: When you request deletion of your cardrummy account, your personal profile and gaming preferences are removed immediately. Transaction records and KYC documents are retained only for the legally required periods above, after which they are securely destroyed.
As a cardrummy player based in Pakistan, you have the following rights over your personal data. All requests are free of charge and will be responded to within 30 days.
Request a copy of all personal data cardrummy holds about you, including your account data, betting history, and any KYC documents we have on file.
Ask cardrummy to correct any inaccurate or incomplete personal information in your account — for example, a misspelled name or incorrect date of birth.
Request deletion of your personal data from cardrummy's systems, subject to our legal obligation to retain certain financial records as described in Section 8.
Object to cardrummy processing your data for marketing purposes or for uses based on our legitimate interests. You can opt out of marketing SMS at any time.
Request your cardrummy account data in a structured, machine-readable format (JSON or CSV) so you can transfer it to another service if you choose.
Ask cardrummy to restrict processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being investigated.
To exercise any of these rights, contact cardrummy support via live chat or email at support@cardrummy.best. You will need to verify your identity before we process a data rights request to ensure we only release or modify data belonging to you. Full details are in Section 13.
CardrRummy is strictly for players aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. Our registration process requires date of birth and we apply age verification checks to enforce this requirement.
If you believe a minor has registered on cardrummy or that a child's personal data has been collected in error, please contact us immediately at support@cardrummy.best. We will investigate promptly, close the account, delete the associated data, and return any deposits to the payment source used.
Parents and guardians are encouraged to use device-level parental controls and to be aware of the online gaming services their children can access. CardrRummy's responsible gaming tools, including account self-exclusion, are also available to any adult who wishes to prevent access to the platform from shared devices.
The cardrummy platform may contain links to or integrations with third-party services — for example, the payment gateway interface for Easypaisa or JazzCash that opens when you initiate a deposit. Once you leave the cardrummy platform and enter a third-party environment, this Privacy Policy no longer applies. The third party's own privacy practices govern how your data is handled in their system.
CardrRummy does not embed third-party social media widgets, advertising networks, or tracking pixels that would allow those third parties to observe your activity on our platform. The live cricket score feature on cardrummy uses data feeds accessed by our own backend — it does not embed external widgets that track your browsing.
CardrRummy may update this Privacy Policy from time to time to reflect changes in the platform, changes in applicable law, or improvements to our data practices. The "Last Updated" date at the top of this page reflects when the most recent change was made.
For material changes — changes that significantly affect your rights or how we use your data — cardrummy will notify registered Pakistani players via SMS or an in-platform notification at least 7 days before the change takes effect. You will always have the option to close your account if you do not agree with the revised policy before it comes into force.
Continued use of the cardrummy platform after the effective date of a policy update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically even outside of direct notifications.
For any question about this Privacy Policy or about how cardrummy handles your personal data, you can reach our team through the following channels. All communications are handled in English and Urdu.
If you are not satisfied with how cardrummy has handled a privacy concern, you have the right to escalate. We ask that you first give our team the opportunity to resolve the issue directly — most privacy concerns can be addressed quickly through live chat or email. Formal complaints that remain unresolved can be escalated to our Data Protection Officer at the email address above, marked "Formal Complaint — Data Protection".
Data Rights Requests: When submitting a request to access, correct, delete or export your data, please include your registered mobile number and account ID so we can verify your identity and process your request within the 30-day response window.
Join cardrummy with full confidence that your personal data is handled transparently, securely, and in line with everything described above. PKR accounts, instant Easypaisa withdrawals, and a platform built for Pakistani players.