1. Introduction
This Privacy Policy describes how Park Rummy ("we", "us", "the Platform") collects, uses, stores, and protects the personal information of players who register and use the Park Rummy gaming platform at parkrummy.com. This policy applies to all registered players and to visitors who browse the platform without an account.
Park Rummy is committed to handling your personal data with transparency, care, and respect. We understand that trust is everything in the relationship between a gaming platform and its players — and that trust starts with being completely clear about what happens to your information once you share it with us. This policy is written in plain language so that any player in Pakistan can understand it without needing a legal background.
By registering an account on Park Rummy you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any part of this policy, please do not register or continue using the platform.
Quick Summary:
Park Rummy collects only what it needs, uses it only for legitimate purposes, never sells it, protects it with strong security, and gives you control over it. The sections below explain each of these points in detail.
2. Who We Are
Park Rummy is an online gaming platform operated specifically for players in Pakistan. The platform offers Live Casino games, sports betting with a focus on PSL and cricket, Andar Bahar, Ludo Games, and related gaming products. All transactions on Park Rummy are conducted in Pakistani Rupees (PKR).
For data-related queries, you can contact the Park Rummy data team at the email address listed in Section 14 of this policy. We aim to respond to all data enquiries within 5 business days.
3. Data We Collect
Park Rummy collects the following categories of personal data. We do not collect anything beyond what is described here without first obtaining your specific consent.
| Category | Examples | Required? |
|---|
| Identity Data |
Full name, date of birth, CNIC number (if requested for verification) |
Yes |
| Contact Data |
Mobile number, email address |
Yes |
| Financial Data |
Easypaisa/JazzCash wallet numbers, bank account details for IBFT, card details (tokenised), transaction history |
Yes |
| Technical Data |
IP address, device type, browser type and version, operating system, session duration |
Auto |
| Usage Data |
Games played, bet history, deposit and withdrawal records, bonus activity, login timestamps |
Auto |
| Communication Data |
Support chat transcripts, emails sent to Park Rummy, feedback submitted through the platform |
Optional |
| Marketing Preferences |
Whether you have opted in or out of promotional communications |
Optional |
Technical and usage data is collected automatically when you use the platform. All other data is provided by you directly during registration or subsequent interactions with Park Rummy.
4. How We Collect Your Data
Park Rummy collects your personal data through several channels, all of which are under your direct control or are clearly disclosed at the point of interaction.
Direct Interactions
When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a promotion, you provide data directly to Park Rummy. This is the primary source of your personal information on the platform.
Automated Collection
When you browse or use the Park Rummy platform, certain technical data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, device identifiers, session length, and pages visited. This data helps us keep the platform secure, detect fraud, and understand how players navigate the site so we can improve it.
Third-Party Sources
Park Rummy may receive limited data about you from third parties in the following circumstances:
- Payment Providers: Easypaisa, JazzCash, NayaPay, SadaPay, banks, and card networks confirm transaction status and may provide tokenised payment identifiers.
- Identity Verification Services: If we engage a third-party verification provider to confirm your identity or age, that provider will supply a pass/fail result — not the underlying documentation.
- Fraud Prevention Tools: We may receive risk signals from third-party fraud detection systems to help protect your account and the platform from unauthorised access.
Note:
Park Rummy does not purchase data lists or acquire personal data from data brokers. All data we hold about you has come from your direct interaction with us or from the specific third-party sources listed above.
5. Why We Use Your Data
Park Rummy uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.
- Account Creation and Management: To register your Park Rummy account, verify your identity and age, and maintain your account in good standing throughout your membership.
- Processing PKR Transactions: To accept deposits, process withdrawals, apply bonus credits, and maintain an accurate, real-time record of your balance in Pakistani Rupees.
- Game Delivery and Platform Operation: To provide live casino games, sports betting markets, Ludo tournaments, Andar Bahar, and all other features of Park Rummy to you in a fair, functional, and uninterrupted manner.
- Customer Support: To respond to your queries, resolve disputes, investigate complaints, and communicate important account information such as security alerts or withdrawal confirmations.
- Legal and Regulatory Compliance: To meet anti-money-laundering (AML) obligations, age verification requirements, and any other legal duties applicable to operating a gaming platform serving Pakistani players.
- Fraud and Security: To detect and prevent fraudulent activity, account takeovers, collusion, and other prohibited behaviours that could harm you or other Park Rummy players.
- Platform Improvement: To analyse anonymous usage patterns so we can improve the platform experience — faster load times, better game navigation, and features our players actually want.
- Marketing Communications: To send you promotional offers, tournament notifications, and platform updates — but only if you have opted in to receive such communications. You can opt out at any time via your account settings or by contacting support.
6. Who We Share Your Data With
Park Rummy does not sell, rent, or trade your personal data. We share it only in the limited circumstances described below, and only to the extent necessary for the specific purpose.
Service Providers
We engage third-party service providers who process data on our behalf under strict contractual obligations. These include payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners), cloud infrastructure providers who host our platform servers, identity verification tools, and customer support software providers. All such providers are required to process your data only as instructed by Park Rummy and to maintain security standards consistent with our own.
Legal Obligations
Park Rummy may be required to disclose your personal data to government authorities, law enforcement agencies, or financial regulators in Pakistan where we are legally obligated to do so. We will only make such disclosures where required by a lawful order and will inform you where we are legally permitted to do so.
Business Transfers
In the event of a merger, acquisition, or sale of Park Rummy's business assets, your personal data may be transferred to the acquiring entity. In such circumstances you will be notified in advance and given the opportunity to close your account if you do not wish your data to be transferred.
We do not share with advertisers or data brokers.
Park Rummy does not share player data with advertising networks, social media platforms, or commercial data aggregators for the purpose of targeting you with advertising outside our platform.
7. Payment Data & PKR Transactions
Payment data is handled with the highest level of care at Park Rummy. When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, your full payment credentials are never stored in a raw, readable format on our servers.
Card details are tokenised — meaning we store a secure reference token issued by the payment processor, not your actual card number. Mobile wallet transactions are confirmed by the payment provider's own secure APIs, and only the transaction confirmation status and amount are recorded on our side.
Your full PKR transaction history — every deposit, withdrawal, bet, and balance adjustment — is stored in your account and accessible to you at any time through your account dashboard. This record is maintained for as long as your account is active and for a minimum of 5 years after account closure to meet our legal obligations.
Anti-Money Laundering (AML):
As required by applicable regulations, Park Rummy monitors transactions for patterns that may indicate money laundering or other financial crimes. Unusual activity may trigger a review, during which additional documentation may be requested. This is a legal obligation, not a reflection of suspicion against any individual player.
8. How Long We Keep Your Data
Park Rummy retains your personal data only for as long as it is needed for the purposes described in this policy, or as required by law. The table below outlines our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|
| Identity & Contact |
Duration of account + 5 years |
AML and legal compliance |
| Financial / Transaction |
Duration of account + 5 years |
Financial regulation requirements |
| Technical / Log Data |
Up to 12 months |
Security and fraud investigation |
| Usage / Game Data |
Duration of account + 2 years |
Dispute resolution, responsible gaming |
| Support Communications |
3 years from last interaction |
Quality assurance, dispute evidence |
| Marketing Preferences |
Until opt-out, then 1 year |
Preference record keeping |
Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked to any individual player.
9. Security Measures
Park Rummy applies a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security posture is continuously reviewed and updated to address emerging threats.
Technical Controls
- TLS 1.3 encryption is enforced for all data in transit between your device and our servers. This is the same encryption standard used by major international banks.
- Data at rest is encrypted using AES-256, an industry-standard algorithm that is computationally infeasible to break with current technology.
- Tokenisation of payment credentials means raw card numbers and mobile wallet details are never stored in our primary database.
- Regular penetration testing by independent security researchers identifies and allows us to remediate vulnerabilities before they can be exploited.
- Web application firewall (WAF) and DDoS protection safeguard the platform against common attack vectors.
Organisational Controls
- Access to personal data is restricted to Park Rummy staff who have a direct operational need for it, on a strictly controlled, role-based basis.
- All staff with data access receive regular privacy and security training.
- Data access is logged and audited. Anomalous access patterns trigger automated alerts for investigation.
- In the event of a data breach that is likely to result in risk to players, Park Rummy will notify affected players promptly with details of what occurred, what data was involved, and what steps are being taken.
Your Role in Account Security:
No security system is complete without you. Use a strong, unique password for your Park Rummy account, enable two-factor authentication if available, and never share your login credentials with anyone. If you suspect your account has been accessed without authorisation, contact Park Rummy support immediately.
10. Cookies & Tracking Technologies
Park Rummy uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our site. We do not use cookies for cross-site advertising or third-party behavioural tracking.
| Cookie Type | Purpose | Duration |
|---|
| Essential |
Keep you logged in during a session, remember your basket and game selections. Platform cannot function without these. |
Session |
| Preference |
Remember your language, display settings, and notification preferences so you do not have to reconfigure them on every visit. |
1 year |
| Analytics |
Collect anonymous, aggregated data on how players navigate the platform so we can identify usability improvements. No individual player is identifiable from this data. |
Up to 2 years |
| Security |
Help detect and prevent fraudulent login attempts, bot activity, and other security threats by analysing request patterns. |
Session / 30 days |
You can control cookie settings through your browser. Note that disabling essential cookies will prevent Park Rummy from functioning correctly — you will not be able to stay logged in or complete transactions without them. Preference and analytics cookies can be declined without affecting core functionality.
11. Your Data Rights
As a Park Rummy player, you have the following rights over your personal data. To exercise any of these rights, contact our support team with your account details and a description of your request.
Right of Access
Request a copy of all personal data Park Rummy holds about you. We will provide this in a readable format within 5 business days.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected promptly.
Right to Erasure
Request deletion of your personal data where it is no longer needed for the purpose it was collected, subject to our legal retention obligations.
Right to Data Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider if you choose.
Right to Object
Object to the processing of your data for direct marketing purposes at any time. Your objection will be honoured immediately upon receipt.
Right to Restriction
Request that Park Rummy restricts processing of your data — for example while we verify a rectification request or investigate a complaint.
How to Exercise Your Rights:
Email privacy@parkrummy.com with your full name, account ID, and a clear description of your request. We will acknowledge within 24 hours and respond substantively within 5 business days. There is no charge for exercising your data rights.
12. Minors & Age Protection
Park Rummy is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age declaration and we may request identity verification to confirm age where necessary.
If we discover that a player under 18 has registered an account, that account will be immediately closed, all data will be deleted (subject only to legal retention requirements that may apply to any associated financial transactions), and any deposits will be returned to source.
If you are a parent or guardian and believe a minor has registered on Park Rummy using false information, please contact our support team immediately at support@parkrummy.com. We will investigate and take appropriate action within 24 hours of receiving your report.
13. Changes to This Policy
Park Rummy may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services we offer. When we make material changes we will notify registered players via email and/or a prominent platform notice at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Minor, non-material updates (such as correcting a typo or clarifying a sentence without changing the substance) may be made without advance notice.
Continued use of Park Rummy after the effective date of any policy update constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and contact support to close your account and withdraw any remaining balance.
