1 Who We Are and Who This Policy Covers
Gold Rummy ("we", "us", "our") is the operator of the online gaming platform available at goldrummy.ws. We are committed to protecting the privacy and personal data of every individual who uses our platform, which we will refer to as "you" or "Player" throughout this document.
This Privacy Policy applies to all personal data collected through goldrummy.ws, any associated mobile-optimised pages, our customer support communication channels (email and live chat) and any other interaction you have with Gold Rummy as part of your account lifecycle — from registration right through to account closure.
By registering a Gold Rummy account or continuing to use the platform after this Privacy Policy has been updated, you confirm that you have read and understood how your personal data is handled as described here. If you have questions about anything in this document before or after reading it, please contact us at support@goldrummy.ws. We will respond in plain, clear language within 48 hours.
Simple version: Gold Rummy is the controller of your data. We collect it to run your account, process your payments and keep the platform secure. We do not sell your data. We protect it using industry-standard encryption and only share it when legally required or strictly necessary to operate the platform.
2 What Personal Data We Collect
We collect personal data in two ways: information you provide directly to us, and information that is generated automatically when you use the platform.
Information You Provide Directly
- Registration data: Your full name, Pakistani mobile number, date of birth and, where applicable, email address.
- Identity verification (KYC) data: A copy of your CNIC (Computerised National Identity Card) and, when required, proof of payment method ownership such as a screenshot of your Easypaisa or JazzCash account.
- Payment information: The details required to process deposits and withdrawals via your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard. Full card numbers are never stored by Gold Rummy directly; they are processed through our certified payment partners.
- Support communications: The content of any messages, emails or live chat conversations you have with our support team.
- Responsible gaming preferences: Any deposit limits, loss limits, session reminders or self-exclusion instructions you provide through the responsible gaming section of your account.
Information Collected Automatically
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution and mobile network carrier.
- Usage data: Pages visited on the platform, games played, bet amounts, session duration, login timestamps and navigation patterns.
- Transaction data: The complete history of deposits, withdrawals, bonus claims and gameplay activity associated with your account.
- Cookies and similar technologies: As described in Section 5 of this Privacy Policy.
What we do not collect: We do not collect biometric data, location data beyond your IP-derived country, or any information about your social media profiles unless you contact us via a social channel and explicitly share that information with us.
Data Collection Summary
3 Why We Collect Your Data — Legal Basis and Purpose
Gold Rummy collects and uses personal data only when there is a legitimate reason to do so. The main purposes for which we use your data are listed below, along with the legal basis for each.
- To operate your account (contractual necessity): Processing your registration, maintaining your account balance, recording your gameplay history and managing your profile settings.
- To process payments (contractual necessity): Verifying your identity before processing deposits and withdrawals, ensuring funds reach the correct account and preventing fraudulent transactions.
- To verify your identity and age (legal obligation): Pakistani regulations and responsible gaming standards require us to confirm that every player is at least 18 years old and that their identity matches the payment methods they use.
- To prevent fraud and money laundering (legal obligation and legitimate interest): Monitoring unusual transaction patterns, multiple account detection and cooperation with relevant authorities when required by law.
- To provide customer support (contractual necessity and legitimate interest): Responding to your queries, resolving disputes and improving our support processes based on previous interactions.
- To improve the platform (legitimate interest): Analysing usage patterns, identifying technical issues and understanding how players navigate the site to make it better.
- To send you relevant communications (consent or legitimate interest): Informing you about new promotions, game releases and platform updates. You can opt out of marketing communications at any time.
- To enforce our Terms and Conditions (legitimate interest): Investigating suspected breaches, protecting other players from harmful conduct and maintaining the integrity of the platform.
4 Payment Data and Financial Information
Gold Rummy takes the handling of financial data with particular seriousness. All monetary transactions on the platform are denominated in Pakistani Rupees (PKR). Payment data is processed through certified third-party payment service providers who are contractually bound to maintain strict data security standards.
How Payment Data is Handled
When you make a deposit or request a withdrawal using Easypaisa, JazzCash, NayaPay, SadaPay or IBFT, your payment credentials are entered directly into the secure interface of the relevant payment provider. Gold Rummy does not store your full wallet PIN, bank account password or card verification codes (CVV/CVC). What Gold Rummy retains is a transaction reference number, the payment method type, the amount in PKR and the timestamp — sufficient to match transactions to your account and resolve any disputes.
Card Payments
If you deposit using a Pakistani Visa or Mastercard debit card, card data is transmitted via an encrypted connection to our Payment Card Industry (PCI DSS) compliant payment gateway. Only the last four digits of your card number, card type and the payment reference are stored on our systems. The full card number and CVV are never retained by Gold Rummy.
Anti-Money Laundering
Gold Rummy is obligated to monitor transactions for signs of money laundering or financial crime. Where unusual patterns are detected, we may request additional KYC documentation, place a temporary hold on withdrawals or, where legally required, report the activity to the relevant regulatory authority. Such reporting may occur without prior notification to the account holder.
Your payment method is protected: Gold Rummy will never share your Easypaisa or JazzCash mobile number, your bank account number or any other financial identifier with a third party for commercial purposes. Sharing occurs only when legally required or strictly necessary to process your transaction.
5 Cookies and Tracking Technologies
Gold Rummy uses cookies and similar tracking technologies to make the platform work properly, to understand how players use the site and to deliver relevant communications. A cookie is a small text file that is stored on your device when you visit a website. It does not contain executable code and cannot access other files on your device.
Types of Cookies We Use
You can manage your cookie preferences at any time through the cookie settings panel accessible in the footer of the platform. Disabling analytics or marketing cookies will not affect your ability to play games, make deposits or withdraw funds.
We do not use cross-site tracking technologies that follow you to other websites or applications outside of the Gold Rummy platform. Analytics data collected via cookies is aggregated and anonymised before being used to improve platform design and functionality.
6 When and With Whom We Share Your Data
Gold Rummy does not sell, rent or trade your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Service Providers
We share transaction data with the payment service providers you choose — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card payment gateways — to facilitate deposits and withdrawals. These providers process only the data required to complete the transaction and are subject to their own privacy policies and applicable financial regulations.
Identity Verification Partners
To complete KYC verification, we may share your submitted identity documents with a certified verification service provider. These providers are contractually prohibited from using your data for any purpose beyond identity verification and are required to delete documents after verification is complete.
Customer Support Infrastructure
Our live chat and email support tools are operated with the assistance of platform providers. Support agents access only the account data necessary to resolve your specific query. All support system providers are contractually bound by confidentiality obligations.
Legal and Regulatory Obligations
We may disclose personal data to law enforcement agencies, regulatory bodies or courts when required to do so by applicable law, a valid court order or a lawful regulatory request. We will disclose only the minimum amount of data required to comply with the legal obligation.
Business Transfers
In the event that Gold Rummy undergoes a merger, acquisition or sale of assets, your personal data may form part of the transferred assets. We will notify you in advance of any such transfer and the new controller will be required to handle your data in accordance with this Privacy Policy.
No advertising networks: Gold Rummy does not share player data with advertising networks, data brokers or social media platforms for the purpose of targeting third-party advertisements. Any promotional communications you receive from Gold Rummy directly are based on your consent or our legitimate interest as your service provider.
7 How We Keep Your Data Secure
Gold Rummy applies industry-standard and regulatory-grade security measures to protect your personal and financial data. Security is treated as an ongoing technical and operational responsibility, not a one-time implementation.
- 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, including login, payment and account management interactions.
- Encrypted data storage for sensitive personal information including CNIC data, payment references and account credentials.
- Role-based access controls ensuring that only authorised Gold Rummy staff members can access player data, and only the specific data relevant to their role.
- Regular security audits conducted by independent security professionals to identify and remediate vulnerabilities in our systems.
- Two-factor authentication available for player accounts and mandatory for all administrative access to backend systems.
- Intrusion detection and monitoring systems that flag unusual access patterns or attempts to access restricted areas of the platform.
Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal data, Gold Rummy will notify you as required by applicable law and will take immediate steps to contain the breach and prevent further exposure.
8 How Long We Keep Your Data
Gold Rummy retains your personal data for as long as your account is active and for a defined period after account closure, as required by applicable law and our legitimate operational interests.
- Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, as required for anti-money laundering compliance and the resolution of any retrospective disputes.
- Transaction and financial data: Retained for 7 years after the relevant transaction date to comply with financial record-keeping obligations.
- KYC documentation: Retained for the minimum period required by applicable verification regulations. Documents are deleted when the retention period expires unless a legal hold applies.
- Support communications: Retained for 3 years after the relevant interaction to allow for dispute investigation and quality assurance.
- Cookies and analytics data: Session cookies are deleted when you close your browser. Analytics data is aggregated and anonymised before retention, typically for up to 26 months.
- Marketing preferences: Retained for as long as you hold an account and updated immediately when you change your preferences or opt out.
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to any individual player.
9 Your Rights Regarding Your Personal Data
As a player registered with Gold Rummy, you have a number of rights concerning your personal data. We take these rights seriously and have processes in place to respond to requests promptly.
Right of Access
Request a copy of the personal data we hold about you. We will provide this within 30 days of your request.
Right to Rectification
Request correction of inaccurate data. If your name or contact details have changed, contact support to update your profile.
Right to Erasure
Request deletion of your data in certain circumstances. Note that legal retention obligations may prevent full deletion of some records.
Right to Object
Object to us processing your data for marketing purposes. This does not affect processing required to operate your account.
Right to Portability
Request your data in a structured, machine-readable format where technically feasible. Contact support to initiate a data export.
Right to Restrict Processing
Request that we restrict processing of your data while a complaint or accuracy dispute is under review.
To exercise any of these rights, contact us at support@goldrummy.ws with the subject line "Data Rights Request" and a description of what you are requesting. We will acknowledge receipt within 48 hours and provide a full response within 30 calendar days.
10 Children's Privacy
Gold Rummy is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process requires a date of birth and we carry out age verification as part of the standard KYC process.
If you are a parent or guardian and believe that a person under 18 has registered an account on Gold Rummy using false date of birth information, please contact us immediately at support@goldrummy.ws. We will investigate the account, suspend it pending review and permanently close it if the player is found to be underage. Any winnings associated with an underage account will be voided.
We are committed to responsible gaming and the protection of vulnerable players, including young people. Our responsible gaming tools and age verification processes are continuously reviewed and improved to minimise the risk of underage access to the platform.
11 Marketing Communications
Gold Rummy may send you promotional communications about new games, bonuses, platform updates and other relevant offers. We do this either based on your consent (if you opted in during registration) or our legitimate interest in communicating relevant information to active players who benefit from knowing about new platform features.
How to Opt Out
You can opt out of marketing communications at any time through any of the following methods:
- Using the unsubscribe link included in every marketing email or SMS.
- Updating your communication preferences in the account settings section of your Gold Rummy dashboard.
- Contacting our support team at support@goldrummy.ws and requesting to be removed from marketing lists.
Opting out of marketing communications does not affect transactional messages — we will still contact you about important account matters such as KYC requests, withdrawal confirmations and security alerts. These are not marketing messages and cannot be unsubscribed from while your account remains active.
No spam, no data sharing for ads: Gold Rummy sends only platform-related communications. We do not share your contact details with advertisers, affiliate networks or any third party for the purpose of sending you marketing messages from other organisations.
12 Changes to This Privacy Policy
Gold Rummy may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements or improvements to our platform that affect how data is collected or used. When material changes are made, we will notify you via a notice on the platform homepage and, where possible, by SMS or email to your registered contact details.
The "Last Updated" date at the top of this document reflects when the Privacy Policy was most recently revised. We encourage you to review this page periodically, particularly after any significant platform updates or when you receive a notification that the policy has changed.
Continuing to use the Gold Rummy platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you disagree with a material change, you should stop using the platform and contact us to close your account and request deletion of your data, subject to any legal retention obligations described in Section 8.
13 Contact Us About Privacy
If you have any questions about this Privacy Policy, how your data is handled or how to exercise your data rights, please contact Gold Rummy through any of the following channels. Our team is available 24 hours a day, 7 days a week.
- Email: support@goldrummy.ws — use subject line "Privacy Query" or "Data Rights Request" for faster routing.
- Live Chat: Available from the support section of your account dashboard.
- Response time: All privacy and data rights queries receive a written response within 48 hours. Complex data access or deletion requests are completed within 30 calendar days as required by applicable data protection standards.
We are committed to handling all privacy queries with the same care and transparency that we apply to the rest of our platform operations. If you are not satisfied with our response to a privacy query, you may escalate the matter through our formal complaints process as described in our Terms and Conditions.
Security reminder: Gold Rummy will never contact you to ask for your password, account PIN or full payment details. If you receive a message claiming to be from Gold Rummy and requesting this information, do not respond and contact us immediately at support@goldrummy.ws.