At cardrummy, protecting your personal information is something we take seriously. This Privacy Policy explains exactly what data we collect from Pakistan players, why we collect it, how it is stored, and what rights you have over your own information. We believe in full transparency — no hidden practices, no surprises.
Six core principles that guide how cardrummy handles your personal information — before you read the full details below.
All data transmitted between your device and cardrummy is protected using industry-standard encryption. This applies to your login credentials, PKR transaction details, personal information and all in-app communications.
cardrummy does not sell, rent or trade your personal information to third parties for marketing purposes — ever. Your data exists to deliver our services to you, not to generate advertising revenue from outside parties.
Every registered cardrummy player has the right to access, correct or request deletion of their personal data. These rights can be exercised through your account settings or by contacting our support team directly.
We only collect the information that is genuinely needed to provide, secure and improve the cardrummy platform. We do not collect data simply because it is technically possible to do so.
Payment information processed through JazzCash, Easypaisa, Raast and Bank Transfer is handled with strict security protocols. cardrummy does not store full payment credentials — only the reference data needed to manage your transaction history.
If this Privacy Policy is materially updated, registered players will be notified via their registered email address. We do not make significant changes quietly — you will always know when something important has changed.
This Privacy Policy ("Policy") describes how cardrummy ("we", "us", "the platform") collects, uses, stores and protects the personal information of users ("you", "Player") who register and use the cardrummy platform at cardrummy.onl. This Policy applies to all interactions with cardrummy, including account registration, gameplay, PKR deposits and withdrawals, bonus participation, customer support and use of the cardrummy mobile app.
By creating an account on cardrummy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions and Responsible Gaming policy.
cardrummy is committed to handling your personal data responsibly. We collect only what we need, use it only for the purposes stated in this Policy, and never sell it to third parties.
When you create a cardrummy account, we collect the information you provide during the sign-up process. This includes your full legal name, date of birth, email address, mobile number and any other details requested in the registration form. This information is required to verify your identity and maintain your account in good standing.
cardrummy may request additional identity documents at certain points — for example, before processing your first withdrawal or if an account security review is triggered. Documents requested may include a copy of your national identity card (CNIC), a recent utility bill or other proof of address. These documents are used solely for the purpose of verifying your identity and are stored securely.
We record information related to your PKR deposits, withdrawals and bonus transactions on the platform. This includes the amount, date, payment method used (such as JazzCash, Easypaisa, Raast or Bank Transfer), transaction reference numbers and the status of each transaction. cardrummy does not store full debit or credit card numbers or mobile wallet PINs.
We collect data about your activity on cardrummy including games played (Slots, Live Casino, Fish Games, Bingo and others), bet amounts, game outcomes, session durations and bonus usage. This data is used to maintain accurate account records, detect unusual activity and improve the overall platform experience for Pakistan players.
When you access cardrummy through a browser or the mobile app, we automatically collect certain technical information. This includes your IP address, device type, operating system, browser version, screen resolution and approximate geographic location derived from your IP address. This data helps us ensure the platform functions correctly across different devices and networks.
If you contact cardrummy's support team via chat, email or any other channel, we retain records of those communications. This helps us resolve ongoing issues, maintain quality of service and identify patterns that may indicate a technical or account problem that needs attention.
| Data Category | Examples | When Collected |
|---|---|---|
| Registration Data | Name, email, mobile, date of birth | Account sign-up |
| Verification Data | CNIC, proof of address | On request / withdrawal |
| Financial Data | PKR transactions, payment method refs | Deposits & withdrawals |
| Gameplay Data | Games played, bets, session length | During active sessions |
| Technical Data | IP address, device type, browser | Every platform visit |
| Support Data | Chat logs, email correspondence | When you contact support |
The primary use of your personal data is to create, maintain and secure your cardrummy account. This includes verifying your identity at registration, processing your PKR deposits and withdrawals, applying bonuses to your account, maintaining your game history and enabling you to use all features of the platform.
cardrummy uses account activity data, technical data and transaction records to detect and prevent fraudulent activity, money laundering, unauthorised account access and any other behaviour that violates our Terms and Conditions. Automated and manual monitoring systems are used for this purpose. Where suspicious activity is identified, we may temporarily restrict account access pending investigation.
Aggregated and anonymised gameplay and usage data helps us understand how Pakistan players use cardrummy. This allows us to improve game performance, fix technical issues faster, optimise the mobile app experience and develop new features that are genuinely useful to our player base.
We use account activity data — including session duration, deposit frequency and betting patterns — to support responsible gaming features. This data powers tools such as session time reminders, deposit limit tracking and self-exclusion functionality. If unusual patterns are detected that may indicate problematic gaming behaviour, our team may proactively reach out to offer support.
We use your email address and mobile number to send you transactional communications — including deposit and withdrawal confirmations, security alerts, account verification messages and important policy updates. With your consent, we may also send you promotional communications about bonuses, new game launches and special events such as PSL season promotions or T20 tournament offers. You can opt out of marketing communications at any time through your account settings.
cardrummy may be required to process and retain certain personal data in order to comply with applicable legal obligations. This includes maintaining financial transaction records for audit purposes and cooperating with lawful requests from relevant authorities where legally required to do so.
cardrummy does not sell, rent, lease or trade your personal information to any third party for commercial or marketing purposes. Your data is not a product. We do not share your personal information with advertisers, data brokers or unrelated businesses.
cardrummy works with a limited number of trusted third-party service providers who assist us in operating the platform. These include payment processing partners (such as the operators behind JazzCash, Easypaisa and Raast integrations), identity verification services, cloud hosting providers and customer support tools. These partners are given access only to the specific data they need to perform their function and are contractually required to handle it securely and in accordance with applicable data protection standards.
Some games available on cardrummy are provided by third-party game studios. When you play these games, certain gameplay data — such as your anonymised player ID, bet amounts and game outcomes — may be transmitted to the relevant game provider for the purpose of delivering and auditing the game. Personal identifying information such as your name, email or mobile number is not shared with game providers.
cardrummy may disclose your personal information if required to do so by law, court order or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property or safety of cardrummy, its players or others. In such cases, we will only disclose the minimum information necessary to satisfy the legal requirement.
cardrummy will never sell your personal data. Any sharing is limited to what is strictly necessary to operate the platform and comply with legal obligations.
Cookies are small text files stored on your device when you visit cardrummy. They help the platform remember your preferences, keep your session active after login and collect aggregated data about how the platform is used. Similar technologies — such as local storage and session tokens — serve the same functional purposes in the mobile app.
You can manage or disable cookies through your browser settings at any time. Note that disabling essential cookies will affect your ability to log in and use cardrummy normally. For the mobile app, cookie-equivalent data storage can be cleared through your device's app settings. Continued use of cardrummy after being presented with our cookie notice constitutes consent to our use of cookies as described above.
cardrummy implements a range of technical security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, firewalls, intrusion detection systems and regular security reviews of our infrastructure.
Access to personal data within cardrummy's systems is restricted on a need-to-know basis. Staff members who require access to player data to perform their role — such as customer support agents or fraud investigators — are granted the minimum level of access necessary. All internal access is logged and subject to periodic review.
While cardrummy takes robust measures to protect your data on our end, the security of your account also depends on you keeping your login credentials safe. Use a strong, unique password for your cardrummy account. Do not share your password with anyone. If you suspect your account credentials have been compromised, contact support immediately and change your password without delay.
In the event of a data breach that poses a risk to your personal information, cardrummy will take immediate steps to contain the breach, assess its scope and notify affected players as promptly as possible. Notification will be made via the email address registered to your account and, where required, through a notice displayed on the platform.
All PKR transaction data on cardrummy is encrypted end-to-end. We do not store your JazzCash PIN, Easypaisa credentials or full bank card numbers at any point in the transaction process.
cardrummy retains personal data for as long as your account remains active and for a reasonable period thereafter to fulfil the purposes described in this Policy. Account data — including registration details, transaction records and gameplay history — is typically retained for a minimum period following account closure in order to meet financial record-keeping and audit requirements.
Where an account has been inactive for an extended period, cardrummy may archive account data in a reduced-access storage system. The account data remains subject to this Privacy Policy and all associated security protections during the archival period. Players will be notified before any permanent data deletion is carried out.
You may request deletion of your personal data by contacting cardrummy support. We will process deletion requests in accordance with applicable obligations. Please note that certain categories of data — such as transaction records and identity verification documents — may need to be retained for a defined period even after a deletion request in order to satisfy legal and financial record-keeping requirements. In such cases, we will inform you of what data must be retained and for how long.
As a registered player on cardrummy, you have the following rights with respect to your personal data. These rights can be exercised by contacting our support team at [email protected].
You have the right to request a copy of the personal data cardrummy holds about you. We will provide this information within a reasonable timeframe following a verified request.
If any personal data held by cardrummy is inaccurate or out of date, you have the right to request that it be corrected. Many details can be updated directly through your account settings.
You may request that cardrummy delete your personal data. Subject to legal retention requirements, we will action deletion requests in a timely manner and confirm once completed.
In certain circumstances, you may request that cardrummy restrict the processing of your data — for example, while a correction request is being resolved — without requesting full deletion.
You can opt out of receiving promotional communications from cardrummy at any time — including bonus offers, PSL event promotions and new game announcements — through your account notification settings.
cardrummy reserves the right to update this Privacy Policy at any time. When material changes are made — changes that meaningfully affect how your data is collected, used or shared — registered players will be notified via their registered email address. A notice will also be displayed on the platform for a defined period following any significant update. The "Last updated" date at the top of this page will always reflect the most recent revision.
Minor or administrative changes — such as corrections to typos, clarification of existing practices or formatting updates — may be made without direct notification. We recommend reviewing this Privacy Policy periodically to stay informed of any changes. The current version of this Policy always supersedes all previous versions.
Continued use of cardrummy following notification of a Privacy Policy update constitutes your acceptance of the revised Policy. If you do not agree with a material change to this Policy, you should stop using cardrummy and may request account closure as described in the account deletion section above.
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal information has been handled, please contact the cardrummy support team. Our team is available around the clock and will respond to privacy-related queries as a priority.
Privacy enquiries: [email protected] — our team will respond within 48 hours for all data-related requests.
This Privacy Policy sits alongside these other important documents that govern your experience on cardrummy.
Register your free account today. Deposit PKR via JazzCash or Easypaisa and enjoy Slots, Live Casino, Fish Games and Bingo — all on a platform that puts your security first.