Privacy Policy – Yono Rummy Pakistan Data Protection Rules

1. Who We Are

Yono Rummy is an online gaming and sports betting platform serving Pakistani players at yonorummy.im. In the context of data protection, Yono Rummy is the data controller — meaning we determine how and why your personal data is collected and processed. All operations relating to Pakistani player accounts, payments, and gaming sessions are managed under the Yono Rummy brand.

If you have any questions about this Policy or about how your data is handled, please reach out to our dedicated privacy team at support@yonorummy.im. We will respond within five working days to any data-related query.

This Policy applies to all platforms and services operated under the Yono Rummy brand, including the main website at yonorummy.im, any mobile-optimised web pages, and any applications we may release in the future. It applies to all registered players regardless of which Pakistani city or province they are located in.

2. Personal Data We Collect

Yono Rummy collects personal data in several categories. The table below summarises what we collect, why we collect it, and whether it is mandatory for account operation.

3. How We Collect Your Data

Yono Rummy collects personal data through several channels, all of which are described below so there are no surprises.

• Registration form: When you create a Yono Rummy account, you provide your name, mobile number, email address, and date of birth directly to us.
• Deposit and withdrawal transactions: When you deposit or withdraw funds via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card, your payment provider shares the transaction details with us to credit or debit your balance.
• Game and betting activity: Our platform records every bet, game round, win, and loss associated with your account as a matter of course — this is required for account integrity and dispute resolution.
• Cookies and tracking technologies: When you browse yonorummy.im, our server automatically logs your IP address, device type, browser version, and the pages you visit. See Section 8 for full cookie details.
• Identity verification: If we request KYC documents from you, you provide these directly by uploading them through your account dashboard or emailing them to support.
• Customer support interactions: When you contact us via live chat or email, the content of those communications is stored as part of your account record.
• Third-party fraud and verification services: We may receive data from third-party services we use for identity verification, AML screening, and fraud detection. This data is used solely for the purposes for which it was obtained.

4. Why We Use Your Personal Data

Yono Rummy uses your personal data for the following purposes. We only process data where we have a legitimate reason to do so — see Section 5 for the legal basis behind each use.

• To register your account and verify your identity and age before you can place bets or play games.
• To process deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card providers.
• To maintain accurate records of your gaming and betting activity for account integrity, dispute resolution, and regulatory compliance.
• To communicate with you about your account — including transaction confirmations, security alerts, and responses to your support queries.
• To monitor your activity for signs of problem gambling and to provide timely responsible gaming interventions where necessary.
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity on our platform.
• To personalise your experience on the Yono Rummy platform — for example, surfacing PSL betting markets during PSL season or slot promotions aligned with your playing history.
• To send you promotional communications about Yono Rummy offers, bonuses, and new games — but only where you have given us explicit consent to do so, and with an easy opt-out on every message.
• To improve our platform through analysis of aggregated usage data, identifying performance issues, and understanding how players navigate the site.
• To comply with our legal obligations, including anti-money laundering regulations and any applicable financial reporting requirements.

5. Legal Basis for Processing

Every use of your personal data by Yono Rummy is grounded in one of the following legal bases:

• Contract performance: Processing your identity data, payment data, and gaming records is necessary to fulfil our contract with you — specifically, to operate your account, process your bets, and pay out your winnings.
• Legal obligation: We are required by applicable anti-money laundering and know-your-customer regulations to collect and retain certain identity and financial data. This processing is not optional on our part.
• Legitimate interests: We process technical and usage data to maintain platform security, detect fraud, and improve our services. These interests are balanced against your privacy rights and do not override them.
• Consent: Where we send you marketing messages or use non-essential cookies, we do so only with your explicit consent, which you can withdraw at any time.

6. Sharing Your Personal Data

Yono Rummy does not sell your personal data. We share it only in the following limited and necessary circumstances:

• Payment providers: We share your account and transaction details with Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card issuer to process deposits and withdrawals. Each provider handles your data under their own privacy terms.
• Game providers: When you play a game hosted by a third-party studio (such as Pragmatic Play or NetEnt), your account identifier and game session data are shared with that provider solely to deliver the game. Game providers are not permitted to use your data for their own marketing.
• Identity and AML verification services: We may share identity documents and personal details with third-party verification services to perform KYC and AML checks. These providers act on our instructions and may not use your data independently.
• IT and hosting providers: Our platform infrastructure is supported by cloud hosting and IT service providers who may process your data as part of providing those services. All such providers are contractually bound to protect your data and use it only for the purposes we specify.
• Legal and regulatory authorities: If we are required by law, court order, or regulatory authority to disclose your personal data, we will do so. Where permitted, we will notify you that such a request has been made.
• Business transfers: If Yono Rummy is sold, merged, or restructured, your personal data may be transferred to the new entity as part of that transaction. You will be notified of any such transfer.

We require all third parties with whom we share your data to maintain appropriate security measures and to use your information only for the specific purposes for which it was shared. We do not permit our third-party providers to use your data for their own marketing.

7. Payment Data & Financial Security

Because Yono Rummy operates exclusively in PKR and all player transactions pass through Pakistani payment infrastructure — primarily Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks — we take payment data security particularly seriously.

Full card numbers are never stored on Yono Rummy's servers. Card payments are processed through certified payment gateways that handle card data directly, and we receive only a tokenised reference for future use. The same principle applies to mobile wallet transactions — we store account identifiers and transaction records, not authentication credentials.

All financial data associated with your Yono Rummy account is encrypted at rest using AES-256 encryption and in transit using TLS 1.3 or higher. Our payment processing systems are reviewed regularly for security vulnerabilities. Access to financial records is restricted to authorised personnel only and is logged comprehensively for audit purposes.

If you suspect any unauthorised transaction on your Yono Rummy account, you should contact us immediately at support@yonorummy.im and simultaneously notify your payment provider (Easypaisa, JazzCash, or your bank as appropriate). Prompt reporting significantly improves the chances of recovery and investigation.

8. Cookies & Tracking Technologies

Yono Rummy uses cookies and similar technologies to make the platform work properly, to understand how players use the site, and to personalise your experience. The table below explains the types of cookies we use.

You can manage your cookie preferences at any time through your browser settings or through the cookie consent tool available on the Yono Rummy platform. Declining analytics and functional cookies will not prevent you from using the platform but may reduce the personalisation of your experience. Essential cookies cannot be disabled as the platform cannot function without them.

9. Data Retention

Yono Rummy retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain an active account, and to comply with legal and regulatory obligations. The following retention periods apply:

• Account data (identity, contact, financial): Retained for the lifetime of your active account plus five years following account closure. This period is required to comply with anti-money laundering regulations and to resolve any post-closure disputes.
• Transaction records (deposits, withdrawals, bets): Retained for seven years from the date of the transaction. This is standard financial record retention practice and satisfies regulatory audit requirements.
• Support communications: Retained for three years from the date of the communication, or for the lifetime of your account if longer, whichever is greater.
• Technical logs (IP addresses, device data): Retained for 12 months on a rolling basis, after which they are deleted or anonymised.
• Marketing consent records: Retained until you withdraw consent, plus three years after withdrawal as evidence of compliance.

When data reaches the end of its retention period, it is permanently deleted from our systems or irreversibly anonymised so it can no longer be associated with any individual. We do not retain data indefinitely as a matter of policy.

10. Data Security

Yono Rummy implements technical and organisational security measures proportionate to the risk of processing your personal data. Our current security measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for all personal and financial data stored at rest.
• Multi-factor authentication on all internal administrative accounts that have access to player data.
• Role-based access controls that restrict access to player data to only those staff members who genuinely require it for their job function.
• Comprehensive audit logging of all access to sensitive player data, reviewed regularly for anomalies.
• Regular third-party security assessments and penetration testing of our platform infrastructure.
• Incident response procedures that include player notification in the event of a data breach affecting your personal information.

11. Your Data Rights

As a Yono Rummy player, you have the following rights over your personal data. You can exercise any of these rights by contacting us at support@yonorummy.im. We will respond within 30 days of receiving a valid request.

12. Children & Underage Access

We use age verification checks at registration and may request identity documents where automated checks are inconclusive. If you are a parent or guardian and believe your child has registered on Yono Rummy, please contact us immediately at support@yonorummy.im and we will take action without delay.

13. Marketing Communications

Yono Rummy will only send you promotional messages — about bonuses, new games, PSL betting offers, or other platform news — if you have given us your explicit consent to do so at registration or subsequently through your account settings.

We may send marketing by SMS to your registered mobile number, by email to your registered email address, and by push notification if you have enabled these on your device. Every marketing message we send includes a clear and simple opt-out mechanism. Responding to the opt-out request will stop that type of communication immediately.

Withdrawing consent to marketing will not affect our ability to send you transactional messages about your account — such as deposit confirmations, withdrawal notifications, and security alerts. These messages are essential to operating your account and will continue regardless of your marketing preferences.

We do not share your contact details with third parties for their own marketing purposes. Any marketing you receive will be from Yono Rummy directly.

14. Third-Party Services & Links

The Yono Rummy platform integrates with third-party services — primarily game providers, payment processors, and analytics tools — to deliver its full functionality. When you interact with these services through our platform, those providers may process your data in accordance with their own privacy policies.

Yono Rummy does not include links to external websites, and our platform navigation is limited to pages within yonorummy.im. We therefore cannot be held responsible for the data practices of any website you choose to visit independently. Our responsibility is limited to data processing that occurs on the Yono Rummy platform and through our named third-party service providers.

All third-party service providers engaged by Yono Rummy are required to maintain appropriate data security standards and are prohibited from using your personal data for purposes other than those specified in our agreements with them.

15. Changes to This Privacy Policy

Yono Rummy reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, changes in applicable law, or improvements in our practices. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where we make material changes to this Policy — particularly changes that reduce your rights or expand how we use your data — we will notify you via your registered email address and by displaying a prominent notice on the Yono Rummy platform homepage at least seven days before the changes take effect.

Your continued use of the Yono Rummy platform following notification of changes constitutes your acceptance of the updated Policy. If you do not accept a material change, you may close your account by contacting our support team, and your real-money balance will be returned to your registered payment method.