Privacy policy
Last updated 4 October 2026. Draft for review by counsel. Data fiduciary: [Company legal name], [registered address].
What we collect
- To sign you in: your mobile number, a one-time code (stored only as a hash), and a session token for your device.
- To run the games: your player name and avatar, every hand you play (cards, actions, timing, result), chat messages at tables, and your device type and app version.
- For money: deposits, withdrawals, balances, bonuses and tax deductions, with the payment provider's reference. We never see or store full card numbers.
- For KYC: your name, date of birth, government ID details and images, a selfie, and bank account or UPI details.
- For safety: IP address, approximate location derived from it, and technical signals used to detect multiple accounts, automation and collusion.
Why we use it
- To provide the games and your wallet, settle hands, and pay you.
- To verify age, identity and location as the law requires, and to deduct and report tax.
- To keep the games fair: reviewing hands, detecting collusion and fraud.
- To support you when you write to us.
- To send service messages (a code, a withdrawal update). Marketing messages only with your consent, which you can withdraw in your profile.
Who sees it
Our staff who need it for the purposes above; our hosting provider; the SMS provider that delivers your code; payment providers for deposits and withdrawals; the KYC provider that checks your documents; and authorities where the law requires. We do not sell personal data.
How long we keep it
Account and transaction records for as long as your account is open and for as long as required after it closes. Hand histories for 12 months. KYC images for the period the law requires, then deleted. Chat for 90 days.
Your rights
You can ask for a copy of your data, ask us to correct or erase it where we no longer need it, withdraw consent for marketing, nominate someone to act for you, and complain to our Grievance Officer at support@ogrummy.in .
Security
Data travels encrypted (TLS) and is stored on servers with restricted access. Codes and session tokens are stored hashed. Staff access to KYC data is logged.
Children
The Platform is for adults. We do not knowingly collect data from anyone under 18, and we close any account found to belong to a minor.
Cookies and storage
This site uses no advertising cookies. The games store a session token and your settings on your device so you stay signed in. The site uses a small service worker so pages open faster.