Royal Pro Rummy reads the safety layer the way we read the rules: at the level of the named statute and the actual platform behaviour. The Public Gambling Act, 1867, the DPDP Act 2023, the PMLA 2002, and the state-level gaming acts all bear on the rails below.
Indian rummy platforms restrict play from states whose gaming act does not carve out skill games. The list below is the working list across the operators the desk has tested.
State act restricts online gaming for stakes; platforms block registration from AP-issued IDs.
State act restricts online gaming for stakes; platforms block registration.
State act restricts online gaming for stakes; platforms block registration.
State act permits only licensed operators; platforms without a Sikkim licence block registration.
State act restricts online gaming for stakes; platforms block registration.
State act has been amended multiple times; current rules permit skill games but the live platform behaviour varies by operator.
State act amendments have been litigated; current rules permit skill games but operators vary on registration from KA-issued IDs.
State act permits skill games; platforms accept registration from MH-issued IDs.
Union-territory rules permit skill games; platforms accept registration.
State act permits skill games; platforms accept registration.
The customer-identification rules the desk has actually walked on the four operators we tested this quarter.
PAN is required for residents. The PAN number is matched against the name on the bank account used for the deposit. Aadhaar is not accepted as a primary ID on the operators the desk has tested.
Aadhaar (masked), passport, voter ID, or utility bill under 90 days old. The platform's KYC bot reads the document with OCR; mismatches trigger a manual review.
A short live capture is required at first deposit. The capture is matched to the photo on the PAN. Operators vary on the liveness check; some rely on a blink test, others use a hold-and-turn.
The deposit account is verified against the PAN holder's name. A penny-drop is sent to the account; the name returned by the bank is the name the platform stores.
KYC is not a one-time check. Platforms re-verify at thresholds (typically ₹10,000 cumulative deposits, or 90 days since the last verification). Re-verification may require only the live selfie if the documents are unchanged.
The Digital Personal Data Protection Act, 2023, sets the data-principal rights the desk reads the platforms against.
Name, PAN, address proof image, live selfie, bank account number and IFSC, deposit and withdrawal history, IP, device ID, and the platform session log. The collection is set by the KYC rule and by anti-money-laundering obligations under PMLA 2002.
Platforms share data with payment processors (for deposit and withdrawal rails), with KYC vendors (for OCR and liveness), and with regulators on request. Sharing beyond those three categories is restricted by the platform's privacy policy and by the DPDP Act.
Under the DPDP Act, a data principal may ask for a summary of the data held, the purpose of processing, and the categories of recipients. Erasure requests are honoured subject to the platform's anti-money-laundering retention rules (typically five years after account closure).
The Public Gambling Act, 1867, leaves rummy to the states. The states have answered differently. The desk reads state eligibility across three categories: openly regulated, restricted, and unlicensed.
Nagaland, Meghalaya, and Sikkim have state-level licences that cover rummy played within the state borders. The licences are published; the licence numbers are public. The desk reads the licence page on the platform's own site and the regulator's site, and notes the licence number, the issuing date, and the renewal date.
A player in an openly regulated state can play on a platform that holds the state's licence. The platform is bound by the state's regulations, including the KYC rules, the withdrawal rules, and the responsible-play rules. The desk publishes the licence number on the review page.
Andhra Pradesh, Telangana, Tamil Nadu, Karnataka, and Odisha have state-level restrictions on online rummy. The restrictions are published in the state gazette. Some restrictions apply to operators (no licence to operate); some restrictions apply to players (no play within the state). The desk cites the state gazette on the review page.
A player in a restricted state should not play on a platform that does not block the player's IP address. The desk's safety check is whether the platform blocks the player's IP address from the restricted state. The desk publishes the IP-block check on the review page.
The remaining states have no state-level licence or restriction. The Public Gambling Act, 1867, leaves games of skill to the states; the states have not acted. A player in an unlicensed state can play on a platform that holds a federated licence (e.g., a licence from another state that is enforceable in the player's state).
The desk's safety check is whether the platform's licence is enforceable in the player's state. The desk publishes the licence-enforceability check on the review page. The desk does not give legal advice; the reader is responsible for the platform they choose to play on.
The desk does not adjudicate disputes. The desk directs readers to the named regulator or the forum that has jurisdiction over the platform.
The first path is the platform's own support thread. The desk notes the platform's stated response time, the escalation path, and the published SLA. The platform is the first responder; the platform's response is logged on the review page.
If the platform's support thread does not resolve the dispute, the desk directs the reader to the platform's grievance officer. The grievance officer is named on the platform's terms page; the desk publishes the grievance officer's contact on the review page. The grievance officer is bound by the platform's published SLA.
If the platform's grievance officer does not resolve the dispute, the desk directs the reader to the state regulator. The state regulator is named on the platform's licence page; the desk publishes the regulator's contact on the review page. The regulator's published SLA is the binding SLA for the dispute.
The state regulator may direct the dispute to a consumer forum under the Consumer Protection Act, 2019. The consumer forum is the binding forum for the dispute if the platform's service is judged to be deficient. The desk publishes the consumer-forum path on the review page.
If the platform's grievance officer and the state regulator do not resolve the dispute, the desk accepts a reader's report of the dispute. The desk publishes a corrections note on the review page if the platform's behaviour is materially different from the desk's published review. The desk does not adjudicate the dispute.
The desk's role is the published review, not the dispute resolution. The desk publishes a quarterly tally of reader reports received and the categories of dispute. The desk uses the tally to identify the platforms that have a high dispute rate and the platforms that have a low dispute rate.
The Government of India operates a 24x7 helpline for individuals and families affected by gambling-related harm. The line is free, confidential, and available in English, Hindi, and several regional languages.