Verify the platform before the platform verifies you.
Safety at a regulated rummy platform is mostly procedural: KYC document handling, withdrawal verification, RNG certification and a clear dispute pathway. The desk covers each step in plain language so an adult reader can verify the platform before submitting the first identification document.
KYC — what a platform may legitimately request
A regulated platform will request PAN, Aadhaar (or equivalent ID), a current address proof and a bank account statement before permitting a withdrawal above the platform's threshold. Each item has a lawful basis under Indian anti-money-laundering rules.
Document handling
- Storage. Encrypted at rest, accessed only by the platform's KYC team.
- Retention. Typically seven years after the account is closed, in line with PMLA retention rules.
- Sharing. Never shared with marketing partners; disclosed only where required by a lawful order.
Red flag — KYC asked for at sign-up before any account activity
A platform asking for full KYC documentation during sign-up, before the first deposit or play, is collecting more data than it needs at that step. The desk treats this as a moderate red flag.
Withdrawal verification
Withdrawal verification typically takes 24 to 72 hours at regulated Indian platforms. Two checkpoints matter:
Source-of-funds check. A request to confirm that the funds being withdrawn are not the proceeds of fraud, money laundering or identity theft. Triggered for large withdrawals and unusual patterns.
Bank-account name match. The name on the user's bank account must match the name on the verified KYC record. A mismatch triggers a re-KYC workflow rather than a hold.
RNG certification — how to read the auditor's name
A regulated platform publishes the name of an independent RNG auditor — typically one of iTech Labs, GLI, BMM Testlabs or a comparable firm. The auditor's certificate carries a publication date and a certificate number, both of which can be cross-checked on the auditor's own register.
If the certificate is missing or undated, treat the platform as unverified until the auditor's register confirms otherwise. The reviews desk publishes the auditor name and certificate number for every platform it reviews.