Privacy Policy

How INDRUMMY VIP collects, uses, and protects your personal data.

Last updated: 1 May 2026

INDRUMMY VIP ("we", "us", "our", or "the Platform") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose information when you visit indrummyvip.com or use the INDRUMMY VIP mobile application (the "App"). By accessing the Platform, you agree to the practices described below.

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Information We Collect

1.1 Information you provide

• Account data: name, mobile number, email address, date of birth, and password when you register an account.
• KYC data: PAN card, Aadhaar (last four digits or masked), bank account details, and identity verification documents required under Indian regulations.
• Transaction data: deposits, withdrawals, UPI ID, payment instrument details (we do not store full card numbers; payment processors handle that).
• Communications: messages, complaints, queries you send to our customer support or grievance officer.

1.2 Information collected automatically

• Device data: device model, operating system, unique device identifiers, mobile network information, IP address.
• Usage data: game sessions, in-game activity, time spent, features used, win/loss patterns.
• Location data: approximate location derived from IP address, used to enforce state-level legal restrictions.
• Cookies and similar technologies: for session management, analytics, and fraud prevention.

2. How We Use Your Information

• To create and manage your account, verify identity, and prevent fraud.
• To process deposits, withdrawals, and tax deductions (TDS) as required under the Income-tax Act, 1961.
• To deliver, personalise, and improve the gaming experience.
• To detect and prevent collusion, money laundering, underage play, and other policy violations.
• To enforce state-specific access restrictions where real-money gaming is prohibited.
• To send service notifications, transactional messages, and (with consent) promotional offers.
• To respond to legal requests, court orders, and regulatory inquiries.

3. Legal Basis for Processing

We process your personal data based on (a) your consent, (b) the necessity of performing the gaming services contract, (c) compliance with legal obligations under Indian law, and (d) our legitimate interests in fraud prevention and platform security.

4. State Restrictions and Eligibility

5. Sharing of Information

We do not sell your personal data. We may share information with:

• Payment processors for deposit and withdrawal transactions.
• KYC and identity-verification providers licensed in India.
• Cloud hosting and analytics providers such as Amazon Web Services (Mumbai region) and Google Analytics, under data-processing agreements.
• Law enforcement and regulators when required by valid legal process.
• Business transfers: in case of merger, acquisition, or asset sale, with notice to users.

6. Data Security

We implement reasonable security practices including TLS/SSL encryption in transit, encrypted storage of sensitive fields, restricted access controls, periodic security audits, and ISO 27001-aligned procedures. However, no system is completely secure; you are responsible for safeguarding your password and account credentials.

7. Data Retention

We retain personal data for as long as your account is active and for a period thereafter as required to comply with tax, anti-money-laundering, and gaming regulations (typically up to 8 years for transaction records). KYC documents are retained per RBI and IT Rules requirements. You may request deletion subject to these legal obligations.

8. Your Rights

Subject to the DPDP Act and ap