Responsible play
The support lines and the editorial standard on play budgets.
Read the guide →Safety and verification: KYC, payment and the controls every player should use
How identity verification works, what documents are typically requested, what the deposit and withdrawal flow looks like, and the safety controls every rummy player should turn on before the first hand.
Step 01
Identity verification, in order
Every reputable rummy platform verifies identity before a withdrawal is processed. The exact documents vary; the order below is the most common sequence.
Document one - PAN
Permanent Account Number, the ten-digit alphanumeric identifier issued by the Income Tax Department. The platform matches the name on the PAN to the name on the bank account. Mismatched names are the most common reason for a verification delay.
Document two - Aadhaar
The twelve-digit identity number. The platform uses Aadhaar for address confirmation and (in some cases) e-KYC. Aadhaar verification is usually completed within minutes via OTP.
Document three - address proof
Only requested when the Aadhaar address does not match the bank account address. Most platforms accept a recent utility bill, a bank statement or a rent agreement. Address-proof verification is the slow step (24-48 hours in our test).
Document four - bank account
The bank account is verified via a penny-drop test or a UPI handle. The penny-drop confirms the account number and IFSC match; UPI handles confirm the VPA. Both usually complete within minutes.
Step 02
The deposit flow
Deposits are usually the easier half of the wallet flow. The platform offers a payment instrument (UPI, netbanking, debit card); the player confirms the amount and the ledger entry is created within seconds.
UPI
UPI is the most common deposit method on Indian rummy platforms. The flow is three steps: enter the amount, select the UPI handle, approve the request in the UPI app. The ledger entry appears within seconds.
Netbanking
Netbanking is the fallback for deposits above the UPI per-transaction limit. The flow is four or five steps depending on the bank. Some banks require an additional OTP; others use the standard netbanking credentials.
Debit card
Debit card deposits are accepted by some platforms but discouraged by others. Card deposits can attract a processing fee and may be slower to confirm than UPI. The reviews page notes which platforms support card deposits and at what fee.
The withdrawal mirror
Withdrawals typically mirror the deposit method. UPI-originated deposits withdraw to UPI; netbanking-originated deposits withdraw to the same bank account. The mirror rule is a regulatory requirement, not a platform choice.
Step 03
Safety controls you should turn on
Five controls every rummy player should enable before their first deposit. Each control exists because the platform is required to offer it; very few players use them by default.
Daily deposit cap
A ceiling on the total deposit amount per 24-hour window. Set this lower than the maximum deposit you would ever consider. The cap resets at midnight in your local timezone.
Session reminder
A pop-up or notification that appears after a fixed time at the table (commonly 60 minutes). The reminder does not force you to leave; it tells you how long you have been playing.
Time-out window
A short break (commonly 24 hours) during which the account cannot log in. Useful as a cooling-off measure after a bad session.
Self-exclusion
A longer break (commonly 1 month, 6 months or permanent) during which the account is locked and cannot be reopened. This is the strongest control on the platform; use it if the time-out window is not enough.
Statement download
A full transaction history (deposits, withdrawals, session lengths) that the platform is required to provide. Download it monthly and reconcile against your own record.
Where to next
Continuing the safety thread
Three reads to keep the routine.
Customer care
How to file a useful support ticket and what to include.
Open the guide →Wallet & KYC
The combined walk-through of the wallet flow and the verification step.
See the wallet guide →What to do when the deposit does not credit
The most common safety incident is a deposit that does not credit. The player has confirmed the payment in the UPI app, the bank has debited the amount, but the platform balance has not updated. The first step is to wait five minutes; UPI confirmations can be slow. The second step is to refresh the platform balance; the ledger entry can lag behind the UPI confirmation by a minute or two. The third step is to take a screenshot of the UPI confirmation. The fourth step is to file a support ticket with the screenshot, the registered phone, the deposit amount and the deposit time.
The expected resolution
Most platforms resolve a missing-deposit ticket within 24 hours on weekdays. The resolution is either a manual credit of the missing amount or a clarification that the deposit is still in transit. If the platform cannot find the deposit within 48 hours, escalate the ticket with a copy of the bank statement; the bank statement is the definitive record.
The dispute path
If the platform disputes the deposit claim and the bank statement shows the debit, the next step is a formal dispute with the platform's payment processor. The payment processor is usually the UPI provider (NPCI for UPI, the bank for netbanking, the card network for debit cards). The platform's terms of service list the payment processor and the dispute path.
What to do when the withdrawal does not arrive
The mirror problem is a withdrawal that does not arrive. The platform has confirmed the withdrawal, the ledger has been debited, but the bank account has not been credited. The first step is to wait 72 hours; UPI withdrawals can be slow. The second step is to check the bank statement; some banks credit UPI withdrawals under a different reference than the platform's transaction ID. The third step is to file a support ticket with the withdrawal reference, the registered phone, the withdrawal amount and the withdrawal time.
The escalation paths
If the platform cannot resolve a missing withdrawal within 7 days, escalate to the payment processor and to your bank. The bank's fraud department can investigate a missing credit; the payment processor can mediate the dispute. The customer-care page walks through the escalation path.
What the platform is required to do
Every reputable Indian rummy platform is required to: verify the identity of every player before processing a withdrawal; maintain the verification record for the period required by law; offer the five responsible-play controls (deposit cap, session reminder, time-out, self-exclusion, statement download); respond to support tickets within a reasonable window; and provide a clear dispute resolution path. The desk does not opine on whether the platform meets each requirement; the desk tests the controls and reports what was observed.
What the player is required to do
Every player is responsible for: providing accurate documents during KYC; keeping the registered phone and email current; setting a deposit cap and a session reminder before the first deposit; reading the terms of service before claiming a credit; and treating the responsible-play controls as routine, not as a footnote. The desk cannot enforce these responsibilities; the desk reminds readers of them.
What the regulator does
The state-level skill-game regulator (where applicable) is responsible for: licensing the platform; auditing the platform's KYC and responsible-play controls; investigating complaints; and revoking the licence if the platform fails to meet the minimum requirements. The desk does not opine on the regulator's effectiveness; the desk publishes what the platform is required to do under the licence and lets the reader draw the conclusion.
The two-factor verification for high-value withdrawals
Some platforms add a two-factor verification for withdrawals above a threshold. The threshold varies by platform; the verification is usually an OTP sent to the registered phone or an authenticator code. The two-factor verification is a security control; it is not an obstacle. The verification protects the withdrawal from being initiated by an attacker who has compromised the login password but not the registered phone.
How to enable the high-value verification
The high-value verification is usually enabled by default; the option to disable it is in the account settings under "security" or "withdrawals". The desk recommends leaving the verification enabled. The cost of the verification is a 30-second wait; the benefit is a meaningful reduction in the risk of unauthorised withdrawals.
The transaction-history monitoring
The transaction-history monitoring is a useful safety routine: review the transaction history once a week, confirm every deposit and every withdrawal is one you initiated. The monitoring is most useful when it is a routine; a weekly review is faster than a monthly review and surfaces anomalies earlier.
What the monitoring surfaces
The monitoring surfaces three things: deposits you did not initiate, withdrawals you did not initiate, and unusual patterns (a deposit just below the deposit cap, a withdrawal at an unusual hour). The first two are red flags that require immediate customer-care escalation; the third is a yellow flag that requires attention.
The privacy notice
The platform's privacy notice is the document that describes how the platform handles personal data. The notice is published in the footer or in the terms of service; it is required by law. The notice covers: the data collected (PAN, Aadhaar, bank account, transaction history), the data shared (with the payment processor, with the regulator), the data retained (for the period required by law), and the data deleted (when the account is closed).
What to look for in the privacy notice
What to look for: the data shared (is the data shared with any third party beyond the payment processor and the regulator?), the data retained (is the retention period reasonable?), the data deleted (is the deletion process described?), and the data rights (does the player have the right to request a copy of the data?). Four checks; five minutes; a meaningful baseline signal.