The right amount of paranoia about a paid rummy platform is "medium". Most platforms are well-run, most withdrawals complete on time, and most support channels respond within hours. The handful of platforms that misbehave do so in predictable ways, and the same set of precautions protect you against all of them.
Your state, the platform, and the rule
Rummy is classified as a game of skill by the Supreme Court of India. That does not make it legal in every state. The states that restrict paid rummy in some form include Telangana, Andhra Pradesh, Assam, Odisha, Tamil Nadu, Karnataka, Sikkim and Nagaland. The list is not static; verify your local rules before you deposit.
A platform that operates in India is expected to geo-block restricted states. If you can sign up from a restricted state, the platform is not doing its job. Do not deposit.
What KYC actually asks for
The standard KYC flow on every major Indian rummy platform asks for the same five things.
- Mobile number, verified by OTP.
- Email address, verified by link.
- Permanent Account Number (PAN), verified against the income-tax database.
- Date of birth, verified against the PAN.
- Government photo ID. Aadhaar is common; a driving licence, voter ID or passport also work.
Some platforms add a sixth step: a live selfie matched against the photo ID. This is a fraud control, not a privacy violation. It is reasonable to refuse a selfie if the platform will not tell you where the image is stored and for how long.
Payments and withdrawals
Deposits on Indian platforms are typically routed through one of four channels: UPI, debit card, net-banking or wallet. UPI is the cheapest and the fastest. Card deposits may attract a small processing fee at certain banks; net-banking is reliable but slower.
Withdrawals should be back to the same source you deposited from. A platform that insists on a different withdrawal method is signalling that something in its banking chain is unusual. Decline and ask why.
UPI
Cheapest deposit channel. Withdrawals usually settle in minutes to hours.
Debit card
Convenient. Some banks charge a small processing fee above a threshold.
Net-banking
Reliable for large deposits. Withdrawals take one to two working days.
Wallet
Useful for casual play. Withdrawal to a bank is usually one extra step.
What to do when a withdrawal is disputed
The most common reason for a disputed withdrawal is a KYC mismatch: the bank account name does not match the PAN name. The second most common is a deposit that has not yet cleared. Both have a clean resolution: ask the platform's support channel for the specific reason, fix the underlying mismatch, and resubmit.
If the support channel does not respond within forty-eight hours, escalate by email with the same details and ask for a ticket number. If the email channel also does not respond, raise a complaint on the National Consumer Helpline (1915) or the platform's regulator. Keep everything in writing from that point forward.
The five receipts to keep
Before you deposit, decide where you will keep these five things. A folder in your email labelled with the platform name is the simplest.
- The deposit confirmation, including the amount, the channel and the timestamp.
- The first deposit fraud-screen pass, if the platform sends one.
- The KYC completion email, with the documents the platform has on file.
- The withdrawal confirmation, including the expected settlement window.
- The session export, ideally in CSV or JSON, covering every hand you have played.
If something feels wrong
Stop depositing. Withdraw whatever balance you can. Document the issue with screenshots and timestamps. Write to support in plain language asking for a specific resolution. If you do not get a useful response in forty-eight hours, escalate. The five receipts above are your evidence.
When safety is the right word to use
The five receipts above are the safety toolkit. None of them are dramatic. None of them involve calling a regulator. Most disputes between a careful player and a well-run platform resolve inside the support channel within forty-eight hours. The handful that do not resolve at the support level resolve because the player kept the receipts.
If you are starting from scratch, choose a folder in your email before you make your first deposit. Label it with the platform name. Drop every email the platform sends into the folder. That single habit does more than any other piece of advice on this guide.
Why safety is a separate page from reviews
Safety is not the same as a platform review. A platform review answers the question "is this platform any good?" Safety answers a different question: "if something goes wrong, do I have what I need to recover?" A platform can be a mediocre product with excellent safety practices, or an excellent product with hidden withdrawal friction. The two questions deserve separate pages.
When we write a platform review, we link back here for the KYC walkthrough and the receipts to keep. When a reader writes in about a withdrawal that did not settle, we link back here for the escalation steps. The two pages are a pair.
What to do if the platform stops responding
The first thing is to switch from chat to email. The second is to ask for a ticket number. The third is to set a deadline: if you do not have a useful response within forty-eight hours of the email, you escalate. Do not escalate before you have asked the platform to escalate internally; a regulator complaint that the platform did not have a chance to answer is harder to win.
If the platform has a regulator-listed licence, escalate through the regulator's complaint process. If the platform does not, escalate through the National Consumer Helpline (1915) and through your bank's dispute process if the disputed amount was a deposit. Keep the receipts.
The three things you should never do
Do not share your OTP with anyone, including the platform's support staff. Do not allow a third party to operate your account. Do not deposit money you cannot afford to lose for the duration of the dispute process.
These are not paranoia; they are the three most common ways a routine platform dispute turns into a serious one. The discipline is the same as the discipline of the receipts above: assume the worst, document the rest.
How long should you keep the receipts
The short answer is at least two years. The longer answer is until you are confident that no dispute will arise from any session in the period. Most disputes arise within the first three months of a session; a smaller number arise within the first year. Two years is a working default that covers the majority of cases without filling your email folder.
For high-value sessions, keep the receipts indefinitely. If a session involved more than a month of regular play or more than a single deposit cycle, the receipts are worth keeping for as long as the platform exists.
The state-by-state view
The list of restricted states is correct as of November 2025. State-level rules change, sometimes in a single notification, so we recommend that you also check the relevant state government's official website before you deposit. The states that have published consultation papers on skill-game regulation in 2025 may issue final orders during the lifetime of this guide; when they do, we update the list.
If you live in a restricted state, the platform is expected to geo-block your account. If you can sign up from a restricted state, the platform is not doing its job. The fastest way to confirm is to look at the address line on the deposit confirmation; if it does not match your state, the platform has misclassified your location and you should not deposit further.
Questions readers ask
Is Aadhaar mandatory for KYC?
No. PAN is mandatory for paid play. Aadhaar is optional but is the fastest way to verify your address for higher-value withdrawals.
Can I deposit from a credit card?
Most platforms refuse credit-card deposits for paid rummy. The RBI's guidance on credit cards for skill-game transactions is restrictive. UPI or debit card is the standard path.
What is the maximum I can keep in a rummy wallet?
It depends on the platform and your KYC level. Most platforms cap unverified wallets at a small amount; fully verified wallets have no platform-imposed cap, but the platform's bank will enforce its own daily transfer limits.
How long do banks take to credit a withdrawal?
UPI: minutes to hours. IMPS: under an hour. NEFT: a few hours to one working day. RTGS: same day for high-value transfers.