01
PAN card
The PAN is the only document every mainstream platform asks for at registration. It confirms identity for tax reporting on winnings above the threshold.
Verification, payments and data: a reader's safety guide
The safety desk is the practical half of the publication. Where the rules desk tells the reader how to play, the safety desk tells the reader how to register, verify, withdraw and protect their data, and how the legal framework actually applies.
Section 01
The verification stack
Verification is the most common reason a reader gets stuck. The four steps below appear in the order most mainstream platforms ask for them.
02
Aadhaar or address proof
Aadhaar (front and back) or an equivalent address proof (passport, voter ID, utility bill) is requested for the second layer.
03
Bank account or UPI handle
A bank account (cancelled cheque or statement) or a verified UPI handle is required before the first withdrawal.
04
Selfie or live photo
A live selfie holding the PAN, or a short video match, completes the verification.
Section 02
Payments and withdrawals
Withdrawals are the second most common reason a reader gets stuck. The desk tracks five columns on every reviewed platform: average UPI payout time, average net-banking payout time, fee disclosure, hold-back windows, and minimum withdrawal amount.
UPI
UPI is the default withdrawal method on most mainstream platforms. Average payout time on UPI-linked accounts is under one hour on three of the five reviewed platforms. The fourth clears within twenty-four hours; the fifth has a forty-eight-hour hold for the first withdrawal.
Net banking
Net banking payouts are slower than UPI payouts, usually six to twelve hours. Net banking is the right method for amounts above the UPI daily cap.
Fees
Most mainstream platforms do not charge a withdrawal fee. The desk flags any platform that does, with the specific fee structure on the relevant review.
Section 03
Data and privacy
KYC data is shared with three parties: the platform's verification partner (for document authentication), the issuing bank (for account confirmation), and the tax authority (for TDS reporting on winnings above the threshold). The desk does not have access to reader KYC data.
What the platform stores
The platform stores the four KYC documents, the bank or UPI handle, and the play history. The play history is retained for the regulatory minimum (usually five years) and is available to the reader on request.
How to delete the account
Most mainstream platforms honour an account-deletion request within thirty days. The request can usually be made from inside the account settings; the desk publishes the step-by-step on the responsible-play page.
Section 04
Legal and tax
Rummy is a game of skill under repeated Supreme Court rulings. The 1968 ruling in the State of Bombay v. R.M.D. Chamarbaugwala case noted that rummy, played according to standard rules, is predominantly a game of skill. The Public Gambling Act, 1867, exempts games of skill from its definition of gambling.
State restrictions
Andhra Pradesh, Telangana, Assam, Odisha, Sikkim, Nagaland and Meghalaya have historically restricted real-money skill-card play. State rules change; the responsible-play page keeps the current table.
Tax on winnings
Net winnings above ₹10,000 in a financial year are subject to a 30% TDS. Winnings below the threshold are not subject to TDS but must still be declared as income.
Section 05
Contact the desk
The editor's email is published on the masthead below. The desk responds to corrections within five working days. The desk does not respond to platform promotional requests or partnership pitches that involve paid placements.
Postal address: luckyproin editorial desk, c/o registered correspondence office, India. Formal corrections should be sent in writing with the rule or platform behaviour cited.
Keep reading
The responsible-play desk sits beside this one. It is the page to read before a long session.
Section 06
Privacy notice
This publication does not collect personal data from readers. The site does not run analytics that identify individual readers; the affiliate route is a first-party redirect that does not transmit identifying data to this domain. The published images are static; the site does not run tracking scripts on the reader's device.
The desk does not maintain a mailing list. Reader corrections arrive by email and are answered by email; the desk does not store the email address beyond the active correspondence.
Section 07
FAQ
What is KYC?
Know Your Customer. The four-step process every mainstream platform asks for before the first withdrawal: PAN, Aadhaar, bank or UPI, selfie.
How long does KYC take?
A clean submission usually clears within twenty-four hours. A re-submission extends the timeline to forty-eight hours.
What is a points cap?
The maximum score awarded for a single declaration. The cap was historically 60; several platforms have raised it to 80.
Is my data shared?
KYC data is shared with the platform's verification partner, the issuing bank, and the tax authority. The desk does not have access to reader KYC data.
Is rummy legal in India?
Rummy is a game of skill under repeated Supreme Court rulings, but individual states restrict real-money play. The state eligibility table is on the responsible-play desk.
Section 08
Tax on winnings
Section 194BA of the Income Tax Act
Section 194BA of the Income Tax Act, 1961, introduced in 2023, requires platforms to deduct tax at source (TDS) on net winnings from online skill games. The TDS rate is 30% on net winnings above ₹10,000 in a financial year. The platform deducts the TDS at the time of withdrawal; the reader sees the net amount in their account.
What counts as net winnings
Net winnings are the total amount withdrawn minus the total amount deposited during the financial year. A reader who deposits ₹5,000 and withdraws ₹6,000 has net winnings of ₹1,000, which is below the ₹10,000 threshold. A reader who deposits ₹5,000 and withdraws ₹20,000 has net winnings of ₹15,000; the TDS is 30% of ₹15,000 = ₹4,500.
How the TDS is reported
The TDS is reported on Form 26Q by the platform. The reader sees the TDS in their Form 26AS, which can be downloaded from the income tax e-filing portal. The TDS can be claimed as a credit against the reader's total tax liability when the reader files their return.
The Form 26Q entry
The Form 26Q entry shows the platform as the deductor, the reader as the deductee, the section as 194BA and the amount as the net winnings. The reader should keep the Form 26Q entry with their tax records.
What the desk does not advise
The desk is not a tax adviser. The tax treatment of skill-game winnings is a specific area of Indian tax law and the desk recommends that a reader with a substantial withdrawal consult a chartered accountant for the specific treatment. The desk publishes the rule but does not publish a tax strategy.
Section 09
Incident response
What to do if a withdrawal is delayed
If a withdrawal is delayed beyond the platform's published window (twenty-four hours for UPI, forty-eight hours for net banking), the reader should first check the play log to confirm the withdrawal request was logged. If the request was logged but the withdrawal has not arrived, the reader should open a support ticket with the platform. The desk recommends keeping the ticket open until the withdrawal is processed or until the platform provides a written explanation.
What to do if a document is rejected
If a KYC document is rejected, the reader should ask the platform for the specific reason for the rejection. Most platforms reject documents because the photo is blurred, the document is cropped, or the OCR could not read the printed text. The reader can re-upload a clearer photo; the re-upload usually clears within twenty-four hours.
What to do if a self-exclusion is not honoured
If a self-exclusion is not honoured, for example if the reader is able to log in during the chosen period, the reader should write to the platform's compliance team immediately. The reader can also write to the desk; the desk will investigate and, if the breach is verified, the desk will note the breach on the relevant review page.
What to do if a responsible-play limit is overridden
If a deposit cap or session timer is overridden without the reader's consent, the reader should write to the platform's compliance team and to the desk. The desk treats an overridden responsible-play limit as a serious incident; the relevant review is suspended until the platform responds.
Section 10
Account deletion
How to delete the account
Most mainstream platforms honour an account-deletion request within thirty days. The request can usually be made from inside the account settings: Account → Delete account. The platform sends a confirmation email; the reader confirms the deletion; the platform processes the request.
What gets deleted
The account profile is deleted; the KYC documents are deleted; the play history is retained for the regulatory minimum (usually five years) but is no longer linked to the reader's profile. The reader cannot log in after the deletion is processed.
What gets retained
The platform retains the financial transaction history for the regulatory minimum. The retention is required by Indian tax law and by the platform's banking partners. The retention is not used for marketing; the retention is for audit purposes only.
What the desk recommends
The desk recommends that a reader who intends to delete the account withdraw any remaining balance first. The desk also recommends that the reader download the play log before requesting the deletion; the play log is not accessible after the deletion is processed.