Safety

Rummy payments and KYC: PAN, Aadhaar, UPI and the withdrawal reality

A reader-facing safety page is useful when it answers the questions a beginner actually has. The article covers the documents platforms typically ask for, what masking means, when UPI chargebacks work, and what to do when an operator holds funds.

Read time
10 minutes
Last verified
04 November 2025
Scope
Adult readers in India
Editorial still-life of a workspace surface with a phone, card edge, sealed envelope and notepad laid out calmly on a warm sandstone desk.
Verification surface · phone, card, envelope, notepad

KYC exists to keep real-money platforms compliant with anti-money-laundering rules. The reader's experience is that the platform asks for documents before a withdrawal is allowed. The four documents usually involved are PAN, Aadhaar, a cancelled cheque or bank statement, and a live photo. Each has a purpose; each has a sensible default for the reader.

PAN

PAN is the tax identifier issued by the Income Tax Department. Most platforms require a PAN for cumulative withdrawals above a regulated threshold; some require it at deposit time. The reader should check that the name on the PAN matches the name on the bank account; mismatched names are the most common reason a first withdrawal is held.

The copy should be readable and unedited. Photocopies with edges visible are accepted; cropped or pasted-together copies are not. A clear photograph of a physical PAN card is usually fine; a photograph of a digital PAN is also usually fine.

Aadhaar and what masking means

Aadhaar is the twelve-digit identity number issued by UIDAI. For KYC purposes, the platform only needs the last four digits visible; the first eight should be masked. "Masking" means physically covering the digits with opaque tape or using the Aadhaar mask feature in the UIDAI portal before saving the PDF.

The reason masking matters: a full Aadhaar number, combined with a name and date of birth, is enough to attempt fraudulent financial activity. The masked copy is enough for KYC verification and not enough for anything else. The reader should mask before upload, not rely on the platform to mask afterwards.

UPI rails and chargeback reality

UPI is the most common deposit and withdrawal rail on Indian rummy platforms. Deposits are instant; withdrawals are queued and processed in batches. The median withdrawal time on the platforms Spin has reviewed is two to six hours for repeat withdrawals; first withdrawals are slower because of the verification queue.

UPI chargebacks for skill-game stakes are possible but not routine. The reason is the nature of the transaction: a stake is not a payment for goods, so the standard consumer-protection chargeback path does not apply. A reader who disputes a charge should expect the operator to provide the platform's T&Cs and the player log as evidence; the resolution depends on the dispute mechanism named in those T&Cs.

Live photo and biometric verification

Some platforms ask for a live selfie or a short video to verify the player is the same person as on the PAN and Aadhaar. The single-window light setup is the simplest way to take a usable photo: face the window, hold the phone at eye level, and avoid backlight.

The withdrawal queue, in practice

First withdrawal: usually 12-24 hours because the platform is verifying the documents and routing the funds. Repeat withdrawal: usually within the platform's batch window (typically two to six hours). Withdrawal hold: usually between 24 and 72 hours if the platform flags a verification issue.

If a withdrawal is held beyond 72 hours without a written reason, the reader's first step is the operator's in-app support ticket. The second step is the operator's published dispute email. The third step is the regulator or ADR named in the platform's T&Cs, usually this is a state-level authority or an industry ADR provider.

Documents not to send

  • Originals. Always send readable copies, never the physical PAN card or Aadhaar letter.
  • Documents not listed on the verification page. If the platform lists PAN, Aadhaar and a bank statement, do not send a salary slip, a rent agreement or a passport unless asked.
  • Documents with extra information. A PAN card photograph with the surrounding table is fine; a PAN card photograph with a credit card on the same surface is not.
  • Unmasked Aadhaar. Mask the first eight digits before upload. A full Aadhaar number is enough for fraud; a masked Aadhaar is enough for KYC.

When an operator holds funds

If the platform holds a withdrawal beyond 72 hours without a written reason, the reader has three documented steps available:

  1. Raise an in-app or in-site support ticket. Keep the ticket number and the response timeline.
  2. Send a written dispute to the platform's published dispute email. Include the ticket number, the dates of the requests and the screenshots.
  3. If the platform does not respond within the T&Cs timeline, escalate to the regulator or ADR named in the platform's T&Cs.

Throughout this process, the reader should not add new funds to the platform. The escalation depends on what is already in the platform's custody, not what is added later.

Jurisdictional limits, briefly

Indian states have varying positions on real-money rummy. Some states restrict real-money stakes entirely; others allow them with platform-level KYC. The reader should verify the position of their own state before depositing. The /is-legal/ page summarises the public rules we have been able to verify; specific legal questions should be addressed to a qualified lawyer in the reader's state.

Safety questions, short answers

How long does a first withdrawal take? Twelve to twenty-four hours on most platforms because the documents are being verified. Repeat withdrawals are faster.

Should I mask my Aadhaar before upload? Yes. The first eight digits should be physically covered or masked using the UIDAI portal before the PDF is uploaded.

Can a UPI chargeback recover my stake? UPI chargebacks for skill-game stakes are not routine; the resolution depends on the dispute mechanism named in the platform's T&Cs.

What do I do if the platform does not respond? Escalate to the regulator or ADR named in the platform's T&Cs. Do not add new funds during the escalation.

18+. Indian real-money rummy is restricted in several states. The /is-legal/ page summarises the public rules we have been able to verify; specific legal questions should be addressed to a qualified lawyer in the reader's state.
+

A reader's first-deposit checklist

Five checks the reader should run before the first deposit at any platform. The checks take ten minutes; the cost of skipping them is usually larger than the time it takes to run them.

  1. Confirm the platform's T&Cs page. The T&Cs page should name the operator, the regulator, the dispute mechanism and the responsible-gaming policy. A T&Cs page that is missing one of the four is incomplete.
  2. Mask the Aadhaar copy. The first eight digits of the Aadhaar number should be physically covered or masked using the UIDAI portal before the PDF is uploaded.
  3. Match the name on the PAN to the bank account. The most common reason a first withdrawal is held is a name mismatch between the PAN and the bank account. Verify before depositing.
  4. Enable a deposit limit and a session reminder. Both settings are inside the responsible-gaming menu. Enable both before the first deposit.
  5. Save the platform's dispute email. A dispute email is on the T&Cs page. Save the email address in the reader's contacts; the email is the second step in the escalation path if the in-app support is unresponsive.

Five checks, ten minutes. The reader who runs the checks is in a usable position to deposit a small amount and try a paid hand. The reader who skips any check should pause and run the check before depositing.

Read the wallet and KYC walkthrough for the verification ladder in detail.

+

A short glossary of KYC and payment terms

Five KYC and payment terms a reader is most likely to meet at a platform's verification page. The terms are short, the definitions are short, and the framing is what the reader should look for in a T&Cs clause.

KYC

KYC is "Know Your Customer", the platform's process of verifying the reader's identity, address and payment instrument before allowing a real-money deposit or a withdrawal. The KYC ladder typically includes phone, email, PAN, Aadhaar and a payment instrument.

Masked Aadhaar

Masked Aadhaar is a copy of the Aadhaar document with the first eight digits physically covered or masked using the UIDAI portal's "Generate masked Aadhaar" feature. A masked Aadhaar is enough for KYC and not enough for fraud.

UPI

UPI is the Unified Payments Interface, the most common deposit and withdrawal rail on Indian rummy platforms. Deposits are instant; withdrawals run on a platform-specific batch window. The /wallet-kyc/ page covers the verification ladder in detail.

Withdrawal queue

Withdrawal queue is the platform's batch of pending withdrawal requests, processed at fixed intervals. First withdrawals are slower because the platform is verifying the documents; repeat withdrawals are faster.

Grievance officer

Grievance officer is the named person the platform's T&Cs page lists as the contact for reader complaints. The grievance officer is the second step in the escalation path; the first is the in-app support ticket.

Read the wallet and KYC walkthrough for the verification ladder.

Practice mode, ₹1 entry Try a short rummy hand with the smallest stake.
Play now