Cash Rummy: a ₹500 welcome claim and no published withdrawal floor

Cash Rummy’s brand website links to a file on a CloudFront host. That is an observed link, not an authenticated publisher, package or signing-certificate match. The record below separates website claims from file and account evidence.

What the operator’s own pages publish

Three pages on the domain carry usable text: the homepage, /about-us and /privacy-policy. The homepage sells the product — download count, rating, welcome reward, referral reward, a game list and a payout claim. About-us carries the company name, the support address, a brand-age line, a responsible-gaming block and a fair-play section. The privacy policy carries the age line, the state lists, the data catalogue, the refund clauses and the section that names a different product domain.

No Terms of Service page could be reached on the same date. Requests to /terms, /terms-of-service, /terms-of-use, /terms-and-conditions and /terms.html did not return a document; the server answered with a three-word “openresty” body instead. That absence matters, because the clauses a player normally relies on — bonus expiry, withdrawal floor, payout window, account closure — are exactly the clauses that would sit in terms, and only the privacy policy is available as contractual text.

Downloads, players and ratings have different measurement bases

The homepage prints a 25M+ download claim, a 4.9 rating and a separate 4.6/12,878 ratings panel. It also refers to players, while the About page uses an unspecified “millions” description. Downloads and players are different measures; these statements alone do not prove a numerical contradiction. The pages do not establish the same dataset, date or collection method, and no platform metric was matched.

The source comparison establishes which statements were published and where their scopes differ. It cannot validate a download count, an independent rating or an account rule. The unresolved questions are the measurement basis for the metrics, the two lists inside the privacy policy, and the identity of the file reached through an external control.

The welcome reward, the referral line and the borrowed cashier paragraph

The welcome line reads “Welcome reward up to Rs 500 Bonus”. The referral line reads “Earn up to ₹50,000 per friend via Referrals every day”. The lobby paragraph claims “more than 25+ Games” and names Rummy, Ludo, Poker, Crash, Andar Bahar, Wingo Lottery, 7 Up Down, Dragon Tiger, Jhandi Munda and Roulette, alongside “Free Cash Tournaments and Leaderboard worth more than 1 Cr/ month” and “VIP Club”, “Leaderboard”, “Salon Club” and “Social Talking Center”.

Below all that sits a block headed “How to Download and Install Cash Rummy App?”. Its text is not about Cash Rummy at all. It asks the reader to “create a virtual team of 11 players”, join “Twenty20, one-day international cricket and test cricket” contests, and notes that “each user starts with a credit score of 100”. It then names Gamezy twice and closes with “you can withdraw winnings of minimum ₹25 and maximum ₹2,00,000”.

Those two numbers are the whole reason this record exists. They are the only withdrawal-shaped figures on the domain, and they belong to a fantasy-cricket product with a different roster model and a different game format. No Cash Rummy page repeats them, no Cash Rummy page publishes a floor of its own, and the About page never mentions a threshold. A reader who imports ₹25 as “the Cash Rummy minimum” is importing a number from another company’s paragraph.

Who is allowed to play, and whose list decides

Age is stated three times and consistently. The privacy policy opens with “Forbid 18 years old below”, §5 says the app and contests “are meant only for persons aged 18 or above”, and the About page says the operator will “only allow users who are 18+ to join the game” and uses “screening and age-gating techniques”. That is the one eligibility point on the domain that does not conflict with itself.

Geography is the opposite. The privacy-policy header lists ten excluded states — Telangana, Assam, Orissa, Gujarat, Maharashtra, Delhi, Andhra Pradesh, Tamil Nadu, Nagaland and Sikkim. Section 8 of the same document lists six — Andhra Pradesh, Assam, Odisha, Sikkim, Nagaland and Telangana — and calls them “Restricted Territories”. The separate cashrummy.xyz site lists eight, adds Kerala, and then describes them as “these seven states”. Cash Rummy’s own About page publishes no list at all.

The two lists inside cashrummy.com remain a document inconsistency. The separate cashrummy.xyz company and policy are not combined with them into an account rule. A source comparison cannot determine the current restrictions for an individual account; the existing site-wide legal note remains the separate context.

KYC, PAN and the refund route

The only document language on the domain is conditional. Under Fair Play, the About page says that “before withdrawing any winnings, depending on the amount and/or frequency of the withdrawal, a user may be required to verify the user’s identity, and account – e.g.: copies of PAN card & bank account details”. It adds that the documents are checked “either by us directly, or via a third-party service provider”. No amount, no frequency band and no per-tier checklist is printed, so the trigger for a request is not published.

The privacy policy’s data catalogue repeats the same conditional phrasing — “PAN (as applicable)” — and also lists bank account, credit card and debit card details as financial information. The About page adds that the operator does not store UPI handles or wallet details itself and that payment gateways use 3-D secure authentication. What none of the pages publish is which document closes which withdrawal size.

Refunds are separate from withdrawals and are the only timed process on the domain. Section 9 lists three refundable situations: a payment that succeeded but was not received, an app failure that removed service for a long period, and repeated payment caused by a payment loophole. It gives a route — contact customer service by WhatsApp or email, describe the problem, and escalate if it is not resolved — and says the money is “usually” returned to the funding account “within 5 working days”. Three exclusions follow: credit already consumed, a payment older than three days, and established cheating.

Read that as a deposit-refund clause, not as a payout promise. It says nothing about how long a winning withdrawal takes, and the homepage’s “Instant Withdrawals of Winnings in 24X7” is a marketing line with no clause behind it.

The APK line: what a file response proves

The download button resolves to a CloudFront host, and the file answered HTTP 200 with a Content-Length of 31,573,442 bytes when measured on 5 November 2026. That is the full extent of what a file response proves: a file exists at that address, it is about 30 MB, and it was served that day. The page publishes no version number, no package name and no signer, and the filename carries an operator-side string rather than a version.

For an app already installed, record only the name, version and other fields actually visible in App info; that screen does not universally display a signing certificate. Android signing checks require appropriate package/certificate evidence, such as the official apksigner certificate output. Valid signing-key rotation is supported, so a changed certificate is not by itself proof of a different publisher. No trusted package or certificate reference was established for this file. Do not install it just to fill these gaps.

If an existing installation raises a concern, preserve its visible version, source and relevant account/request references before changing it. Keep Play Protect enabled and follow any specific device-provider warning. Do not force an unknown replacement or erase an existing installation merely to test another link. A brand-looking button and a clean scan do not authenticate a package.

How this record differs from the other Rummy entries

Several records, including Money Rummy and Rummy Leader, also have no currently attributable withdrawal floor. Cash Rummy’s particular finding is that the only withdrawal-shaped figures on its homepage sit in Gamezy fantasy-cricket copy. That product-format mismatch is why those figures are excluded from this record.

A blank floor cell means that the reviewed sources did not establish the amount. The useful comparison is the evidence behind that blank: changed sources for some records, missing clauses for others, and a different product’s copied paragraph here. The app record and comparison board keep those reasons separate.

What the public record cannot establish

It cannot establish a minimum withdrawal, a maximum withdrawal, a payout window, a fee line, a bonus expiry rule, a document checklist per amount, a package name, a signing certificate or a current state list. It also cannot establish that the file served on 5 November 2026 is the same file a reader will receive today, because the domain publishes no version and no checksum.

The identity chain stops at a support address that uses a different domain — [email protected] — and at a policy section that names play-rummy.xyz. No dated, linkable user report was found for this brand in the search recorded on this page, and the testimonials printed on the homepage were excluded because they carry no date, no account and no verifiable transaction.