🔐
Official source only
Download from the platform's own HTTPS website. Verify each character of the domain — scammers use lookalikes (o/rn swaps).
🚫
No chat links
Never install APKs from Telegram/WhatsApp forwards or "bonus" DM links — the #1 malware vector in India.
🛡
Scan first
Run Play Protect / a reputable scanner on the downloaded APK before opening it.
📋
Read permissions
A rummy app needs storage & network. If it asks for contacts, SMS or accessibility access — abort.
After Install: Lock Down the Account
- Enable 2-factor login if available; use a unique password.
- Complete KYC only after confirming you're on the genuine app (logo + internal links match the main site).
- Set deposit/session limits on day one — see responsible gaming.
Red Flags That Mean Delete Immediately
- App name/version differs from the website's advertised download.
- Install screen requests unrelated permissions post-update.
- The app pressures "verify faster" by SMS-forwarding or reading OTPs.
⚠ Planning checklist for choosing the actual platform: run through our 10-point app checklist before, and beginner practice routine from the roadmap after.