Privacy Policy
This Privacy Policy governs how we collect, use, disclose, and safeguard information obtained from users of our online gaming platform operating in India. The policy applies to all visitors, registered players, and individuals who engage with our services through desktop, mobile, or any other digital medium. We are committed to maintaining the highest standards of data protection in accordance with applicable Indian laws and international best practices. Last updated: January 20, 2026.
Information We Collect
Our platform collects various categories of information to provide seamless gaming experiences and ensure regulatory compliance. Information collection occurs through multiple channels including direct user input, automated systems, and third-party partners. Understanding what data we gather helps users make informed decisions about their participation on our platform. All collected information is subject to strict confidentiality agreements and processing protocols established under Indian data protection frameworks and our internal governance structures.
| Data Category | Description | Collection Method | Purpose |
|---|---|---|---|
| Personal Identification Data | Name, date of birth, email address, phone number, residential address | User registration forms | Account creation, identity verification, communication |
| Financial Information | Banking details, payment card numbers, transaction history, wallet balances | Payment processing systems | Deposit processing, withdrawals, fraud prevention |
| Gaming Data | Bet history, game preferences, win/loss records, session duration | Gaming platform servers | Service improvement, personalization, analytics |
| Technical Information | IP address, device identifiers, browser type, operating system, cookies | Automatic tracking systems | Security, user experience optimization, fraud detection |
| Government Identification | PAN, Aadhaar number, driver’s license, passport information | KYC verification process | Legal compliance, anti-money laundering, account verification |
Purpose of Data Collection and Usage
We collect personal information exclusively for legitimate business purposes and legal obligations. Primary objectives include providing gaming services, processing financial transactions, ensuring platform security, and complying with Indian regulatory requirements. Secondary uses encompass marketing communications, player behavior analysis, responsible gaming implementation, and dispute resolution. All data processing activities follow the principle of data minimization, meaning we collect only information necessary for specified purposes. Users maintain the right to object to non-essential processing, particularly marketing activities, at any time through their account settings or direct communication with our support team.
- Account creation and profile management functionality
- Payment processing and financial transaction handling
- Know Your Customer compliance and anti-money laundering procedures
- Platform security, fraud prevention, and suspicious activity detection
- Responsible gaming enforcement and self-exclusion mechanisms
- Customer support and dispute resolution activities
- Personalized gaming recommendations and promotional offers
- Statistical analysis and platform improvement initiatives
- Legal compliance with Indian gambling and financial regulations
- Communication regarding account updates, policy changes, and important notices
Data Sharing and Third-Party Disclosure
We maintain strict protocols regarding third-party disclosure of personal information. Data sharing occurs only when legally required, explicitly consented to by users, or necessary for service delivery. Our partnerships with payment processors, identity verification providers, and regulated financial institutions involve contractual obligations ensuring equivalent data protection standards. We do not sell personal information to unaffiliated marketing companies or data brokers. Information may be disclosed to law enforcement, regulatory authorities, and government agencies when legally mandated through proper legal instruments such as court orders or official government requests. All third parties accessing user data must maintain confidentiality agreements and implement security measures comparable to our standards.
Security Measures and Data Protection
Protecting user data from unauthorized access, alteration, disclosure, and destruction represents our fundamental responsibility. We implement comprehensive security architecture encompassing encryption technologies, firewalls, access controls, and regular security audits. All sensitive information, including financial data and identification documents, undergoes encryption using industry-standard protocols such as TLS 1.2 or higher. Our servers maintain protected environments with restricted physical access, continuous monitoring systems, and redundant backup mechanisms. Staff members with data access receive mandatory information security training and operate under confidentiality agreements. We conduct periodic penetration testing and vulnerability assessments to identify and remediate potential security weaknesses before exploitation occurs.
- SSL encryption for all data transmission between user devices and our servers
- Multi-factor authentication options for account access and sensitive operations
- Database encryption ensuring stored personal information remains inaccessible without authorization
- Regular security audits conducted by independent cybersecurity professionals
- Intrusion detection and prevention systems monitoring for suspicious network activity
- Access control mechanisms limiting employee data exposure to necessary roles only
- Incident response protocols enabling rapid containment and notification procedures
- Data backup systems ensuring recovery capability following technical failures
- Compliance with PCI DSS standards for payment card information handling
- Annual security certifications validating our protective infrastructure compliance
Cookies and Tracking Technologies
Our platform utilizes cookies, web beacons, and similar tracking technologies to enhance user experience and gather analytical information. Cookies store user preferences, session identifiers, and authentication tokens enabling seamless platform navigation. Analytics cookies collect aggregated data regarding player behavior, page visit patterns, and feature utilization without identifying individual users. Advertising cookies help us deliver relevant promotional content and measure campaign effectiveness. Players may configure browser settings to limit cookie acceptance, though this may restrict platform functionality and user experience quality. Our cookie implementation complies with privacy standards applicable in India, providing transparency regarding tracking practices and enabling meaningful user control over data collection.
User Rights and Data Subject Protections
All users retain fundamental rights concerning their personal information processing, consistent with principles established in major privacy frameworks and Indian data protection practices. These rights encompass access, correction, deletion, portability, and withdrawal of consent. Users may request copies of their personal data in machine-readable formats, request correction of inaccurate information, and demand deletion of data no longer necessary for stated purposes. The right to be forgotten applies when continued processing lacks legitimate basis following withdrawal of consent. Users maintain the right to lodge complaints with relevant Indian data protection authorities if they believe their privacy rights have been violated. We provide mechanisms enabling users to exercise these rights without experiencing service restrictions or discriminatory treatment.
- Right to access personal information and obtain processing activity details
- Right to rectify inaccurate, incomplete, or outdated personal data
- Right to erasure when data is no longer necessary for original purposes
- Right to restrict processing pending resolution of data accuracy disputes
- Right to data portability enabling transfer of personal information to other services
- Right to withdraw consent for non-essential processing at any time
- Right to object to automated decision-making and profiling activities
- Right to lodge complaints with Indian regulatory authorities
- Right to information regarding data retention periods and processing purposes
- Right to notification following data breach discovery affecting personal information
Data Retention and Deletion Policies
We maintain data retention schedules ensuring information storage duration aligns with applicable legal requirements and legitimate business needs. Personal identification data undergoes retention for the account lifetime plus an additional five-year period following account closure, complying with Indian financial record-keeping obligations. Financial transaction records remain accessible for seven years supporting tax compliance, regulatory investigations, and fraud dispute resolution. Gaming history and behavioral data are retained for two years enabling responsible gaming monitoring and player support services. Identification documents undergo retention throughout the KYC verification validity period plus three additional years. Users may request data deletion subject to legal hold obligations and regulatory requirements. Deletion requests undergo processing within specified timeframes, with notification confirming completion to the requesting user.
Responsible Gaming and Privacy Integration
Our platform integrates privacy protections with responsible gaming commitments, recognizing that player safety extends beyond financial security to psychological wellbeing. We utilize collected behavioral data to identify problematic gaming patterns, excessive wagering, and potential addiction indicators. Players demonstrating concerning activity receive targeted interventions including spending limit suggestions, reality checks, and self-exclusion reminders. Personal data processing for responsible gaming purposes occurs independently from marketing activities, ensuring protective measures maintain priority over commercial interests. Users may access detailed responsibility gaming reports analyzing their activity patterns and receive personalized recommendations from trained support specialists. Privacy regarding responsible gaming data remains paramount, with access restricted to authorized staff members dedicated exclusively to player protection rather than revenue optimization.
Data Breach Notification Procedures
In the unfortunate event of unauthorized data access, alteration, or disclosure affecting user information, we maintain transparent notification protocols. Upon discovering security incidents potentially compromising personal data, we conduct immediate investigations determining breach scope, affected individuals, and remediation requirements. Users whose data faces reasonable risk of misuse receive prompt notification detailing incident nature, potentially exposed information, and protective steps they should implement. Notifications occur through email, SMS, or account notifications depending on available contact information. We simultaneously report significant breaches to relevant Indian regulatory authorities and law enforcement agencies as legally required. Breaches exceeding established thresholds trigger external security specialist engagement for comprehensive forensic investigation and remediation documentation. Public disclosure occurs when legally mandatory, with transparency regarding incident details supporting user protection rather than institutional risk mitigation alone.
International Data Transfers and Compliance
While our platform operates primarily within Indian jurisdiction, certain technical operations and service providers may involve data transfers to international locations. Any cross-border data movement undergoes protection under contractual safeguards including Standard Contractual Clauses or equivalent mechanisms ensuring recipient jurisdictions maintain adequate protection standards. We perform due diligence assessments on international service providers evaluating their security infrastructure, legal compliance obligations, and data handling practices. Users are informed regarding international data transfers through this policy and specific consent mechanisms when legally required. We maintain awareness of evolving international data protection regulations including GDPR compliance requirements where European users access our services. Data transfers remain subject to restrictions imposed by Indian authorities regarding financial information, gambling-related data, and other sensitive categories, with compliance constituting our absolute priority.
Policy Updates and Communication
This Privacy Policy may undergo periodic updates reflecting regulatory changes, technological developments, and operational improvements. We notify users of material policy modifications through email, account notifications, or prominent website announcements minimum thirty days prior to implementation. Continued platform access following policy update notification constitutes acceptance of revised terms. We encourage users to review updated privacy policies thoroughly, comparing changes against previous versions to understand modified practices. Users maintaining fundamental disagreement with policy changes retain the option to terminate accounts and request data deletion subject to legal retention requirements. Historical policy versions remain available through our archives, enabling users to review specific dates and modifications. Questions regarding policy changes receive prompt responses from our dedicated privacy support team, ensuring users achieve comprehensive understanding of their data protection rights and obligations.
