Privacy Policy
for khelo24

khelo24 collects personal data through several channels: directly from you when you register an account or use our services, automatically through your use of the platform, and in some cases from third-party sources such as payment processors and identity verification providers. The categories of information we collect are set out in the table below.

The personal data khelo24 holds about you is used for specific, documented purposes. We do not use your data in ways that go beyond what is described in this policy without first obtaining your consent. The primary purposes for which we process your data are as follows:

• Account management: Creating, maintaining, and securing your khelo24 player account, including login authentication, password reset, and session management.
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Verifying that the payment method belongs to the registered account holder to comply with our same-source withdrawal policy.
• Identity and age verification: Confirming that all players are aged 18 or above and that the identity provided matches the individual using the account. This is a legal obligation we take seriously.
• Fraud prevention and security: Monitoring account activity for signs of unauthorised access, bonus abuse, multi-accounting, money laundering, or any other activity that violates our Terms & Conditions. Automated systems and manual review are both used for this purpose.
• Responsible gaming monitoring: Analysing gameplay patterns to identify signs of problem gambling. Where risk indicators are detected, our responsible gaming team may make contact to offer support tools such as deposit limits, cooling-off periods, or self-exclusion.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support service through analysis of past interactions.
• Platform improvement: Using aggregated, anonymised analytics to understand how players navigate khelo24, which features are most used, and where the user experience can be enhanced. This analysis does not identify individual players.
• Marketing communications (consent-based only): Sending you information about promotions, bonuses, new games, and seasonal offers where you have opted in to receive such communications. You can withdraw this consent at any time through your account settings.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering regulations, responding to lawful requests from competent authorities, and enforcing our Terms & Conditions.

khelo24 does not sell your personal data. However, to deliver our services, we work with a limited number of carefully selected third-party service providers. Each provider is bound by a data processing agreement that restricts them to using your data only for the specific service they are contracted to provide.

Categories of third parties we work with:

• Payment processors: bKash, Nagad, Rocket, Upay, and international card payment gateways receive the minimum data necessary to process your financial transactions. These providers operate under their own privacy frameworks and are subject to Bangladesh financial regulations.
• Identity verification providers: Third-party KYC and document verification services receive copies of the identity documents you submit as part of our age and identity verification process. These providers are contractually prohibited from using your documents for any other purpose.
• Game software providers: Casino and sports data providers such as Pragmatic Play, Evolution Gaming, Spribe, and others may receive a session token and anonymised player identifier to load game sessions. They do not receive your full name, contact details, or payment information.
• Fraud detection and security vendors: Specialist security services that help us detect bot activity, account takeover attempts, and financial fraud receive technical data such as IP addresses, device fingerprints, and behavioural signals.
• Customer support platforms: Our support ticketing and live chat systems hold records of your communications with the khelo24 support team for the purpose of resolving your queries and maintaining quality standards.
• Regulatory and law enforcement authorities: Where we are required by law, court order, or a valid request from a competent regulatory or law enforcement authority, we will disclose your personal data to the extent required by that legal obligation. We will notify you of such requests where we are legally permitted to do so.

In all cases, data transfers to third parties are governed by contractual protections. We do not transfer your personal data to countries outside your region without ensuring that appropriate safeguards are in place.

khelo24 uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep your session secure, and understand how players use our services. A cookie is a small text file placed on your device by a website you visit. It is widely used to make websites work efficiently and to provide useful information to site operators.

Types of cookies we use:

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account security state, and enable core features such as the game lobby, account wallet, and betting slip. These cookies cannot be disabled without breaking the platform's functionality.
• Functional Cookies: These remember your preferences — such as your display language (English), preferred sports category, and notification settings — so that you do not need to reset them each time you visit. Disabling these cookies will not prevent you from using the platform but may reduce personalisation.
• Analytics Cookies: We use anonymised analytics to understand aggregate user behaviour — for example, which pages are most visited, average session durations, and navigation paths through the lobby. Individual players are not identified in these reports. Analytics data helps us improve the khelo24 experience for all Bangladeshi players.
• Security Cookies: These help us identify unusual or suspicious activity on your account, such as login attempts from unrecognised devices or IP addresses. They form part of our fraud detection infrastructure and are strictly necessary for account security.

Managing Cookies: You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging into your khelo24 account. Instructions for managing cookies are available in your browser's help documentation.

khelo24 implements a layered security approach to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key technical and organisational security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• Encryption at rest for sensitive data categories including KYC documents, financial records, and authentication credentials.
• Role-based access controls that ensure only authorised team members can access specific categories of personal data, strictly limited to what is necessary for their role.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal staff accounts with access to player data.
• Incident response procedures — in the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities as required by applicable regulations.

Data Retention: We retain your personal data for as long as your account is active and for a period thereafter as required by applicable law and our internal record-keeping obligations. Specifically:

• Account and transaction records are retained for a minimum of 5 years from the date of the last transaction, as required by anti-money laundering regulations.
• KYC verification documents are retained for the same minimum 5-year period from the date of verification.
• Customer support communications are retained for 3 years from the date of the interaction.
• Marketing preference records and consent logs are retained for the lifetime of your account plus 2 years to demonstrate compliance with applicable marketing regulations.
• After the applicable retention period, data is securely deleted or irreversibly anonymised.

As a khelo24 player, you have the following rights in relation to the personal data we hold about you. These rights are exercisable at any time by contacting our privacy support team at support@khelo24. We will respond to all valid requests within 30 days.

khelo24 is an adult gambling platform and is strictly for individuals aged 18 years and above. We do not knowingly collect, store, or process personal data belonging to anyone under the age of 18. Age verification is a mandatory step in our account registration and KYC process and is enforced rigorously.

If we become aware that personal data has been collected from a person under the age of 18 — whether through a registration error, a falsified identity document, or any other means — we will take the following immediate steps:

• Suspend the account immediately and block all access to gambling services.
• Void any gameplay activity and forfeit any winnings generated during the period of underage use.
• Return any real-money deposits made to the original payment method after deduction of any transaction costs incurred.
• Permanently delete all personal data associated with the underage account, except where retention is required for the purpose of documenting the incident and complying with legal obligations.

If you are a parent or guardian and believe that your child has registered an account on khelo24, please contact us immediately at support@khelo24. We will investigate and act promptly. We also encourage parents and guardians to make use of freely available parental controls and internet filtering software to prevent underage access to online gambling sites.

khelo24 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or improvements to our platform and services. The effective date at the top of this policy indicates when the current version came into force.

When we make material changes to this Privacy Policy — changes that meaningfully affect how we collect or use your personal data — we will notify registered players by email to the address associated with their account and display a prominent notice on the khelo24 platform for a period of at least 14 days before the changes take effect. Minor clarifications and editorial corrections may be made without advance notice.

Your continued use of khelo24 after a notified change takes effect constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the changes, you should close your account before the effective date of the new policy. Account closure requests can be submitted by contacting our support team.

How to contact us about privacy matters:

• General privacy enquiries and rights requests: support@khelo24 — please include "Privacy Request" in the subject line of your message so that it is routed to the correct team.
• Data deletion or portability requests: Submit via the same email address with the subject line "Data Deletion Request" or "Data Portability Request" and include your registered username and the email address associated with your account so that we can verify your identity before acting on the request.
• Reporting a privacy concern or suspected data breach: If you believe your khelo24 account has been accessed without your authorisation, or if you suspect a data breach of any kind, contact support@khelo24 immediately. Our security team is available 24 hours a day, 7 days a week, including Eid and public holidays in Bangladesh.

We aim to acknowledge all privacy-related requests within 48 hours and to resolve them fully within 30 calendar days. Complex requests that require extended investigation will receive a progress update within the initial 30-day window, along with a revised expected resolution date. khelo24 is committed to handling all privacy matters with the seriousness, transparency, and respect that your personal data deserves.