Khelobaji Privacy Policy – How Your Data Is Protected

The Khelobaji Privacy Policy governs how your personal data is managed. It applies directly to you whenever you use the Khelobaji website, mobile app, or any of our services.

We understand that personal information is sensitive. A mobile number, ID details, or financial transaction records in the wrong hands can cause serious harm. That is why Khelobaji has invested in data protection from the ground up — both technically and administratively.

We've written this Privacy Policy in plain language intentionally — so you can actually understand how your data is used and what rights you have, without getting lost in legal jargon. If you have any questions, the Khelobaji support team is always on hand to help.

Khelobaji collects information at different points and in different ways. Some data you provide directly; some is collected automatically. Here's a clear breakdown.

When you contact Khelobaji via live chat or email, those conversations are recorded for quality improvement and dispute resolution purposes — ultimately, it's in your best interest.

Every reason khelobaji collects data is specific and justified. We don't operate on a "collect everything just in case" basis — we only take what's necessary.

• Service Delivery: Basic information is essential for account creation, bet processing, and payment management.
• Identity verification: The KYC process is required for legal compliance and fraud prevention — and it also protects you.
• Age Verification: Age verification is carried out to strictly enforce our 18+ policy.
• Security assurance: Log analysis is required to detect account hacking, money laundering, and unusual activity.
• Service Improvement: Anonymous usage statistics are analyzed to understand which features are most used and where issues arise.
• Relevant Communications: For essential communications — important updates, bonus offers, and transaction confirmations.
• Legal obligations: We are legally required to retain and provide specific data upon request from regulatory authorities.

You can opt out of marketing communications at any time — use the "unsubscribe" link at the bottom of any email, or simply let support know. However, transactional and security-related messages cannot be turned off, as they are sent in your own interest.

Khelobaji never sells your data. There are no exceptions to this. However, in certain specific situations, limited data must be shared with trusted parties.

Payment processors: Transaction data must be shared with payment platforms such as bKash, Nagad, and Rocket as a technical requirement to process payments. These platforms operate under their own independent privacy policies.

Game Provider: Third-party games on the Khelobaji platform (such as Evolution and Pragmatic Play) may access limited activity data — only what is needed to run the game. They comply with international data protection standards.

KYC Verification Service: Specialized technology firms assist with identity verification. They are bound by confidentiality agreements and may only use your data for verification purposes.

Legal Authorities: Khelobaji is legally required to provide data in response to court orders, valid requests from investigative authorities, or anti-money laundering regulators. This is not a matter of choice — it is a legal obligation.

Khelobaji's security framework operates across multiple layers, not just one. Even if one layer is breached, the next one holds. This approach is known as "defense in depth".

256-bit SSL/TLS encryption is applied at the connection level — the same technology used by banking websites. Every byte transmitted between your browser or app and Khelobaji's servers is encrypted.

Sensitive data at the storage level (such as passwords and payment details) is stored in encrypted form. Passwords are never stored in plain text — only their hashes are kept. This means even Khelobaji staff cannot view your password.

A strict "need-to-know" access policy is in place. Each staff member only has access to the data required for their specific role. All staff access is logged and reviewed on a regular basis.

Regular security audits, penetration testing, and vulnerability scanning are conducted at the server level. Any vulnerabilities found are patched promptly. Data centers are monitored around the clock.

That said, no one can guarantee absolute security — and we say that honestly. Your own precautions matter too: use a strong password, keep two-factor authentication enabled, and log out of sessions on unfamiliar devices.

The Khelobaji website and app use cookies and similar technologies. Cookies are small data files stored in your browser that help improve your experience and keep the platform running smoothly.

Khelobaji uses four types of cookies:

On the mobile app, device storage and persistent app data function similarly to cookies. Use your phone's app settings to manage them.

Khelobaji believes you should have full control over your own data. That's why we provide the following rights in line with international privacy standards.