khelo111 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy is issued by khelo111 ("khelo111," "we," "us," or "our"), the operator of the online gaming platform accessible at https://khelo111.net. khelo111 is Pakistan's premier online casino and sports betting platform, offering Texas Holdem poker, live casino games, jackpot slots, Cockfighting markets, cricket betting, Counter Strike esports wagering, and more — all conducted in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, khelo111 is the data controller in respect of the personal data of registered users and visitors to the Platform. This means we are responsible for determining the purposes and means of processing your personal information.

khelo111 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the site, and in limited circumstances from third-party service providers. The categories of data we collect are as follows:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming compliance (for example, where a self-exclusion request triggers a welfare note on an account).

khelo111 processes your personal data only for specific, defined purposes. The table below maps each purpose to the data categories involved:

• Account Creation & Management: We use your Identity and Contact Data to register your account, verify your identity, and manage your ongoing relationship with khelo111.
• Payment Processing: Your Financial Data is used exclusively to process PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB, Meezan Bank, Visa, and Mastercard. We do not store full card numbers on our servers.
• Game Provision: Gaming Data is used to operate the games you play, calculate results, apply bonuses, and ensure the integrity of all betting activity on the Platform.
• Fraud Prevention & Security: Technical Data and Gaming Data are analysed by our automated fraud detection systems to identify suspicious behaviour, prevent money laundering, and protect the Platform from abuse.
• Responsible Gaming Compliance: Gaming Data and Preference Data are used to monitor player behaviour against responsible gaming thresholds and to apply deposit limits, session reminders, and self-exclusion requests that you activate.
• Customer Support: Communications Data is used to resolve your queries, complaints, and account issues in a timely manner.
• Marketing Communications: With your explicit consent, we may use your Contact Data to send you promotional offers, bonuses, and platform updates. You may withdraw marketing consent at any time via your account settings or by contacting our support team.
• Legal & Regulatory Obligations: Where required by law, we use your Identity, Financial, and Gaming Data to satisfy anti-money laundering (AML) obligations and to respond to lawful requests from regulatory authorities.

khelo111 processes your personal data only where we have a valid legal basis to do so. Our processing activities are grounded in one or more of the following lawful bases:

• Contract Performance: Processing your Identity, Contact, and Financial Data is necessary to provide you with the gaming services you have contracted for when registering a khelo111 account.
• Legal Obligation: Processing Identity and Financial Data for anti-money laundering (AML) screening, Know Your Customer (KYC) verification, and age verification is required by applicable law. We cannot provide services without completing this processing.
• Legitimate Interests: We process Technical and Gaming Data for fraud prevention, platform security, and responsible gaming monitoring. These processing activities serve our legitimate interest in operating a secure and fair gaming environment, and we have assessed that these interests are not overridden by your data protection rights.
• Consent: We rely on your explicit consent to send marketing communications. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

khelo111 does not sell, rent, or trade your personal data. We share data only where strictly necessary and only with the following categories of recipients:

• Payment Service Providers: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, Meezan Bank, Visa, and Mastercard receive the minimum Financial Data necessary to process your PKR transactions. These providers are bound by their own regulatory obligations and privacy frameworks.
• Identity Verification Providers: Third-party KYC service providers may receive Identity Data to verify your CNIC, date of birth, and other registration information. These providers process data solely on our instruction.
• Game Software Providers: Third-party game developers who power individual titles on khelo111 may receive anonymised or pseudonymised Gaming Data for game integrity and RNG audit purposes. They do not receive your personal Identity or Contact Data.
• Fraud Prevention Services: Technical and Gaming Data may be shared with fraud detection platforms to identify and prevent financial crime. These services operate as data processors under strict contractual obligations.
• Regulatory & Legal Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, lawful court order, or to protect the rights and safety of khelo111 and its users.
• Business Transfers: In the event of a merger, acquisition, or sale of khelo111's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer.

All third parties with whom khelo111 shares personal data are contractually required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared.

khelo111 uses cookies and similar tracking technologies to deliver and improve the Platform. A cookie is a small text file placed on your device when you visit the site. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your khelo111 account and security cookies that help detect fraudulent activity. These cannot be disabled without breaking core functionality.
• Functional Cookies: Used to remember your preferences such as language settings and responsible gaming configurations, so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to collect anonymised data about how users navigate the Platform — which pages are visited, how long sessions last, and what features are most used. This data helps us improve the user experience. We use privacy-respecting analytics that do not share data with advertising networks.
• Marketing Cookies: Only set where you have given explicit consent and opted in to personalised offers. You may withdraw consent and clear marketing cookies at any time via your browser settings or account preferences.

khelo111 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and khelo111's servers is encrypted using industry-standard TLS protocols. The padlock icon in your browser's address bar confirms your connection is secure.
• Password Hashing: Passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. Even khelo111's own technical staff cannot retrieve your plain-text password — only reset it.
• Two-Factor Authentication (2FA): SMS OTP-based two-factor authentication is available for all accounts and is strongly recommended. When enabled, a successful login requires both your password and a one-time code sent to your registered Pakistani mobile number.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who process personal data receive regular privacy and security training.
• Penetration Testing: khelo111's Platform infrastructure undergoes regular security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights, khelo111 will notify affected users without undue delay via their registered contact details.

Whilst khelo111 takes security very seriously, no online platform can guarantee absolute security against all possible threats. You can help protect your account by using a strong unique password, enabling 2FA, and never sharing your login credentials with anyone.

khelo111 retains personal data only for as long as is necessary for the purposes described in this policy or as required by applicable law. The following general retention periods apply:

• Active Account Data: Identity, Contact, and Financial Data is retained for the duration of your account's active status plus a minimum of five years following account closure, as required by anti-money laundering regulations.
• Transaction Records: Detailed PKR transaction records, including deposit and withdrawal histories, are retained for a minimum of five years to satisfy AML and tax compliance obligations.
• Gaming History: Bet and game session logs are retained for five years from the date of each session to support dispute resolution and regulatory compliance.
• Communications Data: Support chat transcripts and email correspondence are retained for two years from the date of the most recent interaction, unless they relate to an unresolved complaint or legal matter.
• Technical/Log Data: Server log and IP address data is retained for 12 months unless retained longer for active security investigations.
• Marketing Consent Records: Records of your marketing consent choices are retained for the duration of your account plus three years, to demonstrate compliance.

As a registered user of khelo111, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, free of charge, in a commonly used electronic format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update basic contact information directly through your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected — you may request deletion of your personal data. Note that this right is subject to our legal retention obligations under AML regulations, which may override deletion requests for transaction and identity data.
• Right to Restriction: You may request that we restrict processing of your data in circumstances where you contest its accuracy or where processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

khelo111 will not discriminate against you for exercising any of these rights. Your ability to use the Platform will not be affected by making a data rights request, except in cases where the data in question is strictly necessary for service provision.

khelo111 employs age verification procedures during the registration process to prevent minors from accessing the Platform. If we become aware that personal data has been collected from a person under 18 years of age, we will immediately close the associated account, delete the data, and return any real-money balance to the source payment method subject to identity verification of the account holder.

If you are a parent or guardian and believe that a person under 18 in your care has registered or attempted to register with khelo111, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

We encourage parents and guardians in Pakistan to make use of available parental control tools and internet filtering software to prevent underage access to gaming platforms.

khelo111 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. We are committed to keeping you informed of material changes.

When we make material changes to this policy, we will notify registered users by sending a notification to their registered mobile number or email address at least 14 calendar days before the changes take effect. The updated policy will also be published on this page with a revised "Last Updated" date.

Continued use of the khelo111 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease use of the Platform and close your account in accordance with our Terms & Conditions.

For changes that are not material — such as minor clarifications, typographical corrections, or structural reformatting that does not alter the substance of our data practices — we will update the policy without individual notification, though the "Last Updated" date will always reflect the most recent revision.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how khelo111 has handled your personal data, our dedicated privacy support team is available 24 hours a day, seven days a week.

For general account support, live chat is available directly on the khelo111 Platform. Our English-language support team can assist with the majority of account and data queries in real time.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. khelo111 will cooperate fully with any investigation initiated by a competent supervisory authority.

We value your trust and take every privacy complaint seriously. Our goal is always to resolve concerns promptly, fairly, and to your satisfaction.