Privacy Policy

Introduction

KheloStar takes privacy seriously. This policy explains, in plain English, what happens to your information when you visit our site or use your KheloStar ID. If any section is unclear, message our WhatsApp support and we'll walk you through it.

Information We Collect

The information we collect falls into three buckets:

Information You Provide

• Preferred KheloStar ID username
• Mobile number linked to your KheloStar ID (used for account contact)
• Optional email address (for backup password recovery)
• Age confirmation (18+ declaration)
• WhatsApp messages you send to our support team
• Deposit and withdrawal payment method details (routed through the payment processor, not stored on our servers in plain form)
• Optional identity documents for large withdrawals or Kohinoor VIP verification

Information Collected Automatically

• IP address (for security and geolocation)
• Browser type and version
• Device model and operating system
• Session cookies and login tokens
• Bet history and wagering activity tied to your KheloStar ID

Information from Third Parties

• Payment processor confirmations (deposit and withdrawal status)
• Fraud-prevention signals from anti-fraud service providers
• Game provider RTP and settlement data (Evolution, Pragmatic, Spribe)

How We Use Your Information

Every piece of information we collect has a specific operational purpose:

• Account management: Creating, maintaining, and securing your KheloStar ID.
• Bet settlement: Recording wagers, calculating winnings, crediting your wallet.
• Deposits and withdrawals: Routing payments through UPI, GPay, PhonePe, and bank rails.
• Support: Answering questions on WhatsApp, resolving disputes.
• Bonus and cashback: Calculating eligibility and issuing credits.
• Fraud prevention: Detecting stolen credentials, unusual patterns, and duplicate accounts.
• Legal compliance: Meeting record-keeping requirements in India.
• Product improvement: Anonymized activity trends to improve platform features.

We do not sell your data. We do not share it with advertisers. We do not use it for third-party marketing outreach.

How We Protect Your Information

Technical measures used to protect your data:

• End-to-end encryption: Every transaction on the KheloStar platform runs over TLS 1.3.
• Encrypted at rest: Sensitive fields (passwords, payment references) are encrypted in our databases.
• Access controls: Internal staff access to player data is role-restricted and audit-logged.
• Session tokens: KheloStar login tokens rotate periodically and can be revoked instantly on password change.
• Rate limiting: Login attempts are throttled to defeat brute-force attacks.
• Anti-fraud monitoring: Unusual patterns (impossible-travel logins, rapid deposit-withdraw cycles) trigger review.

Information Sharing and Disclosure

We share your information only in these limited circumstances:

• Payment processors: UPI, GPay, PhonePe, Paytm, Skrill receive the minimum required to process your transaction.
• Game providers: Evolution, Pragmatic, Spribe, and other providers receive an anonymized session token to load games — never your personal details.
• Legal compliance: If we receive a valid legal request from Indian authorities, we may share the specifically-required data.
• Fraud prevention: Anti-fraud vendors receive de-identified signals to help detect abuse.

We never share your personal information with advertisers or third-party marketing companies.

Cookies and Tracking Technologies

KheloStar uses a small set of cookies. See the full cookie policy for details.

• Session cookies: Required to keep you signed in.
• Preference cookies: Remember your language, timezone, and layout settings.
• Security cookies: Detect suspicious login patterns.

We do not run third-party advertising cookies, tracking pixels, or behavioural profiling.

Data Retention

KheloStar retains your data for as long as your KheloStar ID is active, plus the retention period required by law after closure. Specifically:

• Active account: All data retained.
• Dormant account (6+ months inactive): Non-financial data retained; login flagged for reactivation verification.
• Closed account: Bet history and financial records retained for the audit period required by Indian gaming regulations (typically 5 years). Non-financial personal data deleted within 90 days of closure request.

Your Privacy Rights

You have the following rights over your KheloStar data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request deletion of your personal data, subject to legal retention.
• Portability: Request a machine-readable export of your bet history and account data.
• Objection: Object to specific uses of your data.
• Withdrawal of consent: Where processing is consent-based, withdraw at any time.

To exercise any of these rights, message our WhatsApp support or use the contact form. We respond within 30 days.

Children's Privacy

KheloStar is strictly for adults aged 18 or older. We do not knowingly collect information from anyone under 18. If we discover an account belonging to a minor, we close it immediately, refund any deposits (net of any losses), and delete the associated personal data.

Parents concerned that a minor has accessed KheloStar should contact us on WhatsApp so we can take immediate action.

Third-Party Links

KheloStar pages contain links to third-party sites (payment providers, responsible gambling organisations, sports data sources). Once you leave khelostar.us.com, that site's privacy policy applies, not ours. We are not responsible for third-party privacy practices.

International Data Transfers

Some third-party service providers (game providers, anti-fraud vendors, cloud hosting) are based outside India. Transfers to those providers are covered by contractual data-protection safeguards that meet Indian data-protection standards.

Changes to This Privacy Policy

KheloStar may update this policy from time to time — for example, when we add a new payment provider or a new casino game supplier. The current version and effective date are always shown at the top of the page. Significant changes are also communicated via WhatsApp to active KheloStar IDs.

Data Breach Notification

In the unlikely event of a data breach affecting KheloStar player information, we will notify affected players via WhatsApp within 72 hours of confirming the breach, disclose the nature of the incident, and outline remedial steps (mandatory password reset, additional monitoring). Relevant Indian regulators will be informed within the same timeframe.

Contact Us About Privacy

For any privacy-related question — data access requests, correction requests, deletion requests, or clarification of any section — reach out via our contact form, or WhatsApp our support team. We respond within 30 days, sometimes much sooner.