Privacy Policy

Khelgaah is a web-based marketplace that connects players with sports venues (such as futsal and indoor cricket courts) in Karachi. We facilitate venue discovery and slot bookings. We do not process or hold player payments — payments for bookings are made directly to the venue online.

Information you provide

• Account details: name, email address, phone number, city, and date of birth.
• Authentication data: if you sign in with Google, we receive your Google account identifier and basic profile information.
• Venue owner / staff details: for venue accounts, we collect business information and KYC documents such as CNIC and NTN for verification.
• Booking information: the venues, courts, dates, and time slots you book, along with promo codes you apply.
• Communications: messages, dispute submissions, and support requests you send us.

Information collected automatically

• Usage data: pages viewed, features used, bookings made, and ratings submitted.
• Device and log data: IP address, browser type, device identifiers, and timestamps.
• Notification tokens: push notification identifiers (where you enable push notifications).

Information we do not collect

Khelgaah is not part of the player payment flow. We do not collect, store, or process your card numbers, bank account details, or wallet credentials for bookings. These are handled directly by our payment provider and the venue. We receive only a confirmation that a payment occurred — not the underlying financial details.

• To create and manage your account and verify venue identities (KYC).
• To enable venue discovery, slot booking, holds, confirmations, and cancellations.
• To send booking confirmations, reminders, cancellation notices, and subscription invoices via push notification, SMS, and email.
• To apply promo codes, including student verification via approved university email domains.
• To prevent fraud, abuse, double-bookings, and promo spoofing.
• To maintain audit logs of booking and account activity for security and dispute resolution.
• To improve the Platform and provide customer support.

With venues. When you book a slot, we share your name and phone number with the venue so they can confirm your booking and identify you on arrival.

With service providers. We share limited data with trusted processors who help us operate the Platform, including:

• A third-party payment provider — to facilitate your direct payment to the venue and process refunds.
• SMS, email, and push providers (e.g. Twilio/MSG91, Brevo/SendGrid, FCM) — to deliver notifications.
• Cloud storage (e.g. AWS S3 or Cloudflare R2) — to store KYC documents and venue photos using restricted, signed access only.

For legal reasons. We may disclose information if required by law, regulation, or valid legal process, or to protect the rights, safety, and property of Khelgaah, our users, or the public.

We do not sell your personal data. Khelgaah does not sell or rent your personal information to third parties for marketing.

• KYC documents and venue photos are accessible only through time-limited signed URLs.
• Access to sensitive records is role-restricted and logged.
• We apply industry-standard safeguards, including encryption in transit and access controls.
• While we take reasonable measures to protect your data, no system is completely secure, and we cannot guarantee absolute security.

We retain your account and booking information for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. KYC documents are retained for the duration required by applicable verification and record-keeping rules. You may request deletion of your account, subject to records we are legally required to keep.

• Access and correction: you can view and update your profile information in your account settings.
• Notifications: you can adjust push notification preferences on your device; certain transactional messages (e.g. booking confirmations) are essential to the service.
• Account deletion: you may request deletion of your account by contacting us.
• Marketing: you may opt out of non-essential promotional communications.

Khelgaah is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it. Users under 18 should use the Platform only with the involvement of a parent or guardian.

Bookings are paid directly to venues online. Your use of our payment provider is governed by the provider’s own terms and privacy policy. Similarly, signing in via Google is subject to Google’s policies. We are not responsible for the privacy practices of third-party services.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Platform or by email and update the effective date above. Continued use of Khelgaah after changes take effect constitutes acceptance of the revised policy.