1 Who We Are
Craps Khelo is an online casino platform operating at craps-khelo.com, built specifically for Pakistani players. We offer craps tables, Teen Patti rooms, poker, live casino games, card games, fishing games, and a sports betting odds section — all denominated in Pakistani Rupees (PKR). When this Privacy Policy refers to "Craps Khelo," "we," "us," or "our," it means the operator of this platform.
For the purpose of data protection, Craps Khelo acts as the data controller for all personal information collected through the platform and associated communications. We determine how and why your data is processed, and we are responsible for protecting it in accordance with applicable privacy laws.
In plain terms: Craps Khelo is the company responsible for your data. We are not a middleman or white-label skin operated by an unknown parent. If you have a data question, you deal with us directly — not through a chain of third parties.
2 What Data We Collect
Craps Khelo collects personal data in the following categories. We do not collect data beyond what is listed here without first obtaining your explicit consent.
| Data Category |
Specific Examples |
Collection Point |
Required? |
| Identity Data | Full name, date of birth, CNIC number | Registration & KYC verification | Required |
| Contact Data | Mobile number, email address | Registration | Required |
| Financial Data | Deposit/withdrawal history, PKR amounts, payment method identifiers | Transaction processing | Required |
| Gaming Data | Bet history, craps sessions, game preferences, win/loss records | Platform activity | Required |
| Technical Data | IP address, device type, browser, operating system, session duration | Automatic — platform access | Required |
| Communications Data | Support chat logs, email correspondence | When you contact support | As needed |
| Marketing Preferences | Opt-in/out status for promotional emails and SMS | Registration or account settings | Optional |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is contained in your CNIC for identity verification purposes.
CNIC data is used solely for age and identity verification under anti-money laundering requirements. It is not used for marketing profiling, not shared with advertisers, and not stored in any system accessible to non-compliance staff.
3 How We Use Your Data
Every piece of data we collect serves a specific purpose. The following list explains why we use each data category and what would break down without it:
- Running your account: Your identity and contact data are used to create, maintain, and authenticate your Craps Khelo account. Without this, there is no account to run games on or receive PKR withdrawals from.
- Processing PKR payments: Financial data and payment method identifiers are necessary to process deposits through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments, and to send withdrawals back to the correct account.
- Delivering games fairly: Gaming data is recorded to maintain accurate bet histories, calculate bonus wagering completion, resolve disputes, and verify that game outcomes — including all craps dice results — are correctly applied to your balance.
- Regulatory compliance: Identity and financial data are used to satisfy anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any reporting obligations under applicable law. This is not optional and cannot be opted out of.
- Responsible gaming: Gaming behaviour data is monitored by our responsible gaming system to identify patterns that may indicate problem gambling. This is done to fulfil our duty of care to players, not for commercial profiling.
- Security and fraud prevention: Technical data (IP address, device information, session data) is used to detect and prevent unauthorised account access, bonus abuse, multi-accounting, and payment fraud.
- Customer support: Communications data is used to service your support requests, maintain records of resolutions, and train our support staff.
- Marketing communications (with consent only): If you have opted in to marketing communications, we use your contact data to send you information about bonuses, promotions, new game launches, and platform updates. You can opt out at any time from your account settings.
We do not use your data to build advertising profiles for sale to third parties. We do not use automated decision-making that produces legal or similarly significant effects on you without human review. Your craps session data is not sold to game analytics companies.
4 Legal Basis for Processing
Craps Khelo processes personal data under the following legal bases:
- Contract performance: Processing your identity, contact, financial, and gaming data is necessary to fulfil our contractual obligations to you — running your account, executing bets, and paying out winnings in PKR.
- Legal obligation: Identity verification and financial record-keeping are required by applicable anti-money laundering regulations and cannot be waived regardless of your preferences.
- Legitimate interests: Technical data processing for security, fraud detection, and platform performance is conducted under our legitimate interest in protecting the platform and its players from harm — provided this does not override your fundamental rights.
- Consent: Marketing communications and non-essential cookies are processed only with your explicit consent, which can be withdrawn at any time without affecting your ability to use Craps Khelo.
5 Data Sharing & Third Parties
Craps Khelo does not sell your personal data. We share data with third parties only in the following limited and necessary circumstances:
- Payment processors: We share the minimum required transaction data with Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors to execute PKR deposits and withdrawals. Each processor has its own privacy policy governing their data handling.
- Identity verification providers: CNIC verification is processed through a secure, third-party KYC service. They receive your identity document details solely for verification purposes and are contractually prohibited from using that data for any other purpose.
- Game software providers: Our craps, card game, poker, Teen Patti, live casino, and fishing game products are delivered in part through licensed software providers. These providers receive technical session data (not personal identity data) to deliver game functionality.
- Legal and regulatory authorities: We are required by law to disclose certain information to regulatory authorities, law enforcement agencies, or courts when presented with a lawful request. We review all such requests for legality before complying.
- Professional advisers: Legal counsel, auditors, and accountants may access data as necessary in the course of their professional services to Craps Khelo, subject to strict confidentiality obligations.
What we never do: We never sell your email address or phone number to marketing companies. We never share your craps or gaming history with gambling data brokers. We never give third-party advertisers access to your personal account data.
6 Payment Data & PKR Transactions
Because Craps Khelo operates entirely in Pakistani Rupees, all payment data handled by the platform is denominated in PKR and processed through Pakistani financial infrastructure. This section explains how payment data is specifically handled.
When you deposit via Easypaisa or JazzCash, we receive a transaction confirmation reference and the PKR amount. We do not store your mobile wallet PIN or full account password. When you use a bank card, card details are tokenised immediately at point of entry — we store a token identifier, not your full card number.
Your complete transaction history — deposits, withdrawals, bonus credits, and craps session results — is maintained in your account ledger. You can view this history from your account dashboard at any time. These records are also required for regulatory compliance purposes and are retained for a minimum period as described in Section 9.
If a chargeback is initiated by you or your payment provider without prior contact with Craps Khelo, we may use your financial and gaming data to contest the chargeback and provide evidence of the original transaction to the relevant financial institution.
Never share your Easypaisa or JazzCash PIN with Craps Khelo support staff. We will never ask for it. If anyone claiming to be Craps Khelo support requests your payment PIN, treat it as a phishing attempt and contact us immediately.
7 Cookies & Tracking Technologies
Craps Khelo uses cookies and similar tracking technologies on the platform. When you first visit the site, a cookie consent banner provides you with options to accept, reject, or customise which categories of cookies are active on your device.
We use the following categories of cookies:
- Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your game in progress, and ensure the payment flow works correctly. These cannot be disabled and do not require consent.
- Functional cookies: These remember your preferences such as your chosen odds format, game lobby view, and language settings. Disabling them means the platform will not remember your preferences between sessions.
- Analytics cookies: These help us understand how players use the platform — which games are most popular, where players drop off during registration, and how the mobile experience performs. All data is aggregated and does not identify individual players. These require consent.
- Marketing cookies: If you have opted in to marketing communications, these cookies help us understand which promotions you have already seen. These require consent and are only active if you have opted into marketing.
You can change your cookie preferences at any time by clicking the "Cookie Settings" option in the site footer. Withdrawing consent for non-essential cookies does not affect your ability to play craps, access your account, or withdraw PKR funds.
Craps Khelo does not permit third-party advertising networks to place tracking cookies on the platform. The analytics cookies we use are operated by our own internal systems or by analytics providers under strict data processing agreements that prohibit them from using your data for their own purposes.
8 Data Security
Protecting your personal data is an operational priority at Craps Khelo, not a compliance checkbox. We have implemented technical and organisational security measures appropriate to the sensitivity of the data we hold. These include:
- TLS 1.3 encryption for all data transmitted between your device and the Craps Khelo platform.
- AES-256 encryption at rest for all stored personal data, financial records, and craps session histories.
- Role-based access controls ensuring that only staff with a legitimate operational need can access personal account data — for example, a game developer does not have access to player identity documents.
- Multi-factor authentication required for all staff accessing internal systems that contain player data.
- Regular security audits and penetration testing of the platform infrastructure.
- Automated anomaly detection to identify unusual access patterns on both player accounts and internal systems.
In the event of a data breach that poses a risk to your rights and freedoms, Craps Khelo will notify affected players within 72 hours of becoming aware of the breach, providing details of what data was affected, what steps we have taken, and what you should do to protect yourself.
Your role in security: Use a unique, strong password for your Craps Khelo account. Enable any two-factor authentication options available in your account settings. Do not share your login credentials with anyone. If you suspect your account has been compromised, contact our support team immediately — we can lock your account within minutes.
9 Data Retention
Craps Khelo retains personal data for as long as it is necessary for the purpose it was collected or as required by applicable law. The following retention periods apply:
- Active account data: Retained for the lifetime of your active account plus 5 years following account closure, to satisfy regulatory reporting obligations.
- Identity and KYC documents: Retained for a minimum of 5 years after your last transaction, as required by anti-money laundering regulations applicable to financial service providers.
- Financial transaction records (PKR deposits and withdrawals): Retained for 7 years following the transaction date, in line with standard financial record-keeping requirements.
- Gaming records (craps sessions, bet histories): Retained for 5 years. These records may be required to resolve disputes, bonus wagering audits, or regulatory investigations.
- Support communications: Retained for 3 years from the date of the communication unless the matter relates to an ongoing dispute.
- Marketing preferences and consent records: Retained for 3 years from the date of opt-in or until consent is withdrawn, whichever comes first.
After the applicable retention period expires, data is securely deleted from all Craps Khelo systems. Secure deletion means the data cannot be recovered — it is not simply archived or de-identified.
10 Your Rights
As a Craps Khelo player, you have the following rights regarding your personal data. These are genuine, exercisable rights — not aspirational statements. To exercise any of them, contact our support team at support@craps-khelo.com with the subject line "Data Rights Request."
Right of Access
You can request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 days. There is no charge for the first request.
Right to Rectification
If any of your personal data held by Craps Khelo is inaccurate or incomplete, you have the right to have it corrected. You can update most details directly through your account settings; for CNIC data, contact support.
Right to Erasure
You can request deletion of your personal data where it is no longer necessary for the original purpose, or where you have withdrawn consent. Note that data subject to mandatory regulatory retention periods (KYC records, financial transaction records) cannot be erased ahead of those obligations.
Right to Restrict Processing
You can request that we limit how we use your data — for example, if you contest its accuracy while we verify it, or if you need us to retain it for a legal claim but no longer want it used for operational purposes.
Right to Data Portability
Where we process your data by automated means based on your consent or a contract, you can request your data in a portable, machine-readable format (CSV or JSON) so you can transfer it to another service if you choose.
Right to Object
You can object to our processing of your data based on legitimate interests — including direct marketing. Marketing opt-outs are processed immediately. Objections to other legitimate interest processing will be reviewed within 30 days.
Right to Withdraw Consent
Where processing is based on your consent (marketing communications, non-essential cookies), you can withdraw that consent at any time from your account settings without any consequence to your ability to use Craps Khelo.
11 Children's Privacy
Craps Khelo is an 18+ platform. We do not knowingly collect or process personal data from anyone under the age of 18. Age verification is conducted through CNIC validation during the account registration and first withdrawal process, specifically to ensure that no minor can access real-money gambling features.
If we become aware that a minor has registered an account or provided personal data to us, we will immediately suspend the account, delete the associated personal data (subject to any mandatory retention obligations), and take steps to prevent re-registration from the same device or identity documents.
If you believe a minor has registered on our platform, please contact us immediately at support@craps-khelo.com. We take these reports seriously and will act on verified reports within 24 hours.
12 Changes to This Privacy Policy
Craps Khelo reviews this Privacy Policy at minimum once a year and following any significant change to our data processing activities, applicable law, or platform infrastructure. Changes that materially affect how we use your data will be communicated to you via email to your registered address at least 14 days before they take effect.
Minor updates — corrections, clarifications, or changes that do not alter the substance of how we handle your data — may be made without prior notice and take effect upon publication. The "Last Updated" date at the top of this page is changed whenever any amendment is made, regardless of significance.
If a material change is introduced that you do not agree with, you have the right to close your account and request deletion of your data in accordance with Section 10. We will process such requests promptly.
13 Contact & Complaints
For any question, request, or complaint related to this Privacy Policy or Craps Khelo's handling of your personal data, contact us through the following channels:
- Email: support@craps-khelo.com — use subject line "Privacy" for faster routing
- Live chat: Available 24/7 from your account dashboard once logged in
- Response time: We aim to respond to all privacy-related requests within 5 business days and complete them within 30 days
All data rights requests must be submitted in writing (email or in-app message) to create a proper record. If you are not satisfied with how we have handled your complaint after giving us the opportunity to address it, you have the right to escalate to the relevant data protection authority in your jurisdiction.
Our commitment: Data privacy is not a bureaucratic obligation for us — it is a practical expression of the respect we have for our players. If you ever have a concern about how Craps Khelo is handling your data, tell us. We would rather hear about a concern and fix it than have a player feel their privacy has not been taken seriously.
