Halaplay Privacy Policy — How We Protect Your Data
Detailed explanation of how Halaplay collects, uses, stores, and protects your personal data. Our commitment to privacy and compliance with Indian data protection regulations.
Halaplay Information We Collect
Account information: mobile number, email address, password (encrypted), date of birth (for age verification), and profile photo (optional). This Halaplay information is required for account creation and identity verification.
KYC information (for withdrawals above Rs 50,000): full name, PAN card number, Aadhaar number, bank account details, address proof. Halaplay KYC documents are encrypted using AES-256 and stored in ISO 27001 certified data centers.
Transaction information: deposit amounts, withdrawal amounts, payment method details, Halaplay contest entries, winnings. This data is retained for 7 years per Indian tax regulations.
How Halaplay Uses Your Information
Primary uses: (1) Account creation and authentication, (2) Processing Halaplay deposits, withdrawals, and contest entries, (3) Sending transactional notifications, (4) Customer support, (5) KYC verification, (6) Fraud detection.
Marketing communications: with your consent, Halaplay sends promotional emails, push notifications, and SMS about new contests and platform features. You can opt out anytime.
We do not sell your Halaplay personal data to third parties. We share data only with: payment processors, KYC services, cloud hosting, legal authorities when required.
Halaplay Data Security and Protection Measures
Encryption: all Halaplay data transmission uses SSL/TLS encryption. Stored data is encrypted using AES-256. KYC documents are protected with per-user encryption keys stored separately.
Infrastructure security: Halaplay is hosted on ISO 27001 certified data centers with 24/7 physical security, biometric access controls, redundant power and cooling.
Access controls: strict role-based access control (RBAC) ensures only authorized Halaplay personnel can access user data, with multi-factor authentication.
Your Halaplay Rights and Choices
Right to access: you can download all Halaplay personal data via Settings > Privacy > Download My Data in JSON format within 7 days.
Right to correction: you can update most Halaplay personal information via Settings > Profile. For info that cannot be self-updated, email [email protected].
Right to deletion: you can request Halaplay account deletion via Settings > Privacy > Delete Account. We delete all personal data within 30 days, retaining only legally required records for 7 years.
Halaplay Cookies and Tracking
The Halaplay website and app use cookies for: session management, preferences, analytics, advertising. Halaplay uses Google Analytics, Facebook Pixel, and payment gateway cookies.
Cookie controls: manage via browser settings. Blocking cookies may limit Halaplay functionality (e.g., staying logged in). Mobile app tracking can be controlled via iOS/Android privacy settings.
Halaplay Children's Privacy and International Users
Age restriction: Halaplay is strictly for users 18+. We do not knowingly collect data from minors. If discovered, we immediately delete the account and refund deposits.
International Halaplay users: primarily serve India, with support for Nepal, Sri Lanka, Bangladesh, UAE. Users from other countries can browse but cannot enter paid contests.
Changes to Halaplay privacy policy: we may update periodically. Significant changes will be notified via email and in-app notification at least 30 days before taking effect.