Privacy Policy

1. Introduction

1.1 Royal Shah Gaming Ltd. ("the Company", "we", "us") is the data controller responsible for your personal data collected through betshah-india.com ("the Site").

1.2 This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what your rights are in relation to your data.

1.3 By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please do not use the Site.

2. Data We Collect

2.1 Personal Identification Data: Full name, date of birth, nationality, government-issued ID number (for KYC verification).

2.2 Contact Data: Email address, phone number, residential address.

2.3 Financial Data: Payment method details, transaction history, deposit and withdrawal records. We do not store full card numbers — payment data is tokenised and processed by PCI-DSS compliant payment providers.

2.4 Usage Data: Game history, session duration, betting patterns, device information (IP address, browser type, operating system, device ID).

2.5 Communications Data: Records of your communications with our customer support team, including chat logs and email correspondence.

3. How We Collect Data

3.1 Directly from You: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotions.

3.2 Automatically: When you use the Site, we collect technical data via cookies, log files, and tracking technologies. See Section 9 for details on cookies.

3.3 Third Parties: We may receive data from payment processors for transaction verification, identity verification providers for KYC, and fraud prevention services.

4. Purpose of Data Processing

4.1 Account Management: To create and maintain your player account, verify your identity, and provide access to Services.

4.2 Legal Compliance: To meet obligations under anti-money laundering (AML) regulations, responsible gambling requirements, and our operating licence conditions.

4.3 Marketing: To send promotional offers, newsletters, and personalised recommendations — only to Users who have opted in. You can unsubscribe at any time via the link in any marketing email or from your account settings.

4.4 Fraud Prevention & Security: To detect, prevent, and investigate fraudulent activity, money laundering, bonus abuse, and other security threats.

4.5 Service Improvement: To analyse usage patterns, improve the platform, and develop new features based on player behaviour.

5. Legal Basis for Processing

5.1 Contractual Necessity: Processing required to fulfil our contract with you — account creation, game access, payment processing.

5.2 Legal Obligation: Processing required by law — KYC verification, AML reporting, regulatory compliance.

5.3 Legitimate Interest: Processing that serves our legitimate business interests — fraud prevention, platform security, customer service.

5.4 Consent: Marketing communications and non-essential cookies — only processed where you have given explicit consent.

6. Data Sharing

6.1 Payment Processors: We share necessary financial data with our payment partners (including UPI processors, Skrill, PayPal) to process transactions.

6.2 Identity Verification Providers: We use third-party KYC providers to verify player identities as required by our operating licence.

6.3 Regulatory Authorities: We may be required to share data with gaming regulators or law enforcement agencies upon lawful request.

6.4 Game Providers: Game providers may receive pseudonymised gameplay data (not personal identifiers) for game performance and fairness monitoring.

6.5 No Sale of Data: We do not sell, rent, or trade your personal data to third parties for marketing purposes. Ever.

7. Data Retention

7.1 We retain your account data for as long as your account is active and for a minimum of 5 years after account closure, as required by our operating licence and anti-money laundering obligations.

7.2 Transaction records are retained for a minimum of 5 years to comply with financial regulations.

7.3 Marketing preferences and communication opt-outs are retained to honour your choices and prevent unwanted contact.

8. Your Rights

8.1 Subject to applicable law, you have the following rights in relation to your personal data:

8.2 To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

9.1 We use cookies and similar technologies to operate and improve the Site. Cookies are small text files stored on your device.

9.2 Essential Cookies: Required for the Site to function — login sessions, shopping basket, security tokens. Cannot be disabled.

9.3 Analytics Cookies: Used to understand how players use the Site, what features they use, and how we can improve. Anonymised where possible.

9.4 Marketing Cookies: Used to deliver relevant advertisements and track affiliate referrals. Only deployed with your consent.

9.5 You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Site functionality.

10. Security Measures

10.1 All data transmitted between your device and the Site is encrypted using 256-bit SSL/TLS encryption — the same standard used by major banks.

10.2 Access to personal data is restricted to authorised personnel only, with role-based access controls enforced across our systems.

10.3 We conduct regular security audits and penetration testing to identify and address vulnerabilities.

10.4 In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by data protection regulations.

11. International Data Transfers

11.1 Your data may be processed by our service providers in countries outside your home jurisdiction. Where transfers occur to countries not deemed adequate under applicable data protection law, we apply appropriate safeguards including standard contractual clauses.

11.2 Our primary data centres are located within secure, regulated hosting environments. We do not transfer data to jurisdictions without appropriate protections.

12. Contact & Complaints

12.1 If you have questions about this Privacy Policy or how we handle your data, contact our Data Protection Officer at: [email protected]

12.2 If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.