Privacy Policy
Last updated: 22 September 2026
What MahadevBook collects about your account, why each piece is needed, who else sees it, how long it is kept, and what you can ask us to do with it.
1. Scope
This policy covers the data we hold about you because you have an account here, or because you are in the process of opening one. It applies to the website, to the mobile app, and to the support channels we run.
It does not cover other websites you reach from a link here, or the apps you use to pay us. Those have their own policies.
2. What we collect
Information you give us
- Registration details: username, password (stored only as a hash, never in readable form), mobile number, email address where you provide one, and your date of birth, which we need in order to confirm you are 18 or over.
- Payment details: the bank account, UPI ID or wallet you deposit from and withdraw to, the account holder name, and the references on each payment.
- Verification documents where we ask for them under the checks described in the Terms & Conditions: proof of identity, age, address, or that a payment method is yours.
- Anything you send support: messages, screenshots, and the content of chats with our help centre.
- Your own settings: the deposit limit, loss limit, cool-off or self-exclusion you choose, your anti-phishing phrase, and your display preferences.
Information created by using the account
- Every bet: what you staked, the market, the price, the time, and how it settled.
- Every wallet movement: deposits, withdrawals, bonuses, cashback, referral commission and corrections.
- Sign-in records: the time, the IP address, and basic device and browser information. We keep these to spot account takeover and duplicate accounts.
- Referral links you used or shared, and which accounts joined through your code.
Information we do not collect
We do not store your full card number or your bank password. Those stay with the payment provider. We never ask for your bank or UPI PIN, and nobody from this site will ever ask you for it. If someone does, it is a fraud attempt.
3. Why we hold it
- To run your account: accepting bets, settling them, crediting deposits, paying withdrawals, showing your history.
- To confirm you are eligible: the age check, the one-account rule, and the checks on payment ownership.
- To stop fraud and abuse: detecting duplicate accounts, collusion between accounts, bot activity, stolen payment methods and account takeover.
- To honour responsible gambling choices: a deposit limit, loss limit, cool-off or exclusion only works if we keep a record of it and check it before every deposit, bet or sign-in.
- To support you: answering questions, investigating a settlement or a missing deposit.
- To meet obligations: keeping financial records and responding to lawful requests.
- To tell you about offers, where you have not turned marketing messages off.
4. Who else sees it
We do not sell your data. We share only what a given party needs to do its job:
- Payment providers and banks, to move a deposit or a payout and to trace one that went missing.
- Game and odds providers, where a round is run on their platform. They receive an account reference and the stake, not your name, contact details or documents.
- Messaging providers, where notices reach you over WhatsApp, Telegram, SMS or email. They see the destination and the message.
- Our own operators and branch staff, limited to the accounts they are responsible for, for support and payout approval.
- Professional advisers, auditors and law enforcement, where we are obliged to disclose or need to defend a claim.
If the business is ever transferred, account data transfers with it and this policy continues to apply until you are told otherwise.
5. How long we keep it
- While the account is open, and for a period afterwards so that we can answer questions about past bets and payments and meet record keeping obligations.
- Bet and transaction records are kept even after closure, because they are the financial record of the account.
- Self-exclusion records are kept deliberately and are not deleted on request. Deleting them would let a closed or excluded account be reopened, which is exactly what the exclusion is there to prevent. See the Exclusion Policy.
- Verification documents are kept only as long as we need them for the check and for the record that the check was done.
- Support conversations are kept so that the next person who helps you can see what has already been said.
6. Security
- Passwords are stored as hashes. Nobody here can read your password, which is why support will never tell you what it is.
- Traffic between your device and the site is encrypted in transit.
- Access to account data inside the business is limited by role, and payout approval is a separate step from support.
- Sign-ins are logged so that an unfamiliar one can be spotted.
- The anti-phishing phrase in Settings lets you tell a real email from us apart from a fake one.
No system is perfect. Use a password you do not use anywhere else, do not share your login, and tell us straight away if you see a bet or a withdrawal you did not make.
7. Cookies and local storage
We use a cookie to keep you signed in. Without it the site cannot tell one request from another and you would be signed out on every page.
We also store small preferences in your browser rather than on our servers: the night view toggle, the last tab you had open, odds display choices, and dismissed notices. These stay on the device you set them on, are not shared with other users, and are not used to build a profile of you. Clearing your browser data removes them.
Where a third party game or stream is embedded in a page, it may set its own storage under its own policy.
8. Marketing
Offers and promotional messages can be turned off in Settings or by telling support. Notices about your money, your bets and your account security are not marketing and we will keep sending those while the account is open.
9. What you can ask us to do
- See what we hold. Ask support and we will tell you what is on the account. Bet and transaction history is already visible to you in the account at any time.
- Correct something that is wrong, such as a misspelled name or an out of date mobile number. A change to the name or payment details on an account may need a document, because it is also a fraud check.
- Close the account and stop further processing for marketing.
- Ask us to delete data. We will delete what we are not required to keep. We will not delete financial records or exclusion records, for the reasons in section 5.
Ask through the help centre or email support@example.com, from the contact details registered on the account. We may need to verify it is really you before we act, because handing account data to the wrong person is the worse outcome.
10. Children
The service is for adults aged 18 and over. We do not knowingly hold data about anyone younger. If you believe an account has been opened by a minor, tell support and we will close it and remove the data we are not obliged to keep.
11. Changes to this policy
When this policy changes, the date at the top of the page changes. If a change affects how we use data in a way you would not expect, we will show you a notice in the site as well.
Need help with this page?
Write to us through the help centre or email support@example.com. Quote your username so we can find the account without asking for it twice. Account limits, cool-off and self-exclusion are in Settings, under the Responsible tab.
Operated by Mahadev Pvt. Ltd., Patna, Bihar, India.