Privacy Policy

1. Who We Are

Khel Maidan (کھیل میدان) is a sports management platform operated by Sabthings. We help sports teams, players, and organisers manage matches, track scores, and build their sporting community online.

If you have any questions about this policy, contact us at info@sabthings.com.

2. What Information We Collect

• Account information — mobile number and full name provided when registering via OTP.
• Google account information — if you choose to sign in with Google, we receive your Google account email address and a unique Google identifier from Google's OAuth service. We do not receive your Google password.
• Profile information — display name, playing role, bio, and an optional profile photo that you upload.
• Sports activity — matches, scores, team rosters, and other sports data you enter while using the platform.
• Usage data — pages visited, actions taken, device type, and IP address, collected automatically via Google Analytics.
• Authentication tokens — a secure token is stored on your device after login to keep you signed in. It is transmitted over encrypted HTTPS connections only.
• App version — the version of the Khel Maidan app installed on your device, used to provide support and ensure compatibility.
• Cookies — small files stored on your device to keep you logged in and remember your preferences on the web platform.

We do not collect payment card details, national identity numbers, precise location, or any other sensitive personal data.

3. How We Use Your Information

• To provide and operate the Khel Maidan platform and its features.
• To verify your identity via a one-time password (OTP) sent to your phone number.
• To display your profile, team, and match statistics to other platform users.
• To send important account notifications (e.g. match invitations, score updates).
• To understand how users interact with the app and improve the experience (via Google Analytics).
• To monitor app version adoption and ensure platform compatibility.
• To ensure the security and integrity of our services.

We do not sell your personal information to third parties.

4. OTP Delivery

When you register or log in, we send a one-time password (OTP) to verify your phone number. OTPs are delivered via WhatsApp (using Meta's WhatsApp Business Platform) or SMS as a fallback. Your phone number is shared with Meta solely for the purpose of OTP delivery and is not used for advertising or stored by Meta beyond message delivery.

5. Google Analytics

We use Google Analytics 4 to understand app and website usage patterns. Google Analytics collects anonymised data such as screens visited, time spent, and device information. This data is processed by Google in accordance with their Privacy Policy.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

6. Sharing Your Information

We may share your information only in the following circumstances:

• With other platform users — your name and sports statistics are visible to teammates, opponents, and match organisers as part of the platform's normal function.
• With service providers — trusted third parties who help us operate the platform (e.g. hosting, analytics, OTP delivery), bound by confidentiality obligations.
• When required by law — if we are legally required to disclose information to authorities.

7. Data Retention

We retain your account and activity data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law. Anonymised, aggregated statistics may be retained indefinitely.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain types of processing.

To exercise any of these rights, contact us at info@sabthings.com. We will respond within 30 days.

9. Account Deletion

You may delete your account at any time from Profile → Delete Account in the Khel Maidan app. Upon deletion:

• Your personal information (name, phone number, photo, bio) is permanently removed.
• Your account is anonymised to "Deleted User" so that historical match records remain intact.
• All login tokens are revoked immediately — you cannot log back in after deletion.
• Match scores, statistics, and sporting history are preserved for the integrity of the platform.

Team Owners

If you are the owner of a team that has active members, you must take one of the following steps for each such team before your account can be deleted:

• Transfer ownership — nominate an active team member as the new owner. The nominee will be notified and must accept the role. Once accepted, the team continues normally under new ownership.
• Dissolve the team — if no suitable successor is available, you may dissolve the team. All members will be notified and the team will be retired. Match history and individual player statistics are fully preserved.

If you are the sole member of a team you own, the team is deactivated automatically when your account is deleted — no action is required.

10. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure on-device token storage, and access controls. Authentication tokens are never stored in plain text and are invalidated immediately upon logout or account deletion. However, no system is completely secure — please keep your device and accounts secure.

11. Children's Privacy

Khel Maidan is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.