Security
Academies trust us with member records, court calendars and payments. This page summarises how we protect that data.
Last updated: 15 September 2026
Security is part of how we build KhelTech products, including BookPlay. We combine access control, encryption, monitoring and operational discipline so staff and members can use the product with confidence.
Application security
- Role-based access so coaches, front desk and owners only see what their job requires.
- Session controls, password hashing and optional multi-factor authentication for staff accounts.
- Input validation, CSRF protection and regular dependency updates on the application stack.
- Tenant isolation so one academy cannot read another academy’s data.
Infrastructure
- TLS in transit for the web app, APIs, branded websites and member apps.
- Encryption at rest for databases and backups hosted with our cloud providers.
- Network segmentation, least-privilege service credentials and audit logging of privileged actions.
- Automated backups with tested restore procedures.
Payments
Card and UPI collection is handled by certified payment partners. KhelTech does not store full card numbers. Settlement, refunds and reconciliation stay inside the Payment and Finance modules using tokens and receipts from those providers.
People and process
- Production access is limited to named engineers and logged.
- Vendors that process customer data are reviewed and bound by written agreements.
- We monitor for availability and suspicious activity; current health is on the status page.
Your responsibilities
You control who you invite, which roles they receive, and how you share exports. Use strong unique passwords, turn on MFA where available, and revoke access when staff leave. Keep member consent and local sports-body rules in your own processes — the platform cannot replace that.
Vulnerability reports
If you believe you have found a security issue, email bharat@kheltech.com with “Security” in the subject. Please do not publicly disclose the issue until we have had a reasonable chance to investigate and fix it. We will acknowledge reports and keep you updated on resolution.
Questions
Customers who need a deeper questionnaire for procurement can request it from bharat@kheltech.com. Privacy practices are described in our Privacy Policy.