Head Digital Works’ CTO on keeping cyber-criminals at bay in gaming

India's online gaming sector, poised for significant growth, encounters various challenges stemming from cyber-threats, particularly because it operates in the digital space. This calls for an urgent need for gaming firms to identify and streamline security processes. Online technology and skill gaming firm Head Digital Works (HDW), which operates platforms like A23 Rummy, A23 Poker, and Cricket.com, has been developing a comprehensive cybersecurity strategy that incorporates secure coding practices across all tiers of the organisation, from developers to executives.

In a conversation with TechCircle, Visvesvarryya Neelakantan, Chief Technology Officer (CTO), Head Digital Works, said that this strategy extends beyond traditional firewalls and intrusion detection systems to create a strong defense against emerging threats. “We allocate 8%-10% of our total budget to enhance and implement this comprehensive cybersecurity framework,” he said.

To maintain a competitive edge, the Hyderabad-based company utilises artificial intelligence (AI)-driven personalisation and analytics. We have integrated AI tools to monitor player behaviour, identify excessive gameplay, and offer self-exclusion options, promoting responsible gaming.  That said, the company uses advanced AI algorithms to help analyse user behaviour and preferences, enabling a tailored gaming experience. “We also invest in AI-based solutions for asset and data protection, employing mechanisms for intrusion detection and data exfiltration to adapt our security protocols to new threats,” said Neelakantan.

The Clairvest Group-backed company prioritises data privacy as a key differentiator, implementing a robust suite of prevention strategies to protect player data from cyber-attacks. “Our Security Operations Center (SOC) provides 24/7 monitoring and real-time alerts against threats such as ransomware, distributed denial-of-service (DDoS) attacks, phishing, and data theft. Continuous vigilance and established procedures ensure preparedness against potential attacks,” he informed.

In integrating AI and machine learning (ML) into game development, HDW further adheres to best practices throughout the development lifecycle. “We maintain core security principles while embedding tools to identify vulnerabilities early in the process,” said Neelakantan, adding that open-source libraries are vetted before adoption, ensuring ongoing effectiveness.

According to him, “AI enhances online gaming personalisation by analysing player behaviour and preferences, allowing us to suggest tailored game formats and in-game purchases. This customisation improves player satisfaction and engagement. As AI evolves, we anticipate advancements in gameplay, including dynamic content generation, enhanced security, and improved community management.”

Notably, to combat AI-powered threats, HDW employs a comprehensive set of tools and strategies to safeguard both players and developers. As Neelakantan explained, “We monitor data leaving the organisation in real-time, conduct awareness sessions on emerging attack patterns, and invest in premium tools for data safety and security. Our data is protected through replication and encryption, both at rest and in transit.”

HDW's zero-trust security model restricts access based on need and authority, ensuring that only authorised individuals can access specific resources. Zero Trust is a security model that requires authentication, authorisation, and continuous validation of all users, regardless of their location, before granting access to data and applications.

“Certain administrative actions are limited to office premises to mitigate unauthorised activities. This model has significantly strengthened our security posture by reducing insider threats and minimising breach impacts,” said the CTO.

Neelakantan also informed that the company follows the best practices of collaborating with cybersecurity experts and regulators to enhance security in game development. “We conduct thorough audits with leading firms, adhere to the National Institute of Standards and Technology (NIST) standards, and promptly address findings. We maintain data compliance and provide necessary information to law enforcement, ensuring our security measures align with industry best practices,” he said.

The company has also been investing in data analytics, focusing on increasing player engagement as part of the strategy to grow further and improve profitability and recently acquired Adda52, an online poker platform, from a subsidiary of Delta Corp.

As the fastest-growing market globally, India’s gaming industry is projected to nearly double its annual revenue from $3.1 billion in 2023 to $6 billion by 2028, according to a report by the Interactive Entertainment and Innovation Council (IEIC). This growth, highlighted by various market analysts, not only signals a thriving industry but also a growing source of employment. 

The report also said that the sector directly and indirectly employed over 100,000 skilled professionals in 2023, with expectations to create over 250,000 more jobs in the coming years.