PRIVACY POLICY

1. Information We Collect

We collect your personal data when you use our Platform, services, or otherwise interact with us. Some of the information that we may collect includes but is not limited to:

• Profile Information: Display Name, Username, Email ID, Phone Number, and Profile Avatar.
• Game Metadata: In-Game Name (IGN) and Character ID (e.g. BGMI Character ID) to verify participation in tournaments.
• Financial Information: Wallet transaction history, deposit logs, withdrawal account details (UPI ID or Bank account details), and payment screenshots uploaded by you.
• Verification Info (KYC): If you request large withdrawals, we may request official identification documents (PAN Card / Aadhaar Card) to calculate TDS and verify your identity and age.
• Behavioural Data: We may track your behaviour, preferences, and other information that you choose to provide on our Platform. This information is compiled and analysed on an aggregated basis.

You always have the option to not provide information by choosing not to use a particular service or feature on the Platform.

2. How We Use Your Data

We use personal data to provide the services you request. We use your personal data to:

• Manage tournament registrations, custom room assignments, and leaderboard updates.
• Verify cash deposits and handle withdrawal payouts accurately.
• Prevent fraud, multiple account creation, cheating, and access from restricted states.
• Send critical alerts such as lobby credentials, match updates, and security notifications.
• Resolve disputes, troubleshoot problems, and inform you about offers, products, services, and updates.
• Detect and protect against error, fraud, and other criminal activity; enforce our terms and conditions.
• Conduct marketing research, analysis, and surveys.

3. Sharing of Your Information

We may share your personal data internally within our group entities and affiliates. We may disclose personal data to third parties such as:

• Third-party service providers including payment processors and logistics partners.
• Government agencies or authorised law enforcement agencies if required to do so by law or court orders.
• Third parties in the good faith belief that such disclosure is necessary to enforce our Terms of Use or Privacy Policy, or to protect the rights, property, or personal safety of our users or the general public.

We shall not be responsible for the third-party business partner's privacy practices or the content of their privacy policies, and we request you to read their privacy policies prior to disclosing any information.

4. Data Storage & Security

Your account data is managed via Supabase Database (PostgreSQL). All user logins, auth credentials, and passwords are encrypted and secured using Supabase Auth / JWT (JSON Web Tokens).

We enforce Row Level Security (RLS) rules in our database. This guarantees that your private details (like wallet balances, payment records, and account keys) are only accessible to you and our system administrators.

To protect your personal data from unauthorised access, loss, or misuse, we adopt reasonable security practices and procedures. However, the transmission of information is not completely secure for reasons beyond our control. Users are responsible for ensuring the protection of login and password records for their account.

5. Third-Party Integrations

• Supabase Cloud Services: For storing database rows, auth profiles, and media storage.
• Firebase / FCM: For delivering real-time push notifications to your device.
• Payment Gateways: For processing deposits. Payment details are handled over secure encrypted connections.
• Brevo / Email Services: For sending transactional emails like OTPs and support replies.

6. Cookies & Local Storage

We use local browser storage (Cookies, SessionStorage, and LocalStorage) to keep you logged in and to store temporary user preferences. These files do not track your browsing activity across other websites.

7. Data Deletion & Retention

You have an option to delete your account by visiting your profile and settings on our Platform. This action would result in you losing all information related to your account. You may also write to us at the contact information provided below to assist you with these requests.

We may refuse or delay deletion of the account in the event of any pending grievance, claims, or pending services. We retain your personal data for a period no longer than is required for the purpose for which it was collected or as required under any applicable law. Transactional records and past tournament match histories will be archived for compliance, auditing, and financial records.

To request data deletion, contact our support team at support@flameesports.com.

8. Your Rights

You may access, rectify, and update your personal data directly through the functionalities provided on the Platform.

9. Consent

By visiting our Platform or by providing your information, you consent to the collection, use, storage, disclosure, and otherwise processing of your information on the Platform in accordance with this Privacy Policy.

You have an option to withdraw your consent that you have already provided by writing to us at the contact information provided below. Please mention "Withdrawal of consent for processing personal data" in your subject line. However, withdrawal of consent will not be retrospective and may restrict us from providing our services for which we consider such information to be necessary.

10. Changes to this Privacy Policy

Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices and will alert you about significant changes in the manner required under applicable laws.

11. Grievance Officer

For any concerns, queries, or complaints regarding this Privacy Policy, please contact us:
Flame Esports Support Team
Email: support@flameesports.com
Business Hours: Monday – Friday, 9:00 AM – 6:00 PM IST