Privacy Policy

1. Introduction and Scope

Welcome to Tiranga Gaming (“we,” “our,” or “us”), operated from India. This Privacy Policy explains how we collect, process, store, use, disclose, and protect your personal data when you access or use our website, mobile application, and related services (collectively, the “Platform”).

This policy is drafted in compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) of India
• The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The General Data Protection Regulation (GDPR) — EU Regulation 2016/679, applicable to users in the European Economic Area (EEA)
• The Children's Online Privacy Protection Act (COPPA) of the United States
• The California Consumer Privacy Act (CCPA) for California residents
• Other applicable national and state-level data protection laws

By accessing or using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms herein, please discontinue use of the Platform immediately.

2. Nature of the Platform — Educational and Informational Only

Tiranga Gaming is a purely educational and informational platform that provides:

• Information about careers in esports, gaming, and streaming
• Publicly available earnings data and statistics of gaming streamers and sports personalities
• Guides on legitimate revenue streams including YouTube AdSense, brand sponsorships, tournament prizes, merchandise sales, and affiliate marketing
• Analysis of the Indian and global esports industry
• Information about brand endorsement earnings in sports

3. Data Fiduciary Information (as per DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for your personal data is:

4. Information We Collect

4.1 Personal Data Provided Voluntarily

We may collect personal data that you voluntarily provide when you:

• Register or create an account on the Platform
• Subscribe to our newsletter or email communications
• Fill out forms, surveys, or feedback requests
• Contact us via email, contact forms, or social media
• Download guides, resources, or educational material
• Participate in contests or promotional events

This data may include: full name, email address, phone number, age, location (city/state), gaming preferences, and any other information you choose to provide.

4.2 Sensitive Personal Data or Information (SPDI)

As defined under the IT (SPDI) Rules, 2011, we do NOT collect any sensitive personal data including financial information (bank account, credit/debit card), passwords, sexual orientation, medical records, or biometric data. If we ever need to collect SPDI in the future, we will obtain your explicit, informed, written consent in compliance with Rule 5 of the SPDI Rules.

4.3 Automatically Collected Data

When you access our Platform, the following data is collected automatically:

• Device Information: Device type, model, operating system, unique device identifiers
• Log Data: IP address, browser type and version, ISP, referring/exit pages
• Usage Data: Pages visited, time spent, clickstream data, interaction patterns
• Location Data: Approximate geographic location based on IP address (not precise GPS location)
• Cookies and Tracking Technologies: As detailed in Section 6

4.4 Data from Minors

In accordance with the DPDP Act 2023 (Section 9) and COPPA, we do not knowingly collect personal data from children under the age of 18 without verifiable parental consent. If we become aware that personal data has been collected from a minor without appropriate consent, we will take immediate steps to delete such data. Parents or guardians may contact us at privacy@tirangawe.store to request data deletion.

5. Purpose and Legal Basis for Processing

We process personal data only for lawful purposes under the DPDP Act and GDPR:

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies in compliance with applicable laws. You can control cookie preferences through your browser settings or our cookie consent banner.

• Strictly Necessary Cookies: Essential for Platform functionality (session management, security tokens). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our Platform (e.g., Google Analytics). Deployed only with your consent.
• Advertising Cookies: Used to deliver relevant advertisements (Google Ads, Facebook Pixel). Deployed only with your consent.
• Preference Cookies: Remember your settings (e.g., theme, language). Deployed with consent.

You may withdraw cookie consent at any time by clearing your browser cookies. Note that disabling cookies may affect Platform functionality.

7. Third-Party Services and Data Sharing

We may share your data with the following categories of third-party service providers, solely to facilitate our services:

• Google Analytics / Google Ads: Website analytics and advertising (Google LLC, USA). Data may be transferred to the USA under Standard Contractual Clauses.
• Meta (Facebook) Pixel: Social media advertising and conversion tracking.
• Email Service Providers: For newsletters and transactional emails.
• Hosting Providers: Cloud hosting for secure data storage.

We do NOT sell, trade, or rent your personal data to any third party. Data sharing is limited to the purposes stated above and governed by Data Processing Agreements (DPAs) as required under GDPR Article 28 and the DPDP Act.

8. International Data Transfers

Your data may be processed in countries outside India, including the United States and the European Union, by our third-party service providers. Such transfers are conducted in compliance with:

• Section 16 of the DPDP Act, 2023 (transfer to permitted jurisdictions notified by the Central Government)
• GDPR Chapter V provisions (Standard Contractual Clauses, adequacy decisions)
• Applicable international data transfer frameworks

9. Data Security Measures

We implement reasonable security practices and procedures as required under the IT Act, 2000 (Section 43A) and the SPDI Rules, 2011 (Rule 8), including:

• SSL/TLS encryption for all data in transit
• Encrypted storage of personal data at rest
• Access controls and role-based authentication
• Regular security audits and vulnerability assessments
• Incident response procedures compliant with CERT-In guidelines

Despite these measures, no method of transmission over the Internet is 100% secure. In the event of a data breach, we will notify affected users and the relevant authorities (including CERT-In and the Data Protection Board of India) within 72 hours, as required by law.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Account Data: Retained for the duration of your account plus 30 days after deletion request
• Communication Records: Retained for 3 years for dispute resolution
• Analytics Data: Aggregated and anonymized after 26 months
• Legal Compliance Data: Retained as required by the Indian Income Tax Act, Companies Act, or other applicable legislation

11. Your Rights as a Data Principal

11.1 Rights under the DPDP Act, 2023 (India)

• Right to Access (Section 11): Obtain a summary of your personal data being processed and the processing activities
• Right to Correction and Erasure (Section 12): Request correction of inaccurate data or erasure of data no longer necessary
• Right to Grievance Redressal (Section 13): File complaints with our Grievance Officer or the Data Protection Board of India
• Right to Nominate (Section 14): Nominate an individual to exercise your rights in case of death or incapacity
• Right to Withdraw Consent: Withdraw previously given consent at any time

11.2 Rights under GDPR (EEA Users)

• Right to Access (Article 15)
• Right to Rectification (Article 16)
• Right to Erasure / “Right to be Forgotten” (Article 17)
• Right to Restrict Processing (Article 18)
• Right to Data Portability (Article 20)
• Right to Object (Article 21)
• Right to not be subject to automated decision-making (Article 22)

11.3 Rights under CCPA (California Residents)

• Right to know what personal information is collected
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do NOT sell data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at privacy@tirangawe.store. We will respond within 30 days (or 72 hours where mandated by the DPDP Act). Identity verification may be required to process your request.

12. Grievance Redressal Mechanism

In accordance with the IT Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer:

If you are unsatisfied with our resolution, you may escalate your complaint to the Data Protection Board of India (under the DPDP Act) or to your local data protection authority if you are in the EEA.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or industry standards. We will notify you of material changes by posting the updated policy on this page, updating the “Last updated” date, and, where required by law, providing you with direct notice via email. Continued use of the Platform after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: