PRIVACY POLICY

1. Who We Are

Cricket Gabru is operated by Priyanshu Jain, a sole proprietorship registered in India. Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary and you are the Data Principal. This policy is published under the DPDP Act, 2023, the DPDP Rules, 2025, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

A short, standalone summary of what we collect and why — the notice required under Section 5 of the DPDP Act — is available at cricketgabru.in/data-notice.

2. What We Collect

We do not collect or store card numbers, CVVs, UPI PINs, bank credentials, government ID, biometric data, or precise GPS location. Payment credentials are handled entirely by PhonePe Payment Gateway and Stripe and never reach our servers.

3. Why We Process It

Your data is processed only to: run your account and game progress; deliver and support purchases you make; detect and prevent multi-accounting, automation, and payment fraud; respond to your support and grievance requests; and meet legal, tax, and regulatory obligations.

We do not sell your personal data. We do not share it with advertisers. We do not use it for behavioural advertising or profiling for advertising purposes.

4. Consent, and How to Withdraw It

We process your personal data on the basis of the consent you give when you authorise Cricket Gabru through Discord's OAuth screen and when you complete Anti-Alt Verification. That is an explicit, affirmative act, and it is the only basis on which we treat you as having consented. Continuing to use the service is not, by itself, consent.

You may withdraw consent at any time, and withdrawing is as simple as giving it: run the in-Discord data deletion command, or email grievance@cricketgabru.in. Withdrawal takes effect within 30 days. It does not affect processing already carried out, and it does not reverse completed transactions. Withdrawing consent means we can no longer operate your account, so your game progress and virtual items will be permanently deleted and are not recoverable.

5. Children's Data

Cricket Gabru is played through Discord, which requires users to be at least 13 years old. We apply the same minimum age.

Under the DPDP Act, 2023, anyone under 18 is a Child. Where we know or reasonably believe a user is under 18:

• We do not carry out behavioural tracking, profiling, or targeted advertising directed at them. We do not carry out advertising-based tracking of any user, of any age.
• We do not process their data in any way likely to cause them detriment.
• Purchases require confirmation that the user is 18 or older, or that a parent or lawful guardian has consented to the transaction and authorised the payment method used.
• A parent or lawful guardian may contact grievance@cricketgabru.in at any time to review, restrict, or delete their child's data, or to reverse an unauthorised purchase under our Refund Policy.

Anti-Alt Verification data (IP and device fingerprint) is processed for security and fraud prevention only, is never used to build advertising or interest profiles, and is retained under Section 9 below.

6. Who We Share It With

We share the minimum necessary with the following processors:

We also disclose data where required by law, court order, or a lawful request from a government agency.

7. Cross-Border Transfer

Because Discord, Stripe, and our hosting provider Hetzner Online GmbH operate outside India — our database and application run on a single server in United States (Ashburn, Virginia) — some of your personal data is transferred and stored outside India. We transfer data only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and we require contractual safeguards from every processor.

8. Cookies and Analytics

cricketgabru.in uses only the strictly necessary cookies required to keep you signed in and to support Anti-Alt Verification (fraud and multi-account prevention). We do not use advertising, analytics, or third-party tracking cookies.

9. How Long We Keep It

Purchase records are retained even after account deletion, because we are legally required to keep them. They are retained in isolation and are not used for any other purpose.

10. Security

We protect your data using encryption in transit (TLS), encryption at rest for fingerprint data, access controls limiting production data to authorised personnel, and regular dependency and infrastructure patching. No system is perfectly secure, but we take these obligations seriously.

11. If There Is a Breach

If a personal data breach occurs, we will notify every affected user without delay through Discord and email, describing what happened, what data was involved, what we are doing about it, and what you should do. We will also report the breach to the Data Protection Board of India as required under the DPDP Rules, 2025.

12. Your Rights

Under the DPDP Act, 2023 you have the right to:

• Access — obtain a summary of your personal data and how it is processed.
• Withdraw consent — withdraw the consent you gave for us to process your data, as easily as you gave it. See Section 4.
• Correction and updating — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted (the "right to be forgotten").
• Grievance redressal — a readily available means of raising a complaint with us.
• Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

Exercise any of these by emailing grievance@cricketgabru.in or by using the in-Discord data commands. We respond within 15 days.

13. Changes to This Policy

We will post any material change on this page and update the "Last updated" date. Where a change materially affects how we process your data, we will notify you through Discord or email before it takes effect.

Grievance Redressal

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Digital Personal Data Protection Act, 2023, and the Promotion and Regulation of Online Gaming Rules, 2026, complaints may be addressed to:

Grievance Officer: Priyanshu Jain (Founder & Lead Developer)
Email: grievance@cricketgabru.in
Hours: Monday to Friday, 10:00–18:00 IST

We acknowledge every complaint within 24 hours and resolve it within 15 days of receipt.

If you are not satisfied with our resolution, or if we fail to respond within 15 days, you may escalate:

1. Online Gaming Authority of India — for grievances relating to the game, its classification, or user safety. Appeal within 30 days of our decision.
2. Appellate Authority (Secretary, Ministry of Electronics and Information Technology) — second appeal.
3. Data Protection Board of India — for grievances relating specifically to your personal data, after first exhausting our grievance mechanism.