Privacy Policy

1. Introduction

Welcome to Walle Arena ("we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy is prepared in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-commerce) Rules, 2020.

This Privacy Policy explains how we collect, use, disclose, process, store, and safeguard your personal information and sensitive personal data when you use our website and tournament registration services. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We collect different types of information to provide and improve our services to you:

2.1 Personal Data (Non-Sensitive)

Information that can be used to identify you but is not classified as sensitive:

• Identity Information: Full name, date of birth, age, gender
• Contact Information: Email address, phone number, residential address
• Profile Information: Cricket playing history, preferred playing position, jersey size and number, team preferences
• Document Uploads: Photographs, identity proof documents (Aadhaar card, PAN card, etc.)

2.2 Sensitive Personal Data or Information (SPDI)

As defined under Rule 3 of the IT (SPDI) Rules, 2011, we collect the following sensitive data:

• Financial Information: Bank account details, payment card information, UPI IDs, and transaction history (for payment processing and refunds)
• Biometric Information: None (we do not collect fingerprints, iris scans, or other biometric data)

Important: We do NOT store your complete credit card, debit card, CVV, or net banking credentials on our servers. All payment information is processed securely through Razorpay, a PCI-DSS Level 1 compliant payment gateway. Razorpay encrypts and handles sensitive payment data according to international security standards (PCI-DSS).

2.3 Technical and Usage Data

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, clickstream data, referring URLs, features used
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies (see Section 8 for details)

3. How We Collect Your Information

We collect information through:

• Direct Provision: Information you voluntarily provide during registration, profile creation, and form submissions
• Automated Collection: Technical data collected automatically through cookies, server logs, and analytics tools
• Third-Party Services: Information received from Razorpay (payment status), Cloudinary (file upload confirmations)
• Public Sources: None (we do not collect information from public databases or social media without your consent)

4. How We Use Your Information

We process your personal information for the following legitimate purposes:

• Service Delivery: To process your tournament registration, verify your identity, and manage your player profile
• Payment Processing: To process payments through Razorpay, send payment confirmations, and handle refunds
• Communication: To send registration confirmations, tournament updates, team allocations, schedules, and important announcements via email and SMS
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical support
• Legal Compliance: To comply with applicable laws, regulations, court orders, and government requests
• Fraud Prevention: To detect and prevent fraudulent activities, security breaches, and illegal activities
• Service Improvement: To analyze usage patterns, improve our website, enhance user experience, and develop new features
• Marketing (with consent): To send promotional communications about upcoming tournaments, special offers, and related services (you can opt-out anytime)

We will only use your sensitive personal data for the specific purposes for which it was collected and with your explicit consent where required by law.

5. Third-Party Service Providers

We engage trusted third-party service providers to facilitate certain aspects of our platform. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information:

• Razorpay (Payment Processing): Handles all payment transactions including credit/debit cards, UPI, net banking, and wallets. Razorpay is PCI-DSS Level 1 compliant and does not share your sensitive payment data with us. Your payment information is subject to Razorpay's privacy policy: https://razorpay.com/privacy/
• Cloudinary (File Storage): Provides secure cloud-based storage for images, documents, and files you upload. Cloudinary uses encryption and access controls to protect your data. Privacy policy: https://cloudinary.com/privacy
• MongoDB Atlas (Database Hosting): Hosts our database with enterprise-grade security, encryption at rest and in transit, and compliance with international standards.
• Email Service Providers: For sending transactional emails (registration confirmations, password resets, updates)
• SMS Gateway: For sending SMS notifications about registration status and tournament updates

We encourage you to review the privacy policies of these third parties to understand how they handle your data.

We do not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

6. Data Sharing and Disclosure

We may share your personal information only in the following limited circumstances:

• With Your Consent: We will share information when you explicitly consent to such sharing
• Service Providers: With trusted third-party service providers as described in Section 5, under strict confidentiality agreements
• Legal Obligations: When required by law, court order, government authority, or to comply with legal processes
• Protection of Rights: To protect our rights, property, safety, or that of our users or the public
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred (you will be notified via email)
• Tournament Operations: Your name, photo, and team allocation may be shared publicly for tournament purposes (scorecards, team lists, announcements)

We do NOT share your sensitive personal data (financial information, passwords) with third parties except for payment processing through Razorpay.

7. Data Security and Protection Measures

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction:

• Encryption: HTTPS/SSL encryption for all data in transit; AES-256 encryption for sensitive data at rest
• Access Controls: Role-based access controls limiting data access to authorized personnel only; multi-factor authentication for admin accounts
• Password Security: Secure password hashing using industry-standard algorithms (bcrypt); passwords are never stored in plain text
• Regular Security Audits: Periodic security assessments, vulnerability scanning, and penetration testing
• Secure Infrastructure: Data hosted on secure cloud platforms with firewall protection and DDoS mitigation
• Data Backup: Regular automated backups with encryption to prevent data loss
• Employee Training: All personnel handling data are trained in data protection and confidentiality practices

Important Notice: While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Privacy Rights and Data Access

Under Indian data protection laws, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements and ongoing contractual obligations)
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing activities that require consent
• Right to Opt-Out: Opt-out of marketing communications at any time by clicking unsubscribe links or contacting us
• Right to Lodge Complaint: File a complaint with our Grievance Officer (details in Section 12)

To exercise any of these rights, please contact us at support@wallearena.com with your request. We will respond within 30 days as required under Indian law.

Note: Some information cannot be deleted if required for legal compliance, accounting purposes, dispute resolution, or to fulfill contractual obligations (e.g., registration records for completed tournaments).

9. Data Retention Policy

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Registrations: Data retained for the duration of the tournament and up to 2 years after completion for record-keeping
• Payment Records: Transaction data retained for 7 years as per Indian tax and accounting regulations
• Correspondence: Email and support communications retained for 3 years
• Deleted Accounts: Upon deletion request, data is anonymized or deleted within 90 days (except where legal retention is required)
• Technical Logs: Server logs and analytics data retained for 12 months

You may request deletion of your data at any time by contacting our Grievance Officer. However, we may retain certain information as required by law or legitimate business interests.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze usage patterns, and provide personalized content. A cookie is a small text file stored on your device by your web browser.

Types of Cookies We Use:

• Essential Cookies: Required for basic website functionality (login, session management). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website (page views, bounce rate, traffic sources)
• Performance Cookies: Collect information about website performance and errors
• Functional Cookies: Remember your preferences (language, region, theme)

Cookie Control: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling cookies may affect the functionality of our website and limit your access to certain features.

For more information on managing cookies, visit: www.aboutcookies.org

11. Children's Privacy

Our services are intended for individuals who are at least 18 years of age or have obtained parental/guardian consent. We do not knowingly collect personal information from children under 18 without verifiable parental consent.

If we become aware that we have collected personal information from a child under 18 without proper consent, we will take immediate steps to delete such information from our records. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@wallearena.com.

13. International Data Transfer

Your personal information may be transferred to, stored, and processed in countries other than India where our service providers (such as cloud hosting providers) maintain data centers. These countries may have data protection laws that differ from Indian laws.

When we transfer your data internationally, we ensure that:

• Adequate security safeguards are in place (encryption, contractual protections)
• Service providers comply with international data protection standards
• Transfers are necessary for providing our services or fulfilling contractual obligations

By using our services, you consent to the transfer of your information to countries outside India as described in this policy.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. When we make changes, we will:

• Post the updated Privacy Policy on our website with a new "Last updated" date
• Notify you of significant changes via email (to your registered email address)
• For material changes affecting your rights, we may seek your explicit consent

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, your personal information, or our privacy practices (excluding grievances, which should be directed to the Grievance Officer), please contact us at:

We will respond to your inquiry within 30 days of receipt, as required under Indian law.