Privacy Policy

We use the collected information for the following purposes:

Service Provision:

• Create, maintain, and manage your user account
• Process tournament registrations and tournament entries
• Facilitate gameplay, room creation, and match organization
• Calculate rankings, verify results, and distribute prizes
• Process payments, deposits, withdrawals, and refunds
• Apply applicable TDS (Tax Deducted at Source) as per Indian tax laws

Communication:

• Send important service updates, tournament notifications, and match reminders via push notifications
• Provide customer support and respond to your inquiries via email
• Send promotional offers, bonus announcements, and tournament alerts (with your consent, opt-out available)
• Notify about account activities, transactions, withdrawals, and security alerts

Security & Compliance:

• Verify your identity and prevent fraud, duplicate accounts, and unauthorized access
• Detect and prevent cheating, match-fixing, rule violations, and suspicious activities
• Comply with legal obligations, tax requirements, and future KYC regulations
• Enforce our Terms & Conditions and platform policies
• Protect against security threats, cyber attacks, and unauthorized system access

Improvement & Analytics:

• Analyze app usage patterns, feature adoption, and user behavior
• Improve our services, fix bugs, enhance features, and optimize user experience
• Develop new tournament formats, game modes, and platform features
• Conduct research, statistical analysis, and performance monitoring

We do not sell your personal information to third parties. We may share your data with:

Service Providers:

• Cashfree Payment Gateway: For processing deposits, withdrawals, and transactions
• Cloud Hosting Services: For secure data storage on servers in Malaysia
• Firebase (Google): For push notifications, crash analytics, and app performance monitoring
• Email Service Providers: For sending transactional and promotional emails
• Customer Support Tools: For managing support tickets and user inquiries

Legal Requirements:

• When required by law, legal process, court orders, or government requests
• To comply with tax authorities, law enforcement, or regulatory investigations
• To protect our rights, property, safety, or the safety of our users
• To prevent fraud, security threats, illegal activities, or Terms violations

Business Transfers:

• In case of merger, acquisition, sale of assets, or business restructuring
• During bankruptcy proceedings or similar legal processes
• Users will be notified of any change in data ownership

With Your Consent:

• When you explicitly agree to share information for specific purposes
• For promotional partnerships or collaborations (only with prior consent)

We implement industry-standard security measures to protect your data:

Technical Safeguards:

• Encryption: 256-bit SSL/TLS encryption for all data transmission between app and servers
• Secure Storage: Encrypted storage of sensitive information (passwords hashed with bcrypt, payment details encrypted)
• Payment Security: PCI-DSS compliant payment processing through Cashfree Payment Gateway
• Security Audits: Regular vulnerability assessments and penetration testing
• Infrastructure: Firewall protection, intrusion detection systems, and DDoS mitigation

Administrative Safeguards:

• Access Controls: Role-based access with multi-factor authentication for admin accounts
• Limited Access: Employee access to personal data strictly on need-to-know basis
• Staff Training: Regular training on data protection, privacy laws, and security best practices
• Incident Response: Documented procedures for data breach detection and response

We retain your personal information for as long as necessary to:

• Provide our services and maintain your active account
• Comply with legal, tax, accounting, and regulatory obligations
• Resolve disputes, enforce agreements, and prevent fraud
• Maintain business records and audit trails

Retention Periods:

• Active Accounts: Data retained indefinitely while account is active and in use
• Inactive Accounts: Accounts inactive for 3 consecutive years may be archived or deleted
• Transaction Records: Financial records retained for 7 years (Indian tax and accounting compliance)
• Deleted Accounts:
  • Personal data soft-deleted within 30 days (flagged as deleted, not immediately purged)
  • Financial records retained for legal/tax compliance even after deletion
  • Some data may be retained for fraud prevention and legal purposes
• Logs & Analytics: Anonymized usage data may be retained for research and improvement purposes

Note: We use "soft delete" mechanism where data is flagged as deleted but not immediately purged from backups. Complete data removal may take additional time.

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal information we hold about you
• Right to Correction: Update, modify, or correct inaccurate or outdated information in your profile
• Right to Deletion: Request deletion of your account and associated data (subject to legal record-keeping requirements)
• Right to Opt-Out: Unsubscribe from promotional communications, marketing emails, and non-essential notifications at any time
• Right to Data Portability: Receive your data in a structured, commonly-used, machine-readable format (CSV/JSON)
• Right to Withdraw Consent: Revoke consent for data processing where applicable (may affect service availability)
• Right to Restrict Processing: Request limitation on how we process your data in certain circumstances

We use cookies, local storage, and similar technologies to:

• Remember your login session and authentication status
• Store your preferences, settings, and app configuration
• Analyze app performance, usage patterns, and user behavior via Firebase Analytics
• Provide personalized content, tournament recommendations, and in-app experiences
• Enhance security, prevent fraud, and detect suspicious activities

Types of Data Collected:

• Essential Cookies: Required for app functionality, login, and security (cannot be disabled)
• Analytics Cookies: Firebase Analytics for understanding user behavior and app performance
• Functional Cookies: Remember your preferences and settings

You can manage cookie preferences in your device settings. However, disabling essential cookies may affect app functionality and your ability to use certain features.

Our app may contain links to third-party websites, payment gateways, or external services:

• Payment Gateway: Cashfree Payment Gateway (governed by their privacy policy)
• Social Media: Links to our social media profiles (Instagram, Telegram, etc.)
• External Resources: Help articles, guides, or promotional content

Important: We are not responsible for the privacy practices, data handling, or content of these third-party services. We strongly encourage you to review their privacy policies before providing any personal information.

Xenora E-sports is intended for users aged 18 years and above. We do not knowingly collect, store, or process personal information from anyone under 18 years of age.

If we become aware that a user under 18 has provided personal information:

• We will immediately delete all associated data from our systems
• The account will be permanently suspended
• No refunds will be provided for any transactions

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices and technology infrastructure
• New features, services, or platform capabilities
• Legal, regulatory, or compliance requirements
• Business operations, partnerships, or organizational changes

We will notify you of significant changes via:

• Email notification to your registered email address
• In-app notification or prominent banner when you open the app
• Update notice on our website and this policy page

Effective Date: Changes become effective immediately upon posting. Your continued use of our services after changes are made constitutes acceptance of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or your personal data, please contact us:

We will respond to your inquiry within 7 business days. For urgent matters, please mention "URGENT" in the subject line.