Privacy Policy
Draft for Review
Version: 1.0
Effective date: 30 Sep 2025
Jurisdiction: India (DPDP Act, 2023 and rules). Federation contexts may add sport-specific requirements.
1. Who we are
BadInCo ("we", "us") operates a tournament and ranking platform for badminton in India (web + mobile).
Contact: info@badinco.in, +91 7501335123.
Grievance Officer (India): _Name/Contact_
Registered office: _Address_
2. Scope
This Policy covers personal data we process to: register players and officials; manage tournaments (entries, draws, schedules, live scoring); publish results and rankings; operate player profiles; run payments; provide support; ensure security; and comply with law or federation obligations.
3. Legal basis & consent
We act as a Data Fiduciary under India's DPDP Act. Our primary legal bases are: (a) consent, (b) performance of a service requested by you (e.g., event registration), and (c) legitimate sporting interests such as integrity, transparency of results, and historical archives, where permitted by law. We will request verifiable parental consent for users under 18.
4. Categories of personal data
Identity & contact
Name, DOB/age band, photo (optional), gender category, club/association, state, identifiers.
Competition
Entries, seedings, draws, match events (points, cards), results, rankings/history, eligibility/discipline where lawful.
Account & usage
Login identifiers, preferences, device/IP, app telemetry, cookies similar technologies.
Payments
Payer contact, amount, method token, status; we do not store card PAN/CVV (handled by RBI-regulated gateway).
Support & compliance
Communications, documents you upload (e.g., age proof), fraud/abuse indicators, audit logs.
5. Purposes
- •Provide and improve the platform (registration → draws → live scoring → results → rankings).
- •Display public draws, live scores, results, and historical leaderboards.
- •Create and maintain verified player profiles and ELO-style ratings.
- •Ensure safety, prevent abuse, detect fraud, and secure our systems.
- •Process payments, refunds, and invoices via licensed financial partners.
- •Send essential service messages (entry confirmations, schedules, changes).
- •Research/analytics in aggregate (non-identifying) to improve fairness and performance.
6. Children & young players
- •Under-18s require verifiable parental consent to create or manage an account or to be entered by a guardian/club.
- •We do not offer targeted ads to minors; profiling is limited to tournament operations and rankings.
7. Publishing & transparency
We publicly display tournament draws, live scores, results, seedings, and rankings (with player name, club, category, and applicable identifiers). By entering a sanctioned competition, you acknowledge that this publication is necessary for fair and transparent sport administration. Video or photos from events may be published for reporting and promotion within lawful limits.
8. Sharing of data
Vendors/Processors: hosting, communications (email/SMS), analytics, support, KYC (if used), and payments — bound by contracts and reasonable security safeguards.
Federations/Associations/Clubs: limited competition data (entries, results, rankings) for sanctioning, eligibility, and archives, per contracts and law.
Legal/Integrity: disclosures to law-enforcement or integrity bodies when required.
Corporate changes: in mergers or acquisitions, subject to continuity of protections.
9. International transfers
If personal data is processed outside India, we use transfer mechanisms allowed by law and contracts. Security logs required by CERT-In remain stored in India for the mandated period.
10. Security
We implement proportional technical and organisational measures, including: TLS in transit; encryption at rest; access control and 2FA for admins; least-privilege; secure coding and dependency scanning; continuous logging and monitoring; backup and disaster recovery; vendor reviews; and periodic testing.
11. Retention
We keep data only as long as needed for the purposes above. Competition records (draws, results, rankings) are kept as a sporting archive. Accounts can request deletion; where deletion is not possible due to legal or integrity reasons, we will restrict and archive.
12. Your rights
Subject to law, you can: access, correct, update, and request deletion of your information; withdraw consent for optional features; and raise complaints with the Data Protection Board of India. We will verify identity before fulfilling requests.
13. Cookies & similar technologies
We use essential cookies for login and session security, and limited analytics for product improvement. You may control non-essential cookies via in-app settings where available.
14. Payments
Payments are handled by RBI-regulated Payment Aggregators/Gateways. We do not store raw card data. Refunds follow tournament and gateway policies.
15. Incident response & notifications
We maintain an incident-response plan. Notifiable cyber incidents are reported to CERT-In within 6 hours of awareness. If a breach risks your rights, we will notify you and, where required, the Data Protection Board of India.
16. Grievance & contact
Grievance Officer (India): _Name, designation_
Email: info@badinco.in
Phone: +91 7501335123
Postal: _Registered address_
17. Changes to this Policy
We will post updates with a new "Effective date" and, when changes are material, we will notify you through the product or by email.
*This draft is provided for product planning and legal review. It is not legal advice. Please consult counsel before publishing.*