Privacy Policy

Overview & Scope

Play Jump Private Limited ("Play Jump", "we", "our", or "us"), incorporated under the Companies Act, 2013, with CIN U73200UP2025PTC239240, having its registered office at Office 315, 3rd Floor, Ocean Complex, Sector 18, Noida, UP 201301, is committed to protecting the privacy and security of personal information provided to us.

This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect personal data when you access or use our website, mobile application, and related digital services (collectively, the "Platform"). It applies to all users, visitors, registered players, and other individuals who interact with the Platform.

This Policy is published in compliance with the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"); and the Digital Personal Data Protection Act, 2023 ("DPDPA"), to the extent applicable.

Information We Collect

Personal Identification Data

• Full name, date of birth, gender, and profile photograph
• Government-issued identity proof (Aadhaar number, PAN card, Voter ID, Passport) collected during KYC verification
• Email address and mobile phone number
• Residential address and proof of address documents

Financial & Transaction Data

• Bank account details, UPI IDs, or wallet information used for deposits and withdrawals
• Transaction history, deposit amounts, withdrawal records, and bonus credits
• Payment instrument details (last 4 digits of card, issuing bank) where applicable
• GST-related information where applicable

Usage & Behavioural Data

• Game participation history, scores, win/loss records, and gaming activity timestamps
• Device information: device model, operating system, browser type, and unique device identifiers
• IP address, geolocation data (city/state level), and internet service provider information
• Log data: pages visited, features used, clickstream data, and session duration
• Referral sources and marketing campaign interactions

Communication Data

• Messages, emails, and chat communications sent to our support team
• Feedback, survey responses, and reviews submitted through the Platform
• Records of calls made to our customer support helpline

Sensitive Personal Data or Information (SPDI)

In accordance with the SPDI Rules, we collect the following categories of sensitive data solely for the purposes described in this Policy and with your explicit consent:

• Financial information including bank account, credit/debit card, or other payment instrument details
• Biometric data (if applicable for identity verification purposes)
• Government identification numbers required under applicable law for KYC compliance

How We Collect Data

We collect personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing your profile, undergoing KYC verification, making transactions, or contacting support.
• Automated Collection: Data collected automatically when you use the Platform, including through cookies, web beacons, pixel tags, and similar tracking technologies.
• Third-Party Sources: Information received from payment processors, identity verification services, fraud prevention agencies, and analytics providers.
• Government / Regulatory Bodies: Data received in response to legal obligations or regulatory requirements.
• Referral & Social: Information shared when you connect a third-party social media account or are referred to the Platform by another user.

Purpose of Processing

We process your personal data for the following purposes:

Account & Service Management

• Creating and managing your user account and profile
• Providing access to games, contests, and Platform features
• Processing deposits, withdrawals, and prize disbursements
• Sending transactional communications (receipts, confirmations, OTPs)

Legal & Regulatory Compliance

• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by applicable Indian law
• Complying with orders from courts, tribunals, and government authorities
• Tax deduction at source (TDS) and filing of returns as required under the Income Tax Act, 1961
• Maintaining records mandated under the Information Technology Act, 2000 and allied rules

Security & Fraud Prevention

• Detecting and preventing fraudulent activity, cheating, collusion, and money laundering
• Verifying the authenticity of identity documents and financial information
• Monitoring for security threats and unauthorised account access

Platform Improvement & Analytics

• Analysing usage patterns to improve Platform performance, features, and user experience
• Conducting internal research, A/B testing, and product development
• Generating anonymised and aggregated statistical insights

Marketing & Communications

• Sending promotional offers, bonuses, and tournament announcements (with consent, and subject to opt-out rights)
• Personalising content and recommendations based on your preferences and activity
• Running loyalty and referral programmes

Legal Basis

We process your personal data under the following legal bases as recognised under the Digital Personal Data Protection Act, 2023 and other applicable Indian law:

• Consent: Where you have given explicit, free, informed, and unambiguous consent for a specific purpose — for example, receiving marketing communications or providing SPDI for KYC.
• Contractual Necessity: Processing required to perform the contract between you and Play Jump — including providing Platform services, processing transactions, and managing your account.
• Legal Obligation: Processing necessary for compliance with a legal obligation under Indian law — such as TDS deduction, AML checks, and responding to lawful government orders.
• Legitimate Interests: Processing for purposes of fraud prevention, network security, and improvement of Platform services, where such interests are not overridden by your rights.

Data Sharing & Disclosure

Play Jump does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data in the following circumstances:

Service Providers

We engage trusted third-party vendors to assist in operating the Platform, including payment gateways, cloud hosting providers, KYC / identity verification agencies, customer support tools, and analytics services. These parties are contractually bound to handle data securely and only for the purposes we specify.

Legal & Regulatory Authorities

We may disclose personal data to government bodies, law enforcement agencies, courts, or regulators where required by applicable law, court order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of Play Jump, our users, or the public.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Play Jump's business assets, your personal data may be transferred to the successor entity. You will be notified via email or a prominent notice on the Platform prior to any such transfer.

Aggregated / Anonymised Data

We may share anonymised, aggregated statistical data with research institutions, advertising partners, or the public for analytical or promotional purposes. Such data cannot reasonably be used to identify you.

Cookies & Tracking Technologies

The Platform uses cookies, web beacons, local storage, and similar tracking technologies to enhance your experience, maintain session state, and gather analytical data.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function — login sessions, security tokens, and cart/session management. Cannot be disabled.
• Performance / Analytics Cookies: Help us understand how users interact with the Platform (e.g., Google Analytics). Collected data is aggregated and anonymised.
• Functional Cookies: Remember your preferences such as language, region, and display settings.
• Marketing / Targeting Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These are only set with your consent.

You may control cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may impact Platform functionality. For more details, please refer to your browser's help documentation.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Account data and profile information: Duration of account existence plus 5 years post-closure
• KYC and identity documents: Minimum 5 years from date of collection, or as mandated by the Prevention of Money Laundering Act, 2002
• Financial transaction records: 8 years, in compliance with income tax and GST regulations
• Customer support communications: 3 years from the date of last interaction
• Log and usage data: 12 months from collection date (unless required longer for security purposes)
• Marketing preferences and consent records: Until withdrawal of consent plus 2 years

Upon expiry of the applicable retention period, or upon a verified deletion request, personal data will be securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Data Security

Play Jump implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Industry-standard encryption (TLS/SSL) for data transmission between your device and our servers
• Encryption of sensitive data fields (financial information, SPDI) at rest using AES-256 or equivalent
• Role-based access controls ensuring that only authorised personnel have access to personal data on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for administrative access to production systems
• Secure data centres with physical access controls and continuous monitoring

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Your Rights

As a data principal under the Digital Personal Data Protection Act, 2023, and other applicable Indian privacy law, you have the following rights with respect to your personal data:

• Right to Access: You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations and legitimate interests in retaining certain records.
• Right to Grievance Redressal: You may lodge a complaint with our Grievance Officer (see Section 15) regarding processing of your personal data.
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Opt-Out of Marketing: You may unsubscribe from promotional communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

To exercise any of these rights, please write to us at theplayjump933@gmail.com with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and respond substantively within 30 days, subject to identity verification.

Children's Privacy

The Platform is strictly intended for users who are 18 years of age or older. Play Jump does not knowingly collect, process, or store personal data of individuals under the age of 18.

If we become aware that personal data of a minor has been collected without verifiable parental or guardian consent, we will take immediate steps to delete such data. If you are a parent or guardian and believe that your child has provided personal information to us, please contact our Grievance Officer immediately.

Cross-Border Data Transfers

Play Jump primarily stores and processes personal data within the Republic of India. Where we engage third-party service providers located outside India (such as cloud infrastructure providers), we ensure that adequate safeguards are in place to protect your data, including:

• Standard contractual clauses or data processing agreements with the relevant service provider
• Transfer only to countries or territories notified by the Indian Government as providing adequate data protection
• Compliance with the cross-border transfer provisions of the DPDPA, 2023, and allied rules once notified

By using the Platform, you acknowledge and consent to such cross-border transfers where they occur in accordance with the safeguards described above.

Third-Party Links

The Platform may contain links to third-party websites, applications, or services that are not operated by Play Jump. This Policy does not apply to those third-party platforms. We strongly advise you to review the privacy policy of every website or service you visit.

Play Jump has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party sites or services. Inclusion of a link does not imply endorsement by Play Jump.

Amendments & Updates

Play Jump reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify you by:

• Sending an email notification to your registered email address
• Posting a prominent notice on the Platform home page
• Updating the "Last Updated" date at the top of this document

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the changes, you must discontinue use of the Platform and may request deletion of your account.

Grievance Officer

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, Play Jump has designated a Grievance Officer to address privacy-related complaints.

When submitting a privacy grievance, please include your full name, registered email address, a description of the concern, and any relevant supporting documents. The Grievance Officer will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days.

Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may reach us through the following channels: