PRIVACY POLICY

📋 1. Information We Collect

When you create an account, register a Player ID, or sign up for a tournament or championship on TSIAR Esports ("TSIAR", "we", "us"), we collect the following:

We do not collect your card number, UPI PIN, or bank login credentials at any point — these are handled entirely by our payment partner, Razorpay.

🎯 2. How We Use Your Information

• To create and verify your Player ID — your name, district, and Aadhaar are used to confirm you are a real, unique player.
• To process tournament and championship registrations — confirming your slot, team, and entry fee payment.
• To operate the TSIAR Wallet — tracking top-ups, deductions for entry fees, and prize money credited to you.
• To send you updates — match room details, tournament announcements, verification status, and withdrawal updates via in-app notifications, push notifications, and Telegram (for community announcements).
• To prevent fraud and abuse — detecting duplicate accounts, fake registrations, or payment fraud.
• To improve the platform — understanding which tournaments and features are most used.

🆔 3. Aadhaar & Identity Verification

Your Aadhaar front image is uploaded securely to Cloudinary (our image storage partner) over an encrypted connection. Once a TSIAR admin verifies your identity, the image is permanently deleted via an automated process. We never share your Aadhaar number or image with any other player, sponsor, or third party.

💰 4. Payments & Wallet

All real-money payments (tournament entry fees, wallet top-ups) are processed through Razorpay, a RBI-licensed payment gateway. TSIAR does not store your card number, CVV, UPI PIN, or net banking credentials — these go directly to Razorpay's secure servers.

We store only: the transaction reference ID, the amount, the date, and whether the payment succeeded — needed to confirm your registration and maintain your wallet balance.

Withdrawal requests require your UPI ID or bank account number and IFSC code, which are used solely to process your payout and are visible only to you and TSIAR admins.

🔗 5. Who We Share Data With

We do not sell your personal information to anyone. We share limited data only with the following service providers, strictly to operate the platform:

• Google Firebase — authentication, database, and hosting infrastructure
• Razorpay — payment processing for entry fees and wallet top-ups
• Cloudinary — temporary storage of Aadhaar verification images (auto-deleted post-verification)
• Telegram — admin team receives registration alerts in a private channel; public announcements go to our community channel without personal data
• Google Cloud Messaging (FCM) — delivering push notifications to your device

We may disclose information if required by law, court order, or to protect the safety of our users.

🔔 6. Notifications

If you allow notifications, we use your device's push notification token to send you alerts about match room details, tournament announcements, verification status, and championship updates. You can disable notifications anytime through your browser or device settings. Disabling notifications does not affect your ability to use the platform — you can always check updates by opening the app.

🔒 7. Data Storage & Security

• All data is stored on Google Firebase (Firestore), encrypted in transit via HTTPS/TLS.
• Access to player data is restricted by Firebase Security Rules — only you can read/edit your own profile, and only verified TSIAR admins can access verification and payment management tools.
• Our Cloudflare Worker backend handles payment verification server-side; sensitive API keys are never exposed in the app.
• We do not store passwords — sign-in is handled entirely through Google's secure OAuth system.

🗂️ 8. Data Retention

We retain your account and tournament history for as long as your account is active, so you can track your Player ID history, past tournaments, and wallet transactions. Aadhaar images are deleted immediately after verification (see Section 3). If you request account deletion, we will remove your personal data within 30 days, except for transaction records we are legally required to retain for accounting purposes.

⚖️ 9. Your Rights & Choices

• Access — you can view your profile, Player ID, and transaction history anytime in the app.
• Correction — contact us to correct inaccurate information on your profile.
• Deletion — request account and data deletion by contacting us (see Section 12).
• Withdraw consent — you may stop using TSIAR at any time; this does not affect processing already completed (e.g. a tournament you already played).

👤 10. Children's Privacy

TSIAR requires users to be 18 years or older to register a Player ID, enter paid tournaments, or use the Wallet — this is enforced at the point of registration. We do not knowingly collect data from children below this age for these purposes. Public tournament listings and leaderboards may be viewed by anyone, but no personal data is collected from underage visitors browsing these pages. If you believe a minor has registered without appropriate verification, please contact us so we can investigate and remove the account.

📝 11. Changes to This Policy

We may update this Privacy Policy as TSIAR grows and adds new features. Material changes will be announced via our Telegram community channel and an in-app notification. The "Last updated" date at the top of this page always reflects the current version.