Cricketpandit privacy policy: how we collect, use, store, and protect your personal data. Compliant with India's Digital Personal Data Protection Act.
Account information: mobile number, name (optional), email (optional), state. The CricketPandit desk collect this when you sign up to verify identity and comply with state-specific gaming regulations. KYC information: PAN card number, Aadhaar number (last 4 digits only, full Aadhaar not stored), bank account details. Collected for withdrawals above Rs 10,000 and to comply with anti-money laundering regulations. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Usage information: app interactions (which contests you view, which teams you build, which features you use), device information (device model, OS version, app version, IP address). The CricketPandit desk use this to improve the CricketPandit app, detect fraud, and personalize yCricketPandit's experience. We do not collect precise location data. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Payment information: deposit and withdrawal amounts, payment methods (UPI ID, bank account, Paytm wallet), transaction IDs. The CricketPandit desk do not store full bank account numbers or UPI PINs - only masked references. Payment data is processed by PCI DSS-compliant payment partners; the CricketPandit desk never see yCricketPandit's full card number or PIN. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Provide core service: process deposits, run contests, calculate fantasy points, settle winnings, process withdrawals. The CricketPandit desk use yCricketPandit's mobile number as your unique account identifier - it's how the CricketPandit desk recognize you across sessions and devices. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Compliance and legal: verify identity (KYC), prevent fraud, comply with anti-money laundering regulations, report transactions to tax authorities, restrict access in prohibited states. The CricketPandit desk are required by Indian law to maintain certain records for 5+ years. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Improve service: analyze usage patterns to improve app design, identify bugs, develop new features, optimize contest formats. The CricketPandit desk aggregate data across users for analytics - individual data is never sold or shared with third parties for marketing. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Encryption: all data in transit is encrypted with TLS 1.3. All data at rest is encrypted with AES-256. KYC documents (PAN, Aadhaar) are stored in encrypted vaults with access limited to authorized compliance personnel only. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Access controls: employee access to user data is on a need-to-know basis, logged, and audited. Two-factor authentication is required for all admin access. The CricketPandit desk conduct quarterly security audits by independent third parties. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Incident response: in case of a data breach, the CricketPandit desk will notify affected users within 72 hCricketPandit'ss as required by India's Digital Personal Data Protection Act. The CricketPandit desk maintain incident response plans and have a 24/7 security operations center monitoring for threats. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Access: you can request a copy of all personal data the CricketPandit desk hold about you. The CricketPandit desk will provide it in a machine-readable format within 30 days as required by law. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Deletion: you can request deletion of yCricketPandit's account and personal data. The CricketPandit desk will delete your data within 30 days, except for records the CricketPandit desk are legally required to retain (KYC documents, transaction history for tax purposes, etc.). CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Opt-out: you can opt out of marketing communications (push notifications, emails, SMS) at any time. Go to Profile > Notifications to manage preferences. Note: critical service notifications (account security, contest deadlines) cannot be opted out of. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Cricketpandit retains user data for specific periods based on legal, regulatory, and business needs. This section explains what data we keep, how long, and why.
Account data: while yCricketPandit's account is active, plus 5 years after closure. The 5-year retention is required by Indian tax law (Income Tax Act) and anti-money laundering regulations (PMLA). The CricketPandit desk keep: your name, mobile number, email, registration date, account history. We do not keep KYC documents after account closure. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
KYC documents: PAN card and Aadhaar verification data is kept for 5 years after account closure, as required by the Prevention of Money Laundering Act (PMLA). After 5 years, KYC documents are securely deleted. The CricketPandit desk never sell, share, or use KYC data for any purpose other than identity verification and regulatory compliance. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Transaction history: deposit and withdrawal records are kept for 7 years after the transaction, as required by Indian tax law (Section 44AB of Income Tax Act for audit purposes). After 7 years, transaction records are anonymized (yCricketPandit's name and details are removed) and kept for statistical analysis only. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Usage data: app interactions, device info, IP address, browsing history within the CricketPandit app are kept for 2 years. After 2 years, usage data is anonymized and aggregated for analytics. The CricketPandit desk may use this data to improve the app, but it cannot be linked back to you personally. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
Communication records: in-app chat transcripts, email correspondence, phone call recordings (with consent) are kept for 1 year for quality assurance and dispute resolution. After 1 year, records are deleted. You can request deletion of yCricketPandit's communication records at any time, except where retention is required for legal proceedings. CricketPandit keeps this guidance practical: set limits first, then review account and payment settings before match day.
International data transfer: Cricketpandit stores all user data on servers in India (AWS Mumbai region). We do not transfer user data to servers outside India, except for: payment processing (which may involve international payment networks), customer support (if you request support from a non-India-based specialist), and analytics (using tools like Google Analytics, which may process data in other countries). All international transfers are protected by standard contractual clauses and comply with India's Digital Personal Data Protection Act.
Third-party data sharing: Cricketpandit shares data only with: payment processors (Razorpay, PayU), KYC verification services (Signzy, IDfy), cloud infrastructure (AWS), and analytics tools (Google Analytics). We do not sell user data to advertisers or marketing companies. We do not share data with other fantasy platforms or competitors. All third-party processors are contractually bound to protect your data and are subject to security audits.
Rs 1 entry contests. Instant withdrawals. Skill-based fantasy cricket.
Common questions about Privacy Policy.
