Privacy Policy
- We collect your name, your phone number or email, your Player ID and your game progress.
- We use them to run the campaign, tell you about the launch, and check reward eligibility, which includes matching you with BINGEBLITZ membership records.
- We send promotional offers only if you opt in. We never sell your data.
- You can see, correct or delete your data, or withdraw consent, by writing to [PRIVACY EMAIL].
1. Who we are
[ORGANISER LEGAL NAME] ("we", "us"), [REGISTERED ADDRESS], runs this campaign and the BINGEBLITZ brand. We decide how and why your personal data is used, which makes us the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act).
Grievance Officer / privacy contact: [NAME], [EMAIL], [PHONE], [ADDRESS].
2. What we collect and why
| Data | Why we use it | How long we keep it |
|---|---|---|
| Name | To address you and identify winners | Campaign retention (section 7) |
| Mobile number or email | Your entry, logging back in, campaign messages, preventing duplicate entries, eligibility matching | Campaign retention |
| Player ID | Linking your points to you and to your membership | Campaign retention |
| Game results (levels, scores, stars, times) | Points, shortlisting, tie-breaks, detecting cheating | Campaign retention |
| Consent records (what you agreed to, when, terms version, marketing choice) | Showing that we have your consent | Campaign retention, or longer if the law requires |
| Where you came from (e.g. an ad or link) and device type (mobile or desktop) | Understanding which channels work | Campaign retention |
| Technical logs (IP address, browser) kept by our hosting and security providers | Security, stopping abuse and attacks | Typically up to [30–90] days |
| Winners only: identity and age proof, PAN, delivery address | Verification, tax compliance, delivery | As long as tax and accounting laws require |
We do not collect your location, contacts, photos or payment details for this campaign.
3. Consent and legal basis
- We process your data based on the consent you give when you register. This notice is shown to you before you consent.
- Promotional messages need a separate, optional consent (the marketing tick box).
- Some processing is required by law, for example tax deduction and records for winners.
- You can withdraw consent at any time (section 8). Withdrawal does not affect processing done before it. Without the campaign consent we cannot keep your entry, so you would leave the campaign.
4. Matching with membership records
Rewards depend on becoming a BINGEBLITZ member within 10 days of launch. To check this, we compare your campaign phone number, email and Player ID with BINGEBLITZ membership records. We use the result only to decide eligibility and to contact winners. If you become a member, your account is also covered by the BINGEBLITZ privacy policy.
5. Who we share data with
We share data only with service providers who process it for us under contract, and only as needed:
- Hosting and database: [Supabase, data stored in the Mumbai (India) region].
- Website delivery and security: [Cloudflare].
- Messaging: [SMS provider], [WhatsApp Business provider], [email provider], to send the messages you agreed to.
- Reward delivery: [courier / fulfilment partner], winners only.
- Authorities: where the law requires, such as tax authorities.
We do not sell or rent your personal data. Some providers may process limited technical data outside India under appropriate safeguards and as permitted by Indian law.
6. Storage on your device
The website stores your Player ID, progress and preferences in your browser's local storage so the game remembers you. We do not use advertising cookies or cross-site tracking on this campaign site. [IF YOU ADD ANALYTICS, NAME THE TOOL HERE.] Clearing your browser data removes this local copy; your progress stays on our servers and comes back when you log back in.
7. How long we keep data
We keep campaign data until [6 MONTHS] after the winners are announced, then delete or anonymise it. The exceptions are records the law requires us to keep longer (such as tax records for winners), and data that becomes part of a BINGEBLITZ account if you become a member.
8. Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how it is used;
- ask us to correct, complete or update it;
- ask us to erase it, unless the law requires us to keep it;
- withdraw your consent;
- nominate someone to exercise these rights if you die or become incapacitated;
- raise a grievance with us, and if you're not satisfied, complain to the Data Protection Board of India.
Write to [PRIVACY EMAIL] from your registered email, or mention your registered mobile number and Player ID. We may verify your identity before acting. We aim to respond within [15] days.
9. Security
We use encrypted connections (HTTPS), restricted database access, and anti-abuse measures. The public website cannot read the database directly. No system is perfectly secure; if a personal data breach affects you, we will inform you and the authorities as required by law.
10. Children
The campaign is only for people aged 18 and above. If we learn that we have collected data from someone under 18, we will delete it.
11. Changes to this policy
We will post any change here with a new version and date, and tell participants about material changes before they apply.