Privacy
Policy.

01Who we are

Zinga Cricket is a platform operated by [REGISTERED ENTITY NAME] (“Zinga”, “Zinga Sportz”, “we”, “us”, “our”), a company incorporated in India with CIN [CIN] and registered office at [REGISTERED ADDRESS, BENGALURU, KARNATAKA, PIN].

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Zinga is the Data Fiduciary for the personal data described in this policy. You are the Data Principal.

02Scope of this policy

This policy applies to personal data we process when you:

• visit zingasportz.com or any Zinga subdomain;
• submit the Early Access, club registration, brand partnership or umpire application forms;
• create a player, club, venue-owner or umpire account on the Zinga app or platform;
• participate in a Zinga competition, league or match, or have your performance scored on the Zinga Umpire App;
• book, list or manage a battleground (venue) through Zinga;
• contact us by email, phone, WhatsApp or social media.

It does not apply to third-party websites, venues or services we link to. Those operate under their own privacy policies, and we encourage you to read them.

03Data we collect

We collect only what we need to run cricket. Broadly, that falls into six categories.

3.1  Data you give us directly

3.2  Match & performance data

Every ball bowled in a Zinga fixture is recorded. This includes runs, wickets, balls faced, economy, catches, strike rate, dismissal type, over-by-over commentary, match result, points, rankings and league standings, along with the fixture date, venue and officiating umpire.

3.3  Payment data

Ground bookings, league entry fees, subscriptions and umpire payouts are processed by regulated third-party payment gateways. We do not store your full card number, CVV or UPI PIN. We retain only the transaction ID, amount, timestamp, payment status and last four digits of the instrument, as required for accounting and dispute resolution.

3.4  Device & usage data

IP address, browser type and version, device model, operating system, app version, referring URL, pages viewed, session duration and crash logs. This is collected automatically to keep the service secure and working.

3.5  Location data

With your permission, approximate or precise location is used to show nearby battlegrounds, assign umpires efficiently and confirm match check-ins. You can withdraw this permission in your device settings at any time; the venue map will then fall back to manual area search.

3.6  Match media

Photographs, highlight clips and livestream footage captured at Zinga fixtures may include your image and voice. See Section 7 for how this is used and how to request removal.

04Why we use your data

We do not sell your personal data. Brand partners receive aggregated, anonymised audience insights — for example “1,400 players aged 22–30 across 18 Bengaluru grounds” — never your name, number or email, unless you have separately and explicitly opted in to hear from that partner.

05Consent & legitimate uses

Under the DPDP Act we process your personal data on one of two footings:

• Your consent. Given freely, specifically and unambiguously through a clear affirmative action — ticking a box, tapping “Allow”, or submitting a form after reading the notice. Consent covers optional processing such as marketing communications, precise location and the use of your match photos in promotional material.
• Certain legitimate uses. As permitted by Section 7 of the DPDP Act, including where you voluntarily provide data for a specified purpose, for compliance with law or a court order, and for responding to a medical emergency at a ground.

Withdrawing consent. You can withdraw consent at any time from Settings → Privacy in the app, or by writing to privacy@zingasportz.com. Withdrawal is as easy as giving consent, takes effect prospectively, and does not affect processing already carried out. Note that withdrawing consent for essential processing may mean we can no longer provide parts of the service — for example, we cannot register you for a league without your name and contact number.

Where we act as a Data Processor on behalf of a club or league organiser, that organiser is the Data Fiduciary for the data they instruct us to process, and their own notice will apply alongside this one.

06Who we share data with

We share personal data only with the following categories of recipients, and only to the extent necessary:

• Data Processors. Cloud hosting, database, email/SMS delivery, analytics, customer support and error-monitoring providers. Each is bound by a written contract requiring them to process data only on our instructions and to maintain reasonable security safeguards.
• Payment gateways. Regulated Indian payment processors, for the sole purpose of completing your transaction.
• Clubs, captains & league organisers. Your name, cricketing profile and match statistics are visible to the club you join and to the organisers of any competition you enter.
• Venue owners. The booking name, contact number and slot details for a ground you have booked.
• Umpires. Team sheets and player names for the fixture they are officiating.
• Professional advisers. Auditors, lawyers and insurers, under confidentiality obligations.
• Authorities. Law enforcement, courts or regulators where we are legally required to disclose, or where disclosure is necessary to protect the safety of a person.
• Corporate transactions. An acquirer or successor entity in a merger, acquisition or restructuring, with notice to you and continued protection under terms no less protective than this policy.

07Publicly visible data

Zinga is a competitive cricket platform, and some information is public by design. The following may be visible to other users, on public leaderboards, or in match reports and social posts:

• Your display name, profile photo, club affiliation and jersey number
• Your match statistics, career records, rankings and awards
• Scorecards and commentary for fixtures you played in
• Photographs and video footage captured at Zinga grounds and events

You can restrict your profile photo, use a display name that differs from your legal name, and control whether your profile appears in public search from Settings → Privacy. Match statistics for competitive fixtures remain part of the permanent league record and cannot be individually deleted while a season is live, because doing so would compromise the integrity of results other players depend on.

08How long we keep data

We erase personal data once the purpose for which it was collected is no longer being served and retention is not required by law.

If your account is inactive for 36 consecutive months, we will notify you at your registered contact and, absent a response, erase or de-identify the account data.

09How we protect data

We maintain reasonable security safeguards appropriate to the nature of the data, including:

• TLS encryption for all data in transit; encryption at rest for databases and backups
• Hashed and salted credentials — we never store passwords in readable form
• Role-based access control, with production data access restricted to named personnel on a need-to-know basis
• Multi-factor authentication on all internal administrative systems
• Audit logging of administrative actions on player, match and payout records
• Regular backups, tested restoration, and periodic security review of our stack
• Confidentiality obligations and privacy training for staff, umpires and contractors

No system is perfectly secure. You are responsible for keeping your password and OTPs confidential, and for notifying us immediately at security@zingasportz.com if you suspect unauthorised use of your account.

10Your rights

As a Data Principal under the DPDP Act, you have the right to:

• Access — obtain a summary of the personal data we process about you, the processing activities undertaken, and the identities of Data Fiduciaries and Processors with whom it has been shared.
• Correction & completion — have inaccurate or misleading data corrected, and incomplete data completed or updated.
• Erasure — have your personal data erased where it is no longer necessary for the purpose it was collected for, subject to our legal retention obligations and the integrity of live competition records.
• Grievance redressal — a readily available means of raising a complaint with us, before approaching the Data Protection Board of India.
• Nominate — appoint another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Withdraw consent — at any time, as described in Section 5.

How to exercise them. Use Settings → Privacy → Manage my data in the app, or email privacy@zingasportz.com from your registered email address. We respond within 30 days. We may ask you to verify your identity before acting on a request — this protects you from someone else altering or deleting your record.

Your duties. The DPDP Act also asks you to provide authentic information, not to impersonate another person, not to suppress material information when submitting documents, and not to file false or frivolous grievances.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

11Children & minors

Zinga's competitions are open to players aged 18 and above by default. Where a junior or school-category competition is offered to players under 18, we will process that child's personal data only after obtaining verifiable consent from a parent or lawful guardian, as required by Section 9 of the DPDP Act.

For any user we know to be a child, we will not:

• carry out processing likely to cause any detrimental effect on their wellbeing;
• undertake tracking or behavioural monitoring; or
• serve targeted advertising.

If you believe a child has registered without guardian consent, contact privacy@zingasportz.com and we will verify and remove the account promptly.

12Cookies & tracking

We use a small number of cookies and similar technologies:

• Strictly necessary — session management, login state, security tokens and load balancing. These cannot be switched off without breaking the site.
• Preference — remembering your city, preferred format and display settings.
• Analytics — privacy-respecting, aggregated measurement of page views and feature usage, used to improve the product. Set only with your consent.
• Marketing — measuring the effectiveness of Zinga campaigns. Set only with your consent, and never used to build profiles of children.

You can manage non-essential cookies through the consent banner or your browser settings. We honour browser-level “Global Privacy Control” signals where they are sent.

13International transfers

Zinga's primary infrastructure is hosted in India. Some of our Data Processors — for example email delivery, error monitoring and analytics providers — may process limited data on servers outside India. Where this happens, we transfer data only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and we contractually require the recipient to apply protections equivalent to those in this policy.

14Breach notification

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal without undue delay, in the form and manner prescribed under the DPDP Act and its rules. Our notice will describe the nature and extent of the breach, its likely consequences, the measures we have taken to mitigate it, and the steps you should take to protect yourself.

15Changes to this policy

We may update this policy as the platform grows or the law changes. The “last updated” date at the top of this page always reflects the current version. For material changes — a new purpose of processing, a new category of recipient, or a longer retention period — we will give you at least 14 days' notice by email or in-app notification before the change takes effect, and where the law requires it, we will seek fresh consent. Archived versions are available on request.

16Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, 2021, the following officer may be contacted for any complaint about the processing of your personal data or about content on the platform:

We acknowledge every grievance within 48 hours and aim to resolve it within 30 days. If you remain dissatisfied, you may lodge a complaint with the Data Protection Board of India.

For anything else, the fastest route to a human is our contact form.