Privacy Policy

Playexchange (“we”, “us”, “our”, or “Company”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our website, mobile application, and all services provided (collectively, “Services”).

This Privacy Policy applies to all visitors and users of Playexchange. Please read this policy carefully. If you do not agree with our privacy practices, please do not use our Services.

GDPR Compliance: We comply with the General Data Protection Regulation (GDPR) and treat all personal data with appropriate security and confidentiality.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Registration Information:

• Full name
• Email address
• Phone number
• Date of birth
• Residential address
• Gender (optional)
• Username and password

Identity and Verification Information:

• Government-issued ID (Aadhar, PAN, Passport, Voter ID)
• Photographs of ID documents
• Proof of address (electricity bill, water bill, rent agreement)
• Bank account details (for deposits/withdrawals)
• Income source documentation (if requested)

Payment Information:

• Bank account numbers
• UPI IDs
• Cryptocurrency wallet addresses
• Transaction history
• Payment method preferences

Communication Information:

• Messages you send to our support team
• Complaints and disputes
• Feedback and suggestions
• Survey responses
• Chat logs and support conversations

Additional Information You Provide:

• Profile picture
• Biographical information
• Gaming preferences
• Betting history (inherent to platform use)

2.2 Information Collected Automatically

Device Information:

• Device type and model
• Operating system and version
• Device ID
• Mobile advertising ID
• Device manufacturer
• Screen resolution

Usage Information:

• Pages/sections accessed
• Time spent on platform
• Features used
• Betting patterns
• Gaming preferences
• Search queries
• Clicks and interactions

Location Information:

• IP address
• Country and region
• City (approximate)
• GPS location (with permission)

Cookies and Tracking Technologies:

• Session cookies
• Persistent cookies
• Web beacons
• Pixels
• Local storage data
• Analytics trackers

Browser Information:

• Browser type and version
• Referrer URL
• Pages visited
• Time of visit
• Language preferences

2.3 Information from Third Parties

Payment Processors:

• Transaction confirmation
• Fraud detection flags
• Payment status

Identity Verification Services:

• Verification results
• Age confirmation
• Address confirmation
• PEP (Politically Exposed Person) screening results

Banking Partners:

• Account verification status
• Transaction status
• KYC verification results

Law Enforcement:

• Request for account information
• Investigation details (as legally required)

Other Users:

• Reports about your account
• Complaint information

3. HOW WE USE YOUR INFORMATION

3.1 Service Delivery

We use your personal data to:

• Create and maintain your account
• Process deposits and withdrawals
• Settle bets and process payouts
• Verify your identity (KYC compliance)
• Authenticate your login attempts
• Provide customer support
• Fulfill your requests and queries
• Deliver personalized gaming experience

3.2 Security and Fraud Prevention

We use your data to:

• Detect and prevent fraud
• Monitor for suspicious activity
• Implement security measures
• Verify account ownership
• Prevent unauthorized access
• Identify collusion and cheating
• Protect platform integrity

3.3 Legal Compliance

We use your data to:

• Comply with Indian laws and regulations
• Respond to legal requests
• File tax reports
• Maintain records for audits
• Prevent money laundering
• Verify age (18+ requirement)
• Screen against sanctions lists

3.4 Marketing and Communications

We use your data to:

• Send promotional offers (with your consent)
• Notify you about new features
• Inform about account status changes
• Send newsletters and updates
• Conduct surveys and research
• Personalize your experience

3.5 Analytics and Improvement

We use your data to:

• Analyze user behavior
• Improve platform functionality
• Optimize user experience
• Conduct research and testing
• Generate statistical reports
• Identify usage trends
• Enhance security features

3.6 Problem Gambling Prevention

We use your data to:

• Monitor gaming patterns for signs of problem gambling
• Trigger intervention prompts if concerning patterns detected
• Enforce self-exclusion orders
• Implement responsible gaming features
• Provide referrals to support organizations

4. LEGAL BASIS FOR DATA PROCESSING

Under GDPR, we process your personal data based on:

4.1 Contractual Necessity

• Data required to fulfill our services to you
• Examples: Account details, payment information

4.2 Legal Obligation

• Data required by Indian law
• Examples: Tax documentation, KYC compliance, identity verification

4.3 Legitimate Interest

• Data necessary for fraud prevention, security
• Data for service improvement
• Examples: IP addresses, device information, usage analytics

4.4 Consent

• You explicitly agree to specific data uses
• Consent is freely given, specific, informed, and unambiguous
• You can withdraw consent anytime

4.5 Vital Interest

• Data necessary to protect life and health
• Examples: Age verification (preventing underage use)

5. DATA SHARING AND DISCLOSURE

5.1 Third-Party Service Providers

We share your data with:

Payment Processors:

• Bank details for transaction processing
• Transaction amounts and dates
• Merchant information

Identity Verification Services:

• Government ID information
• Address proof
• Name and date of birth
• Verification status only (not personal details)

Tax and Compliance Authorities:

• Name and PAN for large transactions
• Winning amounts
• Tax-related information
• As legally required

Cloud Storage Providers:

• Encrypted account data
• Transaction history
• Game records
• Under strict data processing agreements

5.2 Legal Requirements

We may disclose your information if required by:

• Court orders or subpoenas
• Law enforcement requests
• Government agencies
• Regulatory authorities
• Legal proceedings

5.3 Business Transfers

If Playexchange is acquired, merged, or sold:

• Your personal data may be transferred
• You will be notified of any such change
• You have the option to object

5.4 What We DO NOT Do

We do NOT:

• Sell your personal data to third parties for marketing
• Share your email with spammers
• Sell your phone number to telemarketers
• Provide betting patterns to other gambling sites
• Share financial information with unrelated businesses
• Share data without legal basis

6. DATA RETENTION

6.1 Retention Periods

Account Information:

• Retained for duration of account + 7 years
• Longer if legally required (tax compliance, legal holds)

Transaction Records:

• Retained for 7 years (tax requirements)
• Then securely deleted

Identity Documents:

• Retained for duration of account + 5 years
• Then securely deleted

Communications:

• Support tickets: 3 years
• Emails: 2 years
• Chat logs: 1 year

Analytics Data:

• Aggregated and anonymized: 2 years
• Individual tracking: 1 year

Cookies:

• Session cookies: Deleted when you logout
• Persistent cookies: 1-3 years
• You can delete anytime

6.2 Data Deletion

Upon account closure:

• Personal data deleted within 30 days (except as legally required)
• Transaction records retained per legal requirements
• You can request additional data deletion
• We retain what’s necessary for legal/tax compliance

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 What Are Cookies?

Cookies are small files stored on your device that contain information about us your interactions with our Platform.

7.2 Types of Cookies We Use

Essential Cookies:

• Login authentication
• Session management
• Security and fraud prevention
• Cannot be disabled

Analytical Cookies:

• Google Analytics
• User behavior tracking
• Platform performance monitoring
• Help us improve services

Marketing Cookies:

• Retargeting ads
• Personalized offers
• Conversion tracking
• Third-party ad networks

Preference Cookies:

• Language preferences
• Theme preferences
• Account settings
• Remember your choices

7.3 Third-Party Cookies

Third parties that set cookies on our Platform:

• Google Analytics (analytics)
• Facebook Pixel (marketing)
• Advertising networks
• Payment processors

7.4 Cookie Management

How to Control Cookies:

• Browser settings allow you to accept/reject cookies
• Clear cookies from your browser anytime
• Use private/incognito browsing to avoid cookies
• Note: Disabling essential cookies may impact functionality

Cookie Settings: Playexchange provides a cookie consent banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Customize cookie preferences
• Manage cookie settings

8. YOUR DATA RIGHTS

8.1 GDPR Rights

Under GDPR, you have the right to:

Right to Access:

• Request a copy of your personal data
• Know what data we have about you
• Request format: Email to [email protected]
• Response time: Within 30 days

Right to Rectification:

• Correct inaccurate personal data
• Ensure your data is complete
• Update information anytime in account settings

Right to Erasure (“Right to be Forgotten”):

• Request deletion of your data
• Applies if data no longer needed
• Exceptions: Legal/tax obligations, fraud prevention
• Response time: Within 30 days

Right to Restrict Processing:

• Request limitation of how data is used
• Data retained but not actively processed
• Applies during disputes

Right to Data Portability:

• Request data in machine-readable format
• Transfer data to another service
• Format: CSV or JSON
• Response time: Within 30 days

Right to Object:

• Object to marketing communications
• Object to certain data processing
• Unsubscribe from emails anytime
• Use the unsubscribe link in emails

Right to Lodge a Complaint:

• File complaint with GDPR authority
• Contact: Local data protection authority
• Playexchange will cooperate with investigation

8.2 How to Exercise Your Rights

Submit Request:

• Email: [email protected]
• WhatsApp: https://walink.ai/whatsappseo
• Subject: “Data Privacy Request – [Your Request Type]”
• Include: Your name, account ID, specific request
• Provide proof of identity if needed

Verification:

• We may verify your identity for security
• Use government ID for large requests
• Verification typically takes 2-5 days

Response:

• We respond within 30 days
• May request extension for complex requests (60 days total)
• Response method: Email or post (your preference)

9. INTERNATIONAL DATA TRANSFERS

9.1 Data Location

Primary Storage:

• Data primarily stored on servers in India
• Cloud storage may be used (within India or GDPR-compliant servers)
• Backup servers may be outside India

9.2 GDPR-Compliant Transfers

If data is transferred outside EU/EEA:

• Standard Contractual Clauses (SCCs) are used
• Data Processing Agreements in place
• Equivalent protection level ensured
• You have rights to object

9.3 Your Consent

By using Playexchange, you consent to:

• Data processing in India
• Potential international transfers
• Data protection as per this policy

10. CHILDREN’S PRIVACY

10.1 Age Restriction

Playexchange is NOT intended for anyone under 18 years old:

• We do not knowingly collect data from minors
• Registration requires confirmation of 18+ age
• Age verification is mandatory
• False age information results in account termination

10.2 Parental Controls

Parents/guardians concerned about child’s use:

• Contact us immediately
• Provide proof of guardianship
• We will terminate the minor’s account
• Funds will be held pending parent claim

10.3 Accidental Collection

If we discover we’ve collected data from a minor:

• We will delete the data immediately
• Parent will be notified
• Account will be terminated
• Funds will be returned

11. SECURITY MEASURES

11.1 Data Protection

We implement multiple security measures:

Encryption:

• AES-256 encryption for stored data
• SSL/TLS encryption for data in transit
• End-to-end encryption for sensitive communications

Access Controls:

• Role-based access restrictions
• Multi-factor authentication
• Regular access audits
• Principle of least privilege

Security Infrastructure:

• Firewalls and intrusion detection
• DDoS protection
• Regular security patches
• Vulnerability assessments
• Penetration testing

Employee Security:

• Background checks for all staff
• Confidentiality agreements
• Security training
• Limited data access
• Audit trails for all access

11.2 No Absolute Security

While we implement robust security:

• No system is 100% secure
• Breaches are possible despite precautions
• We’re not liable for unauthorized third-party access
• You’re responsible for password security

11.3 Data Breach Notification

If a data breach occurs:

• We notify you within 48-72 hours
• Notification via email or phone
• Explanation of breach details
• Information on steps we’re taking
• Recommendations for you

12. THIRD-PARTY LINKS AND SERVICES

12.1 External Links

Playexchange may contain links to third-party websites:

• We are not responsible for third-party privacy policies
• Each site has its own privacy practices
• Read their privacy policies before sharing data
• Third parties are not our responsibility

12.2 Third-Party Integrations

Social Media Integration:

• Login via Facebook/Google (if available)
• Sharing buttons to social networks
• Third parties handle their own data
• We only receive basic profile information (name, email)
• Disable via social media privacy settings

12.3 Analytics Services

Google Analytics:

• Tracks user behavior on our platform
• Google processes data separately
• We do not control Google’s practices
• Opt-out: Google Analytics opt-out extension

13. MARKETING COMMUNICATIONS

13.1 Email Marketing

What We Send:

• Promotional offers
• New feature announcements
• Account notifications
• Weekly/monthly newsletters
• Personalized game recommendations

Your Preferences:

• Opt-in to marketing emails
• Adjust frequency in account settings
• Unsubscribe links in every email
• Unsubscribe via account preferences

Frequency:

• Maximum 3-4 promotional emails per week
• Can be reduced in settings
• Transactional emails not subject to limits

13.2 SMS and Push Notifications

Notifications:

• Important account alerts
• Bet settlements
• Deposit/withdrawal confirmations
• Promotional offers
• Event reminders

Control:

• Enable/disable in app settings
• Opt-out via SMS reply
• Adjust notification frequency
• Unsubscribe from specific types

13.3 Unsubscribe

To unsubscribe from communications:

• Click “Unsubscribe” in emails
• Disable notifications in app settings
• Email: [email protected]
• WhatsApp: https://walink.ai/whatsappseo

14. RESPONSIBLE GAMING DATA

14.1 Betting Pattern Monitoring

We monitor data to:

• Identify problem gambling signs
• Track increasing bet amounts
• Monitor loss patterns
• Track session duration
• Flag risky behavior

14.2 Intervention Measures

If problem gambling detected:

• We send reality check messages
• Prompt you to set loss limits
• Recommend cooling-off periods
• Provide helpline information
• Support self-exclusion requests

14.3 Self-Exclusion

Self-exclusion data:

• Recorded for enforcement
• Shared with other platforms (shared list)
• Prevents account reactivation
• Retained per legal requirements
• Can request removal after exclusion period

15. REGULATORY COMPLIANCE

15.1 Indian Laws

We comply with:

• Information Technology Act, 2000
• Rules under IT Act (Data Protection Rules)
• Prevention of Money Laundering Act
• RBI guidelines
• Tax laws

15.2 GDPR Compliance

For EU users:

• GDPR-compliant data processing
• Standard Contractual Clauses for transfers
• Data Protection Officer available
• Lawful basis for all processing
• Full GDPR rights honored

15.3 Updates to Policy

We may update this policy:

• Changes posted on website
• Material changes notified via email
• Continued use implies acceptance
• Review policy periodically
• Last updated: June 4, 2026

16. DATA PROCESSING AGREEMENT

16.1 DPA

For business customers or partners:

• Data Processing Agreement available
• Details processor obligations
• Specifies data protection measures
• Ensures GDPR compliance
• Request via: [email protected]

17. CALIFORNIA CONSUMER PRIVACY ACT (CCPA)

17.1 CCPA Rights

If you’re a California resident:

• Right to know what data we have
• Right to deletion (with exceptions)
• Right to opt-out of data sales
• Right to non-discrimination
• Note: We don’t sell personal data

18. CONTACT INFORMATION

18.1 Privacy Inquiries

For questions about this policy:

• Email: [email protected]
• Address: Playexchange Customer Support, India
• WhatsApp: https://walink.ai/whatsappseo
• Response Time: Within 7-10 business days

18.2 Data Protection Officer

Our Data Protection Officer:

• Oversees data protection compliance
• Handles privacy complaints
• Responds to data access requests
• Email: [email protected]

18.3 Data Subject Requests

To exercise data rights:

• Submit formal request to: [email protected]
• Include: Full name, email, account ID
• Specify: Request type (access, deletion, portability, etc.)
• We respond within 30 days

19. ACKNOWLEDGMENT

By using Playexchange, you acknowledge:

• You have read this Privacy Policy
• You understand how we use your data
• You accept our data practices
• You grant consent to data processing
• You can withdraw consent anytime