Privacy Policy

GameOn is the Data Fiduciary, within the meaning of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), and the body corporate under the Information Technology Act, 2000, in respect of the personal data described in this Policy. Our particulars are as follows:

This Policy applies to:

This Policy does not apply to third-party websites, apps or services to which the Platform links, to personal data that a venue collects and keeps for its own purposes outside the Platform, or to information that has been irreversibly anonymised or aggregated so that it can no longer be linked to you.

We process personal data in accordance with the DPDP Act, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Consumer Protection (E-Commerce) Rules, 2020 and other applicable laws of India.

By using the Platform you agree to the processing of your personal data as described in this Policy. Where we rely on your consent, you may withdraw it at any time in the manner set out in section 12. If you do not agree with this Policy, please do not use the Platform.

Account and profile. Your name, mobile number, email address and password (stored only in irreversibly hashed form); and, if you choose to add them, your gender, date of birth, profile photograph and cover photograph. We also keep your own invite (referral) code and any invite code you used when you joined.

Signing in. We verify your mobile number with a one-time password (OTP) sent to you on WhatsApp. If you sign in with Google, we receive, through Google Firebase, your name, email address, profile photograph and Google account identifier. If you sign in with Apple, we receive your Apple identifier, your email address (which may be a private relay address chosen by you) and, the first time only, your name. We never receive your Google or Apple password.

Bookings. The venue, sport, date, time, court, number of players, price, discount or coupon applied, GameOn coins used or earned, how you paid, payment status and references, cancellations and their reasons, refunds, invoices, memberships, and your check-in at the venue when you scan its QR code.

Payments. Payments are processed by Razorpay, our payment gateway. When you enter card details on the GameOn payment screen, they are sent from your device directly to Razorpay and do not pass through or rest on GameOn’s servers. If you choose to save a card, Razorpay saves it in tokenised form; we keep only the reference Razorpay gives us for you as its customer, and we may show you the card network and last four digits that Razorpay returns. We also remember the payment method you last chose (UPI, card or net banking) so that the payment screen can start there. You can remove a saved card at any time from Account Settings → Payment methods.

Matches, friends, chat and communities. Matches you host or join and the players in them; friend requests, friendships and blocks; direct messages; messages in a match’s group chat; the communities you join and the posts, comments, polls, reactions and reports you make in them; reviews and ratings you give venues; and tournament registrations, including the team, captain and contact details you enter.

Details of other people. Some features ask you for another person’s details: when you split a booking with someone who is not on GameOn, their name and mobile number, so that we can send them a payment link; when you register a team for a tournament, the contact details of the team’s captain; and when you suggest a venue for GameOn, the name, mobile number and email address of its owner, and photographs of the venue. Please give us such details only where the person concerned has agreed to it.

Support and feedback. Messages you send to our support team, and the reason you give if you delete your account.

Your choices. Whether you have agreed to receive booking updates on WhatsApp (off until you turn it on), whether you want nearby match alerts, and whether you have rated the app, so that we do not ask again.

Company details. If you choose to book as a company, the company’s name, its GST number (if you give it), its billing address and the email address its bills should go to, together with the corporate plans it buys and the custom requests it sends to venues.

Location. With your permission, the app uses your device’s location to show venues near you, to sort venues by distance and to help you choose an address on the map. Where hosted matches are available and you have allowed location, the app also sends your approximate location to our servers while the app is open — not more than once every ten minutes — so that we can tell you about new matches near you. We keep only the most recent location. The app never reads your location in the background. If you switch off Nearby match alerts in the app, we delete the stored location and stop keeping it; you can also withdraw the location permission at any time in your device settings.

Camera and photographs. The camera is used only when you choose to scan a venue’s check-in QR code or to take a profile photograph. Photographs are read from your device only when you choose one to upload, and only the photographs you choose.

Notifications. If you allow notifications, we keep a notification token for each device on which you are signed in, issued by Google Firebase Cloud Messaging, so that we can send you booking, match, chat and account notifications.

UPI apps. To offer you UPI apps on the payment screen, the app checks which UPI payment apps are installed on your device. This list stays on your device and is not sent to us.

Technical information. Information generated when the app or website communicates with our servers, such as your IP address, the date and time of requests, the app version and the type of device, which we use to operate, secure and troubleshoot the Platform.

On your device. The app keeps your sign-in session in your device’s secure storage so that you stay signed in, and remembers the accounts that have signed in on the device (name, email address or mobile number, and photograph) so that you can sign back in quickly. You can remove a remembered account from the sign-in screen at any time, and deleting your account removes it too.

We use personal data only for the following purposes:

We do not sell personal data, and we do not use it to build advertising profiles. If we wish to use personal data for a purpose materially different from these, we shall first tell you and, where required by law, ask for your consent.

Service messages are part of using the Platform: booking confirmations, reminders, cancellations and refunds, one-time passwords, match and chat notifications, and account security alerts. We send them as app notifications, emails and messages within the app.

We send you one-time passwords on WhatsApp. We send booking updates on WhatsApp only after you have turned them on, and you can turn them off again at any time in the app.

We send promotional messages only with your consent. You may withdraw it at any time by using the opt-out option in the message or by writing to support@gameon-india.com. We comply with the Telecom Commercial Communications Customer Preference Regulations, 2018.

Venues. When you book a venue, we share with the venue your name, mobile number, email address, the booking’s details and your past bookings at that venue, so that it can host you. Venues are bound to use this information only for your bookings. If you book as a company, the venue also sees the company’s name, GST number and billing address on its bookings, plans and requests, so that the venue can invoice the company; the company’s billing email is not shared with the venue.

Other players and users. When you host or join a match, the other players in it can see your name and profile photograph, open your profile and message you; messages in a match’s group chat are seen by everyone in that match. Your mobile number is not shown to other players. Your friends can see your profile, and anyone using the Platform can see the posts and comments you make in communities and the reviews you give venues, together with your name and profile photograph.

People you split a booking with. The person who split a booking can see the name and mobile number they entered for each person paying a share, and whether each share has been paid.

Service providers. We share personal data, only as far as each needs it, with providers who act on our behalf under written obligations of confidentiality and data protection:

Others. We may also disclose personal data to government, regulatory or law-enforcement authorities where required by law or a lawful order; to a successor entity in a merger, acquisition or reorganisation, which must continue to honour this Policy; and to anyone else with your consent.

We do not share personal data with advertising networks.

Some people book a slot at a venue on the Platform without using GameOn — at the venue’s counter, by telephone, or through another booking service. When the venue records such a booking in the GameOn Partner app, or blocks a slot for it, the venue gives us the customer’s name and mobile number, together with the sport, date and time, court, number of players, amount and mode of payment (where the venue enters them), the venue, and which member of the venue’s staff recorded it.

GameOn holds these details as Data Fiduciary and uses them only:

The venue that recorded these details can see them through the Platform — only the visits at its own venues, never those another venue recorded — so that it can keep track of its customers and what it earned. Venues are bound to use them only for that and for your bookings with them. Within GameOn, only our authorised administrators can see them.

We do not send promotional messages on the basis of these details unless you have given us your consent.

We ask venues to tell their customers that their details are being given to GameOn and to direct them to this Policy. You have the rights described in section 12 in respect of these details, including the right to have them erased; please write to support@gameon-india.com with the mobile number you gave the venue, or ask the venue that recorded them, which can erase its own record of you.

If you have a GameOn account, the venue may instead record the booking against your account, in which case it appears in your bookings like any other.

Our database, which holds the personal data described in this Policy, is hosted in India. Our servers and database are operated for us by cloud hosting providers.

Some of our service providers, such as those providing sign-in, notifications, photograph storage, email and messaging, may process personal data on servers outside India. Where this happens, we ensure that the transfer is necessary to provide the service, that the provider is bound by written obligations giving protection no lower than that required by Indian law, and that the transfer is not made to any country restricted under Section 16 of the DPDP Act.

We keep personal data only for as long as it is needed for the purposes for which it was collected, or as long as the law requires:

When the applicable period ends, we delete the personal data or irreversibly anonymise it, unless we must keep it longer because of a legal hold, an ongoing dispute or a direction from a competent authority.

We use reasonable security practices and procedures, including encryption of all data in transit, hashing of passwords, role-based access controls, verification of every session with our servers, and limiting internal access to personnel who need it. Card details are handled by Razorpay and never stored by GameOn.

No method of transmission or storage is completely secure. Please help us by keeping your sign-in details confidential and telling us promptly if you suspect that your account has been compromised.

In the event of a personal data breach, we shall inform the Data Protection Board of India and the persons affected, in the manner and within the time prescribed under the DPDP Act.

Subject to the DPDP Act and other applicable law, you are entitled, free of charge, to:

Requests may be made by writing to support@gameon-india.com. We may ask for information to verify your identity before acting on a request, and we shall respond within the period prescribed by law.

You can delete your account at any time:

Deletion takes effect immediately and cannot be undone. Your profile, sign-in details, preferences, stored location and notification tokens are deleted, and if you signed in with Apple we also ask Apple to revoke GameOn’s access. Any GameOn coins in your account are lost.

Deleting your account does not cancel your upcoming bookings. Please cancel them first if you do not intend to attend, so that any refund due can be made under the venue’s cancellation policy.

After deletion we keep:

The Platform is intended for persons aged eighteen (18) and above. A person under eighteen may use it only through an account held by a parent or legal guardian, who is responsible for that use. We do not knowingly collect personal data directly from children, and we do not track or target advertising at them. If you believe a child has given us personal data, please write to support@gameon-india.com and we shall delete it.

Any concern or complaint about the processing of personal data may be addressed to our Grievance Officer:

The Grievance Officer shall acknowledge a complaint within forty-eight (48) hours and shall endeavour to resolve it within fifteen (15) days of receipt, or within such other period as the law prescribes. If you remain dissatisfied, you may approach the Data Protection Board of India.

The website uses only the cookies and browser storage needed for it to work, such as those that keep you signed in and remember your city. It does not use analytics or advertising cookies, retargeting pixels or cross-site tracking. Services that the website uses for a particular function, such as Razorpay’s payment window or a map, may set their own cookies under their own policies.

We may revise this Policy to reflect changes in the Platform, our practices or the law. The revised Policy will be available in the app and on the website with its effective date. Where a change is material — such as a new kind of personal data, a new purpose or a new kind of recipient — we shall tell you in advance by a notice in the app or by email and, where the law requires, ask for your consent again.

This Policy is governed by the laws of India. Subject to section 15, the courts at Ghaziabad, Uttar Pradesh, India shall have exclusive jurisdiction over any dispute arising under it, without prejudice to any rights you have under consumer protection law.