Privacy Policy

This Privacy Policy describes how CLUTCHDIN ("we", "us", "our") collects, uses, stores, and shares your information when you use our BGMI scrim management platform at clutchdin.in (the "Service").

By creating an account or using the Service, you agree to this policy. If you do not agree, please do not use CLUTCHDIN.

This Privacy Policy should be read together with our Terms of Service, Refund Policy, Cancellation Policy, and Contact Information.

1. Information We Collect

We collect the following categories of information:

• Account information: email address, in-game name (IGN), and BGMI Game UID.
• Optional profile information: mobile number, Discord, YouTube, Facebook, and Instagram handles if you choose to add them.
• Booking and squad data: matches you book, players you add, squads you create or join, and match history.
• Payment information: subscription plan, order ID, transaction ID, and payment status. Card, UPI, net banking, wallet, or other payment instrument details are entered directly on our payment partner's secure checkout and are not stored by CLUTCHDIN.
• Support and moderation data: bug reports, complaints, suggestions, and squad-related requests you submit through the platform.
• Technical data: IP address, browser type, and basic device information, collected automatically by our hosting, authentication, and payment providers.

2. How We Use Your Information

• To create and manage your account and provide the Service.
• To process match bookings, squad memberships, and daily booking limits.
• To process subscription payments securely through our payment partner.
• To process refund and cancellation requests in accordance with our Refund Policy and Cancellation Policy.
• To send you notifications about your bookings, squads, and account.
• To respond to support requests, complaints, and grievances.
• To detect and prevent abuse, fraud, and rule violations.
• To comply with legal obligations under applicable Indian laws.

3. Third-Party Services

CLUTCHDIN relies on the following third-party providers:

• Google Firebase — authentication, database (Firestore), and file storage. Your account data is stored on Firebase servers.
• Payment partner — an RBI-licensed payment aggregator processes our subscription payments. The payment partner handles your payment details under its own privacy policy and terms. CLUTCHDIN does not store your card, UPI, or banking credentials.
• Google AdSense — advertising. When approved and enabled, AdSense may use cookies and similar technologies to display relevant ads.
• Vercel — hosting for our serverless payment and validation APIs.

Each provider processes data under its own terms and privacy policy.

4. Data Retention

We retain your account and gameplay data for as long as your account is active. If you request account deletion, we remove your profile and related data within a reasonable period, except where retention is required for legal, tax, or fraud-prevention purposes.

Transaction records: In accordance with applicable Indian financial and tax regulations, records of payment transactions — including order IDs, payment IDs, amounts, and subscription history — are retained for a minimum of 10 (ten) years from the date of the transaction, even after account deletion. This retention is required under the Payment Aggregator Guidelines and the Income Tax Act, 1961, and is not subject to early deletion requests.

5. Your Rights

You may, at any time:

• View and edit your profile information through the Profile page.
• Request deletion of your account via Settings → Request Account Deletion.
• Change your notification preferences in Settings.
• Cancel your subscription at any time (see Cancellation Policy and Refund Policy).
• Contact us to request a copy of your data or to correct inaccurate information.

6. Security

We use industry-standard practices including encrypted connections (HTTPS), Firebase Authentication, and Firestore security rules to protect your data. All payment processing is handled by PCI-DSS compliant payment partners. CLUTCHDIN does not store, process, or transmit card data on its own servers. However, no online service is completely secure. You are responsible for keeping your password confidential.

Data breach notification: If we become aware of any actual or suspected data security breach, unauthorized access, loss, or compromise of user data in our systems, we will (i) investigate and remediate the incident promptly, (ii) notify the affected users without undue delay, and (iii) notify our payment partner within 24 (twenty-four) hours of detection, as required by applicable law and payment aggregator guidelines. We will cooperate fully with any regulatory or payment partner investigation into the incident.

7. Children

CLUTCHDIN is intended for users aged 13 and above. If you are under 18, you should have permission from a parent or legal guardian before using the Service. If we learn that we have collected data from a child under 13, we will delete it promptly.

8. Cookies and Local Storage

We use browser local storage to keep you logged in. AdSense (once enabled) may set its own cookies for advertising purposes. Our payment partner may set cookies during the checkout process to prevent fraud and complete your transaction. You can manage cookies through your browser settings.

9. Grievance Redressal

In accordance with applicable Indian laws, including the Information Technology Rules, 2021 and the Promotion and Regulation of Online Gaming Rules, 2026, we have appointed a Grievance Officer to address any privacy-related concerns or complaints. The Grievance Officer's name and contact details are published on our Contact page.

All customer complaints and queries — including those related to privacy, payments, refunds, and account issues — are acknowledged within 48 hours and resolved within 4 business days (D+4) of receipt, in line with the timelines required by our payment partner guidelines and applicable regulations.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the Service. Continued use after an update means you accept the revised policy.