Come Sports Privacy Policy: How We Collect, Use, and Protect Your Data

What data we collect

Come Sports collects the following data: (1) account data (mobile number, email, name), (2) KYC data (PAN, Aadhaar, address proof — only when required by regulation), (3) transaction data (deposits, withdrawals, contest entries, winnings), (4) usage data (app interactions, page views, device info), (5) location data (country/state — for regulatory compliance).

The data is collected at the signup step, the KYC step, the transaction step, and the app interaction step. Each collection point is clearly disclosed.

Sensitive data (PAN, Aadhaar, bank account details) is collected only when required by regulation, and the sensitive data is encrypted using AES-256 encryption.

How we use your data

Come Sports uses the data to: (1) provide the platform service (account management, contest entry, scoring, withdrawals), (2) verify identity (KYC compliance, age verification, fraud detection), (3) process payments (deposits, withdrawals, TDS), (4) improve the platform (analytics, A/B testing, feature development), (5) communicate with you.

The data is not used for: (1) third-party advertising, (2) data sale or rental, (3) any purpose not disclosed in this privacy policy.

Come Sports may use aggregated, anonymised data for industry research and platform improvement.

Who we share your data with

Come Sports shares data with: (1) payment gateways, (2) KYC verification services, (3) cloud hosting providers, (4) regulatory authorities, (5) customer support tools.

The data is shared under strict data processing agreements (DPAs) that require the third party to use the data only for the specified purpose.

Come Sports does not sell or rent player data to any third party.

How we protect your data

Come Sports protects data using: (1) AES-256 encryption for data at rest, (2) TLS 1.3 encryption for data in transit, (3) PCI-DSS Level 1 certified payment gateways, (4) ISO 27001 certified data centers, (5) two-factor authentication for account access.

The platform undergoes annual security audits by independent third-party security firms.

Come Sports maintains a 24/7 security operations centre (SOC) that monitors for suspicious activity.

Your data rights

You have the right to: (1) access your data, (2) correct your data, (3) delete your data, (4) restrict processing, (5) data portability, (6) object to processing.

To exercise your data rights, send an email to [email protected] with your request, and the request will be processed within 30 days.

Come Sports will not retaliate against any player for exercising their data rights.

Cookies and tracking

Come Sports uses cookies and similar tracking technologies to: (1) authenticate users, (2) remember preferences, (3) analyse site traffic, (4) deliver relevant content.

Come Sports does not use third-party advertising cookies, and the no-ad-cookies is the input that drives the player privacy.

You can control cookies through your browser settings.

Changes to this privacy policy

Come Sports may update this privacy policy from time to time, and the update will be communicated via email and in-app notification at least 30 days before the change takes effect.

Continued use of the platform after the 30-day notice period constitutes acceptance of the updated privacy policy.

If you do not agree with the updated privacy policy, you can close your account and request deletion of your data.