Privacy Policy

This Privacy Policy explains how AIM Void Arena (“AIM”, “we”, “us”) processes personal data when you use our website, dashboard, admin tools, and related services (the “Service”). We design the Service for users in India. We process data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and rules thereunder, as they apply to our operations.

1. Who we are

AIM is a free-to-play skill-based competition platform. There is no paid coin purchase and no real-money betting on the Service. Contact: support@aim.local (support) · legal@aim.local (privacy/legal).

2. Data we collect

2.1 Account & profile

• Identifiers such as username, email, and authentication credentials.
• Optional profile fields you provide for prize delivery: full name, contact number, UPI ID, and shipping address.
• Role information (user / admin) for access control.

2.2 Competition activity

• Section entries, picks (players/teams per tournament mode), lock times.
• Scores, rankings, and published results related to your account.
• Notifications about wins, results, live sections, and admin messages.

2.3 Prize chat

• Messages in admin-started prize fulfillment threads (including address or payment details you voluntarily share when asked).
• Thread status (pending / open / closed) and window timings.

2.4 Technical & usage data

• Device/browser type, IP address, approximate location (country/region), logs.
• Cookies or similar technologies (see our Cookie Policy).
• Security and abuse-prevention signals.

2.5 What we do not collect as a core product

We do not operate paid wagering wallets, card checkout for bets, or purchase of in-app coins for money. Any courier reimbursement discussed in prize chat is fulfillment-related and administered by AIM staff—not a betting stake.

3. Why we process data (purposes & legal basis)

• Provide the Service — create accounts, run sections, validate picks, compute ranks, show results (contract / legitimate use to deliver the Service you request).
• Prize fulfillment — contact eligible winners, verify delivery details, ship or settle prizes (necessary to complete contests you enter).
• Safety & integrity — prevent fraud, multi-accounting abuse, cheating, and unauthorized admin access.
• Legal compliance — respond to lawful requests; keep records required under Indian law.
• Communications — service notices, result alerts, and (only if you opt in where required) product updates.

4. How we share data

We do not sell personal data. We may share data with:

• Infrastructure processors such as hosting (e.g. Google Cloud Run), database/auth/storage (e.g. Supabase), CDN/DNS/WAF (e.g. Cloudflare), and object storage (e.g. Cloudflare R2) under contracts.
• Logistics or payment partners solely to fulfill an eligible prize you won, limited to what is needed for delivery or settlement.
• Professional advisers or authorities when required by law or to establish/exercise legal claims.

5. Cross-border processing

Primary user experience and compute are aimed at India (including Cloud Run in asia-south1 where configured). Some processors may store or process data in other regions. Where required, we use appropriate safeguards and your continued use of the Service constitutes acknowledgment of such processing as disclosed here.

6. Retention

• Account & profile: while your account is active and for a reasonable period after deletion for legal/security needs.
• Competition records & rankings: for the life of the section history and as needed for dispute resolution.
• Prize chat & fulfillment: for the fulfillment cycle plus a retention window for audits/disputes (typically up to 36 months unless law requires longer).
• Server logs: shorter operational windows unless needed for security investigations.

7. Security

We use industry-standard controls appropriate to our stage: encrypted transport (HTTPS/TLS), access-controlled admin roles, database row-level security where enabled, and least-privilege secrets. No method is 100% secure; please use a strong password and do not share chat OTP or UPI PINs in-app.

8. Your rights

Subject to the DPDP Act and applicable rules, you may request access, correction, updating of profile/prize details, and deletion/erasure where applicable. You may withdraw consent for optional processing. To exercise rights, email legal@aim.local or support@aim.local. We may need to verify your identity. Some data must be retained for contests already completed or legal obligations.

9. Children

The Service is intended for users who can form a binding contract under Indian law (generally 18+). If you are under 18, use the Service only with verifiable parental/guardian involvement as required by law. We do not knowingly target children for prize fulfillment without appropriate consent.

10. Grievance / data complaints

For privacy complaints, contact our grievance channel at grievance@aim.local. We aim to acknowledge and address grievances within timelines required under applicable Indian intermediary / data protection rules.

11. Changes

We may update this Policy. Material changes will be posted on this page with a new “Last updated” date. Continued use after changes means you accept the updated Policy where permitted by law.