// Legal Suite · Document 3

Privacy Policy & Data Protection.

Prepared in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Information Technology Act, 2000, and IT Rules, 2021. Owned and operated by OS Digital Services, Odisha, India.

Data Fiduciary Notice: OS Digital Services, Odisha, India, is the Data Fiduciary and you are the Data Principal under the DPDP Act, 2023. We practice strict data minimization and process only the minimal personal data necessary to operate tournaments, fair-play validation, and subscriptions.

1. Scope & Strict 18+ Restriction

1.1 This Privacy Policy governs personal data processed by OS Digital Services in connection with BattleBeast. By registering on the platform, you provide free, specific, informed, and unambiguous consent under Section 6 of the DPDP Act.

1.2 Zero Processing of Children's Data: BattleBeast is strictly restricted to individuals aged 18 and older. We do not knowingly collect, track, or profile personal data belonging to minors.

2. Personal Data We Collect & Purpose

Category	Data Points	Source	Statutory Purpose
Account Identity	Mobile phone number, OTP verification status	You (via Firebase / SMS)	Authentication & duplicate account prevention
Platform IDs	user_uuid, Firebase UID, FCM push token	System generated	Match room alerts & account management
In-Game Profile	Free Fire In-Game Name (IGN) and Player ID	You	Custom room entry verification & leaderboards
Diagnostics	Device model, OS version, IP address, crash logs	Your device	Anti-cheat and hardware emulator detection
Ad Metrics	Google AdMob AdID, ad completion timestamp	Google AdMob	Verifying 2 rewarded ads for Match Entry Ticket
Payment Records	Order ID, transaction ID, payment status, GST invoice	Razorpay / Cashfree	Web VIP Club fulfillment & statutory accounting

3. Your Rights under the DPDP Act, 2023

As a Data Principal, you are entitled under Chapter III of the DPDP Act to:

Right to Access: Request a summary of the personal data processed by the Company and the identities of data processors involved.
Right to Correction & Erasure: Request the correction of misleading or inaccurate personal data, and the erasure of data no longer required for tournament operations or legal retention.
Right to Grievance Redressal: Submit a complaint directly to our Grievance Officer regarding any data processing concern.

Request Data Erasure or Account Deletion

Submit your request to our statutory officer. Deletions are processed within 30 days.

Email Grievance Officer →