Privacy Policy

This Privacy Policy applies to the Codreddy fantasy cricket platform operated by YARUNARA TECHNOLOGIES PRIVATE LIMITED, accessible at Codreddy.com. This policy governs all personal information collected through our website, mobile applications (if applicable), and related services.

We respect your privacy rights and recognize the importance of protecting the personal information you provide to us. This policy is designed to help you understand:

• What personal information we collect and why we collect it
• How we use, store, and protect your information
• When and with whom we share your information
• Your rights regarding your personal data
• How to contact us about privacy concerns

By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use our platform.

We use the information we collect for various purposes to provide, maintain, and improve our services:

3.1 Provide and Manage Services

• Create and maintain your user account
• Process your fantasy team selections and contest entries
• Calculate scores and update leaderboards in real-time
• Display personalized content and recommendations
• Provide customer support and respond to inquiries
• Send transactional emails and important notifications

3.2 Ensure Compliance and Security

• Verify your age (18+ requirement) during registration
• Enforce geographical restrictions for prohibited states (Andhra Pradesh, Assam, Nagaland, Odisha, Sikkim, Telangana)
• Detect and prevent fraudulent activity, cheating, or platform abuse
• Identify and prevent multiple account creation by the same user
• Protect against security threats and unauthorized access attempts
• Comply with legal obligations and regulatory requirements

3.3 Improve and Develop Our Platform

• Analyze usage patterns to understand user behavior and preferences
• Identify and fix technical issues, bugs, and performance problems
• Develop new features and enhance existing functionality
• Conduct research and testing to improve user experience
• Optimize platform performance, loading times, and responsiveness

3.4 Communicate with You

• Send important updates about our services, policies, and terms
• Provide educational content about fantasy cricket strategies and tips
• Respond to your questions, feedback, and support requests
• Notify you about platform maintenance or service interruptions
• Share information about new features, improvements, or contests

3.5 Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations under the Terms and Conditions
• Legitimate Interests: To improve services, prevent fraud, and ensure platform security
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Consent: Where you have explicitly consented to specific data processing activities

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information only in the following limited circumstances:

4.1 Public Information on Platform

Certain information is publicly visible as part of the platform's core functionality:

• Your display name or username on leaderboards
• Your scores and rankings in contests
• Team names you create (in public contests)

Please be mindful of the information you choose to display publicly, as it may be viewed by other users.

4.2 Service Providers and Partners

We may share your information with trusted third-party service providers who assist in operating our platform:

• Cloud hosting and infrastructure providers (for data storage and processing)
• Database and data storage services
• Email delivery and communication services
• Analytics and performance monitoring tools
• Security and fraud prevention services
• Customer support platforms

These service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection laws.

4.3 Legal Requirements and Protection

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (court orders, subpoenas, search warrants)
• Government or regulatory authority requests
• Law enforcement investigations or inquiries
• Protection of our legal rights, property, or safety
• Prevention of fraud, security threats, or illegal activity
• Protection of user safety or public interest

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our platform of any such change and provide information about your choices regarding your data.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot be used to identify you individually:

• Overall platform usage statistics and trends
• Demographic insights and user behavior patterns
• Popular player selections and team strategies
• Industry research and benchmarking data

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols
• Password Protection: User passwords are hashed using strong cryptographic algorithms (bcrypt) and never stored in plain text
• Secure Infrastructure: Our servers and databases are hosted in secure, monitored data centers with restricted physical access
• Firewalls: Network firewalls protect against unauthorized access and cyber attacks
• Regular Updates: We keep our software, frameworks, and security systems up to date with the latest patches
• Access Controls: Multi-factor authentication and role-based access controls for administrative functions

5.2 Organizational Safeguards

• Limited Access: Only authorized personnel have access to personal information, limited to what is necessary for their role
• Employee Training: Our team members receive training on data protection and privacy best practices
• Confidentiality Agreements: Employees and contractors sign confidentiality and non-disclosure agreements
• Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans
• Incident Response: We have procedures in place to detect, respond to, and recover from security incidents

5.3 Your Responsibility

While we implement strong security measures, you also play an important role in protecting your account:

• Choose a strong, unique password (at least 8 characters with mixed case, numbers, and symbols)
• Do not share your password with anyone or use the same password across multiple sites
• Log out of your account when using shared or public devices
• Keep your email account secure, as it can be used for password resets
• Report any suspicious activity or unauthorized access immediately to [email protected]
• Be cautious of phishing attempts and verify the authenticity of emails claiming to be from Codreddy

5.4 Limitations and Acknowledgment

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially acceptable means, we cannot guarantee absolute security. You acknowledge and accept this inherent risk when using our platform and transmitting information online.

6.1 Retention Period

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Active Accounts: Information is retained while your account is active and you continue to use our services
• Inactive Accounts: If you do not log in for an extended period (typically 3 years), we may delete or anonymize your account data after providing notice
• Legal Requirements: Some information may be retained longer to comply with legal, tax, accounting, or regulatory obligations
• Dispute Resolution: Information related to disputes, investigations, or legal proceedings may be retained until the matter is fully resolved
• Backup Systems: Information may remain in backup systems for a limited period before being permanently deleted

6.2 Account Deletion

You may request deletion of your account at any time by contacting us at [email protected]. Upon receiving your request, we will:

• Verify your identity to ensure the security of your account
• Deactivate your account within 48 hours of verification
• Delete or anonymize your personal information within 30 days
• Retain certain information if required by law or for legitimate business purposes
• Provide confirmation once the deletion process is complete

Please note that some information may remain in backup systems for a limited period before being permanently deleted. Once deleted, your account cannot be recovered.

6.3 Information We May Retain After Deletion

Even after account deletion, we may retain certain information in anonymized or aggregated form, or as required for:

• Compliance with legal, tax, and regulatory obligations
• Resolution of disputes or enforcement of our agreements
• Prevention of fraud, abuse, and security threats
• Internal analytics and research (in anonymized, non-identifiable form)
• Backup and disaster recovery purposes (for a limited time)

You have certain rights regarding your personal information. Depending on your location and applicable laws, these rights may include:

7.1 Access and Portability

You have the right to:

• Request a copy of the personal information we hold about you
• Receive your data in a structured, commonly used, machine-readable format (such as CSV or JSON)
• Request transmission of your data to another service provider (where technically feasible)
• Access information about how your data is being processed

7.2 Correction and Update

You have the right to:

• Update or correct inaccurate or incomplete personal information
• Access your account settings to modify your profile information directly
• Request our assistance in updating information you cannot change yourself
• Ensure your information remains accurate and up to date

7.3 Deletion and Erasure

You have the right to:

• Request deletion of your personal information ("right to be forgotten")
• Have your account permanently closed and data removed
• Request erasure of specific data (subject to legal retention requirements)
• Withdraw consent for data processing where consent was the legal basis

7.4 Objection and Restriction

You have the right to:

• Object to certain processing of your personal information
• Request restriction of processing in certain circumstances
• Opt out of marketing communications (while still receiving essential transactional emails)
• Object to automated decision-making or profiling

7.5 Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

7.6 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will respond to your request within 30 days. We may need to verify your identity before processing your request to ensure the security of your personal information.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Codreddy is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

During registration, we require users to provide their date of birth to verify that they meet our minimum age requirement of 18 years. If we discover that we have inadvertently collected information from a person under 18, we will:

• Immediately delete the account and all associated information
• Prevent future access to our platform from that account
• Take steps to prevent similar occurrences in the future
• Notify the individual (if contact information is available)

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us immediately at [email protected] with the subject line "Underage Account" so we can take appropriate action.

We take the protection of children's privacy seriously and are committed to complying with all applicable laws regarding children's online privacy, including the Children's Online Privacy Protection Act (COPPA) where applicable.

Codreddy operates primarily in India, and your personal information is stored on servers located in India. However, some of our service providers and partners may be located in other countries.

When we transfer your information to other countries, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by regulatory authorities
• Ensuring service providers comply with recognized data protection frameworks
• Implementing technical and organizational security measures
• Conducting due diligence on third-party data processors
• Obtaining your explicit consent for specific transfers where required

By using Codreddy, you acknowledge and consent to the transfer of your information to countries outside of India as described in this section. If you have concerns about international data transfers, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website with a prominent notice
• Send you an email notification if the changes are significant and affect your rights
• Display a notification banner on our platform for at least 30 days
• Provide a summary of key changes for your convenience

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. You can check the "Last Updated" date at the top of this page to see when the policy was last revised.

Your continued use of Codreddy after changes are posted constitutes your acceptance of the updated policy. If you do not agree with any changes, you must stop using our platform and may request deletion of your account as described in Section 6.

For significant changes that materially affect your privacy rights, we may require you to provide affirmative consent before the changes take effect.