Privacy Policy

Effective date: October 26, 2025

Welcome to Tashan Win Game (the “Service”, “we”, “us” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information. This policy applies to users in India and is written to follow widely accepted privacy principles (including GDPR-friendly practices) where applicable.

1. Scope & Acceptance

This policy applies to data collected through our website, mobile application, and other services (collectively, the “Services”). By accessing or using our Services you accept the practices described in this Policy. If you do not agree, please do not use the Services.

2. What Information We Collect

We collect two types of data: personal data (identifying information) and non-personal / technical data (usage and device info).

Personal data you provide

• Account details: phone number, email address, display name, avatar.
• Registration & verification: OTPs and verification metadata (used for authentication only).
• Support messages: messages and attachments you send to support.
• Payment info: only if you use paid features — handled by third-party payment providers (we do not store full card details on our servers).

Technical & usage data (automatically collected)

• Device identifiers, model, OS version.
• IP address (may be used for geolocation at a coarse city/state level).
• App usage logs, crash reports, feature usage and analytics events.
• Cookies and similar tracking technologies (see Cookies section).

3. How We Use Your Information

We use data for the following legitimate purposes:

• Service delivery: to create and manage your account, provide the app and gameplay features, and authenticate users.
• Security: to detect, prevent, and respond to fraud, abuse, or other security incidents.
• Support: to respond to user inquiries and resolve issues.
• Analytics & improvement: to analyze usage and improve the Service (performance, stability, new features).
• Communications: to send account-related notices, updates, and promotional messages (you can opt out of marketing emails).

4. Legal Basis for Processing (EU/GDPR-friendly)

Where GDPR applies, we rely on the following legal bases:

• Contractual necessity: processing necessary to provide the Services (account authentication, purchases).
• Legitimate interests: security, fraud prevention, and service improvements.
• Consent: for optional marketing communications or analytics where required by local law.

5. Cookies & Similar Technologies

We use cookies and similar technologies to make the Service work and to collect analytics data:

• Essential cookies: required for login, security and core functionality.
• Performance & analytics: to measure app performance and user behavior (e.g., Google Analytics or similar providers).
• Optional cookies: for marketing or personalization; we seek consent where required.

You can control cookies via your browser or device settings. Blocking essential cookies may reduce or prevent use of some features.

6. Third-Party Services & Transfers

We share data with trusted third parties only as necessary to provide the Service:

• Hosting and infrastructure providers for app and data hosting.
• Analytics providers to measure and improve performance.
• Payment processors for purchases (we do not store full payment card numbers).
• Support & messaging providers for user support.

When data is transferred outside India, we ensure appropriate safeguards (standard contractual clauses, encryption) are in place as required by law.

7. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention durations differ by data type (e.g., account data until account deletion, logs retained for a defined maintenance period).

8. Security Measures

We implement technical and organizational measures to protect personal data, including TLS/HTTPS for data in transit, encryption for sensitive data at rest where applicable, access controls, and regular security audits. While we strive to protect your data, no system is completely immune to risk — promptly report suspected incidents to support.

9. Minors

Our Services are intended for users who meet local minimum age requirements. We do not knowingly collect personal data from children under the applicable age without parental consent. If you believe a child under the applicable age has provided personal data, contact us to request deletion.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Request portability of your data in a structured, commonly used format.
• Object to or restrict certain processing activities.
• Lodge a complaint with a supervisory authority (for EU residents).

To exercise your rights or request information, contact us at support@tashanwingame.tashanwingame.org. We will respond within applicable legal timeframes.

11. How to Delete or Close Your Account

To delete your account, use the account settings in the app or submit a request via our Contact page. Some data may remain in backups or as required by law, but we will limit further processing and will delete recoverable data per our retention policy.

12. Changes to This Policy

We may update this Privacy Policy. We will post the revised policy with a new “Effective date.” For material changes, we will use prominent notices (in-app or email) where appropriate.

13. Contact & Data Protection Officer

If you have questions, requests, or complaints about this policy or our data practices, contact:

14. Legal Notice

This Privacy Policy contains important legal terms. It does not create contractual rights beyond what is stated in our Terms & Conditions. This policy is intended to be clear and transparent but does not constitute legal advice.

Last updated: October 26, 2025