Last updated: 14 November 2026
This Privacy Policy explains how [Company legal name] ("VinWin", "we", "us") collects, uses, shares and protects your personal data when you use the VinWin app and website. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. By using VinWin you agree to this Policy.
1. Data we collect
You give us
- Account: email address, password (stored only in encrypted/hashed form by our authentication provider), or your Google account name, email and profile photo if you sign in with Google.
- Profile: name, username, WhatsApp number, Free Fire name and Free Fire UID, profile photo.
- Teammates: game name, game UID and WhatsApp number of the Duo/Squad teammates you add. Only add teammates who have agreed to share these details with us.
- Payments: the amount you report and the screenshot of your UPI payment. Screenshots may show your UPI ID, bank name, transaction ID and time.
- Redemptions: your UPI ID for UPI cash rewards.
- Support and bug reports: messages and anything you choose to send us.
Created when you use VinWin
- Tournament activity: matches joined, slot numbers, kills, placements, prizes and disqualifications.
- Wallet history: every change to your Vin Points and Win Coins.
- Technical data: device and browser type, IP address, app logs and error reports, used for security and fixing problems.
- Referral data: who invited you and who you invited.
We do not collect your bank card details, UPI PIN or bank password, and we never ask for them.
2. Why we use your data
- To create and manage your account and let you log in.
- To run tournaments: put you in the right room, show Room ID and password to registered players, record results and pay prizes.
- To verify payments and deliver rewards.
- To contact you about your matches, payments and rewards (in-app notifications, email or WhatsApp).
- To keep the Platform fair and safe: detect multiple accounts, cheating, fraud and fake payment screenshots, and enforce our Terms.
- To answer support requests and fix bugs.
- To meet legal, tax and accounting obligations and respond to lawful requests from authorities.
We process your data on the basis of your consent and for the legitimate uses allowed under the DPDP Act, such as providing a service you asked for and complying with the law.
3. Who can see your data
- Other players: only your Free Fire name may appear in match information. Your email, phone number and UPI ID are never shown to other players.
- VinWin staff: authorised team members see what they need to host matches, check payments and deliver rewards.
- Service providers: secure hosting, database, storage and authentication providers (for example Supabase and Vercel), and Google if you use Google sign-in. They process data only on our instructions.
- Authorities: when the law requires it, or to protect players, the Platform or the public.
We do not sell your personal data and we do not share it with advertisers.
4. How long we keep it
- Account and profile data: while your account is active, and up to 12 months after closure to handle disputes and fraud checks.
- Wallet, payment and redemption records: as long as tax and accounting laws require (generally up to 8 years).
- Payment screenshots: up to 12 months after review, unless needed for an open dispute or fraud investigation.
- Logs: usually up to 90 days.
5. Security
We use encrypted connections (HTTPS), access controls so each player can see only their own data, private storage for payment screenshots, and an audit log of every admin action. No system is perfectly secure. If a data breach affects you, we will notify you and the authorities as the law requires.
6. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct or update inaccurate data (most profile fields you can edit yourself);
- ask us to erase your data, subject to the records we must keep by law;
- withdraw consent (this may mean we can no longer provide the service);
- nominate a person to exercise your rights if you die or become unable to;
- raise a grievance with us, and then with the Data Protection Board of India.
To use these rights, contact our Grievance Officer below. We may need to verify your identity first.
7. Children
VinWin is only for people aged 18 and over. We do not knowingly collect data from children. If we learn that a user is under 18, we will close the account and delete their data, except where the law requires us to keep it.
8. Cookies and local storage
We use essential cookies to keep you logged in, and your device's local storage to remember your theme. We do not use advertising or tracking cookies.
9. Where your data is stored
Your data may be stored and processed on secure servers in or outside India, as allowed by Indian law, with appropriate safeguards.
10. Changes to this Policy
We may update this Policy. We will show important changes in the app before they take effect.
11. Contact
- Grievance Officer / Data Protection contact: [name], [email], [address]
- Support: [support email] · WhatsApp: [support number]
VINWIN