Privacy Policy

1. Information We Collect

To provide you with a secure, high-performance esports platform, we collect the following categories of information:

• **Account Credentials**: Name, email address, password, custom profile image, avatar frames, custom banners, and two-factor authentication logs.
• **Device and Usage Logs**: IP address, browser fingerprint, device specifications, operating system, and telemetry (browser user-agent logs) captured during your visits.
• **Payment Identifiers**: UPI ID (Virtual Payment Address), bank transaction reference numbers, and billing details. *We do not store your raw UPI PINs, credit card numbers, or bank passwords.*
• **Tournament Participation Data**: In-game handles (e.g. Free Fire ID, in-game name), match scores, kill counts, dispute records, screenshots, and video recordings submitted for match validation.

2. How We Use Information

We use the information we collect strictly to operate the platform and ensure a fair playing field:

• Verifying and registering users for competitive lobbies.
• Distributing prizes, computing platform commission rakes, and processing secure UPI cashouts.
• Verifying player identities and detecting game emulators, scripts, exploits, and teaming patterns.
• Diagnosing server latency, updating lobby credential distributions, and handling support tickets.
• Fulfilling legal requirements, tax declarations, and auditing transactional ledgers.

3. Information Sharing & Disclosure

We restrict access to your personal details. We do not sell your personal data. We only share information under these conditions:

• **With Your Team**: Your teammates can view your registered game handle and status.
• **Anti-Cheat Services**: In-game telemetry and device fingerprints may be processed to identify cheaters.
• **Payment Gateway Partners**: Necessary transaction data is shared to execute deposits and withdrawals.
• **Law Enforcement**: If required by subpoena, court order, or national regulatory agencies.

4. Payment Processing Security

All financial transfers (deposits and withdrawals) are handled securely using industry-standard third-party payment processors (such as TranzUPI). Payment operations occur on the secure infrastructure of our processing partners. BattleVerse does not collect, capture, or store sensitive banking details or credit card numbers.

5. Cookies & Analytics

We use cookies and equivalent browser storage mechanisms (Local Storage) to:

• Keep you signed in securely across browser sessions.
• Manage device trust tokens (saving your 30-day 2FA authorization status).
• Track basic performance telemetry (page load times, interface interactions) to optimize layouts.

You can configure your browser to reject all cookies, but doing so will log you out of the platform and require manual 2FA challenges on every action.

6. Data Security & Storage

We protect your data using comprehensive security controls:

• All network traffic is encrypted using HTTPS and TLS 1.3 protocols.
• Sensitive database fields (such as passwords and 2FA secrets) are salted and hashed using bcrypt and AES-256-GCM algorithms.
• API endpoints checking wallets or profile statistics are protected by NextAuth session tokens and custom middleware blocks.

7. Data Retention

We retain your personal data only as long as your account is active, or as required to fulfill the business purposes detailed in this policy. Invoices, transactional histories, and audit logs are archived to comply with financial, tax, and anti-money laundering regulations.

8. User Rights & Data Deletion

You possess rights regarding your personal information, including the right to inspect your stored data, correct inaccuracies, or revoke trusted devices.

**Account Deletion**: You can permanently delete your BattleVerse account from the Settings page. This action is irreversible, wipes your profile data, removes your wallet entries, and terminates active session access. Retention policies apply to financial ledgers.

9. Third-Party Services

Our platform contains integrations with external services (such as Discord chat, Youtube embeds, and Google OAuth). We do not control the privacy practices or contents of these third-party platforms, and recommend reviewing their privacy policies before linking accounts.

10. Legal Compliance

We comply with all relevant regional data protection regulations. We cooperate with law enforcement and regulatory bodies to investigate fraud, identify illegal transactions, and protect the safety of BattleVerse users.

11. Contact Details

If you have questions about this Privacy Policy, your personal data, or wish to file a privacy complaint, please contact us:

• 🏢 Platform: BattleVerse
• 📧 Privacy Team: contact@battleverse.xyz
• 💬 Support: Open a ticket on our official Discord Server.