Privacy Policy

Personal information is data that can be used to identify you directly or indirectly. We collect the following personal information when you register and use the Platform:

• Full Name: Your first and last name, as provided during account registration or Google Sign-In.
• Email Address: Your primary email address, used for account verification, notifications, and communications.
• Phone Number: Your mobile phone number, used for identity verification and account security.
• UPI ID / Payment Details: Your UPI ID (Unified Payments Interface identifier) submitted for the purpose of processing withdrawal requests to your linked bank account.
• Profile Information: Username, profile photo/avatar, in-game UID (e.g., Free Fire UID, BGMI ID), game type preference, and any other details you choose to add to your profile.
• Government Identity (if requested): In cases of high-value withdrawal verification or fraud investigations, we may request KYC (Know Your Customer) documents such as Aadhaar or PAN card details. This will only be requested when legally required.

We automatically collect technical information about your device and usage of the Platform to ensure security, performance, and service improvement:

• Device Information: Device model, operating system version, unique device identifiers, screen resolution, and hardware specifications.
• IP Address: Your Internet Protocol (IP) address, used to determine approximate geographic location, detect fraudulent activity, and enforce regional compliance.
• App Usage Data: Features accessed, tournament participation history, login/logout timestamps, session duration, button interactions, and in-app navigation patterns.
• Browser Type & Version: Browser name, version, and user-agent string (for web users).
• Log Data: Error logs, crash reports, performance metrics, and diagnostic data to maintain app stability.
• Referral Source: Information about how you found or were referred to the Platform.

As a real-money gaming platform, we collect and process financial data to manage your wallet and transactions:

• Wallet Balance: Your current in-platform wallet balance, including deposited funds, bonus credits, and prize winnings.
• Transaction History: A complete record of all financial transactions including deposits, tournament entry fees, prize credits, and withdrawals, including timestamps, reference numbers, amounts, and status.
• Deposit Records: Deposit amounts, UTR (Unique Transaction Reference) numbers submitted by you, screenshots of payment confirmations, and approval status.
• Withdrawal Requests: Withdrawal amounts, the UPI ID or bank account you have designated to receive funds, request timestamps, processing status, and completion records.
• Bonus & Reward Credits: Details of any bonus amounts credited to your account under our deposit bonus scheme, including the applicable bonus percentage and conditions.

• Database: User data, transaction records, and tournament information are stored in Google Firebase Realtime Database, a secure cloud-hosted NoSQL database provided by Google LLC. Firebase is compliant with SOC 1, SOC 2, SOC 3, ISO 27001, and other major security certifications.
• Authentication: User authentication is managed by Firebase Authentication, supporting Google Sign-In with OAuth 2.0. Passwords are never stored in plain text; Google manages all credential security for authenticated sessions.
• File Storage: Profile images and user-uploaded media are stored in Cloudflare R2 Object Storage, a globally distributed, encrypted cloud storage service. All stored files are served over HTTPS.
• Server Location: Primary data is stored on servers located within Google Cloud Platform infrastructure. Some data may be processed on servers located outside India as part of Google's global infrastructure. By using the Platform, you consent to this cross-border data transfer in accordance with applicable data protection laws.

• check_circleAll data in transit is encrypted using TLS/SSL (HTTPS) protocols, ensuring that data exchanged between your device and our servers cannot be intercepted.
• check_circleData at rest in Firebase and Cloudflare R2 is encrypted using AES-256 encryption.
• check_circleFirebase Security Rules are implemented to restrict database read/write access so that users can only access their own data.
• check_circleAdmin access to the database and platform backend is protected by multi-factor authentication and role-based access control.
• check_circleOur anti-cheat system monitors player activity 24/7 to detect abnormal patterns that may indicate hacking, manipulation, or fraudulent behavior.
• check_circleAPI keys and sensitive configuration values are obfuscated using encoding techniques to prevent unauthorized access.
• check_circleRegular security reviews and vulnerability assessments are conducted to identify and address potential weaknesses in our systems.

• Empire Win accepts deposits exclusively via UPI (Unified Payments Interface), which is a real-time payment system regulated by the National Payments Corporation of India (NPCI).
• Users make deposits by scanning the official Empire Win QR code or using the designated UPI ID. After completing the payment, users must submit their UTR (Unique Transaction Reference) number for verification.
• Deposits are subject to a minimum of ₹10 and a maximum of ₹50,000 per transaction.
• Wallet credits are processed within approximately 15 minutes of deposit submission, subject to manual verification by our team.

• Deposits of ₹500 or more receive a bonus of +20% credited to your wallet.
• Deposits of ₹1,000 or more receive a bonus of +25% credited to your wallet.
• Deposits of ₹2,000 or more receive a bonus of +30% credited to your wallet.
• Bonus credits are awarded at the time of deposit approval and will appear in your wallet transaction history.
• Bonus credits are subject to wagering conditions and cannot be withdrawn directly. Bonuses may only be withdrawn after they have been used as tournament entry fees.
• Empire Win reserves the right to modify, suspend, or terminate the bonus structure at any time without prior notice.

All deposits undergo a verification process to ensure authenticity and prevent fraud:

• The UTR number submitted by the user is cross-checked against UPI payment records.
• If a transaction cannot be verified, it will be placed in a pending state. Our support team will contact you for additional proof of payment if required.
• Duplicate UTR submissions will be rejected, and any attempt to use the same UTR multiple times will be treated as fraudulent activity.
• Chargebacks, payment disputes, or reversal requests through your bank must be reported to Empire Win support before initiating a claim with your bank. Unauthorized chargebacks may result in permanent account suspension.

• The minimum withdrawal amount is ₹100. Withdrawal requests below this threshold will not be processed.
• Only real money balance (deposited funds + tournament prize winnings) is eligible for withdrawal. Bonus credits are excluded from withdrawal eligibility unless fully wagered as per bonus terms.
• To request a withdrawal, users must have a verified UPI ID linked to their account. The UPI ID must be active and capable of receiving funds.
• Users may update their withdrawal UPI ID through the Profile or Wallet section. Empire Win is not liable for funds sent to an incorrect UPI ID provided by the user.
• Multiple withdrawal requests may not be submitted simultaneously. Each request must be individually reviewed and completed before a new request can be initiated.

• Withdrawal requests are processed within 24 to 72 business hours of submission, subject to verification and fraud checks.
• Withdrawals submitted during weekends, public holidays, or outside business hours may experience additional processing delays.
• During periods of high withdrawal volume, processing times may be extended. Empire Win will communicate any expected delays via the in-app notification system or support channels.
• Once a withdrawal is approved and dispatched, funds are typically credited to your UPI-linked bank account within minutes, depending on your bank's processing time.

• All withdrawal requests are reviewed and approved by a designated Empire Win administrator. Approval is subject to account verification, gameplay history review, and fraud assessment.
• Empire Win reserves the right to delay, hold, or reject any withdrawal request if there is reasonable suspicion of fraudulent activity, account manipulation, bonus abuse, or violation of the Platform's Terms of Service.
• In cases where a withdrawal is rejected, the user will be notified with a reason. Rejected amounts will be returned to the user's wallet.
• Empire Win may request additional identity verification (KYC documents) before processing high-value withdrawals. Refusal to provide requested verification may result in the withdrawal being withheld until resolved.
• Prize winnings from tournaments are credited to your wallet immediately after tournament results are verified and published. Tournament results are final once published by the admin.

We use OneSignal to deliver push notifications to users who have opted in. OneSignal may use device identifiers and a persistent notification token to deliver and track the engagement of push notifications (such as whether you opened a notification). You can opt out of push notifications at any time through your device settings or the notification preferences in the app. Opting out of notifications does not affect your ability to use the Platform.

• You can configure your web browser to refuse cookies, delete existing cookies, or alert you when cookies are being set. Please note that disabling essential cookies may impact the functionality of the Platform, including your ability to log in.
• For our mobile application, analytics tracking can be managed through your device's privacy settings or within the app settings.
• We do not use cookies for advertising, ad targeting, or to track your activity on third-party websites.

• Firebase Authentication: Manages user login and identity using Google Sign-In. Google processes your email address, profile picture, and Google account identifier for authentication purposes.
• Firebase Realtime Database: Stores user profiles, wallet data, transaction records, tournament data, and chat messages securely in Google's cloud infrastructure.
• Firebase Analytics: Collects anonymized usage events (app open, feature usage, session duration) to help us understand user behavior and improve the Platform.
• Firebase's Privacy Policy: firebase.google.com/support/privacy

• Cloudflare R2 Object Storage is used to store user profile images and other uploaded media files. Files are encrypted at rest and served via Cloudflare's global CDN over HTTPS.
• Cloudflare may process IP addresses and request metadata for security, DDoS protection, and performance optimization purposes.
• Cloudflare's Privacy Policy: cloudflare.com/privacypolicy

• Deposit and withdrawal transactions are facilitated through India's Unified Payments Interface (UPI), regulated by the National Payments Corporation of India (NPCI).
• UPI transactions are completed within your own banking app. Empire Win receives only the transaction reference (UTR) that you provide and does not have access to your UPI PIN, OTP, or banking credentials.
• Your bank's privacy policy governs the handling of data within UPI transactions on their end.

• OneSignal is used to deliver push notifications to users who have opted in to receive updates about tournaments, wallet activity, and platform announcements.
• OneSignal may process your device token, device type, OS version, and notification engagement data (open rates, click rates).
• OneSignal's Privacy Policy: onesignal.com/privacy_policy

• check_circleService Providers: We share necessary data with our trusted third-party service providers (Firebase, Cloudflare, OneSignal, UPI processors) strictly to the extent required for them to perform their services on our behalf. These providers are contractually bound to maintain confidentiality and data security.
• check_circleLegal Compliance: We may disclose your information if required to do so by applicable law, court order, government regulation, or lawful request by a law enforcement agency or regulatory authority in India. We will notify you of such disclosure unless legally prohibited from doing so.
• check_circleFraud Prevention & Security: We may share your information with law enforcement, financial institutions, or fraud prevention agencies when necessary to investigate, prevent, or take action regarding suspected illegal activities, fraud, security threats, or violations of our Terms of Service.
• check_circleBusiness Transfers: In the event of a merger, acquisition, corporate restructuring, or sale of substantially all of our assets, your data may be transferred to the acquiring entity. You will be notified of any such change in ownership and your continued use of the Platform will constitute acceptance of the new terms.
• check_circleWith Your Consent: We may share your data with other parties with your prior explicit written consent.

Please note that certain information you provide or that is generated by your use of the Platform may be publicly visible to other users, including: your username, profile photo/avatar, tournament participation history, leaderboard rankings, and in-app chat messages. Exercise care when sharing information in public areas of the Platform.

You have the right to request a copy of the personal information we hold about you. You can access much of your data directly through the Profile section of the Platform, including your wallet balance, transaction history, tournament history, and profile details. For a comprehensive data access request, contact us at our support email.

You have the right to correct inaccurate or incomplete personal information. You may update your profile details, phone number, in-game UID, and withdrawal UPI ID directly through the Profile section of the app. For corrections to other information, submit a request through our support channels.

You have the right to request the deletion of your personal data and account. To exercise this right, contact us at our support email with a deletion request. Please note the following conditions:

• Account deletion is permanent and irreversible. All your profile data, tournament history, and wallet information will be permanently erased.
• Before requesting deletion, ensure you have withdrawn any remaining wallet balance. Any balance remaining at the time of deletion may be forfeited.
• Certain transaction records may be retained for a period required by law (e.g., for tax, legal, or audit purposes) even after account deletion. See Section 14 for data retention details.
• Requests will be processed within 30 days of verification of your identity.

• Marketing Communications: You may opt out of receiving promotional emails or announcements by adjusting your notification settings in the Profile section or by clicking the unsubscribe link in any marketing email.
• Push Notifications: You may disable push notifications at any time through your device settings. Note that transactional notifications (deposit approvals, withdrawal updates) cannot be fully disabled as they are essential to account operations.
• Analytics: You may opt out of analytics data collection through your device's privacy settings or by contacting us directly.

• Empire Win does not direct its services, marketing, or communications toward minors under any circumstances.
• If we become aware that a user is under 18 years of age, we will immediately suspend the account, investigate any transactions made, and permanently delete all personal data associated with that account.
• Any funds deposited by a minor will be refunded to the original payment source to the extent technically possible, subject to verification.
• If you are a parent or guardian and believe that your child has registered on Empire Win or provided us with their personal information, please contact us immediately at support@empirewin.in. We will take prompt action to investigate and remove the data.
• Persons under 18 must not attempt to create accounts, participate in tournaments, make deposits, or represent themselves as adults on the Platform.

• Google Account Security: Empire Win uses Google Sign-In exclusively. Your Empire Win account security is directly dependent on the security of your Google account. Use a strong, unique password for your Google account and enable Google's Two-Factor Authentication (2FA).
• Do Not Share Login Credentials: Never share your Google account credentials, session tokens, or any authentication details with anyone — including Empire Win staff. Empire Win staff will never ask for your password or authentication tokens.
• Device Security: Ensure your device is protected with a screen lock (PIN, fingerprint, or face recognition) to prevent unauthorized access to the app if your device is lost or stolen.
• Report Unauthorized Access: If you suspect unauthorized access to your account, contact our support team immediately at support@empirewin.in and change your Google account password at once.
• Secure Logout: If you access Empire Win from a shared or public device, ensure you log out completely after your session.

• check_circleWe use Firebase Authentication with Google OAuth 2.0 — no passwords are stored on Empire Win servers.
• check_circleAll data transmissions are encrypted using TLS 1.2 or higher (HTTPS).
• check_circleSuspicious login attempts and unusual account activity are monitored and flagged automatically.
• check_circleWithdrawal requests are subject to manual review before processing to prevent unauthorized withdrawals.

• cancelSubmitting false, fabricated, or duplicate UTR numbers to fraudulently credit your wallet.
• cancelInitiating unauthorized chargebacks or payment reversals after depositing funds and receiving tournament entry or winnings.
• cancelUsing stolen credit/debit cards, compromised UPI accounts, or any payment method that does not belong to you.
• cancelMoney laundering or using the Platform to convert illegally obtained funds.
• cancelAttempting to manipulate the bonus system, exploit deposit bonuses through artificial transactions, or "bonus washing."

• cancelCreating multiple accounts (alt accounts) to gain unfair advantages, claim multiple bonuses, or evade a previous account ban.
• cancelSharing your account with another person or allowing someone else to play tournaments under your account identity.
• cancelRegistering an account with false identity information or impersonating another person.
• cancelUsing bots, automated scripts, or any software to automate account actions, tournament registrations, or game results.

• cancelUsing hacks, cheats, aimbots, wall hacks, speed hacks, or any third-party software that provides an unfair advantage in gameplay.
• cancelMatch fixing, collusion, or pre-arranged outcomes between tournament participants.
• cancelSubmitting false screenshots or manipulated results to falsely claim prizes.
• cancelParticipating in tournaments with in-game UIDs that do not belong to you.

• cancelAttempting to hack, reverse-engineer, decompile, or tamper with any part of the Empire Win application, database, or infrastructure.
• cancelExploiting bugs, glitches, or technical vulnerabilities in the Platform for financial gain. Discovered vulnerabilities must be reported to support@empirewin.in immediately.
• cancelConducting Denial-of-Service (DoS) or Distributed Denial-of-Service (DDoS) attacks against the Platform.
• cancelScraping, harvesting, or mass-downloading data from the Platform without written authorization.

• In-App Notification: We will display a prominent notice within the app informing you that the Privacy Policy has been updated, with a link to the revised version.
• Push Notification: For material changes that significantly affect your rights or the way we handle your data, we will send a push notification to all registered users (for those who have opted in to notifications).
• Email Notification: For significant changes affecting your legal rights or data processing practices, we may also send an email to the address on your account.
• Website Banner: A notice banner will be displayed on the Empire Win website for a period of at least 30 days following any material policy update.

The date of the most recent revision to this Privacy Policy is indicated at the top of the document ("Last Updated"). Your continued use of the Empire Win Platform after any such changes are posted constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Policy, you must stop using the Platform and may request account deletion as described in Section 10.