Last Updated: January 15, 2026
Effective Date: January 15, 2026
Compliance: Digital Personal Data Protection Act (DPDP) 2023, Information Technology Rules 2021
1. Introduction
This Privacy Policy explains how Cricket-4ra.online ("we," "us," "our") collects, uses, stores, protects, shares, and manages your personal information when you use our services to create and manage a 4rabet Cricket Betting ID.
By using our service, you consent to the practices described in this policy. If you don't agree, please don't use our service. This policy is available in English and Hindi — if any conflict arises between translations, the English version prevails.
यह गोपनीयता नीति बताती है कि क्रिकेट-4रा.ऑनलाइन आपकी व्यक्तिगत जानकारी कैसे एकत्र, उपयोग, संग्रहीत, सुरक्षित, साझा, और प्रबंधित करता है। हमारी सेवा का उपयोग करके, आप इस नीति में वर्णित प्रथाओं के लिए सहमति देते हैं।
2. Information We Collect
2.1 Information You Provide Directly
- Identification information: Full name, date of birth, mobile number, email address (optional), preferred username
- KYC documents: Aadhaar number (masked — last 4 digits only stored), PAN card, address proof, as required by Indian anti-money-laundering laws
- Payment information: UPI IDs, bank account details for deposits/withdrawals, transaction history
- Communication content: WhatsApp messages, emails, or calls to our support team
- Preferences: Betting preferences, language settings, communication preferences
2.2 Information Collected Automatically
- Technical data: IP address, device type, operating system, browser type, screen resolution, time zone
- Usage data: Pages visited, time spent, links clicked, referral sources
- Cookies: Session IDs, preference cookies, analytics cookies (see Section 7)
2.3 Information From Third Parties
- 4rabet platform: Transaction history, betting activity, account status (needed to provide support)
- Payment processors: Transaction confirmation, payment failures, refund information
- KYC verification services: Identity verification results (Aadhaar OKYC, PAN verification)
3. Why We Collect Your Information
We collect information only for specific, legitimate purposes:
- Service delivery: Create your 4rabet Cricket ID, process deposits/withdrawals, provide betting access
- Customer support: Respond to queries, resolve issues, provide account assistance
- Legal compliance: Meet KYC, AML, age verification, and tax reporting requirements
- Fraud prevention: Detect and prevent unauthorized access, money laundering, fraud
- Service improvement: Analyze usage patterns to improve our platform (anonymized)
- Responsible gaming: Monitor for signs of problem gambling and offer intervention
- Communications: Send transactional messages (deposit confirmation, withdrawal status)
- Marketing (only with consent): Promotional offers, new feature announcements
4. How We Protect Your Information
Your data security is paramount. Our technical and organizational safeguards include:
4.1 Technical Security
- Encryption in transit: All data transmission uses TLS 1.3 with 256-bit encryption
- Encryption at rest: Sensitive data stored with AES-256 encryption
- Secure data centers: ISO 27001-certified facilities with physical security
- Regular audits: Quarterly penetration testing and security assessments
- Backups: Encrypted daily backups with disaster recovery procedures
- Firewalls & intrusion detection: Multi-layered network security
4.2 Organizational Security
- Staff training: All employees trained in data protection annually
- Background checks: All staff handling user data are background-verified
- Access control: Principle of least privilege — staff access only data needed for their role
- Access logs: Every data access is logged and audited
- NDAs: All employees and contractors sign non-disclosure agreements
- Incident response: Documented breach response plan, tested annually
5. Data Sharing & Disclosure
We share your information only when necessary, and never for marketing. Categories of recipients:
5.1 Service Partners
- 4rabet: Your registration data is shared to create and maintain your betting account
- Payment processors: UPI providers, banks, and payment gateways for transaction processing
- KYC verification services: For identity verification (Aadhaar, PAN checks)
- Communication platforms: WhatsApp Business API (subject to WhatsApp's own privacy protections)
5.2 Legal & Regulatory Disclosures
We may disclose information when legally required, including:
- Court orders, subpoenas, or legal processes
- Government investigations or law enforcement requests with proper legal basis
- Anti-money-laundering (AML) compliance requirements
- Tax authorities (for TDS reporting on winnings)
- Regulatory audits by gaming authorities
5.3 What We Don't Do
- ✓ We never sell your data to any third party
- ✓ We never share your data with advertisers or marketing networks
- ✓ We never share your data with other betting platforms
- ✓ We never give your data to data brokers or aggregators
- ✓ We never share financial information for unsolicited credit offers
- ✓ We never disclose your identity publicly
6. International Data Transfers
Your data may be processed outside India for specific purposes:
- 4rabet servers: Primary betting account processing occurs on 4rabet's international servers (primarily EU)
- Analytics: Google Analytics data may be processed globally (anonymized)
- Payment partners: Some transactions routed through international processors
Safeguards for international transfers: All transfers use encrypted channels, partners are bound by data protection agreements equivalent to GDPR, and we retain contractual audit rights. Primary support operations data remains in India-compliant data centers.
7. Cookies & Tracking Technologies
We use cookies and similar technologies for specific purposes:
- Essential cookies: Required for login, security, session management. Cannot be disabled.
- Analytics cookies: Google Analytics (gtag ID: G-RW8ZFF95GD) — aggregate, anonymized website usage statistics. You can opt out via Google's opt-out.
- Preference cookies: Remember language, settings, and preferences
- Performance cookies: Monitor page load times, technical errors
We do NOT use: advertising cookies, retargeting pixels, third-party tracking from ad networks, social media tracking cookies.
Managing cookies: You can manage cookies in your browser settings. Note: disabling essential cookies may break site functionality.
8. Data Retention
We retain different types of data for different periods based on purpose and legal requirements:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Active + 2 years | Service delivery, disputes |
| KYC/AML records | 8 years from last transaction | AML law compliance |
| Financial transactions | 8 years | Tax/audit compliance |
| Support chats | 2 years | Quality, disputes |
| Marketing consent | Until withdrawn | Consent active |
| Analytics (anonymized) | 26 months | Service improvement |
After retention periods, data is either anonymized or permanently deleted using industry-standard secure deletion methods.
9. Your Rights Under DPDP Act 2023
India's Digital Personal Data Protection Act 2023 grants you these rights:
- Right to Information: Know what data we have and how we use it
- Right to Correction: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion (subject to legal retention)
- Right to Withdraw Consent: Revoke consent for processing
- Right to Nominate: Designate a person to exercise rights on your behalf
- Right to Grievance Redressal: Complain about privacy violations to our Data Protection Officer
How to exercise rights: Message us on WhatsApp with your specific request. We respond within 30 days as required by law.
10. Data Protection Officer (DPO)
We've appointed a dedicated Data Protection Officer responsible for privacy compliance. The DPO can be reached:
- Via WhatsApp with message tagged 'DPO' or 'PRIVACY'
- Via email (request email address from support)
- All DPO communications are escalated directly to senior leadership
11. Children's Privacy
Our service is strictly for users 18 years and older. We do not knowingly collect data from minors. If we discover that we've collected data from someone under 18, we immediately delete the data and close the account. Parents who suspect their child has created an account should contact us immediately.
12. Changes To This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via:
- WhatsApp notification to active users
- Prominent notice on our website homepage
- Updated "Last Modified" date at the top of this policy
Continuing to use our service after changes means you accept the updated policy.
13. Contact Us
For any privacy concerns, questions, or to exercise your rights:
- WhatsApp: Click here to chat
- Mark messages: 'PRIVACY' or 'DPO' for faster routing to our Data Protection Officer
- Response time: Acknowledgment within 24 hours, full response within 30 days (legal requirement)
14. Escalation To Regulators
If you're unsatisfied with our response to a privacy concern, you can escalate to:
- Data Protection Board of India (when fully operational under DPDP Act)
- Cybercrime portal: cybercrime.gov.in (for data breaches)
- Consumer forums: For service-related privacy concerns