Privacy Policy
Effective date: September 1, 2026
Geotech Infoservices Private Limited ("Geotech", "FanNgage", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect through the FanNgage platform ("Platform"), why we collect it, how it is used and shared, and the rights you have over it under Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"). We obtain your consent through a clear affirmative action at the time of registration or when you first use a specific feature that requires it; continuing to use the Platform after that point does not by itself constitute consent to new or materially changed processing.
1. Information We Collect
- Account information: name, email address, phone number, date of birth (to verify eligibility), and password.
- Profile & engagement data: favorite clubs/teams, Contest entries and answers, forum posts, poll/quiz responses.
- Transaction data: order history for tickets, merchandise, and memberships (payment card/bank details are handled directly by our payment gateway partners and are not stored by us).
- Device & usage data: IP address, browser type, device identifiers, pages visited, and interaction data, collected via cookies and similar technologies.
- Location data: approximate location (e.g., city/region) inferred from your IP address, used to show region-relevant club content — we do not collect precise GPS location unless you separately enable it for a specific feature.
- Communications: messages you send us via the contact form, email, or the Grievance Officer.
2. How We Use Your Information
- To create and manage your account and authenticate you.
- To operate Contests, the merchandise store, ticketing, and memberships.
- To personalize content based on your club/team preferences and location.
- To communicate with you about your account, purchases, and Platform updates.
- To detect, prevent, and investigate fraud, abuse, and security incidents.
- To comply with legal obligations and respond to lawful requests from authorities.
- To generate aggregated, de-identified analytics to improve the Platform and share engagement insights with Partner clubs (without revealing your identity to the Partner unless you have separately consented, e.g., to appear on a public leaderboard).
3. Legal Basis & Consent
We process your personal data on the basis of your consent, given at the time of registration or when you use a specific feature, and, where applicable, for the performance of a contract with you (e.g., fulfilling a merchandise order) or to comply with a legal obligation. You may withdraw consent at any time by contacting us, subject to the effect withdrawal may have on features that require that data.
4. Sharing With Partner Clubs & Third Parties
Because FanNgage powers fan-engagement experiences on behalf of sports club and league Partners, aggregated or specifically consented-to data (for example, your public leaderboard rank, or your opt-in to a Partner's newsletter) may be shared with the relevant Partner. We do not sell your personal data.
We share personal data with the following categories of third parties, only as necessary to operate the Platform: cloud hosting providers, payment gateway providers, email/SMS delivery providers, analytics providers, and reCAPTCHA/anti-fraud providers (such as Google). These providers are contractually bound to use your data only to provide services to us.
5. Cookies & Tracking Technologies
We use cookies and similar technologies for authentication, remembering your preferences (such as language), and analytics. You can control cookies through your browser settings; disabling some cookies may affect Platform functionality.
6. Data Retention
We retain personal data for as long as your account is active and as needed to provide the Platform, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it, subject to our Data Deletion Policy.
7. Data Security
We implement reasonable technical and organizational security measures — including encryption in transit, access controls, and regular security review — to protect your personal data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Cross-Border Data Transfer
Your data may be processed by service providers located outside India. Where this occurs, we take steps to ensure the recipient provides an adequate level of protection consistent with the DPDP Act and other applicable law.
9. Children's Privacy
The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@fanngage.com and we will take steps to delete it.
10. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we hold about you and how it is processed.
- Correct inaccurate or incomplete personal data, and update outdated data.
- Request erasure of your personal data (see our Data Deletion Policy for the process).
- Withdraw consent at any time, as easily as it was given.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Register a grievance regarding the processing of your personal data.
- Approach the Data Protection Board of India if your grievance is not resolved satisfactorily through our grievance redressal process.
11. Grievance Officer / Data Protection Contact
For privacy-related requests or complaints, contact:
Grievance Officer: Arpan Das
Email: privacy@fanngage.com (data-principal requests) / grievance@fanngage.com (grievances)
Address: Infinity Benchmark, 18th floor, Room No. 107, Infinity Business Centre, Block EP & GP, Bidhan Nagar, North 24 Parganas, West Bengal, Kolkata - 700091, India
We will acknowledge your request within 24 hours. Grievances are resolved within 15 days, as required under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Requests to exercise your data-principal rights (access, correction, erasure) are fulfilled within 30 days, or sooner where required by law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email, and the "Effective date" above will be updated.