Privacy Policy

1. Who we are and who this covers

SportzCraazy.in ("SportzCraazy", "we", "us") is a sports fan community and engagement hub operated and published by Catalyst Web Trendz Pvt. Ltd., D 29, 2nd Floor, Greater Kailash Enclave 2, Greater Kailash, New Delhi – 110048. For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act") we are the Data Fiduciary for personal data processed through this website, our community features and The Huddle newsletter. You are the Data Principal.

This policy applies to everyone who joins the crew, creates a fan account, chooses a fan handle, joins a fan club, posts in the forums, votes in a poll, makes a prediction, plays a quiz, registers for a watch-along, subscribes to The Huddle, or contacts the community desk. It does not apply to independent websites we link to, which run their own policies.

2. What data we collect

We only collect what a fan community actually needs. In practice that falls into these groups:

• Account data — the email address you register with, a password (stored only as a salted hash), your chosen fan handle or display name, and your join date.
• Fan profile data — your favourite team or club, the fan clubs you join, the sports you follow, your city (which you choose to share), and an avatar picked from our built-in set.
• Community and content data — forum posts, replies, poll votes, quiz answers, comments, reactions, watch-along RSVPs, fan stories you submit, and any reports you file against other members.
• Play and progress data — your prediction and quiz activity, results, Fire Streaks, and your Craaze Points (CP) balance and tier. These are game-progress records only and carry no monetary value.
• Device and analytics data — pages viewed, approximate city-level location derived from your IP address, device type, browser and operating system, and how you arrived at the site.
• Enquiry data — the name, email, phone number, fan handle, favourite team, club and message you send through the contact form, plus any correspondence that follows.

We do not ask for, and we ask you not to send us, financial account numbers, payment card details, government identity numbers, health information or any other sensitive category of data. SportzCraazy is free to join and takes no payments from fans.

3. Why we use it — our purposes

We process your data only for purposes you would expect from a fan community:

• to create and run your account and fan profile, and to show your handle, club and progress inside the community;
• to operate the forums, fan clubs, polls, prediction ladder, quizzes, leaderboards and watch-alongs, and to award and display Craaze Points;
• to moderate content, keep the community safe, prevent abuse and enforce our Terms of Use and code of conduct;
• to send you The Huddle and service messages you have asked for, and to reply when you contact us;
• to understand, in aggregate, which features fans love so we can improve them; and
• to meet our legal obligations and to keep records the law requires us to keep.

We do not use your data to build advertising profiles about you, and we do not sell it. See section 7.

4. Consent and how to withdraw it

Under section 4 of the DPDP Act we process personal data on the basis of your consent or for certain legitimate uses. When you join the crew you are given a clear notice, in plain language, of what we collect and why, and you consent through a clear affirmative action — creating an account, ticking a box, pressing Accept on the cookie banner, or submitting a form. That consent is recorded with a timestamp.

Your consent is limited to the purposes described in this policy. Where processing rests on consent, you may withdraw it at any time and as easily as you gave it — by changing your preferences, unsubscribing, declining cookies, or writing to the Grievance Officer in section 15. Withdrawing consent does not affect the lawfulness of anything done before it, and it may mean parts of the community stop working (for example, we cannot keep your leaderboard place if you close your account).

5. Cookies and similar technologies

We use a small number of cookies and local-storage entries to make the community work and remember your choices. We do not use advertising or cross-site tracking cookies. The categories are:

Declining consent blocks the analytics category before it is set. You can clear everything from your browser settings at any time; the community still works without the optional categories.

6. Your public profile and user content

A fan community is public by design. When you post, your fan handle, avatar, join date, club, badges, Craaze Points tier and posting history are visible to other members — that is the point of a terrace. Your email address, password hash and IP logs are never displayed and are visible only to the moderation team.

Anything you post publicly — forum threads, replies, poll and quiz answers, reactions, fan stories — is content you have chosen to publish. You keep ownership of it; the licence you grant us to display it is described in section 6 of our Terms of Use. Because other members may quote or screenshot a public post, deleting your account removes your profile and unlinks your posts from your handle but cannot recall copies that already exist elsewhere. Reports you file, and moderation notes about your account, are kept for twenty-four months so repeat behaviour can be recognised.

7. Sharing and disclosure

We share personal data only with:

• Service providers — our hosting, email delivery, error-monitoring, content-moderation and analytics partners, each under a written contract that limits them to processing on our instructions and to our security standards;
• Professional advisers — where we are required to, for example our auditors or lawyers; and
• Law enforcement or a court — where we are legally obliged to disclose under the Information Technology Act, 2000, the Bharatiya Nagarik Suraksha Sanhita, or a valid order.

We never sell your personal data, and we never rent or trade the subscriber list. We do not run behavioural advertising. Aggregate, anonymised statistics that cannot identify you — for example "62% of cricket fans voted before the toss" — are not personal data and may be shared or published freely.

8. How long we keep data

We keep personal data only as long as the purpose lasts, and then delete or irreversibly anonymise it.

Where a longer period is required by law, we keep the specific record only for as long as that law requires.

9. Children and young fans

Sport is for everyone, and a fan community naturally attracts under-18s. We take special care with them. SportzCraazy is intended for users aged eighteen and over; anyone under eighteen is a child under the DPDP Act, and anyone under eighteen may use the community only with the involvement of a parent or lawful guardian.

• Age-gating — we ask for age or date of birth at sign-up and gate access accordingly. If we identify a user as a child, we require verifiable parental consent before processing their personal data, as required by section 9 of the DPDP Act.
• No behavioural tracking or targeted advertising — we never track a child's behaviour for advertising, never profile a child, and never serve targeted ads to a child. We run no behavioural advertising to any user at all.
• Safety measures — moderation, reporting and blocking tools apply to everyone, and content that is harmful to children is removed on priority. We minimise the data we collect from young fans and do not make their location public.

If you believe a child has created an account or given us data without verifiable parental consent, write to the Grievance Officer in section 15 and we will verify and, where appropriate, erase the account — usually within seven working days.

10. Your rights and how to exercise them

As a Data Principal under the DPDP Act you have the right to: obtain a summary of the personal data we hold about you and how we process it; have inaccurate or incomplete data corrected or completed; have your data erased where it is no longer needed for the purpose it was collected; nominate another individual to exercise your rights if you die or become incapacitated; and use a readily available grievance redressal mechanism.

You can update most details or delete your account yourself from your profile settings; deletion is confirmed by email and completed within thirty days. For anything else, write to the Grievance Officer in section 15. We respond to rights requests within thirty days and do not charge for the first request in a twelve-month period. You also have the right to make a complaint to the Data Protection Board of India if you are not satisfied with our response.

11. Cross-border transfers

Our systems and some of our service providers may store or process data on servers located outside India. Where that happens, we transfer personal data only to countries that are not restricted for such transfers by the Central Government under section 16 of the DPDP Act, and only under contractual safeguards that keep it protected to the standard described in this policy.

12. How we protect your data

Traffic to the site is encrypted in transit. Passwords are stored only as salted hashes and are never recoverable in plain text. Access to production data is restricted to named staff, logged and reviewed. Our reasonable security safeguards are those expected of a body corporate under section 43A of the Information Technology Act, 2000 and the reasonable-security requirement of the DPDP Act. No online system can be guaranteed perfectly secure, so we also ask you to keep your password private and to tell us at once if you think your account has been accessed.

13. Data breach notification

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal without undue delay, in the manner and within the timelines required by the DPDP Act and the rules made under it. Our notice will describe, in plain language, what happened, the categories of data involved, the likely consequences, the measures we have taken, and what you can do to protect yourself.

14. Third-party links

The community links to independent websites — clubs, sporting bodies, news outlets and social platforms — and members may post links too. We do not control those destinations and are not responsible for their content or their privacy practices. When you follow a link away from SportzCraazy, that site's own privacy policy applies. Please read it before you share any information there.

15. Grievance Officer, changes and governing law

Complaints and rights requests should be addressed to the Grievance Officer, SportzCraazy — a named role appointed within Catalyst Web Trendz Pvt. Ltd. under the Information Technology Act, 2000, the Intermediary Guidelines and the DPDP Act, 2023 — using the block below. We acknowledge every grievance within 24 hours and resolve it within 15 days, and faster for anything urgent involving a child or unlawful content.

We update this policy when the law changes or when we change what we do with data. Material changes are announced on the site and in The Huddle before they take effect, and the "last updated" date above always reflects the current version. This policy is governed by the laws of India, and any dispute arising from it is subject to the exclusive jurisdiction of the courts at New Delhi.