Privacy Policy

Last updated: 26 September 2026

This Privacy Policy explains how CHESSPE SPORTS TECHNOLOGIES PRIVATE LIMITED (“ChessPe”, “we”) collects, uses, shares and protects personal data when you use chesspe.com and the ChessPe applications. We process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and in line with the Information Technology Act, 2000. By using ChessPe you consent to the processing described here. This policy forms part of our Terms & Conditions.

1. Data we collect

• Account data — name, email address, mobile number, password (stored only as a one-way hash), city and date of birth or age.
• Chess data — FIDE/federation IDs and ratings you provide, tournament registrations, pairings, results, games and analysis.
• Registration data — details a tournament asks for, such as school, class, contact number and, for minors, a parent or guardian’s details.
• Organiser data — organisation details, KYC documents and bank-account details needed to verify organisers and settle payments.
• Payment data — payment status, amount and the payment provider’s transaction reference. We do not receive or store card numbers, CVVs, UPI PINs or net-banking passwords.
• Technical data — IP address, device and browser type, and logs needed for security, fraud prevention and troubleshooting.

2. Why we use it

We use personal data only to:

• create and secure your account and verify your identity (including one-time passwords);
• register you for tournaments, process payments and refunds, and issue tickets and certificates;
• let organisers run the tournaments you enter (participant lists, check-in, pairings, results);
• show your results, statistics and progress, and send you tournament updates;
• verify organisers and settle funds to them;
• prevent fraud and abuse, keep the platform secure, and comply with law, tax and regulatory requirements and lawful requests.

We do not sell personal data, and we do not use it for third-party advertising.

3. What is public

Tournament participation is public by nature: your name, city, rating, pairings, results and standings in a tournament may be shown on the tournament’s public pages, as they are on a printed results sheet. Your contact details, date of birth, KYC documents and payment details are never made public.

4. Who we share it with

• Organisers of tournaments you register for, to conduct those tournaments. Organisers must use this data only for that purpose.
• Service providers who process data for us under contract: payment aggregators and banks, cloud hosting (Amazon Web Services, Mumbai region), email and SMS delivery providers, and an AI service used to generate game-analysis text from move data.
• Authorities, where required by law, court order or a lawful request.
• A successor entity in a merger or acquisition, subject to this policy.

5. Where it is stored and how it is protected

Data is stored on servers in India (AWS ap-south-1, Mumbai). Data in transit is encrypted with TLS; passwords and one-time codes are stored only as one-way hashes; database backups are encrypted and kept in a separate, access-restricted location; and access to production systems is limited to authorised personnel. No system is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the DPDP Act requires.

6. How long we keep it

We keep account data while your account is active. After you ask us to delete your account we erase or anonymise your personal data, except records we must keep by law (for example payment and tax records, which are kept for the period required under tax law, generally up to 8 years). Published tournament results may be retained in anonymised form.

7. Children

Under the DPDP Act, a child is anyone under 18. We process a child’s personal data only with the verifiable consent of a parent or legal guardian, who registers on the child’s behalf. We do not track children’s behaviour or target advertising at them. Schools and academies that register students are responsible for obtaining parents’ consent first.

8. Your rights

Under the DPDP Act you may:

• ask for a summary of the personal data we process about you and who we have shared it with;
• ask us to correct, complete or update it;
• withdraw consent and ask us to erase it (subject to legal retention), which may end your ability to use ChessPe;
• nominate a person to exercise your rights in the event of death or incapacity; and
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any right, email privacy@chesspe.com from the email address on your account. We respond within the time the law requires.

9. Cookies and storage

We use only essential cookies and browser storage — to keep you signed in, remember preferences such as your city, and protect against abuse. We do not use third-party advertising cookies.

10. Changes

We may update this policy. The date at the top shows the current version, and material changes will be notified on the platform.

11. Contact and Grievance Officer

Prabhanjay Singh, Grievance Officer
CHESSPE SPORTS TECHNOLOGIES PRIVATE LIMITED, Arazi No 820/1, Sector A 187, Vsi Shivpur, Varanasi – 221003, Uttar Pradesh, India
Email: privacy@chesspe.com