Privacy Policy

This Privacy Policy explains how Guava Trees Softech Private Limited (“Guava Trees”, “we”, “us”), the company that owns and operates PlayTambola.Live (the “Service”), collects, uses and protects your personal data. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

Registered office: H.No. 47, Saabri Villa, Lala Lajpat Rai Colony, Bagh Dilkusha, Bhopal, Madhya Pradesh, India – 462023 · GSTIN 23AAJCG1002E1ZF.

1. What we collect

Account details (hosts and registered players)

Full name and display name, email address and a securely hashed password (we never store your actual password).
If you sign in with Google: your Google account ID, name and email address as shared by Google. We do not get your Google password.
Your confirmation that you are 18 or older and that you accepted our disclaimer, with the date and the version you accepted.
Your preferences, such as default game settings.

Game data

Game names you create, the display name players use in a game, generated tickets, numbers tapped and prizes won.
Guest players join with a display name only — no account or email is needed.

Payment and invoice details (hosts who buy seats)

Your mobile number (our payment partner needs it to process a payment), your state (to calculate GST correctly) and, if you ask for a GST invoice, your business name and GSTIN.
Order and payment records: bundle, amount, GST, order number, status, the payment reference / bank reference (UTR) and the payment method type (for example UPI or card).
We never see or store your card number, UPI PIN, bank login or CVV. Those are entered on Cashfree’s secure checkout and handled by Cashfree.

Technical data

Essential cookies: pt_session (keeps you signed in), pt_csrf (protects your account against cross-site attacks) and pt_oauth (a short-lived cookie used only during Google sign-in).
Browser storage on your device for your theme, language, guest name and the game you are playing, so you can rejoin after a refresh.
Our servers keep routine technical logs (such as IP address, browser type and request times) to keep the Service secure and fix problems.

We do not use advertising cookies or third-party analytics trackers, and we do not sell your personal data.

2. Why we use it

To create and secure your account and let you sign in.
To run games: generate tickets, show names on the host’s screen, detect wins and show results.
To process seat purchases, credit seats, and issue receipts and GST invoices.
To send service emails: email verification, password reset, payment receipts and important notices about the Service.
To prevent fraud, abuse and bots (for example with Cloudflare Turnstile on sign-up and password reset).
To meet legal, tax and accounting obligations.
To answer your questions and complaints.

We rely on your consent (which you give when you register, join a game or pay) and, where the law allows, on legitimate uses such as complying with tax law and preventing fraud.

We share only what is needed, with:

Cashfree Payments India Pvt. Ltd. — to process payments and refunds.
Google — only if you choose “Continue with Google”, to sign you in.
Cloudflare — network security, content delivery and bot protection.
Our email delivery provider — to send verification, password-reset and receipt emails.
Other players in the same game — your display name and wins are visible to the host and to players in that game, and on a result link you choose to share.
Government or regulatory authorities, when the law requires it.

Our service providers may only use your data to provide their service to us.

4. Where it is stored and how long we keep it

Your data is stored on servers located in India and protected with access controls, encrypted connections (HTTPS) and hashed passwords.

Account data: while your account is active, and deleted within 30 days after you ask us to delete your account (except as below).
Game data: kept so you can see past games; anonymised or deleted when the account that owns it is deleted.
Payment, receipt and invoice records: kept for as long as Indian tax and accounting laws require, even after an account is deleted.
Technical logs: kept for a short period for security and troubleshooting.

5. Your rights

Under Indian data protection law you can:

ask for a summary of the personal data we hold about you;
ask us to correct, complete or update it;
ask us to delete your account and personal data (subject to records we must keep by law);
withdraw your consent at any time (this may mean you can no longer use some features);
nominate another person to exercise your rights if you die or become incapable;
raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.

To use any of these rights, email admin@playtambola.live from your registered email address.

6. Children

The Service is meant only for people aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a child has used the Service, tell us and we will delete their data.

7. Changes to this policy

We may update this policy. The “Last updated” date shows when. We will tell you in the app or by email about significant changes.

8. Grievance Officer and contact

Grievance Officer, Guava Trees Softech Private Limited
H.No. 47, Saabri Villa, Lala Lajpat Rai Colony, Bagh Dilkusha, Bhopal, Madhya Pradesh, India – 462023
Email: admin@playtambola.live · Phone: +91 73892 93931

We acknowledge grievances within 24 hours and aim to resolve them within 15 days.