This Privacy Policy explains how the Namakkal Turf Premier League ("NTPL"), run by Dream Makers [owner to confirm legal entity name], collects, uses and protects your personal data when you use this website and register as a player. We follow the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. What we collect

• Account: name, mobile number, email address and a password (stored only as a secure hash).
• Player profile: date of birth, area, playing role, batting and bowling style, and an optional CricHeroes profile link.
• Identity (DigiLocker / Aadhaar): with your consent, DigiLocker shares a verified eKYC record. We use your name, date of birth, gender, masked Aadhaar number (last 4 digits only) and the eAadhaar photo. We never ask for, collect or store your full 12-digit Aadhaar number. We do not see your DigiLocker password or OTP.
• Photos: the player photo or live selfie you upload, plus a face-match score from comparing it with your eAadhaar photo.
• Payment: amount, date, payment status, order or transaction reference, UPI transaction ID (UTR) and any payment screenshot you upload. Card, UPI PIN and bank details are handled by Razorpay or your UPI app. We never receive them.
• Technical: basic device and browser data needed to run the site securely.

2. Why we use it

• To create your account, enforce one account per player and one registration per season, and run the league (teams, fixtures, scoring and communication).
• To verify your identity and age, and that your photo is really you, so the league stays fair.
• To take and reconcile registration fees, issue refunds and keep accounting records.
• To show your name, role, team and verified photo on public squad and player pages and in match coverage.

3. Aadhaar and DigiLocker data

• Identity data comes only through the official DigiLocker consent flow. The code exchange happens on our server, never in your browser.
• The eAadhaar photo is never shown publicly. Our face-match service and authorised reviewers can see it, and only to verify your player photo.
• We keep the eAadhaar photo only until verification is finished, and no longer than [X] days. After that we keep only the result (verified or not, the date and the masked number).
• Identity data is stored encrypted, in private storage, with access limited to named administrators and logged.

4. Player photos

• Photos are checked (format, size, face and quality), cropped to a square and stored privately.
• Only photos with Verified status are shown publicly. Pending or rejected photos are never published; a silhouette is shown instead.
• Face matching may use a third-party KYC service provider that acts only on our instructions: [Provider name].

5. Payment data

• Online payments are processed by Razorpay Software Pvt. Ltd. under its own privacy policy and PCI-DSS controls. UPI payments are processed by your bank or UPI app.
• Payment records are kept as long as tax and accounting law requires ([X] years).

6. Sharing

We do not sell your personal data. We share it only with: DigiLocker/MeitY (verification), our face-match provider, Razorpay or banks (payments), CricHeroes (scoring, for player name and role only), hosting providers, and authorities where the law requires it.

7. How long we keep data

We keep account and profile data while your account is active and for [X] months after the last season you played. We keep identity data as described in section 3. You can ask us to delete your data sooner, unless the law requires us to keep it.

8. Your rights

You can ask to see, correct or delete your data, or withdraw consent. Withdrawing consent for verification may mean you cannot take part. For a parent or guardian of a player under 18, these rights are exercised by the parent or guardian. To make a request, email namakkalturfpremierleague@gmail.com. Grievance officer: [Name], [email], [phone]. We reply within [X] days.

9. Security

We use HTTPS, encryption at rest for identity data and photos, access controls and audit logs. No system is perfectly secure; we will tell you and the authorities about a breach as the law requires.

10. Cookies and local storage

The site uses essential browser storage to keep you signed in. YouTube, Instagram and CricHeroes embeds may set their own cookies under their policies.

11. Changes

We will post updates on this page with a new date.