Privacy Policy

Last updated: March 2026

KIBI Sports India ("KIBI Sports," "we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform, including our website (kibisports.com), mobile application, admin portal, sponsorship platform, and marketplace (shop.kibisports.com).

This policy is designed in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act)and applicable data protection regulations.

1. Data We Collect

We collect the following categories of personal data:

• Identity Data: Name, date of birth, gender, profile photo, sports category, and experience details.
• Contact Data: Phone number, email address, and communication preferences.
• Verification Data: KYC documents (Aadhaar, PAN) submitted for identity verification.
• Financial Data: Payment information processed through our payment partner (Razorpay). We do not store full card details.
• Usage Data: App usage patterns, feature interactions, device information, and analytics data.
• Content Data: Posts, comments, media uploads, campaign deliverables, and community interactions.
• Organization Data: Organization profiles, event data, staff information, and operational data (for institutional accounts).

2. Purpose of Data Processing

We process your personal data for:

• Account creation, authentication, and identity verification
• Providing platform services: event management, campaign participation, payments, and marketplace transactions
• AI-powered matchmaking between brands and athletes for sponsorship campaigns
• Communication: notifications, announcements, and customer support
• Platform improvement: analytics, performance monitoring, and feature development
• Legal compliance: fraud prevention, audit requirements, and regulatory obligations

3. Lawful Basis for Processing

Under the DPDP Act 2023, we process your personal data based on:

• Consent: Explicit consent obtained during registration and for specific processing activities.
• Legitimate Use: Processing necessary to fulfill our contractual obligations to you (providing platform services).
• Legal Obligation: Processing required by law, including KYC requirements and financial regulations.

4. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act 2023, you have the right to:

• Access: Request information about what personal data we hold about you and how it is being processed.
• Correction: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data (subject to legal retention requirements). You can delete your account through the mobile app settings.
• Withdraw Consent: Withdraw previously given consent at any time. This may affect your ability to use certain platform features.
• Grievance Redressal: File complaints about data processing with our Data Protection Officer or the Data Protection Board of India.
• Nominate: Nominate another person to exercise your rights in case of your death or incapacity.

5. Children's Data

KIBI Sports does not knowingly collect personal data from children under the age of 18 without verifiable parental or guardian consent. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information. Organizations managing minor athletes are responsible for obtaining and maintaining appropriate parental consent.

6. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and role-based permissions for staff and administrators
• Regular security audits and vulnerability assessments
• Secure payment processing through PCI DSS compliant partners (Razorpay)
• KYC document storage with restricted access and audit logging

Your data is stored on secure cloud infrastructure. We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

7. Data Sharing

We may share your personal data with:

• Sports Organizations: Your profile and event participation data is shared with organizations you are affiliated with.
• Brands/Sponsors: For athletes participating in brand campaigns, relevant profile information is shared with campaign sponsors.
• Payment Processors: Transaction data is shared with Razorpay for payment processing.
• Service Providers: We use third-party services for hosting, analytics, notifications, and email, subject to appropriate data processing agreements.
• Legal Requirements: We may disclose data when required by law, legal process, or government request.

We do not sell your personal data to third parties.

8. Cookies and Tracking

Our website uses cookies and similar technologies for:

• Essential Cookies: Required for basic site functionality (session management, security).
• Analytics Cookies: Used to understand how visitors interact with our website (Google Analytics). These are only activated with your consent.

You can manage cookie preferences through our cookie consent banner or your browser settings.

9. Data Breach Notification

In the event of a personal data breach that is likely to cause harm to Data Principals, we will:

• Notify the Data Protection Board of India as required under the DPDP Act
• Notify affected users without unreasonable delay
• Provide details about the nature of the breach, data affected, and remedial actions taken
• Take immediate steps to contain and remediate the breach

10. Cross-Border Data Transfer

Your personal data is primarily stored and processed in India. If data needs to be transferred outside India, we will ensure appropriate safeguards are in place as required by the DPDP Act and any regulations issued by the Central Government regarding permitted jurisdictions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the platform or by email. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, data access requests, or to exercise your rights under the DPDP Act, contact us at:

• Email: privacy@kibisports.com
• Website: kibisports.com/contact

If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India.