Last Updated: January 7, 2026
1. Introduction
Assam Cricket Association ("ACA", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Data Controller
Organization: Assam Cricket Association
Address: Barsapara Cricket Stadium, Guwahati, Assam, India
Email: info@assamcricket.com
Data Protection Officer: dpo@assamcricket.com
3. Information We Collect
3.1 Personal Information
We may collect the following personal information:
- Contact Information: Name, email address, phone number, postal address
- Account Information: Username, password (encrypted), profile picture
- Payment Information: Billing address, transaction details (payment processing handled by secure third parties)
- Communication Data: Emails, messages, and feedback you send to us
3.2 Automatically Collected Information
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, navigation patterns
- Cookies: Session cookies, preference cookies (see our Cookie Policy)
4. How We Use Your Information
We process your personal data for the following purposes:
- Service Delivery: To provide and maintain our services, process registrations and bookings
- Communication: To send updates, newsletters, and respond to inquiries (with your consent)
- Improvement: To analyze usage patterns and improve our website and services
- Security: To prevent fraud, protect against malicious activities, and ensure platform security
- Legal Compliance: To comply with legal obligations and regulatory requirements
5. Legal Basis for Processing (DPDP Act 2023)
We process your personal data under the following lawful grounds:
- Consent: You have given explicit consent for specific processing purposes
- Contractual Necessity: Processing is necessary to fulfill our services to you
- Legal Obligation: Compliance with Indian laws and regulations
- Legitimate Interests: For security, fraud prevention, and service improvement
6. Your Rights Under DPDP Act 2023
You have the following rights regarding your personal data:
6.1 Right to Access
You can request a copy of the personal data we hold about you.
6.2 Right to Correction
You can request correction of inaccurate or incomplete data.
6.3 Right to Erasure
You can request deletion of your personal data, subject to legal retention requirements.
6.4 Right to Nominate
You can nominate another person to exercise your rights in case of death or incapacity.
6.5 Right to Grievance Redressal
You can file complaints about data processing with our Data Protection Officer.
To exercise your rights, contact: dpo@assamcricket.com
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods:
- Account Data: Retained while account is active + 2 years after closure
- Transaction Records: 7 years (as per tax and accounting regulations)
- Communication Logs: 1 year
- Website Analytics: 26 months
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- HTTPS encryption for all data transmission
- AES-256 encryption for sensitive data at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Employee training on data protection
9. Data Sharing and Disclosure
We may share your data with:
- Service Providers: Hosting, payment processing, email services (under strict data processing agreements)
- Legal Authorities: When required by law or to protect our rights
- BCCI and Cricket Bodies: For tournament registration and cricket administration
We do not sell your personal data to third parties.
10. International Data Transfers
Your data may be transferred to and processed in countries outside India. We ensure adequate safeguards are in place through Standard Contractual Clauses and Data Protection Agreements.
11. Children's Privacy
Our services are not directed to individuals under 18 years of age. For users under 18, we require verifiable parental consent before collecting personal data. If we discover we have collected data from a child without proper consent, we will delete it promptly.
12. Cookies and Tracking
We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.
13. Data Breach Notification
In the event of a data breach that may affect your rights and freedoms, we will:
- Notify affected individuals within 72 hours of becoming aware
- Report to CERT-In and relevant authorities as required
- Provide information about the breach and remedial measures
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending email notifications for significant changes (if you've subscribed)
- Displaying a prominent notice on our website
15. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices:
Data Protection Officer
Email: dpo@assamcricket.com
Address: Assam Cricket Association, Barsapara Cricket Stadium, Guwahati, Assam
Phone: +91-361-XXXXXXX
16. Grievance Redressal
Under the DPDP Act 2023, you have the right to file a complaint with:
- Internal: Our Data Protection Officer (contact details above)
- External: Data Protection Board of India (once established)
We are committed to resolving complaints within 30 days of receipt.
Your Consent
By using our website and services, you consent to this Privacy Policy and our processing of your personal data as described herein. If you do not agree, please do not use our services.