Privacy policy

1. Who controls your data

EIKHOI TURF, with its principal contact address at Sekmaijin Khunou Litan Makhong, operates Eikhoi Turf and is the data fiduciary for platform account, marketplace and support data. A venue may separately control information it collects directly while delivering a booking.

2. Data we collect

• Identity and contact information: name, email address, mobile/WhatsApp number and account role.
• Account and verification information, authentication events and provider identifiers from Supabase, Google or Facebook.
• Booking, venue, payment status, refund, commission, review, support and communication records.
• Owner verification, bank and settlement information where supplied.
• Device, browser, IP, security, diagnostic and consent records.
• Location only when you allow the browser to provide it; precise location is used to calculate nearby venues and is not required to browse.

3. Why we process it

We process data to provide requested accounts and bookings; verify identity; facilitate payments and refunds; send essential booking and security messages; operate reviews and venue administration; prevent fraud; provide support; comply with law; and improve reliability. Promotional WhatsApp messages require separate consent and may be withdrawn at any time.

4. Sharing

We share only what is reasonably necessary with the booked venue or player, Supabase, hosting and storage providers, Razorpay, Meta/WhatsApp, email and social-login providers, mapping services, professional advisers and authorities where lawfully required. We do not sell personal data. Providers may process data outside India subject to applicable law and contractual safeguards.

5. Retention

• Account/profile data: while active and normally up to 3 years after closure.
• Bookings, payments, commissions, invoices and refund records: up to 8 years where needed for tax, accounting, fraud or legal obligations.
• OTP and routine security logs: normally up to 90 days, longer when investigating abuse.
• Support, complaint and consent records: normally up to 3 years after resolution or withdrawal.
• Reviews may remain published in de-identified form unless removal is legally required.

We may retain data longer for a legal claim, regulatory direction, safety investigation or preservation obligation.

6. Your choices and rights

You may request access to a summary of your data, correction, completion, erasure, withdrawal of optional consent, grievance redressal and nomination where applicable. Withdrawal does not affect prior lawful processing and may prevent optional features. Use the account-deletion page or contact the grievance officer. You may also complain to the Data Protection Board of India when that remedy is available.

7. Security and children

We use role-based access, encryption in transit, restricted credentials and monitoring controls. No service is completely secure; report suspected compromise promptly. The platform is not intended for children under 18 to independently enter paid bookings. A parent or lawful guardian must act for a minor.

8. Cookies and changes

We use essential authentication/session storage and local storage for functions such as promotion frequency and PWA operation. Any non-essential analytics or advertising technology will require appropriate notice and choice before activation. Material policy changes will be announced in the application and, where required, consent will be requested again.