Privacy Policy.
In plain English first.

• We collect only the information we need to give you an NCR ID, run tournaments, deliver subscriptions and accept payment.
• We never sell your personal data to advertisers.
• You can ask us to export or delete your account at any time.
• Payments are processed by PayU, our payment gateway; we do not store your card number on our servers.

The "data controller" for personal data collected on 8by8verse is NTSE Guru Ventures. Our registered office and contact details are listed at the bottom of this page.

• Account data: name, email, mobile number, date of birth, federation/country, FIDE ID (if you choose to link one), profile photo (optional).
• Game data: tournament entries, results, pairings, scoresheets, puzzle attempts, games played online.
• Payment data: billing name, billing address, transaction amount, payment status. Your card / UPI ID itself is collected directly by PayU (our payment gateway) and is never visible to us.
• Technical data: IP address, browser type, device type, cookies and similar identifiers used to keep you signed in and remember preferences (theme, language, federation).

• To create your NCR ID and run the rating engine.
• To process tournament entries, deliver subscriptions and send post-event reports.
• To process and reconcile payments and, where required by law, issue GST invoices.
• To send transactional notifications (e.g. payment receipts, tournament reminders) via email, WhatsApp or SMS.
• To operate, debug and improve the platform, prevent fraud and detect cheating.
• To comply with applicable Indian law, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023.

We share the minimum necessary personal data with the following categories of processors, each bound by contract to use it only on our instructions:

• PayU — payment processing.
• Hosting providers — to operate the website and database.
• Email / WhatsApp / SMS providers — to send the transactional notifications listed above.
• Tournament organisers — only the data you submit as part of registering for their tournament.
• Indian tax and regulatory authorities — when required by law.

We do not sell your personal data to third parties for advertising or any other purpose.

We use first-party cookies to keep you signed in, remember your federation/country preference and provide basic anti-abuse signals. We do not use third-party advertising cookies. You can clear cookies at any time from your browser settings; doing so will sign you out and reset your preferences.

• Account data: for as long as your account is active. If you delete the account, personal identifiers are removed within 30 days; tournament results may be retained in anonymous, aggregate form to preserve historical ratings.
• Payment records: retained for the period required by the Indian Companies Act and tax law (currently 8 years from the end of the relevant financial year).
• Webhook and audit logs: retained for up to 3 years for fraud-prevention and reconciliation.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request a copy in a portable format.
• Request deletion (subject to legal retention rules above).
• Withdraw consent for non-essential notifications at any time from /me/notifications.

To exercise any of these rights, write to contact@8by8verse.com with the subject line "Data request". We will respond within 30 days.

We use HTTPS everywhere, hash passwords with industry-standard algorithms and limit internal access to personal data on a need-to-know basis. No internet system is 100% secure, but we treat your data with the same care we treat our own.

If we change this Privacy Policy in a way that materially affects you, we will notify you by email at least 14 days before the change takes effect.

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the grievance officer for NTSE Guru Ventures can be reached at contact@8by8verse.com.