1. Who we are
The 12th Nation is a service operated by Mobinsons Ventures Private Limited (“we”, “us”), which decides how and why your personal data is processed and is therefore the Data Fiduciary under the DPDP Act; you are the Data Principal. For any privacy question, to exercise your rights, or to raise a grievance, contact our grievance contact at support@the12thnation.com.
2. The data we collect
- Account (Google sign-in): your name, email address and profile photo, via Google OAuth. We never see your Google password.
- Gameplay: your predictions, points and referral relationships, plus a coarse country you choose at signup. We use that country only to power the aggregate participation map — a region-level view of how many players are from each country and which nations are backed to win the Cup, shown as counts and percentages. It is always aggregate and region-level — never precise GPS, and never used to identify you individually.
- Optional socials: if you connect Instagram/YouTube via official OAuth, only what those accounts already make public, and only what you opt to display.
- Technical: IP address, device/browser info, and cookies (see the Cookie Policy).
- Payout (winners only): KYC identity details (e.g. PAN, legal name) and payment information, collected solely to verify eligibility, meet tax obligations and pay rewards.
3. Why we use your data (purposes)
- To run the game: score predictions, rank the leaderboard, and operate referrals.
- For service communications — we email you about your account, predictions and results, prize eligibility and claims, and important policy or security updates. These are transactional/service messages, not marketing. We do not send promotional or advertising email, and we do not sell, rent or share your contact details for marketing.
- To verify winners and process payouts, including legally required KYC and tax withholding.
- To protect the contest — prevent fraud, duplicate accounts and abuse.
- To measure usage analytics, only where you have given consent.
4. Consent & legal basis (DPDP Act)
We process your personal data on the basis of your consent and for certain legitimate uses permitted by the DPDP Act — including data you voluntarily provide for a clearly specified purpose (to play and to be paid), processing necessary to comply with legal obligations (tax/KYC), and to protect the integrity of the contest. Where we rely on consent, our request is free, specific, informed and limited to the stated purpose, and you can withdraw it at any time (see §9) as easily as you gave it. Withdrawing consent does not affect processing already carried out, nor processing we are legally required to continue.
5. Referrals
If you invite a friend, you share your own personal invite link through your own channels — we do not collect your friend’s contact details and we never email or message anyone on your behalf. We store only the referral relationship (who invited whom) to credit points and prevent abuse, with caps to discourage spam. A referred person becomes a Data Principal in their own right only if they choose to sign up, with their own consent. Please only invite people who are happy to hear from you.
6. Sharing & processors
We do not sell your personal data. We share it only with Data Processors acting on our instructions under contract — hosting, database, authentication and (for winners) identity/payment providers — or where required by law or to protect rights and safety. Your profile is private by default — it stays hidden from others unless you choose to make it public. Even when public, it shows only what you opt to share (rank, predictions and any social links you add), and you can switch it back to private at any time.
7. Storage, transfers & retention
Your data may be processed on servers in or outside India by our processors under appropriate safeguards, and only as permitted by the DPDP Act (we do not transfer personal data to any country restricted by the Government of India). Payment and KYC data of winners is stored in India in line with applicable financial-data localisation requirements.
We keep account and gameplay data while your account is active and for as long as the purposes above require. You can delete your account at any time from your profile settings: we erase your personal data from our active systems immediately and from backups within 90 days. We also erase data once its purpose is served or you withdraw consent.
Because this is a one-off World Cup 2026 contest, its purpose is served when the tournament ends (final on 19 July 2026). After the prize-settlement window we will erase players' personal data by 19 August 2026. The only exception is payout, KYC and tax records of paid winners, which we must retain for the period required by Indian tax and anti-fraud law.
8. Security & breach notification
We apply reasonable technical and organisational safeguards to protect your data, though no system is perfectly secure. If a personal-data breach occurs, we will notify affected users and the Data Protection Board of India without undue delay, and provide the Board with a detailed report within 72 hours of becoming aware (extendable only on the Board's permission), in line with the DPDP Rules, 2025.
9. Your rights as a Data Principal
Under the DPDP Act you have the right to: access a summary of your personal data and how it is processed; correct, complete or update it; erase it (subject to legal retention); withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and grievance redressal. You can delete your account and data yourself at any time from your profile settings. To exercise any other right, email support@the12thnation.com and we will respond within the timelines required by law. You can manage cookie choices any time from Cookie settings. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Children
The Service is for adults 18 and over only. We do not knowingly process the personal data of children, we do not direct the Service to children, and we never use it to track or profile children or to show them targeted advertising. If you believe a minor has signed up, contact us and we will remove the account.
11. Changes & contact
We may update this policy; we will notify material changes in-product and by a service email, and update the “Last updated” date above. Questions or requests: support@the12thnation.com.