Privacy Notice
Effective: 25 October 2026
This notice explains, in plain words, what personal data Eternal Club holds, why, who it is shared with, how long it is kept and how you exercise your rights under the Digital Personal Data Protection Act, 2023. Signed-in members manage all of it from Profile → Privacy & your data; anyone can write to us through the contact form.
1. Who we are
Eternal Club decides why and how your personal data is processed: under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary, and you are the Data Principal.
Questions, requests and grievances go to our Grievance Officer: Grievance Officer, Eternal Club (Grievance Officer) · support@eternalclub.in · Srikakulam, Andhra Pradesh, India 532001.
2. The personal data we hold
Only what the service needs. Each item, and why:
- Account: Email address; Password, stored only as a one-way hash (if you set one); Your Google account identifier, name and picture (only if you sign in with Google); When you joined, confirmed your email and last signed in.
- Profile: Display name, member handle and avatar image; Timezone, so your day and streak start at your midnight; Whether your profile shows on public leaderboards (you can turn it off); Phone number and when you verified it (only if you add one); Your declaration that you are 18 or older.
- Games and learning: Game sessions, levels, scores, revivals and lockouts; Quiz answers, scores and times; articles read; Streaks, achievements, ranks and weekly leaderboard positions.
- Rewards and money: Focus Credit, Game Coin and wallet balances, and every movement of them; Scratch cards, Vault orders and redemptions, Elite Drop entries; Withdrawal requests, including the UPI ID or bank details you give for the payout (stored encrypted); Referrals: who joined with your referral code.
- Messages: Notifications we send you and whether they were delivered; Your notification preferences, and your choice about offers and announcements; The browser push subscription of each device where you turn on notifications.
- Security: Signed-in devices: IP address, browser and device type, last activity; Security events such as sign-ins, failed attempts and password changes, with IP address and browser.
- Your requests: Messages you send through the contact form; Privacy requests and grievances, and our answers; The details of anyone you nominate to act for you; Your consent decisions and the notice version you saw.
- Guest play: A random guest identifier and the display name you choose; Guest progress, kept on your device until you create an account.
3. Why we use it
Running your Eternal Club account: To give you the games, Academy, rewards, wallet and support you signed up for, and to keep them secure and fair.
Offers and announcements (optional): To send you offers, new features and announcements by email, SMS and push. Optional.
- Creating your account, signing you in and keeping it secure (sign-in codes, passwords, devices, suspicious-activity checks).
- Running the memory game, quizzes, articles, streaks, achievements and leaderboards, and saving your progress.
- Calculating, crediting and paying your Focus Credits and Game Coins, scratch cards, Vault orders, Elite Drops and withdrawals.
- Sending messages the service needs: codes, reward and withdrawal updates, account and security notices.
- Answering your messages, requests and grievances.
- Preventing cheating, fraud and abuse, and meeting our legal obligations (for example tax records of payouts).
- Announcements and offers by email, and by SMS or push notification if you have turned those on.
- You still get the messages the service needs (codes, rewards, security) without this.
4. Your consent, and withdrawing it
We ask for your consent when you first use the app, for each purpose on its own, and again whenever this notice changes. Offers and announcements are off unless you turn them on.
You can withdraw consent as easily as you gave it: turn offers and announcements off in Profile → Privacy & your data. Withdrawing consent to run your account means closing it: delete it from Profile, or decline the notice. Processing done before you withdrew stays lawful.
When you withdraw consent to run your account, we erase it after 7 days, unless you sign in and accept the notice again before then.
5. Your rights
You can exercise each of these from Profile → Privacy & your data, or by writing to the Grievance Officer:
- Access: download a copy of all your personal data, with a summary of how it is used and who it is shared with.
- Correction and updating: change your name, handle, avatar, timezone, email and phone in your profile, or ask us to correct anything else.
- Erasure: delete your account and its data at any time, or ask us to.
- Grievance redressal: we answer every request and grievance within 30 days.
- Nomination: name a person who may exercise these rights for you if you die or become unable to.
- Complaint: if you are not satisfied with our answer, you can complain to the Data Protection Board of India, through its online complaint service.
8. How long we keep it
Only as long as the purpose needs, then we erase it:
- Your account and everything in it: until you delete it or withdraw consent.
- If you don't use your account for 3 years, we erase it. We email you 7 days before (at least 48 hours), and signing in keeps it.
- Sign-ups never confirmed: 7 days.
- Security logs (sign-ins, devices, IP addresses): 1 year, as the DPDP Rules require for investigating unauthorised access.
- Notifications: 365 days.
- Paid withdrawal records: 8 years after your account is erased, where tax and accounting law require it, then erased.
- Your requests and grievances, and our answers: 3 years after they are closed.
- Your consent decisions: 1 year after your account is erased, as proof of what you agreed to.
9. How we protect it
Encrypted connections everywhere; passwords and sign-in codes stored only as one-way hashes; payout details encrypted at rest; the database reachable only by the app; staff access limited by role and logged; backups of production data.
If a breach affects your personal data, we tell you without delay: what happened, what it may mean for you, what we are doing, and what you can do, with the Grievance Officer's contact. We also report it to the Data Protection Board of India.
10. Adults only
Eternal Club is for people 18 or older, and you confirm your age when you first use the app. We do not knowingly process children's data. If we learn an account belongs to someone under 18, we erase it. A parent or guardian can tell the Grievance Officer.
11. Your part
The Act asks you to give true information, not to impersonate anyone, and not to file false or frivolous grievances.
12. Changes and languages
When we change this notice, we ask for your consent again the next time you open the app.
This notice is in English. To receive it in another language listed in the Eighth Schedule to the Constitution of India, write to the Grievance Officer.