Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains what information ClashMob (“we”, “us”, the “Platform”), operated by [LEGAL_ENTITY], collects when you use our mobile application and website, why we collect it, who we share it with, and the choices you have.

By creating an account you agree to this policy. If you do not agree, please do not use the Platform.

1. Information we collect

a. Information you give us

What	Why we need it
Mobile number	It is your account identifier. We send a one-time password (OTP) to it to verify that the number is yours.
Name (and email, if you add one)	To address you in the app and to contact you about your account or a payment.
Free Fire UID and in-game name	So the match host can identify you inside the custom room and match your result to your account.
UPI ID	Only collected when you request a withdrawal, so we can send your winnings.
Payment reference (UTR) and payment screenshot	When you add money by UPI, so we can match your payment against our bank records before crediting your wallet.
Identity documents (KYC)	We may ask for identity or age verification before processing payouts, where required by law or by our payment partners.

b. Information created as you use the Platform

• Your wallet balance and a record of every transaction — deposits, entry fees, prizes, refunds and withdrawals — with amounts and timestamps.
• Which matches you joined, your slot number, and your declared rank, kills and prize for each.
• Deposit and withdrawal requests and their status.

c. Information collected automatically

• IP address and device/browser information, recorded with sign-in sessions and with OTP requests. We use this to detect abuse, fraud and duplicate accounts.
• Server logs of requests made to our API, for debugging and security monitoring.

We do not collect your contacts, photos (other than a payment screenshot you choose to attach), precise location, or data from other apps on your device. The app asks for camera and photo-library access only so you can attach a payment screenshot, and only at the moment you choose to do so.

2. How we use your information

• To create and secure your account, and to keep you signed in.
• To let you join matches, and to run those matches — including showing your in-game name on the match roster to other participants.
• To operate your wallet: taking entry fees, crediting prizes and refunds, and processing withdrawals.
• To verify payments you tell us you have made, against our own bank records.
• To detect and prevent cheating, fraud, duplicate accounts and abuse of promotions.
• To respond to your support messages and disputes.
• To meet legal, tax, accounting and regulatory obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who we share it with

We share only what is necessary, and only with:

• Other players — your in-game name and slot number appear on the roster and in the results of matches you join. Your phone number, email and wallet balance are never shown to other players.
• Payment providers — to process deposits and payouts.
• SMS providers — your mobile number, to deliver your OTP.
• Hosting and storage providers — who store our database and uploaded images on our behalf.
• Authorities — where we are legally required to disclose information, or to establish, exercise or defend legal claims.

If our business is transferred to another party, your information may be transferred with it; we will tell you before that happens.

4. Payment information

We never see or store your card number, UPI PIN, bank password or CVV. Online payments are handled entirely by our payment gateway on their own systems. We record only the outcome — an order reference, the amount, and whether it succeeded.

If you pay us directly by UPI, you give us the transaction reference (UTR) and, optionally, a screenshot of the payment. We use these solely to confirm the money arrived before crediting your wallet. Payment screenshots are stored privately and can be viewed only by you and by authorised staff reviewing your deposit — they are never public and never shown to other players.

5. How long we keep it

• Account and wallet records — for as long as your account is open, and afterwards for as long as we are required to keep financial records under applicable tax and accounting law.
• OTP records — deleted automatically within 24 hours.
• Sign-in sessions — until they expire or you sign out.
• Payment screenshots — kept while the deposit is under review and afterwards as proof of the transaction.

We cannot delete financial transaction records on request where law requires us to retain them, but we can close your account and stop processing your data for any other purpose.

6. How we protect it

• All traffic between the app and our servers is encrypted in transit.
• OTP codes are stored only as salted one-way hashes — we cannot read them back.
• Sign-in tokens are stored hashed on our servers, and in your device's secure keystore on your phone.
• Payment screenshots are served only through an authenticated request that checks you are the uploader or an authorised reviewer.
• Administrative actions affecting money or accounts are recorded in an audit log.

No system is perfectly secure. Keep your phone and your OTP to yourself — we will never ask you for your OTP, and anyone who does is trying to defraud you.

7. Your rights

You may ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or out of date;
• delete your account and the personal information we are not legally required to keep;
• stop sending you non-essential messages.

Write to support@mobcraft.in from your registered email, or from the app, and we will respond within 30 days. We may need to verify your identity first. Withdraw any remaining winnings before asking us to close your account.

8. Age restriction

ClashMob is strictly for users aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to a minor we will suspend it and delete the associated personal information.

9. Changes to this policy

We may update this policy. We will change the “last updated” date above, and for significant changes we will notify you in the app. Continuing to use ClashMob after a change means you accept the updated policy.

10. Contact & grievance officer

For any question about this policy, or to exercise the rights above:

• Email: support@mobcraft.in
• Grievance Officer: [GRIEVANCE_OFFICER_NAME]
• Address: [LEGAL_ENTITY], [ADDRESS], [CITY], [STATE]

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.