Privacy Policy

Gameheist Entertainment LLP decides how your data is used. Under the Digital Personal Data Protection Act, that makes us the “data fiduciary”.

What you give us

• When you sign in with Google: your name, email address and profile picture, as shared by your Google account. We do not get your Google password or access to anything else in your Google account.
• Your mobile number and name, asked the first time you sign in. Staff use them to find your bookings.
• If you walk in, staff may type in your number and name so your visits and bills are linked to you. This is optional.

What we record when you book, visit and play

• Your bookings: station, date, time, length, number of players and status (for example confirmed, cancelled or no-show).
• Your bills: sessions, food and drinks bought, any charges added, and offers applied.
• Payments and refunds: amount, method (cash, UPI or online), time, and a reference number.
• Emails we send you about your bookings.
• Notes staff add to your account, such as the reason if an account is blocked from booking online.
• CCTV footage of the venue.
• Photos and videos taken at the venue, which we may post on our social media.

What we do not collect

• We do not collect or store card numbers, UPI PINs or bank login details. Payments are made at the counter.
• We do not ask for Aadhaar, PAN or any government ID to book.
• We do not record what you do on our gaming machines.

• To create and manage your bookings, and to check you in at the counter.
• To work out prices, keep your bill, take payments and send refunds.
• To email you about your bookings.
• To keep booking fair, for example by limiting how many upcoming bookings one account can hold, and to stop misuse.
• To keep the venue, our visitors and our equipment safe and secure (CCTV).
• To show what Gameheist is like on our social media (photos and videos).
• To understand where people get stuck in our booking screens and improve them.
• To keep the accounting and tax records the law requires, and to respond to lawful requests.

We do not sell your data.

By signing in, booking or visiting, you agree to us using your data as described in this policy. If you book for, or bring, someone else, including a child, you confirm that you are allowed to share their details and that they, or their parent or guardian, agree to this policy.

You can withdraw your consent at any time by emailing us or asking at the counter (see section 9). Withdrawing does not affect what we did before. Without an account we cannot take online bookings from you, but you can still walk in and pay at the counter.

We may email you about your bookings: booking confirmed, booking cancelled, payment and refund updates, and reminders before your booking. We send news and offers only if you have agreed to receive them, and every such email lets you unsubscribe. We do not send SMS or WhatsApp messages.

We share only what each one needs to do its job for us:

• Our staff at the counter, who see your name, number, bookings and bills.
• Google, which handles sign-in.
• Our hosting and database provider, which stores the booking system and its data.
• Our analytics provider, which receives booking-screen events (see section 7).
• Our email provider, which receives your email address and the message.
• Social media platforms, where we post photos and videos taken at the venue.
• Government or law enforcement bodies, only when the law requires it.

These providers must protect your data. Some of them may store data on servers outside India, as the law allows.

• Sign-in cookie: keeps you signed in. It is marked so that scripts on the page cannot read it, and it is sent only over secure connections on our live site.
• Google sign-in may set its own cookies when you use it.
• Device storage: remembers a station and time you picked but have not booked yet, so you can continue after signing in.
• Analytics: we record a short list of booking steps, such as opening the booking page, picking a time and reserving. When you are signed in, these are linked to an internal customer ID, never your phone number or email. Our analytics tool may keep a random ID on your device to group these steps.
• We do not use session recording, automatic click tracking or advertising cookies.

• Your account: while you use our services. If you ask us to delete it, we delete what the law does not require us to keep.
• Bookings, bills, payments and refunds: up to 8 years, as tax and accounting laws require.
• CCTV footage: kept for 7 days, then recorded over, unless we need it to look into an incident or because the law requires it.
• Photos and videos we post: kept until you ask us to remove them.
• Analytics events: up to 12 months.
• When we no longer need data, we delete it or remove what links it to you.

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• Give you a summary of the personal data we hold about you and how we use it.
• Correct, complete or update your data, such as your name.
• Erase your data. We will delete what we do not need to keep by law, such as bill and payment records.
• Remove a photo or video of you, or of your child, from our social media.
• Stop using your data, by withdrawing consent.
• Let a person you nominate use these rights for you if you die or cannot act yourself.

To use any of these rights, email gameheistindia@gmail.com, call us on 83054 54343 or ask at the counter. We will check it is your account before acting. We confirm we have received your request within 48 hours and answer within one month.

If you are not happy with our answer, you can complain to the Data Protection Board of India.

We take reasonable security measures as required by the Information Technology Act, 2000 and its rules. Our site uses encrypted connections. Staff access is limited by role, and money records can be changed only through checked actions on our server, not from your browser. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

People of all ages are welcome at Gameheist. When someone under 18 books, visits or plays, we rely on their parent or guardian having agreed to this policy for them. We do not use children’s data for advertising. A parent or guardian can contact us at any time to see, correct or delete their child’s data, or to have a photo of their child removed.

We may update this policy. The date at the top shows the latest version. If we make a significant change to how we use your data, we will tell you before it applies.

For any question about your data or this policy, contact our Grievance Officer.