1. Introduction

Jio Blast Esports Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at 4th Floor, Court House, Dhobi Talao, Kalbadevi, Mumbai – 400002, Maharashtra, India ("JioBlast" / "we" / "us" / "our") operates the JioBlast platform — an esports technology platform that facilitates access to tournaments, competitive gaming events, live streams, community features, and related content — through its website at www.jioblast.com ("Website") and its mobile application ("Application"), collectively referred to as the "Platform".

This Privacy Policy ("Policy") explains how we collect, use, store, share, and protect personal information and data relating to individuals who access or use the Platform ("Users", "you", "your"). It also describes your rights in relation to your personal data and how you may exercise them.

This Policy is published in compliance with:

• the Information Technology Act, 2000 ("IT Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");

• the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021 ("IT Rules");

• the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), to the extent notified and in force;

• the Promotion and Regulation of Online Gaming Act, 2025 ("Online Gaming Act") and the Promotion and Regulation of Online Gaming Rules, 2026 ("Online Gaming Rules"); and

• any other applicable laws or regulations governing data protection and privacy in India.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal data in accordance with this Policy. If you do not agree with this Policy, please do not access or use the Platform.

This Policy should be read in conjunction with our Terms of Use, which govern your access to and use of the Platform.

2. Data Controller / Data Fiduciary

For the purposes of applicable data protection law, including the DPDPA, JIOBLAST acts as the Data Fiduciary (or Data Controller) in respect of the personal data processed through the Platform. JIOBLAST determines the purposes and means of processing your personal data.

Jio Blast Esports Private Limited, 

CIN: U93190MH2025PTC446058

Registered office at 4th Floor, Court House, Dhobi Talao, Kalbadevi, Mumbai – 400002, Maharashtra, India 

Grievance / Data Protection contact: grievance.officer@jio.com

Where Tournament Organisers or other third-party partners process your personal data for their own purposes through or in connection with the Platform, they may act as independent Data Fiduciaries in respect of such processing. JioBlast encourages you to review the privacy policies of relevant Tournament Organisers and partners.

3. Personal Data We Collect

We collect personal data in the following categories, depending on how you use the Platform:

3.1 Data You Provide Directly

• Identity and contact data: your full name, username, date of birth, gender, email address, mobile number (MSISDN), and profile photograph;

• Account credentials: password and authentication information;

• Tournament registration data: team name, in-game IDs or gamertags, game titles, platform handles, skill level or rank, and any supporting documentation required for eligibility verification;

• Payment data: where applicable, billing name, payment instrument details (processed securely through third-party payment gateways; we do not store full card numbers), and transaction history;

• Communications data: messages, queries, or feedback you submit to us through customer support, grievance mechanisms, community features, forums, or otherwise; and

• User-generated content: clips, posts, comments, reviews, or other content you submit or publish on the Platform.

3.2 Data Collected Automatically

• Device and technical data: device type, operating system, browser type and version, device identifiers, IP address, and network information;

• Usage and behavioural data: pages or sections of the Platform visited, features accessed, search queries, Tournament registrations, matches viewed, time spent on the Platform, click-stream data, and interaction logs;

• Location data: approximate location derived from IP address; precise location if you grant permission through the Application; and

• Cookies and tracking data: data collected through cookies, web beacons, pixels, and similar tracking technologies, as further described in Section 10 (Cookies) below.

3.3 Data Received from Third Parties

• Authentication data: if you register or log in using a third-party account (such as Google, Facebook, or a game publisher account), we receive certain profile data from that provider in accordance with your privacy settings on that platform;

• Tournament and game data: tournament performance data, match results, rankings, and statistical data received from Tournament Organisers or game publishers in connection with Tournaments facilitated through the Platform;

• Partner data: data received from brand partners or sponsors in the context of activations or promotions facilitated through the Platform; and

• Verification data: where required under the Online Gaming Act or Online Gaming Rules, identity or age verification data obtained through authorised verification service providers.

3.4 Sensitive Personal Data or Information

To the extent we collect data that qualifies as Sensitive Personal Data or Information ("SPDI") under the SPDI Rules, or personal data under the DPDPA, including financial information (where applicable), we will obtain your explicit consent as required under applicable law, prior to collection and process such data only to the extent necessary for the purposes set out in this Policy. We do not collect biometric data or health data unless specifically required and consented to in connection with a particular Tournament or activity.

4. How We Use Your Personal Data

We process your personal data for the following purposes:

4.1 Provision of Services

• Creating and managing your account on the Platform;

• Processing your registration for Tournaments, including eligibility verification, team formation, and seeding;

• Facilitating your participation in or viewing of Tournaments, live streams, and related content;

• Processing payments for paid features and maintaining transaction records;

• Providing customer support and responding to your queries, complaints, and grievances;

• Communicating with you about Tournament schedules, results, updates, and Platform developments; and

• Enforcing these Terms and our fair play and compliance policies.

4.2 Platform Improvement and Analytics

• Analysing usage patterns and behaviour to improve the features, content, and user experience of the Platform;

• Conducting internal research and development, including testing new features and measuring their effectiveness;

• Monitoring and ensuring the technical performance, security, and integrity of the Platform; and

• Generating aggregated, anonymised analytics and reporting.

4.3 Personalisation and Recommendations

• Personalising your experience on the Platform, including recommending Tournaments, content, or community features relevant to your interests and gaming preferences; and

• Displaying contextually relevant content and partner activations based on your usage profile.

4.4 Marketing and Promotions

• Sending you promotional communications, newsletters, event announcements, and offers relating to JioBlast and its partners, subject to your communication preferences and applicable law;

• Running competitions, campaigns, and giveaways; and

• Facilitating brand and partner activations in which you choose to participate.

You may opt out of promotional communications at any time through your account settings or by following the unsubscribe instructions in our communications. Opting out of promotional communications will not affect transactional or service-related communications.

4.5 Legal and Regulatory Compliance

• Complying with our obligations under the Online Gaming Act, the Online Gaming Rules, the IT Act, the IT Rules, the DPDPA, the DPDP Rules, and any other applicable law;

• Responding to requests, orders, or directions from the Online Gaming Authority of India, law enforcement agencies, courts, or other governmental or regulatory authorities;

• Verifying your age and identity as required under the Online Gaming Rules;

• Implementing responsible gaming measures and user safety features as required under applicable law; and

• Maintaining records for audit, tax, and legal compliance purposes.

4.6 Safety, Security, and Fraud Prevention

• Detecting, investigating, and preventing fraudulent, abusive, or illegal activity on the Platform;

• Enforcing fair play standards and investigating suspected violations;

• Protecting the security and integrity of the Platform and its Users; and

• Protecting the rights, property, and safety of JIOBLAST, its Affiliates, Users, and third parties.

5. Legal Basis for Processing

We process your personal data on the following legal bases, as applicable under the DPDPA and other applicable law:

• Consent: where you have provided your free, specific, informed, unconditional, and unambiguous consent to the processing of your personal data for a stated purpose. You have the right to withdraw consent at any time, subject to the consequences of such withdrawal on your ability to use the Platform;

• Contract: where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract — including providing the Services you have registered for;

• Legal obligation: where processing is necessary for compliance with a legal obligation to which JIOBLAST is subject, including obligations under the Online Gaming Act, the Online Gaming Rules, the IT Act, the IT Rules, and applicable tax or anti-money laundering laws; and

• Legitimate interests: where processing is necessary for purposes of JIOBLAST's or a third party's legitimate interests, except where such interests are overridden by your interests or fundamental rights — including for Platform security, fraud prevention, analytics, and service improvement.

6. Sharing and Disclosure of Personal Data

We do not sell your personal data to third parties. We may share your personal data in the following circumstances:

6.1 Tournament Organisers and Game Publishers

We share relevant personal data (including your identity, gamertag, team affiliation, and tournament performance data) with Tournament Organisers and game publishers to the extent necessary for the administration of Tournaments you register for or participate in. Such entities may have their own privacy policies governing the use of your data, and we encourage you to review them.

6.2 Technology and Service Providers

We engage third-party service providers who process personal data on our behalf in connection with the provision of the Services, including:

• cloud hosting and infrastructure providers;

• payment gateway and financial services providers;

• identity and age verification service providers;

• analytics and data intelligence providers;

• customer support and communication platform providers;

• content delivery and streaming infrastructure providers; and

• cybersecurity and fraud prevention providers.

Such third-party processors are contractually required to process personal data only on our instructions, to implement appropriate security measures, and to comply with applicable data protection law.

6.3 Brand and Advertising Partners

Where you participate in brand activations, sponsored events, or partner campaigns available through the Platform, we may share relevant engagement data with the relevant brand partner to the extent necessary for the conduct of the activation or campaign. Any such sharing will be limited to what is reasonably necessary and will be subject to appropriate data sharing arrangements.

6.4 Affiliates

We may share personal data within the Jio group of companies (JIOBLAST and its Affiliates) for purposes consistent with this Policy, including for the provision of integrated services, internal analytics, and group-level compliance. All such sharing is subject to this Policy.

6.5 Regulatory and Legal Authorities

We may disclose personal data to the Online Gaming Authority of India, law enforcement agencies, courts, tribunals, or other governmental or regulatory authorities:

• where required to do so by applicable law, court order, or regulatory direction;

• in connection with any investigation into fraud, cheating, or other illegal activity; or

• to protect the rights, property, or safety of JIOBLAST, its Users, or the public.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of JIOBLAST's business or assets, personal data held by JIOBLAST may be transferred to the acquiror or successor entity as part of that transaction, subject to appropriate confidentiality obligations and in compliance with applicable law.

6.7 With Your Consent

We may share your personal data with other third parties where you have given your explicit consent to such sharing.

7. Cross-Border Transfers and International Users

Data Processed in India

JioBlast is incorporated and operates in India. All personal data collected through the Platform is transferred to, stored in, and processed in India by JioBlast and its authorised data processors. JioBlast does not maintain data processing infrastructure outside India for the purposes of the Platform, except where third-party service providers engaged by JioBlast operate infrastructure in other jurisdictions, in which case such processing is governed by contractual safeguards as described in Section 6.2.

Consent as Transfer Mechanism for International Users

Where personal data is provided to JioBlast by an International User — being any individual accessing the Platform from outside India — the act of registration on the Platform constitutes the International User's freely given, specific, informed, and unambiguous consent to the transfer of their personal data to India for processing by JioBlast in accordance with this Policy. This consent is relied upon by JioBlast as the applicable transfer mechanism and legal basis for cross-border data flows into India.

International Users acknowledge that:

(a) India's data protection framework, including the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), governs the processing of their personal data by JioBlast;

(b) the data protection standards applicable in India may differ from those in their country of residence or the jurisdiction from which they access the Platform; and

(c) by providing consent under this clause, they acknowledge and accept such differences and waive any right to assert against JioBlast any obligation arising under the data protection, privacy, or related laws of any jurisdiction other than India, including but not limited to Regulation (EU) 2016/679 (GDPR), the UK General Data Protection Regulation, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), the Personal Data Protection Act 2012 (Singapore), the Personal Information Protection Law (China), or any equivalent legislation in any other jurisdiction.

No Submission to Foreign Data Protection Regimes

JioBlast does not represent or warrant that the Platform or the processing of personal data through the Platform complies with the data protection or privacy laws of any jurisdiction outside India. JioBlast does not submit to the regulatory jurisdiction of any foreign data protection supervisory authority, including the European Data Protection Board, the UK Information Commissioner's Office, the California Privacy Protection Agency, or any equivalent authority in any other jurisdiction, in connection with personal data processed through the Platform.

Outbound Transfers by JioBlast

Where JioBlast transfers personal data outside India — for example, to cloud infrastructure, streaming, or analytics service providers located in other jurisdictions — such transfers will be carried out in compliance with the DPDPA and the DPDP Rules, including any requirements relating to cross-border data transfer frameworks or government-notified countries as may be prescribed from time to time. Until a comprehensive framework of approved countries is notified by the Central Government under the DPDP Rules, JioBlast will ensure that appropriate contractual or other safeguards are in place with the relevant data processors prior to any such transfer.

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

The specific retention periods applicable to different categories of data are as follows:

• Account data: retained for the duration of your account and for such period thereafter as may be required under applicable law or our legitimate interests in resolving disputes or preventing fraud;

• Tournament participation data: retained for the duration of the relevant Tournament and for a period of up to 3 (three) years thereafter, or such longer period as may be required under applicable law;

• Transaction and financial data: retained for a minimum of 5 (five) years or such period as may be required under applicable tax, anti-money laundering, or other financial regulation;

• Customer support and grievance data: retained for a minimum of 90 (ninety) days as required under the IT Rules and the Online Gaming Rules, and for such longer period as may be necessary to resolve ongoing disputes or appeals made to Online Gaming Authority of India or Secretary to the Ministry of Electronics and Information Technology, Government of India; and

• Usage and analytics data: retained in anonymised or aggregated form for analytical purposes.

Upon expiry of the applicable retention period, we will delete or anonymise your personal data, unless retention is required by applicable law or a competent regulatory or judicial authority.

9. Your Rights as a Data Principal

Under applicable data protection law, including the DPDPA, you have the following rights in relation to your personal data:

9.1 Right to Access

You have the right to obtain confirmation of whether we process your personal data and, if so, to access a summary of the personal data we hold about you, the processing activities carried out in respect of such data, and the identities of the third parties with whom your data has been shared.

9.2 Right to Correction and Erasure

You have the right to request correction of inaccurate or incomplete personal data held about you. You also have the right to request erasure of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other lawful basis for processing. Please note that erasure may affect your ability to use certain Services.

9.3 Right to Grievance Redressal

You have the right to a readily available means of grievance redressal in relation to the processing of your personal data. Please refer to Section 13 (Grievance Redressal) for details of how to raise a concern.

9.4 Right to Withdraw Consent

Where we process your personal data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal. Withdrawal may affect your ability to access certain features of the Platform.

9.5 Right to Nominate

Under the DPDPA, you have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your rights in relation to your personal data in accordance with the DPDP Rules.

To exercise any of the above rights, please contact us using the details set out in Section 13. We will respond to your request within the timeframes prescribed under applicable law.

10. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, software development kits (SDKs), and similar tracking technologies on the Platform to:

• enable the essential operation and functionality of the Platform;

• remember your preferences and settings;

• analyse usage patterns and improve the Platform;

• support personalisation features and content recommendations;

• measure the effectiveness of marketing campaigns and partner activations; and

• detect and prevent fraud and security threats.

Cookies may be set by JioBlast (first-party cookies) or by our technology partners (third-party cookies). You can manage your cookie preferences through your browser settings or through any cookie management tool made available on the Platform. Please note that disabling certain cookies may affect the functionality and user experience of the Platform.

We do not use tracking technologies to collect personal data for purposes unrelated to the operation of the Platform or the services described in this Policy.

11. Data Security

JIOBLAST implements reasonable security practices and procedures and security safeguards as prescribed under the SPDI Rules and the DPDPA, including:

• encryption of personal data in transit and at rest, where appropriate;

• access controls and authentication mechanisms limiting access to personal data to authorised personnel on a need-to-know basis;

• regular security assessments and vulnerability testing;

• contractual obligations on data processors to maintain appropriate security standards; and

• incident response and breach notification procedures.

Notwithstanding the foregoing, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal data and will not be held liable for any breach of security or loss of data resulting from events outside our reasonable control. If you become aware of any actual or suspected security breach affecting your account or personal data, please notify us immediately at grievance.officer@jio.com.

In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will notify you and the relevant data protection authority in accordance with our obligations under the DPDPA and the DPDP Rules.

12. Children's Personal Data

The Platform is not directed at children under the age of 18 years. We do not knowingly collect personal data from individuals under the age of 18. Registration on the Platform requires users to confirm that they are 18 years of age or older.

Under the DPDPA, personal data of children (defined as individuals under 18 years of age) may only be processed with the verifiable consent of a parent or legal guardian, and may not be processed in a manner that is detrimental to the best interests of the child. JioBlast does not process the personal data of children on the Platform and implements age verification mechanisms to prevent access by underage individuals.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such data. If you believe that we may have collected such data, please contact us using the details set out in Section 13.

13. Grievance Redressal and Contact

If you have any questions, concerns, or complaints about this Policy or about the processing of your personal data, or if you wish to exercise any of the rights described in Section 9, you may contact our Grievance Officer:

Grievance / Data Protection Officer

Mrs. Radha Nair

Reliance Corporate IT Park, TC-22,

Thane Belapur Road, Ghansoli, Navi Mumbai 400701

Email: grievance.officer@jio.com

We will acknowledge your complaint within the timeframe prescribed under the IT Rules and the DPDPA, and will endeavour to resolve it within the period stipulated under applicable law. Where your complaint relates to matters governed by the Online Gaming Act and the Online Gaming Rules, we will process it in accordance with the grievance redressal procedure prescribed thereunder. Where your complaint remains unresolved, or where you are dissatisfied with the outcome, you may escalate the matter to the Online Gaming Authority of India or such other authority as may be prescribed.

14. Third-Party Links and Platforms

The Platform may contain links to third-party websites, applications, social media platforms, and services. This Policy does not apply to such third-party platforms. We are not responsible for the privacy practices of third parties, and we encourage you to read the privacy policies of any third-party platform before providing your personal data to it. The inclusion of a link on the Platform does not constitute an endorsement by JIOBLAST of the linked platform or its privacy practices.

15. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes to this Policy, we will notify you by updating the "Last Updated" date at the top of this Policy and, where appropriate, by providing additional notice through the Platform (such as a banner notification or an email to your registered address).

Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. If you do not agree with the updated Policy, you should discontinue your use of the Platform.

16. Governing Law and Jurisdiction

This Policy is governed by the laws of the Republic of India, including the IT Act, the SPDI Rules, the DPDPA, the DPDP Rules, the Online Gaming Act, the Online Gaming Rules, and all other applicable legislation. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts in New Delhi, India.

17. Glossary of Key Terms

"Affiliate(s)" means, with respect to JIOBLAST, any person directly or indirectly controlling, controlled by, or under direct or indirect common control with JIOBLAST, including its subsidiaries and associate companies.

"Data Fiduciary" has the meaning assigned to it under the DPDPA, being an entity that determines the purpose and means of processing of personal data.

"Data Principal" has the meaning assigned to it under the DPDPA, being the individual to whom the personal data relates.

"Data Processor" has the meaning assigned to it under the DPDPA, being any person who processes personal data on behalf of a Data Fiduciary.

"DPDPA" means the Digital Personal Data Protection Act, 2023, as amended from time to time.

"DPDP Rules" means the Digital Personal Data Protection Rules, 2025, framed under the DPDPA, as amended from time to time.

"Online Gaming Act" means the Promotion and Regulation of Online Gaming Act, 2025, as amended from time to time.

"Online Gaming Rules" means the Promotion and Regulation of Online Gaming Rules, 2026, framed under the Online Gaming Act, as amended from time to time.

"Personal Data" has the meaning assigned to it under the DPDPA, being any data about an individual who is identifiable by or in relation to such data.

"Platform" means the JioBlast website at www.jioblast.com and the JioBlast mobile application, collectively.

“Processing" means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

"Sensitive Personal Data or Information" or "SPDI" has the meaning assigned to it under the SPDI Rules.

"Tournament Organiser" means any independent third-party entity that organises, operates, or manages an esports tournament listed or facilitated through the Platform.

© Jio Blast Esports Private Limited. All rights reserved.