Legal · XIVERARENA
Under the Digital Personal Data Protection (DPDP) Act, 2023 (India) and, for users in the EEA and UK, the GDPR and UK GDPR, XIVERARENA (operated by Bhavyansh, Pathankot, Punjab) acts as the Data Fiduciary / Data Controller determining the purpose and means of processing your personal data. This policy explains what we collect, the legal bases we rely on, with whom it is shared, and the rights you can exercise.
Under the Digital Personal Data Protection (DPDP) Act, 2023, and for EEA/UK users under the GDPR / UK GDPR, XIVERARENA (operated by Bhavyansh, Pathankot, Punjab) acts as the Data Fiduciary / Data Controller determining the purpose and means of processing your personal data. Contact: xiver.support@gmail.com.
We collect and process the following personal data. Where the GDPR or UK GDPR applies, we rely on the lawful bases noted below:
xiver-theme) in your browser to remember UI
settings. This is strictly necessary for the service and not used
for tracking.
We do not sell your data. We share your data strictly with processors acting on our instructions — under the DPDP Act and, for EEA/UK transfers, under GDPR Article 28 processor agreements:
Your data may be processed on servers located outside India (e.g., Supabase in the United States). For users in India, such transfers follow the DPDP Act’s cross-border norms. For users in the EEA/UK, we transfer personal data outside the EEA/UK only with appropriate safeguards — EU Standard Contractual Clauses and the UK International Data Transfer Addendum (or an applicable adequacy decision), together with commercially reasonable security safeguards.
Our Platform is strictly for individuals aged 18 and above, wherever they live. We do not process data of children. The lower digital-consent ages that may apply in some countries (e.g., under GDPR Article 8) do not lower this threshold. If we discover an account belongs to a minor, the account and data will be immediately erased, subject to any verifiable parental-consent requirements that may apply under the DPDP Act.
Under the DPDP Act, 2023 (India) and the GDPR / UK GDPR (EEA/UK), you have the right to:
To exercise these rights, email xiver.support@gmail.com. We respond within one (1) month for GDPR/UK GDPR requests and within the legally mandated DPDP timelines otherwise.
Profile data is retained while your account is active. Transactional data, receipts, and wallet logs are retained for a minimum of eight (8) years to comply with the Income Tax Act and financial auditing standards.
We employ security practices aligned with Section 43A of the IT Act and GDPR Article 32 (encryption in transit, access controls, and vendor due diligence). In the unlikely event of a personal data breach, we will notify you and the Data Protection Board of India (DPBI) as required by Section 8(6) of the DPDP Act; where the GDPR or UK GDPR applies, we will notify the competent supervisory authority within 72 hours and affected individuals without undue delay where the breach poses a high risk to their rights and freedoms.
In compliance with the IT Rules 2021 and DPDP Act 2023:
Name: Bhavyansh
Email: xiver.support@gmail.com
Address: Lamini, Pathankot, Punjab, India — 145001
Operating Hours: 24/7 (Email monitoring)
We will acknowledge your complaint within 24 hours and resolve it within 15 days (for IT Rules violations) or 30 days (for consumer/data disputes). If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority.