Privacy Policy

Welcome to BeBetta, a product of ISocial Sports Private Limited (“BeBetta”, “we”, “our”, “us”). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our mobile application, website (www.bebetta.in), and associated services (collectively, the “Platform”).

BeBetta is a gamified rewards and engagement commerce platform that allows users to play games, earn rewards, scan purchase receipts, and redeem offers from brand partners. By using our Platform, you agree to the practices described in this Privacy Policy.

This Policy applies to all users and is accessible via our homepage, mobile application, and OAuth consent screen.

1. Scope and Applicability

This Privacy Policy applies to:

• All users of the BeBetta mobile application (Android and iOS)
• Visitors to our website at www.bebetta.in
• Users who connect third-party accounts, including Google/Gmail
• Users who enable Commerce features such as receipt scanning or SMS transaction parsing

This Policy is governed by and complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable in India, as well as Google’s API Services User Data Policy.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we may collect:

• Full name
• Mobile number and email address
• Date of birth (for age verification)
• Account credentials (securely hashed)
• Profile photograph (if provided)

2.2 Device and Technical Data

• Device model, operating system, and version
• Device identifier (Android ID / IDFA)
• IP address and approximate location (city-level)
• App version, session data, and crash logs

2.3 Usage Data

• Games played, time spent, scores, and tournament participation
• Offers viewed, claimed, and redeemed
• In-app purchases and transaction history
• Feature interaction and engagement metrics

2.4 Receipt and Transaction Data (Commerce Feature)

When you use BeBetta’s Commerce features to earn rewards on real-world purchases, we may collect:

• Merchant or retailer name
• Transaction date and time
• Purchase amount
• Items purchased (where visible on receipt)
• Payment method type (e.g., UPI, card — not full card details)
• Transaction reference number

This data may be collected through the following mechanisms:

• Receipt Scanning (Android and iOS): You may photograph or upload a physical or digital receipt. Our system uses optical character recognition (OCR) to extract transaction details.
• QR / Barcode Scanning (Android and iOS): You may scan a barcode or QR code present on a retail receipt to submit transaction details.
• SMS Transaction Parsing (Android only): With your explicit permission, BeBetta reads SMS messages on your Android device to identify bank transaction alerts from your registered mobile number. This is used to detect purchase amounts, merchant names, and timestamps from RBI-mandated bank alert formats. BeBetta does not read personal SMS messages, and SMS data is processed locally before encrypted transmission.

Note: iOS does not support SMS transaction parsing. On iOS, receipt scanning and QR/barcode scanning are the only available Commerce verification methods.

2.5 Google User Data (via Gmail Integration — V2 Feature)

BeBetta may, in a future version, offer optional Gmail integration. If and when you explicitly grant permission to connect your Google account:

• We access only transactional emails related to receipts, invoices, or purchase confirmations
• Access is limited to the minimum data required to detect and validate purchase transactions
• We do NOT access personal emails, communications, or any content unrelated to transactions
• We do NOT use Gmail data for advertising, profiling, or any secondary purpose
• We do NOT sell or transfer Google user data to any third party

Our use of Google user data complies with Google’s API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your BeBetta account
• Operate and improve our gaming and rewards platform
• Detect, extract, and validate receipt and transaction data to award gems, points, or rewards
• Verify the authenticity of submitted receipts and prevent fraudulent submissions
• Process in-app purchases and reward redemptions
• Personalise offers, deals, and brand partner recommendations
• Send transactional notifications, reward alerts, and service updates
• Conduct analytics to improve product features and user experience
• Ensure platform security, detect abuse, and enforce our Terms of Use
• Comply with applicable laws and legal obligations

We do not use your data for advertising targeting on third-party platforms, and we do not build or sell user profiles to advertisers.

4. Receipt Scanning and SMS Parsing — Detailed Disclosure

4.1 How Receipt Scanning Works

When you submit a receipt via camera scan, image upload, or QR/barcode scan, our system:

• Processes the image or code to extract transaction data (merchant, amount, date, reference)
• Validates the transaction against fraud detection rules before awarding rewards
• Stores the extracted data (not the raw image, unless required for fraud adjudication) securely
• Does not share individual receipt data with brand partners in personally identifiable form

4.2 How SMS Parsing Works (Android Only)

• BeBetta requests the READ_SMS permission to read bank transaction SMS alerts on your device
• Only messages matching known RBI-mandated bank alert patterns are processed
• Personal SMS messages, OTPs, and non-transactional messages are not read or stored
• Parsed transaction data (merchant name, amount, timestamp, transaction reference) is transmitted to our servers over an encrypted connection
• Raw SMS content is not stored on our servers
• You may revoke SMS permission at any time via your device’s app permissions settings

You will be presented with a clear in-app disclosure screen before SMS permission is requested, explaining exactly what data will be accessed and why.

4.3 Fraud Prevention

• Automated anomaly detection to flag duplicate, altered, or suspicious receipts
• A 72-hour hold on rewards for new users pending verification
• Manual review capabilities for escalated cases (conducted by authorised staff only, in a logged environment)
• Configurable thresholds for spend amounts and submission frequency

5. Legal Basis and Limited Use of Google User Data

• Is limited solely to providing user-facing features (receipt detection, transaction validation, and rewards)
• Is not used for advertising, profiling, resale, or any purpose beyond direct service delivery
• Is not shared with third parties except as strictly necessary to provide the service, for security and fraud prevention, or when required by law
• Does not permit any human employee to read Google user data unless the user has given explicit consent, it is required for security or legal compliance, or it is necessary to debug a verified issue in a controlled and logged environment

6. In-Product Privacy Notifications

• A consent screen before enabling receipt scanning, explaining what data is accessed and why
• A consent screen before requesting SMS permission on Android, detailing exactly what messages are read
• An OAuth consent screen when connecting a Google account for Gmail integration, listing the scopes requested
• Ongoing access indicators within the app when data collection features are active

You will always be given the choice to decline these features. Declining will not affect your access to BeBetta’s core gaming and rewards features.

7. Data Sharing and Disclosure

• Service Providers: Trusted vendors who help us operate our platform (cloud hosting, OCR processing, analytics, fraud detection). All are bound by confidentiality obligations and data protection agreements.
• Brand Partners: Aggregated, anonymised transaction data may be shared with brand partners for campaign measurement. Individual user data is never shared without explicit consent.
• Legal Authorities: When required by law, court order, or regulatory direction from a competent authority in India or another applicable jurisdiction.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity, subject to equivalent privacy protections.

8. Data Storage and Security

• All data is stored on secure servers with encryption at rest (AES-256) and in transit (TLS 1.2+)
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• OAuth tokens for third-party integrations (e.g., Google) are stored securely and never exposed in logs
• SMS data is processed and transmitted over encrypted channels; raw content is not persisted on servers
• We conduct periodic security reviews and comply with applicable security standards

While we implement industry-standard security measures, no system is completely immune to risk. In the event of a data breach affecting your rights, we will notify you in accordance with applicable law.

9. Data Retention

• Account data is retained for as long as your account is active, and for up to 90 days after deletion to allow recovery
• Receipt and transaction data is retained for a period necessary for reward validation, fraud prevention, and legal compliance (typically 24 months)
• Google user data (when Gmail integration is used) is retained only as long as required to provide the active service; data is deleted within 30 days of account disconnection or deletion
• SMS-parsed transaction data follows the same retention schedule as receipt data
• Anonymised aggregated analytics data may be retained indefinitely

10. Your Rights and Controls

As a BeBetta user, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated personal data
• Withdrawal of Consent: Revoke SMS read permission at any time via Android app settings
• Disconnect Google Account: Revoke Gmail access at any time via your Google Account settings (myaccount.google.com > Security > Third-party apps) or within the BeBetta app
• Opt-Out: Opt out of non-essential promotional communications via the in-app settings or unsubscribe links
• Stop Feature Use: Disable receipt scanning, SMS parsing, or Gmail integration at any time without losing access to core platform features

To exercise any of the above rights, contact us at support@bebetta.in. We will respond within 30 days.

11. Children’s Privacy

BeBetta is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will promptly delete their account and associated data. If you believe a minor has created an account, please contact us at support@bebetta.in.

12. Third-Party Services and Links

Our Platform integrates with third-party services including Google APIs, payment processors, and analytics providers. Their collection and use of data is governed by their respective privacy policies. BeBetta is not responsible for the privacy practices of third-party services.

13. Cookies and Tracking Technologies

Our website (www.bebetta.in) uses cookies and similar tracking technologies for:

• Session management and authentication
• Analytics and platform performance monitoring
• Remembering user preferences

You may control cookies through your browser settings. Disabling cookies may affect certain website functionality.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our features, legal requirements, or data practices. When we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy
• Notify you via an in-app notice or email where required
• Ensure continued compliance with applicable laws and Google API policies

Continued use of the Platform after updates constitutes acceptance of the revised Policy.

15. Contact Us