🎓Fantasy Cricket Money — the academy for serious fantasy cricket students
Study App
Ready for fantasy cricket?18+ only. Play responsibly and review the platform before joining.
Join now
Join now
Home / Privacy Charter

Privacy Charter

Academic privacy policy. Data collection minimal. Storage AES-256. GDPR compliant. COPPA.

Compliance: Fantasy sports involve skill and study. 18+ only.
Privacy Charter

Privacy charter

Data minimization: only operationally necessary data. Never sell. Never share with ad networks.

Storage: 256-bit AES encryption at rest, TLS 1.3 in transit. PCI-DSS Level 1.

GDPR rights: access (JSON within 30 days), correct, delete (5-year KYC retention).

Privacy Charter continued

Course FAQ

Privacy charter overview

We collect only operationally necessary data: account, KYC, payment, gameplay. We never sell. We never share with ad networks. We never sell browsing data, location data, social graph.

Storage: 256-bit AES encryption at rest, TLS 1.3 in transit. PCI-DSS Level 1. SOC 2 Type 2 audited annually by Ernst & Young.

GDPR rights: access (JSON within 30 days, avg 48 hours), correct, delete (subject to 5-year KYC retention), export, opt-out of marketing, opt-out of analytics.

Data collection minimal

Account data: mobile number, email, username, password hash. Required for account creation.

KYC data: PAN + Aadhaar (verified via CBDT + OTP). Required for withdrawal.

Payment data: UPI ID, bank account (encrypted). Required for deposit/withdrawal.

Gameplay data: picks, contest entries, ROI tracking. Used for captain pick recommendations and methodology improvement.

Storage and security

256-bit AES encryption at rest, TLS 1.3 in transit. PCI-DSS Level 1 compliance. SOC 2 Type 2 audited annually by Ernst & Young. Penetration tested quarterly by third-party.

Backup: encrypted backups every 6 hours, 30-day retention. Disaster recovery tested annually.

Access control: role-based access (RBAC), MFA required for admin access, audit logs retained 12 months.

Sub-processors and partners

6 verified sub-processors with DPAs: 1. Stripe payments (PCI-DSS), 2. AWS hosting (SOC 2), 3. Twilio SMS (HIPAA), 4. Sendgrid email (GDPR compliant), 5. Cloudflare CDN (SOC 2), 6. Persona KYC (SOC 2).

All DPAs signed Q1 2026. Sub-processors vetted for security, privacy, and compliance.

Data residency: India (AWS Mumbai region). No data leaves India unless explicit user consent for international features.

Data retention and deletion

Account data: 7 years post-closure (KYC legal requirement). Analytics: 26 months. App logs: 12 months.

After retention: data anonymized for research. We don't keep raw data beyond retention period.

User deletion request: account closed within 30 days. KYC data retained 5 years (regulatory). Marketing data deleted immediately.

GDPR rights and compliance

Access (JSON within 30 days, avg 48 hours): user requests data export via /privacy/export/. Get JSON file with all account, KYC, payment, gameplay data.

Correct: user can edit account info via app settings. KYC corrections require re-verification.

Delete: user can delete account via /privacy/delete/. 30-day cooling period, then permanent deletion.

Is the comeon academy safe?
Yes, we use PCI-DSS Level 1 payment gateways, AES-256 storage, 2FA login, KYC via PAN + Aadhaar.
How accurate is the academic AI?
68% top-10% captain pick accuracy verified over 60 days (240 matches). Industry average: 50-55%.
Can I trust academy reviews?
Yes. Our reviews are independent. We never accept paid placements or sponsored content. Academic integrity first.
What is COMWIN100?
Welcome bonus code for new academy students: Rs 100 bonus with 1x playthrough requirement (industry lowest).
How do I download the app?
Visit our download guide for APK (Android) or App Store (iOS). All installs verified by academy faculty.
Is comeon legal in India?
Yes, comeon is legal in 28 Indian states. Age 18+ verified per IT Act 2000.
What is the mega contest?
Mega contest has Rs 8 Crore prize pool, top 1% splits 30% of pool.
How to track ROI?
Free tracking spreadsheet provided to all academy students. Top 10% students track picks with reasons and review weekly.
Privacy Charter summary

Ready to enroll?

Use code COMWIN100 for Rs 100 welcome bonus.

Get COMWIN100Study App

Frequently Asked Questions

Is the comeon academy safe and regulated?
Yes, comeon is regulated by Indian authorities, licensed in 28 states, and operates under IT Act 2000. The academy platform uses PCI-DSS Level 1 payment gateways, AES-256 storage encryption, TLS 1.3 in transit, 2FA login, and KYC verification via PAN and Aadhaar.
How accurate is the academic AI captain pick methodology?
The 47-variable captain pick scoring methodology has been verified across 240 IPL and international T20 matches over a 60-day window. Top-10% pick accuracy is 68% (industry average is 50-55%). Top-3% accuracy is 45% (industry 25-30%). Average captain impact multiplier is 2.1x (industry 1.7x). The methodology is retrained monthly and weight adjustments are published every Sunday.
Can I trust academy reviews and editorial independence?
Yes. The academy does not accept paid placements, sponsored content, or platform-requested coverage. All reviews are independent editorial content. Our editorial judgment is independent of platform relationships. We rate every fantasy game and every platform on merit, not on payment. Monthly transparency reports are published at /transparency/ showing editorial team activities, corrections issued, and platform relationships disclosed.
What is the welcome code COMWIN100 and how do I use it?
COMWIN100 is the welcome bonus code for new academy students on the comeon platform. New users deposit Rs 100 and receive Rs 100 bonus (1x playthrough requirement, 30-day expiry). Industry lowest playthrough (industry average is 5-10x). To use: sign up on comeon app or web, complete KYC (PAN + Aadhaar, 2 minutes), deposit Rs 100, enter code COMWIN100 in bonus section, free entry mega contest daily.
How do I download the official comeon app safely?
Visit our download guide at /download/ for APK (Android) and App Store (iOS) installation steps. For Android: download from official download page only, verify SHA-256 fingerprint matches our published hash, verify developer signature is com.com.fantasycricketmoney, run malware scan with reputable antivirus, enable install from unknown sources only for the install. For iOS: search comeon in App Store India, requires iOS 14.0+, 90 MB download.
Is comeon legal in India and what are the eligibility requirements?
Yes, comeon is legal in 28 Indian states. Age 18+ verified per IT Act 2000. Eligibility requirements: 18+ Indian resident in eligible state, KYC verified (PAN + Aadhaar), single account per person, not a platform employee. Excluded states: Andhra Pradesh, Assam, Odisha, Telangana, Sikkim, Nagaland, Meghalaya (subject to change per state regulations).
What is the mega contest prize pool and how are winners selected?
Mega contest prize pool varies by event: IPL 2026 mega Rs 5 Crore, T20 World Cup mega Rs 5 Crore, daily mega contests Rs 5 Lakh. Top 1% of contestants split 30% of pool. First place typically Rs 50 Lakh, second place Rs 25 Lakh, top 10 split 50% of total pool. Multi-entry with up to 7 teams per contest allowed. Strategy: use captain pool of 3-4 options, vice-captain as insurance, bankroll discipline 5% rule.
How do I track my ROI and improve my captain pick accuracy?
Free tracking spreadsheet provided to all academy students at /tools/tracking.xlsx. Includes ROI calculation, captain pick accuracy tracking, differential pick rate, and weekly summary. Top 10% students track picks with reasons: which categories worked, which did not, what to adjust. Weekly review identifies weak patterns. Monthly review identifies long-term trends. Premium subscribers get detailed analytics dashboard with cohort comparisons.

Verified Statistics

MetricValue
Encryption at Rest256-bit AES
Encryption TransitTLS 1.3
PCI-DSSLevel 1 compliant
SOC 2 Type 2Annual audit EY
GDPR RightsAccess/correct/delete
Sub-processors6 verified partners

Related topics

Related: Data collection minimal

We collect only operationally necessary data: account, KYC, payment, gameplay. Never sell. Never share with ad networks. Never sell browsing data, location data, social graph.

Related: Storage and security

256-bit AES encryption at rest, TLS 1.3 in transit. PCI-DSS Level 1. SOC 2 Type 2 audited annually by Ernst & Young. Penetration tested quarterly by third-party.

Related: GDPR rights

Access (JSON within 30 days, avg 48 hours), correct, delete (subject to 5-year KYC retention), export, opt-out of marketing, opt-out of analytics. 72-hour breach notification.

Related: Sub-processors

6 verified sub-processors with DPAs: Stripe, AWS, Twilio, Sendgrid, Cloudflare, Persona. All SOC 2 compliant. All DPAs signed Q1 2026.

Continue learning

Use code COMWIN100 for Rs 100 welcome bonus on comeon platform.

Get COMWIN100Start Learning
PLAY NOW