Privacy Policy
In short: we collect what we need to run your account, your games and your tournament entries. The app is free and is for practising, exploring and learning; our paid tournaments are in-person events, and their entry fees are paid at the venue or through eSewa, Khalti or ConnectIPS. The app has no wallet and never holds your money. We do not show ads, we do not use third-party analytics or tracking, and we never sell your information. You can delete your account at any time from the app.
This policy explains how Bharpardo Event Pvt. Ltd., a company registered in Nepal (“we”, “us”), the operator of Baghchal World (the “Service”) — our mobile apps for Android and iOS and our website — handles information about you. By using the Service you agree to this policy and to our Terms of Service.
1. Information we collect
Information you give us
- Account details: your name, your email address and/or Nepali mobile number, and a password. We store only a salted hash of your password, never the password itself. We create a username for you from your name.
- Google sign-in: if you choose “Continue with Google”, Google shares your Google account ID, your verified email address, your name and your profile picture with us. We use the picture as your avatar.
- Profile changes: any name or avatar you set in the app.
- Support messages: whatever you include when you email us.
Information created when you play
- Online games: every online game you play in the app (friendly room or quick match), including each move, timings, the result, missed turns and disconnections. We keep these so results can be checked and replayed.
- Tournament records: your registrations for our in-person tournaments, check-ins at the venue, games, results, standings, statistics (wins, losses, goats captured and similar), eliminations and disqualifications. At the venue our staff record your attendance and results and may ask to see identification to confirm who you are.
- Games on your device: games against the computer and pass-and-play games run entirely on your device and are not sent to us.
Payment information
Playing in the app is free. The only payment we take is the entry fee for an in-person tournament, paid in person at the venue or online through eSewa, Khalti or ConnectIPS.
- Online payments: you enter your wallet or bank login, PIN or password on the payment provider’s own page; we never see or store it. We receive and keep the amount, any coupon used, the payment method, transaction references and the provider’s confirmation of the payment.
- Payments at the venue: we record the amount, the payment method and the receipt.
The app has no wallet, balance or in-app currency, and we never hold money for you, so we do not collect or store bank account, card or wallet details. See our Terms.
Technical information
- Sign-in sessions: the IP address, device or browser description (user agent) and times you signed in and were last active, so we can keep your account secure.
- Platform: whether you use Android, iOS or the web, because some tournaments are only open on certain platforms.
- Server logs: our servers record requests and errors, including IP addresses, to operate, debug and protect the Service.
Information stored only on your device
The app keeps your sign-in tokens, your settings such as language, sound, vibration and display options, and any offline game in progress on your device. In the Android and iOS apps, sign-in tokens are kept in the device’s secure storage; on the website, everything is kept in your browser’s storage for our site. Signing out removes your sign-in tokens and cached profile. Uninstalling the Android app, or clearing our site’s data in your browser, removes everything; on iPhone and iPad the Keychain can keep sign-in tokens after the app is uninstalled, so sign out first if you want them gone. The Android app does not use Android’s cloud backup.
What we do not collect
We do not collect your precise location, contacts, photos, camera or microphone input, or advertising identifiers. The app contains no advertising and no third-party analytics or tracking tools.
2. How we use your information
- To create and secure your account, verify your email or phone with one-time codes, and help you reset your password.
- To match you with opponents, run games, apply the rules and timers, and record results.
- To run our in-person tournaments: registrations, check-ins, pairings, standings, brackets and results.
- To take tournament entry fees, verify payments and process refunds.
- To keep play fair: detect cheating, collusion, multiple accounts and abuse, and enforce our Terms.
- To answer support requests and send messages about your account, such as verification codes.
- To keep the Service working and secure, and to meet our legal obligations.
We use your information because it is needed to provide the Service you asked for, because you consented (for example to Google sign-in), because we must comply with the law, or for our legitimate interest in running a secure and fair league.
3. What other people can see
- Anyone, including people without an account, can see tournament standings, brackets, match results and game replays. These show the players’ names, usernames and avatars.
- Signed-in players can also see your profile statistics and, during a game, your name and avatar.
- Your email address, phone number and payment details are never shown to other players.
- Our staff can see account, game and payment records to run tournaments, resolve disputes, process refunds and provide support. Staff actions are recorded in an audit log.
4. Who we share information with
We do not sell or rent your information. We share it only with:
- Payment providers (eSewa, Khalti and ConnectIPS) to take and verify entry fees and to issue refunds. Their own privacy policies apply to what you give them.
- Google, if you use Google sign-in, to confirm your Google identity.
- Service providers who run parts of the Service for us: server hosting, content delivery and network protection (such as Cloudflare), and email and SMS delivery for verification codes. They may use the information only to provide their service to us.
- Authorities, when required by Nepali law or a valid legal request, or when needed to protect the rights, safety or property of our players, the public or us.
- A successor, if the Service is merged, sold or transferred, subject to this policy.
Some of these providers may process information on servers outside Nepal. We take reasonable steps to make sure they protect it.
5. How long we keep information
| Information | How long |
|---|---|
| Account details | While your account exists. Erased when you delete your account (see below). |
| Verification and reset codes | Up to one hour. |
| Sign-in sessions (IP address, device) | Until the session expires, at most 12 months after you last used it. |
| Games, results and tournament records | Kept to preserve the integrity of standings, brackets and replays. Anonymised if you delete your account. |
| Payment records | As long as Nepali tax and accounting law requires. |
| Server logs | A limited period needed for security and troubleshooting. |
6. Deleting your account
You can delete your account in the app: Settings → Account → Delete account (step-by-step guide: How to delete your account). If you can no longer sign in, email [email protected] from the email address on the account (or tell us the phone number on it) and we will verify the request and delete the account.
When you delete your account we immediately:
- sign you out on every device and erase your sign-in history (IP addresses and devices);
- erase your email address, phone number, password, Google link and avatar;
- replace your name with “Deleted player” and your username with an anonymous one (“deleted_” followed by your account number), so past standings, brackets and replays no longer identify you.
We keep the anonymised game records and the payment records described above. Deleting your account does not cancel or refund entries you have already paid for, except as our refund rules provide. You can create a new account with the same email or phone number afterwards.
7. Your rights and choices
- Access and copy: ask us for a copy of the personal information we hold about you.
- Correction: change your name in the app, or ask us to correct other details.
- Deletion: delete your account as described above.
- Withdraw consent: stop using Google sign-in by deleting your account, or revoke our access in your Google account settings.
- Complain: contact us first; you may also have the right to complain to the relevant authority in Nepal.
To use these rights, email [email protected]. We may need to confirm your identity first and will reply within 30 days.
8. Security
We use encrypted connections (HTTPS/TLS), store passwords and session tokens only as hashes, keep sign-in tokens in your device’s secure storage, limit sign-in and code attempts, and restrict staff access to what their role needs. No system is perfectly secure, so please use a strong password that you do not use elsewhere and tell us at once if you think your account has been compromised.
9. Children
The Service is not directed at children under 13, and you must be at least 13 to create an account. Entering a paid in-person tournament requires you to be 18 or older, or to have a parent or guardian’s permission and payment. If you believe a child under 13 has given us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the Service changes. We will change the date at the top and, for significant changes, tell you in the app or by email before they take effect.
11. Contact us
Questions or requests about privacy: [email protected]