Privacy policy

Who we are

Arcis Esports ("Arcis", "we", "us") is an independent Valorant esports team based in India. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, Arcis Esports is the Data Fiduciary for personal data collected through arcisesports.com.

Contact for all privacy matters: bunnie@arcisesports.com

What we collect

We only collect what you type into our forms. We do not use cookies, analytics, advertising trackers or social media pixels.

• Tryout form: IGN, Riot ID, email, Discord username, current and peak rank, main role, agent pool, age, city, tracker.gg link, availability and anything you write in "Why you?". For applicants under 18: parent or guardian name and email.
• Partnership form: your name, brand or company, email, phone (optional), website (optional), area of interest and message.
• Contact form: name, email, subject and message.
• With every form: the time you submitted it, the page you sent it from, and a record of your consent (the notice version and consent text you agreed to).
• Abuse protection: a one-way scrambled (hashed) version of your IP address, used only to limit spam submissions and deleted within 24 hours. We never store your raw IP address.

Why we use it

• Tryout details: to review your application, contact you about trial scrims, and make a roster decision.
• Partnership details: to respond to your enquiry and discuss a partnership.
• Contact details: to reply to your message.
• Hashed IP: to stop automated spam and abuse of our forms.

We do not sell your data, use it for advertising, or use it for anything other than the purpose you consented to.

Consent

We process your personal data on the basis of your consent, which you give by ticking the consent box on each form. Each form tells you what we'll use your details for before you send it.

You can withdraw consent at any time by emailing bunnie@arcisesports.com. Withdrawing is as easy as giving consent. Once you withdraw, we stop processing and delete your data within a reasonable time, unless the law requires us to keep it. Withdrawal doesn't affect processing that happened before it.

Children under 18

Under the DPDP Act, anyone under 18 is a child. If you're between 13 and 17, you can apply for tryouts only with the consent of a parent or legal guardian, whose name and email we collect on the form. Before inviting an under-18 applicant to trial scrims, we contact the parent or guardian to verify their identity and consent. If we can't verify it, we delete the application.

We do not accept applications from anyone under 13, and we never track, behaviourally monitor or target advertising at children.

Who we share it with

Only our coach, manager and IGL see form submissions. We use these service providers (Data Processors) to run the site, under contracts that require them to protect your data:

• Supabase: stores form submissions in a secured database (servers in Seoul, South Korea).
• Resend: delivers form notification emails to our team (servers in the USA).
• Netlify: hosts the website.
• Google Fonts and unpkg: deliver fonts and website code to your browser, which means they receive your IP address when you load the page.

Some of these providers process data outside India. We only transfer data to countries the Government of India has not restricted under Section 16 of the DPDP Act. We'll disclose data to authorities only where Indian law requires it.

How long we keep it

• Form submissions are automatically deleted 12 months after you send them.
• If you join the roster, we keep your tryout details for as long as you're with the team, then delete them.
• Hashed IP records are deleted within 24 hours.
• If you withdraw consent or ask us to delete your data, we delete it sooner.

Your rights

Under the DPDP Act you have the right to:

• Get a summary of the personal data we hold about you and how we've used it.
• Have inaccurate or incomplete data corrected, completed or updated.
• Have your data erased.
• Withdraw your consent at any time.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Have your grievances addressed.

To use any of these rights, email bunnie@arcisesports.com from the address you used on the form (so we can verify it's you). We'll respond as soon as possible and in any case within 90 days.

Complaints

If you have a concern about how we've handled your data, email bunnie@arcisesports.com first. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

How we protect it

• All traffic to arcisesports.com is encrypted with HTTPS.
• Submissions are stored in a database that the public website can't read. Only our team can access it, through accounts protected by strong passwords and two-factor authentication.
• Forms are protected against spam and abuse with rate limits and server-side checks.
• If a data breach affects your personal data, we'll inform you and the Data Protection Board of India as the law requires.

Language and changes

You can ask for this notice in English or any language listed in the Eighth Schedule to the Constitution of India by emailing bunnie@arcisesports.com.

We may update this policy. Any change will be posted on this page with a new effective date. If a change affects how we use data you've already given us, we'll ask for your consent again.