Privacy Notice

Sheminlal Arathara Murali, operating under the MyDreamX brand, is responsible for deciding why and how personal data is processed for the service. Under applicable Indian data-protection law, this role may be described as the Data Fiduciary.

This notice applies to the MyDreamX website, player accounts, practice games, account dashboard, player history, leaderboards and proposed skill competitions.

Depending on how you use the current MyDreamX beta, we may collect:

• Registration information: full legal name, date of birth, Indian phone number and email address.
• Account information: authentication identifier, email-confirmation status, account status, password-reset activity and essential session data.
• Public profile: the player nickname you choose.
• Practice information: accuracy score, dots placed, challenge or image identifier, dot colour and completion date and time.
• Technical information: IP address, browser or device information, request logs, security events and essential cookies or session data that may be generated through use of the service.
• Communications: messages and information submitted when requesting support, reporting a problem or exercising a privacy right.

Passwords are handled through the authentication provider and are not displayed to the MyDreamX operator.

If paid competitions are legally approved and activated, MyDreamX may also process:

• Competition name, entry status, ticket identifier and accepted rules version.
• Accuracy score, completion time, attempt status, challenge identifier and ranking.
• Payment reference, amount, currency, payment status, refund status and payment-provider transaction identifier.
• Device, network, location and security signals reasonably required to detect cheating, duplicate accounts, automation, payment fraud or restricted-location access.
• Identity, age and eligibility-verification status.
• For potential winners, legally required PAN, bank-account, payment, tax and identity-verification information.
• Prize eligibility, prize value, tax deduction, payment status and communication history.

If payments are approved and enabled, they are intended to be processed through an authorized third-party payment provider.

MyDreamX may receive limited transaction information such as a payment reference, amount, status, time, method category and refund status.

MyDreamX does not intend to collect or display your complete card number, card security code, UPI PIN, banking password or OTP. Never send this information to MyDreamX by email or support message.

Identity-document uploads are not currently accepted through the MyDreamX website.

If verification is introduced, it may be carried out through an approved verification provider. MyDreamX may receive a verification result, status, reference number and limited identity information necessary to confirm age, identity, location, tax compliance and prize eligibility.

A potential winner may be required to provide PAN and verified bank-account details when legally necessary to pay a prize and comply with tax obligations.

Do not email copies of Aadhaar, Voter ID, Driving Licence, PAN or bank documents unless MyDreamX provides a specifically authorized and secure process.

Personal data may be used for the following purposes:

• Creating, confirming and securing accounts.
• Confirming declared adult eligibility.
• Providing sign-in and password recovery.
• Operating free practice challenges.
• Saving practice and competition history.
• Calculating scores and rankings.
• Displaying permitted leaderboard information.
• Processing future approved payments, tickets, refunds and prizes.
• Completing identity, age, location, winner and tax verification.
• Detecting cheating, abuse, payment fraud, multiple accounts and unauthorized access.
• Providing support and handling complaints.
• Improving reliability, performance and security.
• Meeting legal obligations and responding to valid lawful requests.

Where consent is required, MyDreamX will request clear consent for the stated purpose before processing the relevant data.

Certain information may also be processed where permitted or required by applicable law, including for security, fraud prevention, legal compliance, dispute handling and responding to a request made by the user.

You may withdraw consent by contacting hello@mydreamx.in.

Withdrawal does not affect processing that was lawful before withdrawal. Where information is necessary to provide or secure a feature, withdrawal may prevent continued use of that feature.

Public leaderboards may display:

• Your chosen public nickname.
• Your verified accuracy score.
• Your completion time or ranking.
• The number of recorded practice games.
• Your most recent participation date.
• If you win, your position and the prize awarded.

Your legal name, email address, phone number, complete date of birth, identity documents, PAN and bank details are not intended to appear publicly.

A winner's legal name, photograph or testimonial will not be used publicly unless legally required or appropriate permission has been obtained.

Avoid using your legal name, email address or phone number as your public nickname.

MyDreamX currently uses Supabase for authentication and database services, together with hosting, infrastructure, email and security providers required to deliver the website.

If approved competitions are activated, MyDreamX may also use payment processors, identity-verification providers, fraud prevention services, professional advisers, tax advisers and prize-delivery providers.

Personal data may be shared only when reasonably necessary:

• To provide, secure and support the service.
• To process an approved payment or refund.
• To verify a potential winner and deliver a prize.
• With your direction or consent.
• To investigate cheating, fraud or security incidents.
• To comply with a court order, legal obligation or lawful request from an authorized public body.
• In connection with a lawful restructuring, investment, sale or transfer of the business, subject to appropriate safeguards.

MyDreamX does not sell or rent personal data.

A competition sponsor or prize provider may be identified on the competition page.

MyDreamX will not provide a sponsor with complete account, identity or contact information merely because it sponsored a competition.

Where information is necessary to deliver a sponsored prize, the player will be informed what information is required, who will receive it and why before it is shared.

MyDreamX is operated from Kochi, Ernakulam, Kerala, India. Some service providers or their infrastructure may process or store information outside India.

Where cross-border processing occurs, MyDreamX will take reasonable steps to use reputable providers and appropriate contractual, organizational and technical safeguards, subject to applicable Indian law and government restrictions.

Personal data is retained only for as long as reasonably necessary to provide the service, protect users, investigate abuse, resolve disputes and meet legal obligations.

Account information and game history may be retained while an account remains active.

If approved payments and prizes are introduced, transaction, refund, verification, fraud-prevention and tax records may be retained for the period required by applicable financial, tax and legal obligations.

When a valid deletion request is completed, information will be deleted or anonymized where reasonably possible unless retention is required for security, fraud prevention, legal claims, financial records, tax compliance or another lawful purpose.

Limited information may remain temporarily in protected backups until those backups are replaced through the provider's normal retention process.

MyDreamX and its authentication provider use essential cookies or similar browser storage to maintain sign-in sessions, protect accounts and provide requested features.

MyDreamX is not currently designed to use targeted advertising cookies. If non-essential analytics or advertising technology is introduced, this notice and any required consent controls will be updated first.

MyDreamX uses reasonable technical and organizational measures intended to protect personal data, including authenticated access, database access controls, encrypted network connections and restricted public exposure of account information.

Competition and technical information may be reviewed to detect bots, automation, score manipulation, multiple accounts, payment fraud and unauthorized access.

No website, transmission or storage system is completely secure. You are responsible for choosing a strong password and contacting MyDreamX if you suspect unauthorized account access.

Subject to applicable law and reasonable identity confirmation, you may request:

• A summary of personal data being processed.
• Correction or completion of inaccurate information.
• Erasure of personal data where legally available.
• Withdrawal of consent.
• Removal of your public nickname.
• Information about how a grievance was handled.
• Nomination of another person to exercise applicable rights in the event of death or incapacity, where supported by law.

Send requests from your registered email address to hello@mydreamx.in.

Additional information may be requested only when reasonably necessary to confirm that the request concerns your account.

You may request account deletion by emailing hello@mydreamx.in from your registered email address with the subject “MyDreamX account deletion request”.

Before completing deletion, MyDreamX may need to confirm the request and resolve an active competition, payment, refund, fraud review, prize claim or legal-retention requirement.

Public leaderboard information will be removed or anonymized where reasonably possible after a valid deletion request is completed.

MyDreamX is intended only for adults aged 18 or older and is not designed for children.

If MyDreamX learns that a person under 18 created or used an account, the account may be restricted or closed and associated information handled according to applicable law.

A parent or guardian who believes a minor supplied personal data should contact hello@mydreamx.in.

Privacy questions, complaints and requests may be sent to hello@mydreamx.in.

Include your registered email address and enough information to understand the concern. Do not send passwords, OTPs, UPI PINs or complete payment credentials.

Formal grievance-officer details and escalation procedures will be added before approved paid competitions are activated, if required by applicable law.

MyDreamX may update this notice when the service, competition model, providers or applicable requirements change.

The latest revision date will appear at the top. Where required, users will receive notice or be asked to provide consent before a material new use of personal data begins.