What data we collect — the full list
COME SPORTS collects three categories of data. The first is server logs — IP address, browser user-agent, requested URL, response code and timestamp — retained for 30 days for security and traffic-analysis purposes. The second is analytics events — page views, scroll depth, click targets — collected via a first-party analytics tool that does not set third-party cookies.
Privacy Policy.
What we don't collect
COME SPORTS does not collect data we do not need. We do not sell reader data to third parties. We do not load third-party advertising trackers before the user has consented. We do not use re-targeting pixels from any ad network. We do not collect biometric data, location data beyond coarse IP-derivable region, or any data from children under 18.
What we collect
We collect only the data necessary to operate this editorial guide — analytics, page views, comment submissions if any. We do not collect KYC documents (those go directly to the app).
Your rights — access, correction, deletion
You have the right to access the personal data we hold on you, the right to correct inaccurate data, the right to request deletion of data we are not legally required to retain, and the right to opt out of any processing that is based on consent rather than legitimate interest. To exercise any of these rights, write to [email protected].
How we use it
To improve our guides, verify referral sources and respond to enquiries. We do not sell personal data.
Cookies and tracking — what we use
COME SPORTS uses a single first-party cookie for session management and a single first-party analytics cookie for traffic measurement. We do not use third-party advertising cookies, do not use re-targeting pixels and do not use cross-site tracking. The full cookie inventory is published at the foot of this page.
Cookies
This site uses first-party cookies for analytics and session management only. No advertising cookies. No third-party trackers.
Children's privacy — under-18 users
COME SPORTS does not knowingly collect data from children under 18. If we become aware that we have collected data from a child under 18, we delete it within 7 days. If you believe we have collected data from a child under 18, please write to [email protected] and we will investigate within 24 hours.
Your rights
Indian residents have rights under the Digital Personal Data Protection Act, 2023. Email [email protected] to exercise access, correction or deletion.
Changes to this policy — how we notify
COME SPORTS may update this privacy policy from time to time. Material changes are announced on the site banner and via the email list (if you are subscribed). Non-material changes are appended as a timestamped correction note at the foot of this page. The latest version is always posted at /privacy/ with the effective date at the top.
Data retention
Analytics data is retained for 24 months. Enquiry correspondence is retained for 12 months. After those windows the data is deleted.
What changed recently — last-reviewed timestamp
This page is part of a published editorial calendar with a documented re-verification cadence. During the IPL season (late March to late May), every figure on this page is re-verified weekly. During the off-season, every figure is re-verified monthly. The full audit trail for any published number is accessible by hovering or tapping the small calendar icon beside the sub-heading.
The most recent substantive update to this page is logged at the foot of the page in the "Editorial log" section. If a published figure drifts by more than 10 percent from the underlying data, the page is updated within 24 hours and a timestamped correction note is appended.
Children
This site is not directed at children under 18. We do not knowingly collect data from anyone under 18.
Related guides — where to read next
Every page on COME SPORTS links to the next page in the editorial chain. The chain starts at the fantasy cricket hub and runs through the IPL-specific hub, the prediction hub, the live scoreboard, the captain guide and the bonus guide. If you want a structured walk-through of the entire site, the fantasy guides blog is the right starting point — it covers the evergreen material in reading order.
The IPL 2026 calendar page lists every match, every venue and every squad update for the current season. The winners hub logs every prediction and every pick so you can audit our calls against the actual results. The responsible play hub documents every in-app tool for deposit limits, session time-outs and self-exclusion.
More from COME SPORTS
Visit the COME SPORTS editorial library for the latest fantasy-cricket guides, picks, points tables and live scoreboards. Every guide is updated after every IPL match.
How the editorial team is structured
COME SPORTS is run by a small editorial team of senior cricket analysts, data engineers and a full-time compliance reviewer. The cricket analysts write the guides, run the model audits and produce the captain picks. The data engineers pull the ball-by-ball feed, normalise the data and maintain the form index. The compliance reviewer reads every claim against the current state-level notifications and the latest operator terms.
The team is intentionally small. A smaller team means a tighter editorial pipeline, fewer handoffs and a faster correction cycle. It also means we cannot cover every cricket event globally — we focus on the IPL, the T20 World Cup, the Asia Cup and the bilateral series involving India.
Lawful basis for processing
COME SPORTS processes personal data under three lawful bases, depending on the data category. Server logs and security data are processed under legitimate interest — we need to keep the site secure. Analytics events are processed under consent — the user opts in via the cookie banner on first visit. KYC documents and transaction history are processed under legal obligation — the PMLA 2002 and the IT Act 2000 require us to retain this data.
Editorial correspondence is processed under legitimate interest — we need to keep a record of reader interactions. Self-exclusion records are processed under legal obligation — the responsible-play regulations require us to retain this data for the life of the account plus 7 years.
Privacy Policy — frequently asked.
Is Privacy Policy free to read?
Yes — every page on COME SPORTS is free to read. The companion app is free to install.
Where do I download the app?
Use the download page to get the iOS, Android or direct APK link.
Is fantasy cricket legal in my state?
Most Indian states allow paid contests. The responsible play hub lists the current eligibility map — verify on app.
Independent of any operator — our editorial stance
COME SPORTS is editorially independent. We do not operate a paid fantasy app ourselves. We do not take a commission on contests entered through any third-party operator. We do not run sponsored editorial in disguise. Where we do accept sponsorship, the post is clearly labelled and reviewed under the same pipeline as every other guide.
Our funding model is straightforward: display advertising plus a flat referral fee paid by partner operators when a reader signs up via a tracked link. The flat fee is the same regardless of whether the reader plays a single contest or every match of the season, which keeps our editorial incentives aligned with the reader's.
Cross-border data transfers
COME SPORTS processes most data inside India. The exception is analytics events, which are processed by a third-party analytics provider with servers in the European Union and the United States. The transfers are covered by the provider's Standard Contractual Clauses with the EU and by the provider's participation in the EU-US Data Privacy Framework.
We do not transfer any KYC data, transaction data or self-exclusion data outside India. The data residency is enforced at the infrastructure level via region-pinned storage buckets. If you have a question about a specific cross-border transfer, write to [email protected].
Related guides.
How to verify any figure on this page
Every number published on COME SPORTS carries a provenance tag — the match-id, the source feed and the timestamp of the most recent verification. Hover or tap the small calendar icon beside any sub-heading to see exactly when the figure was last cross-checked against the live data feed. If you spot a number that has drifted, write to the editorial desk at [email protected] and we will reconcile within 48 hours.
For figures that depend on private data — squad pricing, KYC approval rates, withdrawal TAT — the source is documented on the methodology page. The methodology page is itself audited quarterly by the compliance reviewer, and any change to the documented process is appended as a timestamped correction note at the foot of the page.
Data breach notification
COME SPORTS has a documented data-breach response plan. In the event of a personal-data breach, we notify the affected users within 72 hours of becoming aware of the breach, in line with the IT Act 2000 and the SPDI Rules 2011. We notify the CERT-In and the relevant sectoral regulator as required by law.
We have not had a personal-data breach in our operational history. The closest incident was a phishing campaign targeting our users in 2024, which we detected and contained within 24 hours — no user credentials were compromised. The phishing campaign was reported to CERT-In and to the affected users.
Third-party processors — the full list
COME SPORTS uses a small number of third-party processors to operate the site and the companion app. The full list is published below with the data category, the processor, the processor's location and the lawful basis for the transfer.
Analytics: a first-party analytics tool with servers in the EU and the US. The transfer is covered by Standard Contractual Clauses and the EU-US Data Privacy Framework.
Payment processing: an Indian payment aggregator with servers in India. No cross-border transfer. The aggregator handles UPI, Net Banking, IMPS and card transactions.
KYC verification: an Indian KYC provider with servers in India. No cross-border transfer. The provider handles PAN, Aadhaar and live-photo verification.
Cloud hosting: an Indian cloud provider with servers in Mumbai and Hyderabad. No cross-border transfer.
Email delivery: a global email provider with servers in multiple regions. The transfer is covered by Standard Contractual Clauses.
Children's data — what we do
COME SPORTS does not knowingly collect personal data from children under 18. The site is intended for adults; the companion app requires age verification at sign-up. If we become aware that we have collected data from a child under 18, we delete it within 7 days of becoming aware.
If you believe a child under 18 has provided personal data to COME SPORTS, please write to [email protected]. We will investigate within 24 hours and delete any data we find. We will also report the incident to the relevant authority as required by the IT Act 2000 and the SPDI Rules 2011.
The site does not display advertising that is targeted at children. The site does not load any third-party trackers that are known to collect data from children. The site does not include any content that is specifically designed to appeal to children.
Need more from COME SPORTS?
Reading checklist — what to do with this page
The most efficient way to read any COME SPORTS page is in three passes. The first pass is the headline — read the title, the eyebrow and the first paragraph to understand the editorial scope. The second pass is the structure — skim the section headers to build a mental outline of the page. The third pass is the deep read — work through each section in order, following the internal links as you go.
If you are short on time, every page has a one-paragraph executive summary at the top of the section list and a detailed FAQ at the bottom that covers the recurring reader questions. The summary is for the time-poor reader; the FAQ is for the reader who wants to interrogate the page before applying its framework.
Automated decision-making
COME SPORTS uses automated decision-making in three limited contexts. First, the prediction model outputs a win-probability — this is not a decision, it is a probability surfaced to the user. Second, the captain suggestion in the app is an automated ranking — the user is free to pick a different captain. Third, the responsible-play console can flag unusual deposit patterns and prompt the user with a check-in — the flag is not a block, it is a nudge.
We do not use automated decision-making to deny a user account, to revoke winnings or to restrict access to the site. These decisions are always made by a human reviewer and the user is informed of the decision and the basis for it.
How long we retain each data category
COME SPORTS retains data for the minimum period necessary to provide the service and comply with legal obligations. The retention schedule is published on the methodology page and reviewed quarterly.
Server logs: 30 days. Analytics events: 13 months. Editorial correspondence: 24 months. KYC documents: 5 years post account closure. Transaction history: 7 years post transaction. Self-exclusion records: life of account plus 7 years.
After the retention period expires, the data is either deleted or anonymised. Anonymised data may be retained indefinitely for analytics and research purposes. We do not sell anonymised data to third parties.
Privacy by design — how we built the site
COME SPORTS is built with privacy by design. The site does not load third-party trackers before user consent. The site does not use re-targeting pixels from any ad network. The site does not set third-party cookies for advertising. The site uses a single first-party analytics tool that does not transfer personal data outside India.
The companion app is built with the same principles. The app does not load third-party SDKs that are not necessary for the core functionality. The app's analytics are first-party only. The app's payment processing is handled by an Indian payment aggregator with no cross-border data transfer.
The privacy-by-design approach is reviewed quarterly by the compliance reviewer. Any new third-party SDK or new analytics tool goes through a privacy review before being added to the site or the app.