Privacy policy

This policy explains how Golden Solutions ("ClutchCoins", "we", "us") collects, uses, shares and protects your personal data when you visit clutchcoins.com or buy from us. We act as the data fiduciary for this data under the Digital Personal Data Protection Act, 2023 and follow the Information Technology Act, 2000 and the rules made under it. By using the site you agree to this policy.

1. What we collect

• Order details: the game, pack and quantity, your player ID and (where needed) server or zone ID, the amount, any coupon, and the order history.
• Contact details: your email address and, if you give it, your mobile number.
• Account details (only if you create an account): your name, email and a securely hashed password. We never see or store your actual password.
• Payment details: the payment method and reference (for example a UPI transaction ID / UTR, or a gateway payment ID). We do not collect or store card numbers, CVV, UPI PIN, net-banking passwords or OTPs.
• Support and complaint messages you send us, including through our grievance form.
• Technical data: IP address, browser type and basic request logs, used for security, fraud prevention and rate limiting.

We never ask for your game account password or login. You only ever need to give us your player ID.

2. Why we use it

• To process your order and deliver the top-up to the player ID you entered (performance of our contract with you).
• To send order confirmations, payment and delivery updates, and replies to your messages.
• To verify payments, prevent fraud, misuse and chargeback abuse, and keep the site secure.
• To handle refunds, complaints and grievances.
• To keep accounting and tax records and meet other legal obligations.
• With your consent only: to send offers and news. You can unsubscribe at any time.

3. Who we share it with

We do not sell your personal data. We share only what each party needs to do its job:

• Top-up suppliers and game publishers: your player ID, server ID and the pack, so the in-game currency can be delivered. Some suppliers are located outside India.
• Payment services: your bank or UPI app, and any payment gateway we use, to process and verify payments and refunds.
• Service providers who run the site for us: website hosting (Vercel), our database (Supabase, hosted in Mumbai, India), and Google Workspace services (Gmail and Google Sheets/Forms) for order records, emails and complaints. They process data only on our instructions.
• Internal alerts: order details may be sent to a private messaging channel (such as Telegram) that only our staff can see, so orders are processed quickly.
• Authorities: where required by law, court order or to protect against fraud.

Some of these providers store data outside India. Where that happens, we transfer data only as permitted under Indian law.

4. How long we keep it

• Order, payment and invoice records: for as long as tax and accounting law requires (currently around six years under GST law).
• Accounts: until you ask us to delete your account, then removed except for records we must keep by law.
• Support messages and complaints: up to two years after they are closed.
• Security logs and rate-limit data: a short period, normally not more than 90 days.

5. Cookies and local storage

We use one strictly necessary cookie to keep you signed in, and your browser's local storage to remember your cart. These are needed for the site to work. If we add analytics or marketing cookies in future, we will update this policy and ask for consent where required.

6. Security

Data is sent over HTTPS, passwords are hashed, order links use secret keys, and admin access is restricted. No system is perfectly secure, but we take reasonable security practices and procedures to protect your data. If a breach affects your personal data, we will inform you and the authorities as required by law.

7. Your rights

Subject to the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law;
• withdraw consent you gave (for example to marketing emails);
• nominate another person to exercise these rights if you die or become unable to;
• raise a grievance with our Grievance Officer, and if you are not satisfied, complain to the Data Protection Board of India.

Email clutchcoins2026@gmail.com from the email address on your order or account. We may ask you to confirm your identity before acting on a request.

8. Children

Our service is meant for adults. If you are under 18, a parent or guardian must place the order and give consent on your behalf. We do not knowingly collect children's data without that consent and do not track or target children with advertising. If you believe a child has given us data without consent, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be highlighted on the site. Also see our terms and conditions and refund policy.

Who we are and how to reach us

ClutchCoins (clutchcoins.com) is operated by Golden Solutions, a proprietorship registered in India.
Registered address: Delhi, India
GSTIN: 07PVXPS7728L1ZY
Customer support: clutchcoins2026@gmail.com

Grievance Officer: Grievance Officer, Golden Solutions (Grievance Officer), Golden Solutions, Delhi, India. Email: clutchcoins2026@gmail.com. We acknowledge complaints within 48 hours and aim to resolve them within one month of receipt.