Privacy
The personal data RIVR keeps, and its backups.
Who keeps your data
RIVR Poker Club, upper floor, Glaza, M3M 65th Avenue, Gurugram, keeps the personal data in this notice and decides how it is used. Write to info@rivrpoker.com about anything in it.
This notice covers the RIVR app, this website and the club itself.
What RIVR keeps
Your mobile number, your name, the answers you give when you join, and a photo of you if you add one.
From the identity check: the selfie you take, your date of birth, your address, your PAN and the last four digits of your Aadhaar. RIVR never keeps your full Aadhaar number.
Your visits, your places on waitlists, your seats and how long you play, your membership tier and points, your food and drink orders, the address for a cab you ask for, the breaks and reminders you set, and any feedback you send. If a referral or a RIVR link brought you, its code. Messages you send RIVR on Instagram or WhatsApp. If you turn on notifications, the address your phone gives for them.
The club's cameras record the floor, for everyone's safety.
Why RIVR keeps it
To run your membership: to check that you are 18 or over and that each member is one person, to seat you and to keep your place.
To keep the records the law asks a club like RIVR to keep, and to keep the club and its members safe.
To send you the messages you agreed to. Offers and news come only if you say yes, and you can stop them in the app at any time. The same yes lets RIVR measure its adverts, as Who sees it says.
Who sees it
Club staff see what their role needs: the front desk sees who is checking in, the floor sees the waitlist, and the staff who review identity checks and the cashier see your selfie, to know it is you.
RIVR's providers handle data for RIVR, each for the service it gives. Cashfree runs the identity check with DigiLocker. WhatsApp, from Meta, sends your sign-in codes and the club's messages, and MSG91 sends codes by SMS when WhatsApp cannot. Supabase holds RIVR's records, and Cloudflare serves the app and this website. Your phone's own service delivers the notifications you turn on.
If you say yes to offers and news, RIVR tells Meta and Google when you book the Academy, finish the identity check, visit the club or make your first buy-in, with your phone number hashed so it cannot be read, so RIVR can measure its adverts. Say no in the app and this stops.
How long it is kept
RIVR keeps your data while you are a member. Ask RIVR to erase it and RIVR does, except the records the law asks a club to keep, which are kept only as long as the law asks.
Your rights
You can ask to see the data RIVR keeps about you, to correct it, or to erase it. Ask at the front desk or write to info@rivrpoker.com. Some records must be kept as long as the law asks, even after you leave, and RIVR will tell you which.
You can withdraw a consent you gave, such as to offers and news, at any time.
If RIVR's answer does not settle it, you can complain to the Data Protection Board of India.
Cookies on this website
This website and the app keep only what they need to work, unless you allow more in their cookie banners.
The website's map is Google Maps, which sets its own cookies only if you allow maps.
If you allow analytics, Google Tag Manager loads Google Analytics, from Google, and the Meta pixel, from Meta. They set their own cookies to count visits and to measure RIVR's adverts. Without your yes, neither loads.
You can change your choice at any time: Cookie settings at the foot of the website, or Analytics and ads in Profile in the app.
Backups and erasure
Backups. Every night RIVR takes an encrypted backup of its records, so the club can recover from a failure. Backups hold personal data, the photos from identity checks included. Each night's backup is kept for 35 days, and one backup a month for 400 days, then deleted. Personal data can be in a backup for up to 400 days.
Erasure. When your data is erased at your request, a backup taken before then still holds it until that backup is deleted. If RIVR ever restores a backup, every erasure made since it was taken is made again before the restored records are used.