Legal
Privacy policy
Last updated 30 September 2026
Turf Access is a booking desk for sports venues in India: turfs, courts, nets and pools. It is run by Cyberzio Innovations Pvt Ltd, Tamil Nadu, India (“we”). This page explains what we collect, why, who we share it with and how you can have it removed. It covers the website at turfaccess.com, the owner desk, the booking pages and the Turf Access WhatsApp number.
1. Who this is about
- Venue owners and their staff, who run a venue on Turf Access.
- Players, who book a slot, join a tournament or buy a membership at a venue, on the booking page or on WhatsApp.
When a player books at a venue, the venue decides how that booking is handled, and we store it for them. For those bookings the venue is responsible for its players’ data and we process it on its behalf.
2. What we collect
| Who | What |
|---|---|
| Owners and staff | Name, mobile number, a 4-digit PIN (stored only as a one-way hash), role, sign-in times, and changes made in the desk. |
| Venues | Venue name, phone, address and map pin, opening hours, courts and prices, UPI ID and payee name. |
| Venue billing | Billing name, GSTIN, state, address and email, credit purchases and invoices. |
| Players | Name, mobile or WhatsApp number, bookings, the UTR number of a UPI payment and, if you add one, a screenshot of that payment. Also memberships, coupon use and tournament team registrations (captain name and phone, player names). |
| WhatsApp chats | Messages you send to and receive from the Turf Access number, your WhatsApp profile name, and whether each message was delivered or read. |
| Technical | Server logs (IP address, time, page requested) and error reports, used to keep the service running and secure. |
We do not collect card numbers, UPI PINs or bank passwords. Players pay the venue’s UPI directly; Turf Access never holds player money.
3. Why we use it
- To take, hold, confirm, remind about and cancel bookings, and to stop two people booking the same slot.
- To let owners check payments, collect balances and see their accounts.
- To run the WhatsApp booking bot and send confirmations, reminders and alerts.
- To sell booking credits, issue GST invoices and keep the tax records the law requires.
- To keep accounts secure, investigate errors and prevent abuse.
We do not sell your data, use it for advertising, or build profiles about you.
4. Cookies
We use only the cookies needed to keep owners and admins signed in. They expire after at most 12 hours. There are no advertising, analytics or tracking cookies, and no third-party trackers on the site.
5. Who we share it with
- The venue you book with sees your name, number, booking, payment reference and screenshot, so it can run your booking.
- Meta (WhatsApp) carries the messages sent through the Turf Access WhatsApp number, under WhatsApp’s own terms and privacy policy.
- Razorpay and Cashfree process venue owners’ credit purchases. We receive only the payment status and reference, never card or bank details.
- Our hosting provider runs the servers and database that store the data.
- Authorities, only when the law requires it.
6. How long we keep it
We keep account, venue, booking and chat data while the venue uses Turf Access, and until you or the venue ask us to delete it. Invoices and the records behind them are kept for as long as Indian tax law requires, even after an account is deleted.
7. Security
The site runs only over HTTPS. PINs are hashed, sessions are signed and time-limited, staff see only what their role allows, and changes to access, money and settings are logged. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
8. Your rights
Under India’s Digital Personal Data Protection Act, 2023 you can ask to see the personal data we hold about you, correct it, have it deleted, and raise a grievance. To have your data deleted, follow the steps on our Data deletion page. For anything else, email us at the address below. We reply within 30 days.
9. Children
Owner accounts are for adults. A player under 18 should book with a parent or guardian’s permission, and a parent can ask us to delete a child’s data at any time.
10. Changes
If we change this policy, we will update the date at the top and, for significant changes, tell venue owners in the desk before they take effect.
11. Contact
Cyberzio Innovations Pvt Ltd, Tamil Nadu, India
Email: lck@cyberzio.com