Privacy Policy
Last updated: April 16, 2026
1. Introduction
Agamya Cyber Tech operates a cybersecurity Capture The Flag (CTF) platform intended for educational, training, and competitive purposes. This Privacy Policy describes how personal data is collected, processed, stored, and protected when users access and use the platform. By registering or participating in the platform, users consent to the collection and use of their information in accordance with this policy and applicable laws.
2. Information We Collect
We may collect personal information including the user's full name, email address, phone number, and institution or college affiliation during registration. In addition, account-related data such as login credentials, team participation, and authentication tokens are collected. The platform also collects usage-related information, including challenge submissions, scores, timestamps, IP addresses, and device information, to ensure proper operation, competition integrity, and security.
3. Purpose of Data Processing
The information collected is used to operate and manage the CTF platform, authenticate users, maintain sessions, track performance, display rankings, and enforce competition rules. It is also used to detect unauthorized activity, prevent cheating, and enhance system security. Data may further be used to improve platform functionality and communicate relevant updates or competition-related announcements.
4. Legal Basis for Processing (GDPR Compliance)
For users subject to international data protection regulations, including the General Data Protection Regulation (GDPR), personal data is processed on lawful grounds such as user consent, contractual necessity for participation, legitimate interest in maintaining platform integrity and security, and compliance with legal obligations.
5. Compliance with Indian Law
This platform complies with the provisions of the Information Technology Act, 2000, including its amendments and applicable rules such as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Users acknowledge that any unauthorized access, data theft, identity misuse, or system interference may constitute offenses under Sections 43, 65, 66, and related provisions of the IT Act. The platform reserves the right to report unlawful activities to appropriate authorities in accordance with Indian law.
6. Data Storage and Retention
User data is securely stored on servers maintained by trusted service providers. Personal data is retained for the duration of the competition and for a reasonable period thereafter for administrative, compliance, and security purposes. Data may be retained longer where required by law or for dispute resolution and enforcement of legal rights.
7. Data Security
We implement appropriate technical and organizational measures to protect user data, including encrypted communication, secure password hashing, controlled access mechanisms, and activity monitoring. While we take reasonable steps to safeguard data, users are responsible for maintaining the confidentiality of their credentials and exercising caution when using the platform.
8. Cookies and Session Management
The platform uses cookies and secure session tokens to maintain authentication and improve user experience. These cookies may be configured with security attributes such as HTTP-only and Secure flags. Users may control cookie settings through their browser; however, disabling cookies may affect functionality.
9. Data Sharing and Disclosure
We do not sell or trade personal data. Information may be disclosed only where required by law, to comply with legal obligations, or to trusted service providers assisting in platform operations under strict confidentiality agreements.
10. International Data Transfers
User data may be processed on servers located outside the user's jurisdiction. We ensure that such transfers are carried out with appropriate safeguards and in compliance with applicable data protection regulations.
11. User Rights
Users have the right to access, update, or request deletion of their personal data. They may also request restriction of processing or object to certain uses of their data. Requests will be handled in accordance with applicable laws and within a reasonable timeframe.
12. Data Breach Notification
In the event of a data breach, we will take appropriate measures to contain and investigate the issue and notify affected users and authorities where required under applicable laws.
13. Academic and Institutional Use Compliance
Where the platform is used as part of a college, university, or institutional program, users acknowledge that certain information such as participation, scores, and rankings may be shared with the affiliated institution for academic evaluation, certification, or training purposes. Institutions are expected to ensure that participation is conducted ethically and in compliance with academic integrity standards.
14. Changes to Policy
We reserve the right to modify this Privacy Policy at any time. Continued use of the platform after changes are made constitutes acceptance of the revised policy.