Privacy Policy
Mahjong League · Owned and operated by Lets Mahjong LLP
Last updated: 2 March 2026
1. Introduction
Lets Mahjong LLP (“Company”, “we”, “our”, or “us”) operates the Mahjong League website (“Platform”).
We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it, how we store and protect it, and your rights regarding your data.
By using the Platform, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect information in the following categories:
A. Account & Profile Information
When you sign up and complete onboarding, we collect:
- First name and last name
- Email address
- Phone number (verified via OTP)
- City (selected or custom city entry)
- Delivery address for physical league card (Address Line 1, Address Line 2, Landmark)
- Profile photo or selected avatar
- Mahjong experience level
- League ID (generated after successful payment)
B. Authentication Data
Authentication is handled via Supabase Auth. We process:
- Supabase user ID
- Email verification status
- Session cookies
Passwords are never stored by us directly.
C. Payment Information
Payments are processed securely through Razorpay. We store:
- Razorpay customer ID
- Subscription ID (if auto-renewing plan selected)
- Razorpay order ID (for one-time memberships or tournaments)
- Razorpay payment ID
- Subscription status, start and end dates
We do not store your card details, UPI PIN, bank account details, or payment credentials.
D. Communication Data
- Teacher inquiries submitted through the Platform
- Email communications sent through Postmark
- WhatsApp welcome message delivery logs
- SMS verification attempts (rate-limited)
E. Tournament & Event Data
- Registration and payment status
- Tournament results
- Leaderboard points
F. Usage & Technical Data
- IP address
- Browser type and device information
- Pages visited and timestamps of actions
We use Sentry for error monitoring. Logged data is structured and redacts personally identifiable information where possible.
3. How We Use Your Information
- Create and manage your Mahjong League account
- Verify your phone number
- Process membership and tournament payments
- Generate your unique League ID
- Add you to city leaderboards
- Deliver physical league cards
- Send transactional emails, WhatsApp welcome messages, and SMS OTP codes
- Prevent fraud and duplicate accounts
- Improve website performance and reliability
- Comply with legal obligations
We do not sell your personal information.
4. Legal Basis for Processing
- Your consent — account creation, communications
- Contractual necessity — membership and tournament participation
- Legal compliance
- Legitimate interests — fraud prevention, platform improvement
5. Data Storage & Security
A. Infrastructure
- PostgreSQL database (hosted via Supabase)
- Supabase Storage (for profile and event images)
- Razorpay (for payment processing)
- Twilio (for SMS and WhatsApp messaging)
- Postmark (for transactional emails)
- Sentry (for error monitoring)
B. Security Measures
- Server-side validation
- Rate limiting on write actions
- OTP verification before storing phone numbers
- Unique constraints to prevent duplicate identities
- Webhook signature verification for payment events
- Idempotent payment handling to prevent double processing
- Structured logging with PII redaction
- Restricted admin access
No system is 100% secure, but we take reasonable technical and organizational measures to protect your data.
6. Data Retention
We retain personal data:
- As long as your account remains active
- As required for legal, tax, or accounting obligations
- For payment record compliance
- For dispute resolution
You may request deletion of your account (subject to legal and financial record retention requirements).
7. Communications
We send only transactional communications, including:
- Welcome emails
- Teacher inquiry notifications
- Payment and membership confirmations
- OTP verification messages
We do not send promotional marketing emails unless explicitly introduced in the future with opt-in consent.
8. Leaderboard & Public Information
The following information may be publicly visible:
- Your name
- Your League ID
- Your city
- Your leaderboard points
- Tournament results
You may request removal from public listings by contacting us, subject to league participation rules.
9. Cookies
We use cookies for:
- Session authentication
- Secure login persistence
- Basic site functionality
We do not use third-party advertising trackers.
10. Third-Party Service Providers
We share data only with trusted service providers necessary to operate the Platform:
- Razorpay — Payments
- Supabase — Database & Authentication
- Twilio — SMS & WhatsApp
- Postmark — Email
- Sentry — Error monitoring
These providers process data only to deliver their services.
11. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion (subject to legal requirements)
- Withdraw consent (where applicable)
- Request clarification about how your data is used
To exercise these rights, contact: [email protected]
12. Children's Privacy
Mahjong League is not intended for children under 18 years of age. We do not knowingly collect personal information from minors.
13. International Data Transfers
Your data may be processed on infrastructure located outside India depending on service provider infrastructure. We ensure that service providers maintain appropriate data protection standards.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised “Last Updated” date. Continued use of the Platform after changes indicates acceptance of the updated policy.
15. Contact Information
For questions regarding this Privacy Policy, contact:
Lets Mahjong LLP
4B, Fourth Floor, Plot 91
Walkeshwar, Raj Bhavan
Malabar Hill, Mumbai – 400006
India
Email: [email protected]