Privacy Policy

FRAMEWORK

1.1.1. Statutory Role: This Privacy Policy (hereinafter referred to as the "Policy") sets forth the data protection practices, processing standards, and security procedures enforced by Overplay (collectively referred to as "Overplay" , "Company" , "We" , "Us" , or "Our" ). Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection frameworks, Overplay acts in the legal capacity of a "Data Fiduciary" regarding the personal data of digital creators, streamers, and users (collectively referred to as "Creators" , "Data Principals" , "You" , or "Your" ).

1.1.2. Binding Privacy Commitment: By creating an account, authenticating via Google OAuth or Discord, integrating your social media metrics, or accessing the Overplay Software-as-a-Service (SaaS) Platform, you explicitly acknowledge that you have read, understood, and consented to the collection, storage, processing, and transfer of your personal data as described in this Policy.

1.1.3. Direct Relation to Terms & Conditions: This Privacy Policy is read alongside and forms an integral, non-severable part of the Overplay Terms & Conditions .

1.2.1. Applicable Indian Statutes: Overplay processes and safeguards personal data strictly pursuant to the laws of the Republic of India, including:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) and any notifications or rules promulgated thereunder by the Ministry of Electronics and Information Technology (MeitY).
• The Information Technology Act, 2000 (as amended) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 .
• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 .

1.2.2. SARAL Standards (Plain-Language Principle): In alignment with statutory transparency mandates, this Policy is drafted to provide clear, unambiguous, and easily accessible notice regarding what data we collect, why we process it, and how you can exercise your legal rights over your information.

1.3.1. Covered Technical Touchpoints: This Policy applies to all personal data, telemetry, metrics, and digital media processed across every component of the Overplay ecosystem, including:

• The official Overplay SaaS Web Platform and User Dashboard.
• Integrated Application Programming Interfaces (APIs) , including Google OAuth, YouTube API Services, and Discord API integrations.
• The Overplay Discord Bot , webhooks, automated clipping nodes, and chat routing scripts.
• Brand networking channels, direct chat databases, and automated analytical indexing engines operated by Overplay.

1.3.2. Excluded Third-Party Platforms: This Policy does not apply to the independent privacy practices of third-party platforms (such as Google, YouTube, Discord, Instagram, X, or third-party brand websites) that you choose to access or link to Overplay. Your interactions with third-party software are governed exclusively by their respective privacy statements.

2.1.1. Account Identification: When you sign up, create a profile, or register on the Overplay SaaS Platform, we collect personal data directly provided by you, including:

• Full name, alias, or creator handle.
• Primary email address and phone number.
• Profile photos, custom channel avatars, and personal branding assets.
• Account authentication credentials, billing information, and payout details (including tax numbers/PAN and bank or UPI IDs required for brand payout processing).

2.1.2. Voluntary Communications: We collect information you transmit directly to us when submitting customer support tickets, participating in platform feedback surveys, or communicating with our team via email, platform contact forms or other communication modes.

2.2.1. Scope of Google Authentication: When you connect your Google Account or YouTube Channel to Overplay via official Google OAuth mechanisms, we access, process, and store specific data retrieved through YouTube API Services , including:

• Public Channel Data: Channel name, channel ID, custom URL, creation date, profile avatar, banner imagery, and video metadata (titles, descriptions, tags, upload timestamps, and thumbnail URLs).
• Dashboard & Read-Only Metrics: Aggregate subscriber counts, total view counts, video watch time, engagement rates (likes, comments, shares), estimated audience demographics (age, gender, geography), and traffic sources.
• OAuth Security Tokens: Access tokens, refresh tokens, and scope permissions granted during OAuth authentication.

2.2.2. YouTube API Service Disclosures: Overplay’s data fetch operations utilize YouTube API Services. By connecting your channel, you acknowledge and agree that Overplay retrieves and stores channel metrics locally in encrypted databases to power dashboard analytics and clipping engines.

2.3.1. Discord OAuth Data: When you authorize the Overplay Discord Bot or connect via Discord OAuth, we collect:

• Discord User ID, username, discriminator, avatar, and linked email address.
• Server (Guild) IDs, channel names, and administrative permission levels within connected servers.

2.3.2. Platform Chat & Message Metadata: We collect, process, and log communication metadata, message content, timestamps, attached media files, and negotiation records transmitted within designated Overplay platform channels (e.g., brand negotiation channels, automated clipping notifications, and support threads).

2.4.1. Connected Public Handles: If you link public social media profiles (such as Instagram, X, Twitch, or TikTok) to your Overplay profile, or provide public channel URLs, we collect publicly accessible profile data.

2.4.2. Automated Public Indexing: Overplay may utilize automated web indexing tools to retrieve publicly disclosed information from your connected accounts, including public follower counts, engagement stats, public video links, post timestamps, and bio details. We do not collect private messages or bypass authentication barriers on third-party platforms.

2.5.1. Automated System Logs: Whenever you interact with the Overplay SaaS Platform, web dashboard, or Discord webhooks, our servers automatically log technical device and connection telemetry, including:

• Internet Protocol (IP) address, Internet Service Provider (ISP), and general geolocation data.
• Browser type, operating system, device model, hardware specifications, and screen resolution.
• Referring URLs, entry/exit pages, platform navigation paths, session duration, and clickstream data.

2.5.2. Cookies & Tracking Technologies: Overplay utilizes essential session cookies, local storage, and security tokens to maintain user authentication state, secure dashboard sessions, and analyze aggregate platform traffic patterns.

BASIS

3.1.1. Primary Legal Basis (Consent): Pursuant to Section 6 of the Digital Personal Data Protection Act, 2023 (DPDP Act) , Overplay processes Your personal data primarily based on the explicit, informed, specific, unconditional, and unambiguous consent granted by You at the time of account creation, Google OAuth authentication, or Discord bot integration.

3.1.2. Secondary Legal Basis (Legitimate Uses): In limited statutory scenarios under Section 7 of the DPDP Act, 2023 , Overplay may process personal data without seeking fresh consent for "Certain Legitimate Uses"—including compliance with Indian court orders, responding to law enforcement requisitions, preventing cyber threats and system fraud, or fulfilling statutory legal duties under the IT Act, 2000 .

• Authenticating Your identity and verifying ownership of connected YouTube channels and Discord servers.
• Aggregating, processing, and generating real-time performance analytics (views, subscriber growth, engagement rates, watch time) on Your personalized SaaS Dashboard.
• Executing automated video processing, trimming, editing, and rendering algorithms to generate Derivative Clips and highlight reels from Your content.
• Maintaining system stability, resolving technical bugs, and optimizing API connection speeds between Overplay, Google, and Discord servers.

3.3.1. Platform Promotional Activities: You grant Overplay the right to process Your channel name, public metrics, profile avatar, and Derivative Clips for the purpose of promoting, advertising, showcasing, and growing the Overplay platform.

3.3.2. Analytics Showcase & Leaderboards: Overplay may process and display Your public channel metrics on platform leaderboards, public case studies, investor presentations, and creator showcases to highlight platform success stories.

3.3.3. Direct Marketing & Communication: Overplay processes Your registered email address and phone number to send platform updates, technical notices, security alerts, product feature updates, and promotional offers. You retain the right to opt out of promotional emails at any time via the "Unsubscribe" link provided in such communications.

• Match Creator profiles and channel demographics with relevant Brands, advertisers, and sponsorship agencies seeking campaign collaborations.
• Enable direct chat interactions, contract negotiations, deliverable tracking, and deal logging within Overplay’s dashboard and Discord integrations.
• Process campaign payout verification, invoicing, tax compliance calculations (TDS under Section 194J/194O of the Income Tax Act, 1961), and financial audit logging.

• Monitoring for unauthorized account access, credential stuffing, API rate-limit abuse, and system hacking attempts.
• Detecting, flagging, and removing prohibited, illegal, or NSFW content pursuant to Section 5 of the Terms & Conditions and the IT Intermediary Guidelines Rules, 2021 .
• Defending Overplay against legal claims, enforcing platform terms, and complying with statutory tax, accounting, and anti-money laundering obligations under Indian law.

DISCLOSURES

4.1.1. Adherence to Limited Use Requirements: Overplay's use and transfer to any other application of information received from Google APIs (including YouTube API Services) strictly adheres to the Google API Services User Data Policy , including the Limited Use requirements.

4.1.2. Purpose-Restricted Access: Personal data, channel metrics, and video analytics accessed via Google OAuth and YouTube API Services are processed solely to provide, maintain, and improve user-facing features on the Overplay SaaS Platform (such as dashboard performance displays, channel growth analytics, and automated clipping workflows).

4.1.3. Explicit Restrictions on Google User Data: Overplay explicitly affirms that:

• We do not sell, rent, lease, or trade Google API user data or YouTube channel analytics to any third parties, data brokers, or advertising networks.
• We do not transfer Google API user data to third parties, except as strictly necessary to provide or improve prominent platform features, comply with applicable laws, or as part of a corporate merger or acquisition, and always under equivalent privacy safeguards.
• We do not use or disclose Google API user data for serving personalized, targeted, or retargeted advertisements.

4.2.1. No Generalized AI Training: Overplay does not use data retrieved via Google APIs, YouTube API Services, or private user communications to train, fine-tune, optimize, or build generalized, non-personalized Artificial Intelligence (AI) or Machine Learning (ML) models.

4.2.2. Human Reading Restrictions: Human employees, contractors, or agents of Overplay are strictly prohibited from reading raw user data retrieved via Google APIs, except under the following narrow conditions:

• The Creator has provided explicit written permission to inspect specific data for technical support or bug resolution.
• It is strictly required for security investigations, such as investigating system abuse, malware injection, or platform security breaches.
• It is necessary to comply with applicable statutory laws, court orders, or government requisitions under Indian law.

4.3.1. Developer Terms Compliance: Overplay’s processing of Discord User IDs, server metadata, and channel message logs strictly complies with the Discord Developer Terms and Discord Developer Policy .

4.3.2. Data Isolation: Communication logs and negotiation metadata retrieved through the Overplay Discord Bot are strictly isolated to designated platform integration channels and are processed solely to facilitate brand negotiations, system alerts, and campaign tracking.

4.4.1. Use of Sub-Processors: To deliver our cloud-based SaaS platform, Overplay engages vetted third-party service providers ("Sub-Processors") for infrastructure hosting, database storage, payment processing, and system monitoring.

4.4.2. Categories of Sub-Processors:

• Cloud Infrastructure & Hosting: Enterprise cloud providers (e.g., Amazon Web Services, Google Cloud Platform) hosting encrypted databases and server nodes.
• Payment Gateways: PCI-DSS certified Indian payment processors (e.g., Razorpay, Cashfree) handling subscription billing and payout transfers.
• Analytics & Monitoring: Technical monitoring platforms tracking system error logs, uptime telemetry, and application performance.

4.4.3. Contractual Protection: All Sub-Processors engaged by Overplay are bound by strict contractual data processing agreements requiring them to maintain reasonable security practices equivalent to those mandated under the DPDP Act, 2023 and IT Rules, 2011 , processing user data strictly under Overplay's documented instructions.

5.1.1. Aggregated vs. Directly Identifiable Data: Overplay shares Creator data with Brands, sponsorship agencies, and prospective advertisers strictly under two distinct conditions:

• Aggregated & Anonymized Data: We may share non-personally identifiable, aggregated audience metrics, general engagement averages, and niche category statistics across platform showcase directories to attract Brand opportunities.
• Direct & Account-Specific Data: Once a Creator voluntarily accepts a Brand campaign, opts into a brand match, or initiates direct communication with a Brand through Overplay’s chat interfaces, we share specific, relevant profile data—including channel handles, subscriber counts, audience demographics, proposed campaign rates, and verified contact details—solely to facilitate contract execution, campaign delivery, and payment processing.

5.1.2. Independent Brand Liability: Brands operating on Overplay are independent data controllers/fiduciaries regarding personal data disclosed to them during campaign negotiations. Overplay is not liable for how third-party Brands process Creator data outside of the Overplay SaaS Platform.

5.2.1. Statutory Compliance: Pursuant to Section 16 of the Digital Personal Data Protection Act, 2023 (DPDP Act) , Overplay may transfer, host, and process personal data, API metrics, and system backups on cloud server infrastructure located outside the territory of India (such as AWS or GCP nodes in international data centers).

5.2.2. Whitelist & Restriction Alignment: Overplay warrants that cross-border transfers shall comply strictly with any negative lists, restricted territories, or government notifications issued by the Central Government of India under the DPDP Act. All cross-border data nodes are bound by enterprise encryption and strict technical data processing agreements.

5.3.1. Statutory Requisitions: Overplay reserves the right to disclose personal data, IP logs, chat transcripts, and account metadata to Indian court authorities, government bodies, cybercrime units, or law enforcement agencies without prior notice when required to do so under:

• Section 91 of the Code of Criminal Procedure, 1973 / Bharatiya Nagarik Suraksha Sanhita, 2023 .
• Section 69 and Section 79 of the Information Technology Act, 2000 .
• Direct court orders, lawful search warrants, or formal directives issued by the Data Protection Board of India (DPBI) .

5.3.2. Platform & Public Defense: We may also disclose data when we reasonably believe disclosure is necessary to investigate potential breaches of our Terms & Conditions, defend Overplay against legal claims, enforce platform safety, or protect against immediate threats to public safety or national security.

In the event that Overplay undergoes a corporate restructuring, merger, acquisition, joint venture, asset sale, or insolvency proceeding, Creator personal data, database records, and platform metrics may be transferred to the successor or acquiring entity as part of business assets, subject to the acquiring entity assuming the same privacy obligations set forth in this Policy.

As a Data Principal under the DPDP Act, 2023, You enjoy explicit, legally enforceable rights regarding Your personal data processed by Overplay:

• 6.1.1. Right to Access Information: You have the right to request a summary of the personal data processed by Overplay, the identities of all Data Processors or third parties with whom Your personal data has been shared, and a summary of processing activities undertaken.
• 6.1.2. Right to Correction, Completion, & Updating: You have the right to request the immediate correction of inaccurate or misleading personal data, the completion of incomplete data records, or the updating of obsolete profile information stored in our databases.
• 6.1.3. Right to Erasure ("Right to be Forgotten"): You have the right to request the complete deletion and erasure of Your personal data from Overplay’s systems, databases, and backup nodes where such processing is no longer necessary for the specified purpose for which consent was given, subject to statutory retention mandates under Indian law.
• 6.1.4. Right of Grievance Redressal: You have the right to readily available, transparent grievance redressal mechanisms regarding any act, omission, or breach by Overplay in fulfilling its obligations as a Data Fiduciary.
• 6.1.5. Right to Nominate: You have the right to nominate, in a prescribed manner, any other individual who shall, in the event of Your death or incapacity, exercise Your rights as a Data Principal under the DPDP Act.

6.2.1. Procedure for Withdrawal: You retain the absolute right to withdraw Your consent for data processing at any time by:

• Submitting a formal request to our Grievance Officer at our support portal: https://overplay.in/feedback
• Revoking OAuth authentication tokens directly within Your Google Security Settings or Discord App Settings.
• Disconnecting connected accounts within the Overplay SaaS Dashboard.

6.2.2. Legal Consequences of Withdrawal: Upon receipt of a valid consent withdrawal request, Overplay will cease processing Your personal data within a reasonable timeframe. However, You explicitly acknowledge that withdrawing essential consent (such as account credentials, Google OAuth permissions, or API analytics access) will render Overplay unable to deliver its core SaaS functionality, resulting in immediate suspension or termination of Your SaaS account without financial liability or refund obligations from Overplay.

7.1.1. Encryption Standards: Pursuant to Section 8(5) of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 , Overplay implements robust technical and organizational security controls to safeguard your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• Data-at-Rest Encryption: Industry-standard AES-256 bit encryption applied to all primary databases, server backups, token logs, and media cloud storage nodes.
• Data-in-Transit Encryption: Transport Layer Security (TLS 1.3) protocols protecting all web traffic, API calls between Overplay and Google/Discord endpoints, and internal microservice communications.
• Access Control & Credentials Security: Strict Role-Based Access Control (RBAC) enforcing least-privilege principles, multi-factor authentication (MFA) for administrative tools, and secure tokenization of OAuth refresh tokens.

7.1.2. Audits & Vulnerability Monitoring: Overplay conducts periodic system vulnerability scans, code audits, and infrastructure penetration tests to identify and patch security flaws across our SaaS dashboard, API handlers, and automated clipping nodes.

7.2.1. Statutory Regulatory Reporting: In the event of a confirmed personal data breach affecting Your information, Overplay will promptly notify statutory bodies in accordance with prescribed Indian legal timelines and guidelines, specifically:

• The Data Protection Board of India (DPBI) as required under the DPDP Act, 2023 .
• The Indian Computer Emergency Response Team (CERT-In) pursuant to directions under Section 70B of the Information Technology Act, 2000 .

7.2.2. Data Principal Notice: Overplay will inform affected Data Principals without undue delay via their registered email address or platform dashboard alert, detailing the nature of the security incident, likely consequences, and practical steps taken to mitigate harm.

7.3.1. Purpose-Bound Retention: Overplay retains your personal data, connected channel analytics, API tokens, and chat transcripts only for as long as necessary to fulfill the specific purposes set out in Section 3, or until you withdraw your consent.

7.3.2. Mandatory Automated Deletion: When an account is terminated, or upon receipt of a verified deletion request:

• Your personal data, profile assets, and OAuth authorization tokens will be soft-deleted immediately and permanently purged from active production servers within 30 days .
• Data residing in automated backup archives will be overwritten or securely purged in accordance with standard backup rotation cycles (not to exceed 90 days ).

7.3.3. Statutory Exception & Audit Overrides: Notwithstanding Sections 7.3.1 and 7.3.2, Overplay reserves the right to retain specific transaction logs, tax records, invoice details, and legal correspondence for extended periods strictly as required by Indian tax statutes (e.g., Income Tax Act, GST laws) or to defend against ongoing legal claims, court proceedings, or law enforcement directives.

& PARENTAL PROTECTIONS

8.1.1. Legal Majority Obligation: Pursuant to Section 9 of the Digital Personal Data Protection Act, 2023 (DPDP Act) read alongside the Indian Contract Act, 1872 , the Overplay SaaS Platform, automated video processing nodes, brand networking dashboards, and Discord bot integrations are strictly intended for access and operation by individuals who have attained at least eighteen (18) years of age (or the statutory age of legal majority in their jurisdiction).

8.1.2. Express Eligibility Representation: By creating an account, linking a YouTube channel via Google OAuth, authenticating via Discord, or accepting campaign terms, You explicitly represent, warrant, and covenant that You are at least eighteen (18) years of age and possess full legal capacity to enter into a binding data contract with Overplay.

8.1.3. Prohibition of Minor Accounts: Overplay does not knowingly offer services to, collect personal data from, solicit account registrations from, or process video metrics belonging to individuals under eighteen (18) years of age ("Minors" or "Children" ).

8.2.1. OAuth Metadata Inspection: Overplay utilizes age-verification flags, Google OAuth profile metadata signals, and Discord account age indicators to verify account eligibility during registration.

8.2.2. Automated & Human Audits: Overplay reserves the right to deploy automated screening tools and manual compliance audits to flag accounts exhibiting indicators of being operated by or featuring Minors without adult supervision.

8.2.3. Request for Identity Proof: If Overplay develops reasonable suspicion that an account is being operated by a Minor, Overplay reserves the right to temporarily freeze account access and request government-issued identity proof (such as Aadhaar, PAN, or Passport) to verify legal age before restoring platform access.

• 8.3.1. Absolute Ban on Behavioral Profiling: Overplay shall not process, track, monitor, or build behavioral personas or interest profiles based on the online activity, viewing history, or interaction logs of Minors.
• 8.3.2. Prohibition of Targeted Marketing: Personal data or telemetry signals shall never be used to serve targeted advertisements, sponsored brand recommendations, or algorithmic promotions to Minors.
• 8.3.3. Prevention of Harmful Processing: Overplay strictly prohibits any automated video clipping, rendering, or metadata processing that is likely to cause physical, mental, emotional, or psychological harm to a child, or that exposes Minors to inappropriate, dangerous, or exploitative content.

8.4.1. Parental Request Submission: If a parent, legal guardian, or statutory authority discovers that a Minor has gained unauthorized access to Overplay or provided personal data without verifiable adult consent, they may submit an expedited deletion notice to overplaycontact@gmail.com

8.4.2. SLA for Emergency Account Freeze: Upon receipt of a credible parental inquiry or age violation alert, Overplay will execute an immediate administrative freeze on the target account within twelve (12) hours , disabling API access and revoking active OAuth tokens.

8.4.3. Complete Data Purging Protocol: Within forty-eight (48) hours of confirming that an account belongs to a Minor, Overplay shall permanently execute the following cleanup operations across its production servers:

• Purge all account registration records, profile metadata, email addresses, and phone numbers.
• Terminate and erase all active Google OAuth and Discord API refresh tokens.
• Delete all stored channel performance metrics, analytics tables, and clip generation logs.
• Delete raw uploaded video assets and rendered Derivative Clips from cloud media storage.

8.5.1. Falsification of Age: Overplay bears zero legal liability for unauthorized platform usage resulting from a Minor falsifying their age during account registration, using stolen adult credentials, or authenticating via a third-party OAuth account owned by an adult.

8.5.2. Forfeiture of Accrued Earnings: Any account discovered to be operated by a Minor in violation of this Section 8 shall be subject to immediate permanent termination, and any pending payout, sponsorship earnings, or brand commissions tied to the account shall be forfeited and rendered null and void .

8.5.3. Parental Responsibility: Parents and legal guardians remain fully responsible for supervising their children's online activities, internet access, and third-party account authorizations.

9.1.1. Legal Designation: In accordance with Section 10 of the Digital Personal Data Protection Act, 2023 (DPDP Act) and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 , Overplay has appointed a designated Grievance Officer and Data Protection Officer (DPO) to oversee data privacy compliance, address Data Principal inquiries, and handle formal complaints regarding data processing.

9.1.2. Official Contact Particulars: Data Principals, Creators, and Regulatory Authorities may direct formal legal notices, privacy rights requests, or statutory grievances to:

• Designation: Grievance Officer & Data Protection Lead
• Entity Name: Overplay SaaS Platform
• Grievance Email: overplaycontact@gmail.com
• Privacy Enquiries: overplaycontact@gmail.com
• Response Window: Acknowledgement within 24 Hours
• Registered Office Address: Delhi, India.

9.2.1. Submission Criteria: To initiate a formal privacy grievance or exercise statutory rights under Section 6 (Access, Correction, Erasure, or Consent Withdrawal), the Data Principal must submit a written request from their support page to https://overplay.in/feedback including:

• Full name, registered creator handle, and associated channel URLs.
• A detailed description of the specific privacy right invoked or the alleged breach/omission by Overplay.
• Relevant documentary evidence, screenshot proofs, or identity verification details where requested to prevent fraudulent account takeovers.

9.2.2. Acknowledgment SLA: Overplay will issue a formal ticket number and written acknowledgment of receipt to the Data Principal within twenty-four (24) hours of receiving the complaint.

9.3.1. Binding 15-Day Resolution SLA: In strict compliance with Indian statutory mandates, all valid data privacy grievances, rights requests, and processing complaints submitted to the Grievance Officer shall be thoroughly investigated, addressed, and formally resolved within a maximum period of fifteen (15) calendar days from the date of initial receipt.

9.3.2. Interim Status Communications: If a complex technical investigation (such as deep database audit trails or third-party Sub-Processor coordination) requires additional processing time, the Grievance Officer shall provide an interim written update within seven (7) days explaining the status of the investigation and expected date of final resolution within the overall statutory limit.

9.4.1. Right to Appeal & Statutory Escalation: Pursuant to Section 13 of the Digital Personal Data Protection Act, 2023 , if a Data Principal:

• Is dissatisfied with the final resolution provided by Overplay's Grievance Officer, OR
• Does not receive a formal response or resolution within the mandatory fifteen (15) calendar day statutory timeframe, the Data Principal retains the absolute legal right to register a formal appeal or complaint with the Data Protection Board of India (DPBI) through its designated statutory portal and procedures.

9.4.2. Exhaustion of Internal Remedies: While the right to approach the DPBI is statutory, Data Principals are strongly encouraged to first exhaust Overplay's internal Grievance Redressal mechanism to ensure rapid resolution of technical or account-specific privacy concerns.