COMPLIANCE

Data Protection & Legal Compliance

EPAN · Vernata Labs · India Regulatory Alignment

1. Overview

EPAN is a private identity infrastructure operated by Vernata Labs for esports ecosystem transparency and integrity in India.

2. DPDP Act Compliance

EPAN complies with the Digital Personal Data Protection Act, 2023. Data is processed lawfully, transparently, and for defined purposes only.

3. Data Fiduciary Role

Vernata Labs acts as a Data Fiduciary responsible for handling user data with accountability and compliance.

4. User Rights

  • Right to access personal data
  • Right to correction
  • Right to erasure
  • Right to grievance redressal

5. Consent Framework

Data is collected only with clear, informed, and revocable user consent.

6. Data Storage & Localization

All EPAN user data is stored and processed exclusively within India.

Data is hosted on industry-standard Amazon Web Services (AWS) infrastructure located in Mumbai, India.

No personal data is transferred or stored outside Indian jurisdiction.

7. Security Safeguards

  • Encryption (in transit and at rest)
  • Access control systems
  • Real-time monitoring
  • Audit logging & anomaly detection

8. Data Breach Notification Policy

In the event of a data breach, EPAN will take immediate action to contain, assess, and mitigate the impact.

  • Affected users will be notified within a reasonable timeframe
  • Authorities will be informed if legally required
  • Remedial measures will be implemented to prevent recurrence

9. Risk Scoring & Blacklisting Transparency

EPAN uses internal risk assessment systems to detect fraud, abuse, and suspicious activity.

  • Accounts may be flagged based on behavioral signals
  • Risk scoring is automated and monitored
  • Severe violations may lead to blacklisting or permanent bans

These systems are designed to ensure ecosystem integrity and fairness.

10. Grievance Redressal

Users may raise complaints or concerns via:
info@esportspan.in
vernatalabs@gmail.com

11. Arbitration Clause

Any disputes arising out of or relating to EPAN services shall be resolved through arbitration in accordance with Indian law.

The arbitration shall take place in New Delhi, India, and the decision shall be final and binding.

12. IT Act Compliance

EPAN operates in accordance with the Information Technology Act, 2000 and applicable cybersecurity regulations.

13. Independent Infrastructure Notice

EPAN is a private system operated by Vernata Labs and is not affiliated with any government identity infrastructure.