Privacy Policy

1. Information We Collect

At Turfio, we respect your privacy and are committed to safeguarding your personal data. When you interact with our platform (including booking turfs, registering as a turf owner, or reaching out to support), we collect information necessary to provide a reliable service across Bangladesh:

• Account Information: Your name, phone number, email address, and profile credentials when registering.
• Booking & Match Data: Selected turf grounds, match date and time, duration, payment reference IDs, and venue preferences.
• Venue Operator Information: For turf owners, we collect venue location, bank/bKash/Nagad payout details, pitch dimensions, and business registration details.
• Technical & Usage Data: Device model, IP address, operating system, and log data when accessing our web dashboard or Flutter mobile app.

2. How We Use Your Information

We use the collected information exclusively to fulfill match bookings, enable turf venue operations, and improve product reliability:

• Processing real-time slot reservations and preventing double-bookings.
• Facilitating secure payment confirmations between players and turf operators.
• Sending match reminders, slot changes, and operator notifications.
• Improving our recommendation algorithms for nearby sports grounds.
• Preventing fraud, unauthorized access, and platform abuse.

3. Information Sharing & Venues

Turfio does not sell, rent, or trade your personal information to third-party marketers. We share limited data strictly on a need-to-know basis:

• Turf Operators: When you book a slot, the venue owner receives your name, phone number, and slot details to prepare the ground and manage pitch entry.
• Payment Gateways: Payment transactions are handled via licensed payment partners in Bangladesh. We do not store full credit card or MFS PIN details on our servers.
• Legal Compliance: We may disclose information if required by law enforcement or Bangladesh judicial authorities.

4. Data Security & Storage

We employ industry-standard encryption (TLS/SSL) for all data transfers. Data is stored on secure cloud servers with strict role-based access control (RBAC). Audit logs are maintained to prevent unauthorized modifications to venue schedules and bookings.

5. Your Privacy Rights

You have the right to request access to your personal data, update inaccuracies in your profile, or request deletion of your account. You can manage your preferences directly inside your account settings or contact our support team.