PROXY ESPORTS Privacy Policy
Effective Date: August 27, 2026 • Last Updated: August 27, 2026
1. Introduction & Scope
PROXY ESPORTS ("we", "us", or "our") operates the PROXY ESPORTS BGMI Competitive Player Portal. This Privacy Policy informs users regarding our policies with the collection, use, disclosure, and protection of personal information when using our services, particularly through Google OAuth 2.0 authentication.
2. Information We Collect
When you choose to sign in using Google OAuth 2.0, we collect the following data upon your explicit approval:
- Google Identity & Profile: Your verified Google account ID, primary email address, full name, and avatar image.
- Gmail Read-Only Telemetry (Optional Scope): When granted the
https://www.googleapis.com/auth/gmail.readonlypermission, the application retrieves message headers (Subject, Sender, Date) and message content for display within your private session. - Player Profile Information: In-Game Name (IGN), BGMI Character UID, team role, competitive experience, and tournament statistics.
3. Google API Services User Data Policy Compliance (Limited Use Disclosure)
PROXY ESPORTS' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We do NOT transfer or disclose your Google user data to third parties, advertising platforms, data brokers, or information resellers.
- We do NOT use Google user data to serve targeted advertisements.
- We do NOT use Google user data or Gmail content to train artificial intelligence or machine learning models.
- Human personnel do NOT read your private email messages unless explicitly required by law, security investigation, or upon your explicit technical support consent.
4. Why Gmail Read-Only Access is Requested & Administrative Access
The gmail.readonly permission is utilized strictly to provide competitive players with integrated communication verification, tournament confirmation receipt previews, and esports organization security verification.
By explicitly approving Gmail access during Google's OAuth flow, you acknowledge and agree that designated, authorized PROXY ESPORTS organization administrators may view your authorized mailbox in strictly read-only mode for organizational verification, roster eligibility, and tournament coordination purposes. Administrators can never compose, send, delete, or modify your emails, nor do they ever have access to your Google account password.
5. Data Storage, Encryption & Audit Trails
We do not store your private email message bodies permanently on our servers. Email content is retrieved on-demand via the official Gmail API and decoded in-memory strictly for display.
- Encryption at Rest: OAuth credentials (access and refresh tokens) are encrypted at rest using AES-256-GCM authenticated encryption. Encryption keys are managed server-side and never exposed to the client.
- Immutable Audit Logging: Every administrative mailbox and message view is recorded in an audit ledger with administrator identity, target player ID, action type, IP address, and timestamp. Email contents are never logged.
- Immediate Revocation: You can disconnect and revoke access at any time by clicking Disconnect Gmail on your dashboard, or via Google Account Security Permissions. Upon revocation, encrypted tokens are immediately purged, and administrator access to your mailbox is permanently disabled.
6. Contact Information
If you have questions regarding this Privacy Policy or your personal data, please contact the PROXY ESPORTS Security & Privacy Team at: