Privacy Policy

OnyxPlay is a wholesale B2B IPTV platform. Our primary relationships are with licensed ISPs and telecom operators in India, not with end consumers. Accordingly, most of the personal data we process relates to business contacts, partner representatives, and technical users of our portal.

End-subscriber data (your customers' data) is held in a tenant-isolated database under your operator account. Esto Networks acts as a data processor with respect to end-subscriber data; you, the ISP partner, are the data fiduciary for your subscribers under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

This policy applies to information we collect directly from website visitors and from partner contacts.

Information you provide

• Contact & inquiry data — Name, company name, email address, phone number, and the content of messages submitted via our partner inquiry form.
• Partner account data — Company registration details, licence numbers, billing address, and authorised contact persons provided during onboarding.
• Support communications — Information you include when you contact us for technical support or account queries.

Information collected automatically

• Usage data — Pages visited, time spent, navigation paths, and referring URLs collected via server logs and analytics.
• Technical data — IP address, browser type and version, operating system, screen resolution, and device type.
• Cookies — Session identifiers and preference cookies. See Section 08 for details.

We use the information we collect for the following purposes:

• To respond to inquiries We process contact form submissions to respond to partnership, technical, and sales queries.
• To operate the platform Partner account data is used to provision and manage platform access, billing, and SLA management.
• To improve the website Aggregated usage and technical data is used to optimise content, performance, and navigation.
• To communicate We may send transactional emails (service status, billing), policy updates, and — with your consent — product news.
• To comply with law We may process and retain data as required by applicable Indian laws, including the IT Act, 2000, and the DPDP Act, 2023.

We do not sell personal data. We share information only in the following circumstances:

• Service providers — Third-party vendors who assist us in operating the website and platform (hosting, email delivery, analytics) under contractual data processing agreements.
• Legal requirements — Where required by law, court order, or government authority in India, or to protect the rights and safety of Esto Networks or the public.
• Business transfers — In the event of a merger, acquisition, or asset sale, partner data may be transferred to the successor entity subject to equivalent protections.
• With your consent — For any other purpose with your prior written consent.

We retain personal data only for as long as necessary for the purposes described in this policy:

After the applicable retention period, data is securely deleted or anonymised.

We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS 1.3 encryption in transit; AES-256 encryption at rest.
• Tenant-isolated databases with per-tenant KMS keys.
• FIPS-graded hardware security modules (HSMs) for key storage.
• Role-based access control with mandatory 2FA on all internal systems.
• Quarterly third-party penetration testing; findings remediated within 30 days.

No system is completely secure. In the event of a data breach affecting your personal data, we will notify you in accordance with applicable law.

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to personal data we hold about you:

To exercise any of these rights, contact our Grievance Officer at privacy@onyxplay.tv. We will respond within 30 days.

We use the following categories of cookies on onyxplay.tv:

• Strictly necessary Session cookies required for the website to function. Cannot be disabled.
• Preferences Stores your selected theme (light/dark) in localStorage under the key ob-theme. No personal data leaves your browser.
• Analytics Aggregate usage metrics to improve site performance. Data is anonymised before processing.

You can manage cookie preferences through your browser settings. Disabling necessary cookies may affect website functionality.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated via notice on our website or by email to registered partners at least 15 days before the change takes effect.

The effective date at the top of this page indicates when the policy was last revised. Continued use of our website or platform after the effective date constitutes acceptance of the revised policy.

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, we have appointed a Grievance Officer to address complaints and queries relating to personal data processing.