Last updated: (July 2026)

This Privacy Policy ("Policy") applies to Spectacom Global Private Limited ("SGPL", "Company", "We", "Us" or "Our"), a company incorporated under the Companies Act, 2013, having its registered office at 809 Udyog Vihar, Phase V, Gurugram, Haryana – 122016, India, and its subsidiaries, holding company and affiliates, wherever the context so requires. SGPL owns and operates the website www.getmybib.com and its associated mobile application (collectively, the "Platform"), through which SGPL provides a ticketing, registration and marketplace platform that enables independent third-party event organisers ("Event Organizers") to list, market and sell event entries, tickets and merchandise ("Products") to Users, and enables Users to browse, register for, and purchase such Products (collectively, the "Services").

This Policy describes how We collect, receive, store, use, process, disclose, transfer and otherwise handle information relating to You ("You", "Your", "User", "Data Principal") when You visit, register on, or otherwise interact with the Platform, purchase a Product, register for or participate in an Event Organizer's event through the Platform, or otherwise communicate with Us. This Policy does not apply to information collected directly by an Event Organizer or any other third party, including through their own websites, applications or services. Each Event Organizer is independently responsible for, and maintains its own privacy policy governing, the information it collects about You; We encourage You to review the relevant Event Organizer's privacy policy before purchasing a Product or registering for its event. Users are responsible for ensuring Personal Data remains accurate and updated. SGPL shall not be liable for losses arising from inaccurate information supplied by Users.

Please read this Policy carefully before using or registering on the Platform, or accessing any content, information or Services through it.

By accessing or using the Platform, creating an account, purchasing a Product, registering for an event, or otherwise providing information to Us, You accept and agree to be bound by this Policy and consent to the collection, storage, use, processing, disclosure and transfer of Your information, including Personal Data (defined below), in the manner described herein. If You do not agree with this Policy, in whole or in part, You must not access or use the Platform or avail the Services.

This Policy is incorporated into, and must be read together with, Our General Terms & Conditions ("Terms") and any event-specific terms, waiver or consent form that an Event Organizer requires You to accept in connection with its event ("Event Organizer Terms"). Where an Event Organizer independently collects or processes Your Personal Data for its own purposes (including in connection with its Event Organizer Terms), that processing is governed by the Event Organizer's own privacy policy and not by this Policy. All capitalised terms used but not defined in this Policy have the meaning given to them in the Terms.

If You are under the age of 18 years: (i) You confirm that You are accessing the Platform through a parent or lawful guardian who is of legal age to form a binding contract under the Indian Contract Act, 1872, and that such person has accepted this Policy on Your behalf; and (ii) You confirm that You are accessing the Platform under the supervision of, and with the express permission of, such parent or guardian. Section 19 below sets out how We handle the Personal Data of minors in more detail.

We may update this Policy to reflect changes in Our practices, in the Services, or to comply with legal, regulatory or administrative requirements. Where We make a material change, We will provide reasonable notice, such as a prominent notice on the Platform, and will update the "Last updated" date above. To the extent permitted by Applicable Law, Your continued use of the Platform after such notice constitutes Your acceptance of the revised Policy.

1. Definitions

"Applicable Law" means the Information Technology Act, 2000 and rules made thereunder, the Digital Personal Data Protection Act, 2023 and rules made thereunder, the Consumer Protection Act, 2019 and rules made thereunder, and any other law, regulation, rule, notification or governmental order applicable to the collection, storage, use, processing, disclosure or transfer of information under this Policy, in each case as in force and to the extent applicable from time to time.

"Data Principal" means the individual to whom the Personal Data relates, and includes "You" as used in this Policy.

"Data Fiduciary" means SGPL, which determines the purpose and means of processing of Personal Data collected by Us under this Policy.

"Event Organizer" means a third party that lists, markets or sells Products through the Platform, including entries, tickets or merchandise relating to its own current or future events, and includes its sub-brands.

"Personal Data" means any data about an individual who is identifiable by or in relation to such data, including the categories described in Section 2.

"Products" means tickets, event or race entries, or merchandise related thereto, offered for sale by an Event Organizer to Users through the Platform.

"Services" means the ticketing, registration and marketplace services provided by SGPL through the Platform, enabling Event Organizers to offer Products to Users, and any ancillary services offered by SGPL in connection therewith.

"User Account" means the account You create on the Platform to browse, register for, or purchase Products.

2. Information We Collect

We collect the following categories of information about You, directly from You, automatically through Your use of the Platform, and, in limited circumstances, from Event Organizers and other third parties, as described in this Section:

(a) Personal Data provided by You
This includes Your complete name, date of birth, gender and photograph; correspondence details such as Your email address, telephone number and postal address; financial and payment information; emergency contact details, where an Event Organizer requires this; and any other information You voluntarily provide. Provision of this information is voluntary; however, certain information is mandatory to avail specific Services, and Your inability or unwillingness to provide such mandatory information may mean We, or the relevant Event Organizer, cannot provide the corresponding Product or Service to You.

(b) Sensitive Personal Data
Certain of the information above, financial or payment instrument details, User Account passwords, and, where voluntarily disclosed to enable Your registration for an Event Organizer's event, physical, physiological or mental health condition or medical history. We collect health-related information for event registration purposes only to the extent an Event Organizer requires it, and We pass such information to the relevant Event Organizer as described in Section 4. SGPL does not verify the accuracy of any medical or health information provided by Users.

(c) Transactional information
Where You purchase a Product or otherwise avail the Services, We collect and store information about Your transactions, including order and registration history, transaction status, and Your interactions and preferences on the Platform.

(d) Location and device information
Where You access the Platform through a mobile device, We may receive information about Your approximate or precise location, IP address, registered domain or home server, device model, operating system, browser type and unique device identifiers.

(e) Information from Event Organizers and other third parties
We may receive Personal Data about You from Event Organizers whose Products You have purchased or registered for, where such Event Organizers are lawfully entitled to share the information with Us. We also work closely with select third parties including payment gateways, analytics providers, and cloud service providers.

(f) Non-Personal Information and Cookies
We, and our authorised third-party partners, collect non-identifying and automated information through cookies, web beacons, clear GIFs, pixel tags and similar tracking technologies. We categorise these as:

• Strictly Necessary Cookies: required for the operation of the Platform.
• Analytical/Performance Cookies: allow Us to recognise and count visitors, including through Google Analytics.
• Functionality Cookies: used to recognise You when You return to the Platform.
• Commercial/Targeting Cookies: used to display personalised advertisements.

An Event Organizer may embed its own cookies in the Products it lists on the Platform. We do not control such third-party cookies. If You block all cookies, including essential cookies, You may not be able to access all or parts of the Platform.

3. How We Use Your Information

We use Your Personal Data in different ways depending on the nature of the Services, communications or other interactions between You and the Platform. The table below describes how We use the principal categories of Personal Data, why We do so, and the legal basis for each category of processing.

We may also use Your information to detect, prevent and investigate fraud; to enforce Our Terms and this Policy; to process and fulfil Your requests; to contact You through email, SMS, WhatsApp, telephone or other channels regarding the Services; and to comply with legal, regulatory and reporting requirements. We will not share Your Personal Data with another User of the Platform without Your express consent.

4. Sharing Your Information with Event Organizers

The Platform operates as a marketplace connecting Event Organizers with Users. When You purchase a Product or register for an event, We are required to share Your Personal Data — including Your name, contact details, date of birth, emergency contact information and, where relevant, health-related information voluntarily disclosed by You — with the Event Organizer whose Product You have purchased, so that the Event Organizer can deliver the underlying event, entry or merchandise to You. SGPL merely facilitates transmission of health information to Event Organizers and does not independently evaluate, verify or make medical decisions based upon such information.

Once Your Personal Data has been shared with an Event Organizer, that Event Organizer processes such Personal Data as an independent data fiduciary/controller under its own privacy policy. We encourage You to review the relevant Event Organizer's privacy policy before purchasing its Products. We are not responsible for, and disclaim all liability in connection with, an Event Organizer's collection, use, storage or disclosure of Your Personal Data.

5. How We Share Your Information

In addition to sharing Your information with Event Organizers as described in Section 4, We may disclose Your information to the following categories of recipients:

• Our affiliates, group companies, personnel, agents and professional advisors, for accounting, tax, audit and administrative purposes;
• service providers and data processors who process information on Our behalf, each engaged under a written agreement requiring confidentiality and data-protection obligations;
• sponsors, co-branding or promotional partners, where You have separately consented;
• courts, tribunals, regulators, the Data Protection Board of India, law-enforcement or other government authorities, where required by Applicable Law;
• any party as reasonably necessary to protect the rights, property, safety or interests of SGPL, Our personnel, Users, Event Organizers or the public; and
• a successor entity in connection with a merger, acquisition, or restructuring of SGPL's business, provided such entity remains bound by the terms of this Policy.

We do not sell Your Personal Data to any third party for monetary consideration.

6. Service Providers

We use a variety of third-party service providers to help Us provide the Services to You, including for the following purposes:

• to authenticate Your identification information and documents;
• to process Your payments;
• to check information against public databases;
• for fraud prevention and risk assessment;
• to enable the provision of Services through third-party platforms and software tools;
• to provide customer service and for marketing; and
• to process and handle claims.

Such service providers have access to Your Personal Data only as needed to perform these functions and are bound by data-protection standards at least equivalent to those We follow under this Policy.

7. Cross-Border Transfer of Personal Data

Your Personal Data may be stored, hosted or processed on servers located outside India. We will only transfer Personal Data outside India in accordance with Applicable Law, and will not transfer Personal Data to any country or territory restricted by the Central Government of India under Section 16 of the Digital Personal Data Protection Act, 2023. Where We transfer Personal Data outside India, We will require the recipient to be contractually bound to apply protections substantially equivalent to those required of Us under this Policy.

8. Data Security

We maintain reasonable security safeguards and procedures, including technical and organisational measures such as firewalls, encryption and disaster-recovery plans, to protect Your Personal Data from loss, misuse, unauthorised access, disclosure, destruction and alteration, in compliance with Applicable Law.

You are responsible for maintaining the confidentiality of Your User Account credentials and for all activity that occurs under Your User Account. You agree to notify Us immediately of any unauthorised use of Your User Account or any other suspected breach of security, and to log out of Your User Account at the end of each session. Please never share your login credentials, password or one-time passwords with anyone, including anyone claiming to represent SGPL.

Payment information transmitted through the Platform is protected using industry-standard encryption. While We take reasonable steps to secure Your information, no method of transmission or storage is completely secure. We are not liable for unauthorised access, disclosure or loss of Your information resulting from causes beyond Our reasonable control.

9. Personal Data Breach Notification

If We become aware of a personal data breach that affects Your Personal Data, We will, in accordance with Applicable Law, notify the Data Protection Board of India and take reasonable steps to notify affected Data Principals without undue delay.

10. Retention of Personal Data

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, safety or reporting requirements, or as otherwise required or permitted under Applicable Law. User Account and registration data is retained for the duration of Your relationship with the Platform and for a reasonable period thereafter; transactional and payment data is retained in accordance with applicable financial record-keeping requirements.

Where You request erasure of Your information, We will honour that request, save that We may retain certain information where permitted or required by Applicable Law, including to prevent fraud or abuse, to exercise or defend a legal claim, or to comply with a legal or regulatory obligation.

11. Right to Opt-Out

We cannot use Your Personal Data without Your consent. You have the right to opt out of, or withdraw consent to, the use of such Personal Data by sending Us an email at the address in Section 16. If You withdraw consent to provide any Personal Data, We shall have the option not to provide the corresponding Services and/or Products. Such opt-out will not apply to any co-branding partner to whom You have separately consented to the provision of Your Personal Data.

12. Third-Party Links and Embedded Content

The Platform may contain links to, or embed content from, third-party websites or platforms, including an Event Organizer's own website or app, payment gateways, and social-media plug-ins ("Third-Party Sites"). This Policy does not apply to, and We accept no responsibility for, the privacy or data-security practices of any Third-Party Site. We recommend that You review the privacy policy of any Third-Party Site before providing information to it.

13. User-Generated Content and Public Posts

Where the Platform allows You to create a public User Account, upload a photograph, or submit a review, comment or other content to a publicly viewable area of the Platform ("Post"), such Post or profile information may be viewed by other Users and is not governed by the confidentiality protections of this Policy. By submitting a Post or a public profile photograph, You grant SGPL a non-exclusive, worldwide, perpetual, irrevocable, royalty-free licence to use, reproduce and display that content for the purposes described in this Policy.

14. Your Rights as a Data Principal

You may exercise the following rights by writing to Us at the address in Section 16, or through the Platform's settings, where available. We will acknowledge Your request within a reasonable time and respond substantively within such period as Applicable Law may prescribe:

• (a) Right to access: to obtain a summary of the Personal Data We hold about You and the processing activities undertaken;
• (b) Right to correction and updation: to have inaccurate or incomplete Personal Data corrected or completed;
• (c) Right to erasure: to request deletion of Your Personal Data that is no longer necessary for the purpose for which it was collected, subject to Section 10;
• (d) Right to withdraw consent: to withdraw consent at any time, with effect from the date of withdrawal;
• (e) Right to nominate: to nominate another individual to exercise Your rights under this Policy in the event of Your death or incapacity; and
• (f) Right to grievance redressal: to raise a grievance with Our Grievance Officer (Section 16), and, if unsatisfied with Our response, to escalate to the competent supervisory authority.

15. Marketing Communications

We will only send You promotional or marketing communications where You have provided the consent required under Applicable Law. We will only share Your Personal Data with an Event Organizer or other third party so that they can send You communications about their own products or services where We have obtained Your prior express consent to do so. You may withdraw Your marketing consent at any time by writing to Us at the address in Section 16.

16. Grievance Officer and Contact

We have appointed the following Grievance Officer to address questions, concerns or grievances regarding this Policy or Our handling of Your Personal Data:

Name: Abishek Agarwal
Designation: Grievance Officer
Email: abishek.agarwal@spectacom.in
Postal Address: Spectacom Global Private Limited, 809 Udyog Vihar, Phase V, Gurugram, Haryana – 122016, India

We will acknowledge Your query or grievance and aim to resolve it within a reasonable period. If You suspect any misuse of, or unauthorised access to, Your Personal Data, please let Us know immediately at the email above.

17. Third-Party Hosting and Sub-Processors

Certain data collected through the Platform is stored with reputable third-party cloud infrastructure providers, which may store such data on servers located outside India, subject to Section 7. Any such provider is contractually required to maintain security measures consistent with this Policy and Applicable Law.

18. Third-Party Processing — Limitation of Liability

We are not responsible for, and disclaim liability in connection with, the security practices, content or privacy policies of a Third-Party Site, an Event Organizer, or a third-party service provider engaged by You independently of SGPL. For any breach of the provisions of this Policy, Our liability shall be limited to the processing fees, if any, paid by You for the Products purchased or Services availed through the Platform.

19. Children and Persons Requiring Guardian Consent

The Platform and Our Services are, as a general rule, intended for individuals who are at least 18 years of age. Where an Event Organizer permits participation by a minor in a specific event or category, We will collect the Personal Data of such minor only upon obtaining verifiable consent from the minor's parent or lawful guardian. Such parent or guardian exercises all rights under this Policy on the minor's behalf.

We do not knowingly use a minor's Personal Data for behavioural monitoring, tracking or targeted advertising. Where We become aware that a minor's Personal Data has been provided to Us without the requisite verifiable parental or guardian consent, We will take reasonable steps to promptly verify such consent or, failing verification, to delete the relevant Personal Data and suspend the corresponding User Account.

20. Changes to this Policy

We may update this Policy from time to time as described above. We encourage You to review this Policy periodically. Your continued use of the Platform following notice of a change constitutes Your acceptance of the updated Policy.

21. Severability

If any provision of this Policy is held to be invalid, illegal or unenforceable under Applicable Law, that provision will be severed from this Policy, and the remaining provisions will continue in full force and effect.

Spectacom Global Pvt Ltd © 2026. All rights reserved.