1. HOW DO WE COLLECT YOUR PERSONAL DATA?

Information you directly provide to us:

You may choose to provide us with the data, which is essential for us to deliver the products and/or services you request. Without this data, we may not be able to provide you with all the requested products and/or services:

• Use our Platform;

• Share or use your social media profile to contact us; 

• Enter a contest or competition organised by us; 

• Engage with one of our sales representatives;

• Get in touch for support or to provide feedback;

• Engage with us for providing your services;

• Attend an online as well as on ground event.

Information you provide to us voluntarily:

If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the Platform, we may collect and store such data.

We may collect additional data at other times, when you provide feedback(s), modify your content or email preferences, respond to surveys, or communicate with us. This data may include your name, e-mail id, mobile number, etc.

• LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA 

We will collect personal data by lawful and fair means and, where appropriate, with the knowledge of the individual concerned. We only collect and process personal data about you where we have a lawful basis. Lawful basis on which we would process information from you includes: 

1. Obtaining explicit consent from you

2. Processing for legitimate uses where processing is necessary in order to provide you with our services, such as: 

3. To enforce our terms and conditions; 

4. To ensure compliance with our legal obligations and to also comply with our obligations towards public authorities; 

5. To enforce any legal right or claim; 

6. For responding to a medical emergency involving a threat to your health or life or that of any other individual; 

7. For taking measures to ensure safety of, or provide assistance or services to any individual any disaster, or any breakdown of public order; 

8. For legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention or prevention of fraud; 

9. For our internal and external audit requirements and for information security purposes; 

10. As otherwise described to you at the time of collection of your personal data. 

• HOW DO WE USE YOUR PERSONAL DATA?

We use your personal data for the purposes we have described below in this privacy notice, or for purposes which are reasonably compatible to the ones described.

To manage our relationship with you.

We will use your personal data to:

• Collect and verify vendor details for onboarding vendors engaged for production and operational requirements;

• Create, maintain, and manage vendor records, including preparation, execution, and lifecycle management of vendor contracts;

• Communicate with vendors for documentation, service coordination, timelines, and operational requirements;

• Process vendor payments, settlements, and related financial administration for services rendered;

• Engage, allocate, and manage technicians, labour, vendors, artists, participants, and other individuals involved in production activities and execution of projects/shows;

• Collect and process audition-related details of individuals participating in show-related selection activities;

• Prepare and manage contractual documentation for selected artists, participants, or other individuals associated with shows;

• Manage content creation and production activities as part of our role as a production house.

To manage and improve our processes and our business operations.

We will use your personal data to:

• Manage our workforce effectively;

To achieve other purposes.

We shall also use your personal data for legal and regulatory purposes, such as:

• For our internal and external audit requirements and for information security purposes;

• To gain insights and feedback on our products and/or services in order to correct or improve them, by analysing data from external sources such as Google, Facebook, and Twitter (and others).

• HOW DO WE USE PERSONAL DATA WHEN YOU VISIT OUR OFFICES?

When you visit our offices, we process your personal data in accordance with this privacy statement and some specific information regarding the use of visitor data and the potential use of CCTV in our offices is provided in the reception area.

• HOW DO WE PROTECT YOUR PERSONAL DATA?

We implement reasonable technical and organizational measures in relation to the data and personal data that is processed by us. We take reasonable measures to protect all personal data from unauthorized processing or accidental disclosure, alteration, misuse, destruction or loss or unauthorized access and modification that compromises the confidentiality, integrity, and availability of such data.

While we endeavor to always protect our Platform, operations and data against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet, we cannot guarantee that any data, during transmission or while stored on our systems, will be safe and secure from intrusion by others.

• YOUR RIGHTS IN CONNECTION WITH YOUR PERSONAL DATA

We respect your right to access and control your personal data, and we will respond to requests to exercise your rights under applicable laws and, where applicable, will correct, update, or erase your personal data.

You have the following rights:

• Right to access data : At any point, you can contact us for a summary of your personal data we hold about you, the processing activities undertaken with respect to such personal data, the identities of all those persons with whom your personal data has been shared by us along with the description of the personal data so shared, and any other data related to your personal data and its processing.

• Right to request correction: If your personal data is incomplete, inaccurate, misleading, or out of date, you can inform us about the same and your personal data will be corrected, completed, or updated.

• Right to request erasure: If you believe that we should discontinue the use of your personal data, you have the option to request the deletion of your personal data, unless retention is necessary for compliance with any law for the time being in force.

• Right of grievance redressal: In case of any grievance, you may raise a request by contacting us at dpo@nw18.com.

• Right to nominate: In the event of death or incapacity to exercise these rights, you can nominate any other individual to exercise such rights. Any nominee exercising rights on behalf of a data principal shall be required to act in accordance with this Privacy Policy, the applicable terms of service, and all applicable laws. COLOSCEUM Media Pvt Limited reserves the right to verify the identity and authority of the nominee before acting on any such request and may refuse to act on requests that are incomplete, unverifiable, or not in compliance with applicable law.

For exercising any of your rights, you can contact us using dpo@nw18.com. We will need you to furnish proof of your identity before you can exercise these rights. We may not be able to process any requests made in the event you fail to establish your identity, or if we are unable to authenticate your identity.

• YOUR RIGHT TO WITHDRAWL THE CONSENT

You can withdraw your consent easily by emailing us on dpo@nw18.com. The withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal. However, opting out will result in cessation of the respective services.

• GRIEVANCE REDRESSAL PROCEDURE

In the event of any grievance, data principals may also submit a request to the Data Protection Officer at dpo@nw18.com. Grievances raised by data principals shall be addressed within a reasonable period, not exceeding 90 days, to ensure the effective and timely resolution of such matters.

• SHARING/DISCLOSURE OF PERSONAL DATA

As far as this is necessary for the purposes set out above, we will share your personal data with the following recipients who either have a need to know and who will process it for us based on our instructions and for no other purpose:

General Disclosure:

We may disclose your personal data will include:

• Our related companies;

• All our employees and contractors are required to follow our data protection and security policies when handling personal data;

• We’ll share or disclose your personal data outside of the Platform when we have your consent. For example, providing SMS and E-mail related services such as marketing newsletters, promotions and offers;

• Your personal data might also have to be shared in the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

External service providers:

Occasionally, to provide our products and/or services, it is necessary to collaborate with external service providers. We may use these service providers to assist us with some features or functions. These external service providers shall process your personal data on our behalf subject to appropriate safeguards only insofar as it is necessary for them to provide their products and/or services to us. Our prior authorization is required before they are permitted to transfer responsibility for processing personal data to a third party.

Business Transfers:

We provide personal data to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.

In the event if we merge with or acquired by another company or in case of re-organization or re-structuring of business, we and our affiliates may share your personal data, wholly or in part, with another business entity.

Courts and public authorities:

We will share personal data when required for the following purposes:

• To comply with legal obligations and respond to requests from government agencies, including law enforcement agencies and other public authorities;

• To prevent or detect or investigate offences or cyber incidents or for the prosecution or punishment of offences;

• To raise or defend against legal claims;

• To protect our users, systems, and products and/or services.

We only share your personal data with recipients that have an adequate level of data protection by implementing appropriate technical and organizational security measures, or we take measures to ensure that all recipients provide an adequate level of data protection as prescribed by applicable law. We do not sell your personal data to anyone.

• PERSONAL DATA TRANSFER, STORAGE AND PROCESSING GLOBALLY

We operate globally and may transfer your personal data to our affiliates or third parties in territories outside India for the purposes described in this Policy in accordance with applicable data protection laws, provided that no such restriction is notified by the Government/ appropriate authority.

• HOW LONG DO WE KEEP YOUR PERSONAL DATA? 

We will retain your personal data which we have collected for as long as we reasonably consider it necessary for achieving the abovementioned purposes and as is permissible under applicable law. This is determined on a case-to-case basis. 

We will delete your personal data whenever you request us to do so. However, we may archive and/or retain your personal data for as long as there are statutory retention obligations or potential legal claims are not, yet time barred.

• SAFEGUARDING THE PRIVACY OF CHILDREN

We may collect personal data of children below 18 years of age only where it is necessary for specific purposes such as auditions, casting, talent evaluation, production-related activities, or participation in our programs, shows, events, or related opportunities. Such personal data will be collected and processed only with verifiable consent from the child’s parent or lawful guardian.

We do not knowingly collect children’s personal data without appropriate parental or guardian consent. We also do not undertake tracking, behavioral monitoring, or targeted advertising directed at children.

If we become aware that personal data of a child has been collected without verified parental or guardian consent, we will take appropriate steps to delete such personal data.

If you believe that a child below 18 years of age has provided us with personal data without parental or guardian consent, please contact us at dpo@nw18.com.

• PROCEDURE OF RAISING COMPLAINT WITH DATA PROTECTION BOARD

While internal grievance redressal processes are in place, a detailed procedure for raising complaints to the Data Protection Board of India will be incorporated into this Privacy Notice once the Board is formally constituted and relevant procedures are notified. The Privacy Notice will be updated accordingly to reflect the prescribed process and timelines.

• CONTACT INFORMATION

If you have any queries, questions or comments regarding this Policy or want to exercise any of your rights or express your grievances regarding the processing of your personal data, please contact us using the contact details given below:

COLOSCEUM Media Pvt Ltd.

Apurv Narula

Data Protection Officer

dpo@nw18.com

If you are not satisfied with the resolution provided, you may log your complaint with the Data Protection Board of India following the procedure prescribed by them.

• CHANGES TO THIS PRIVACY POLICY 

We reserve the right to change this Policy at our sole discretion at any time. Any material changes to this Policy will be posted on this page. We encourage you to review this Policy regularly for such changes. The updated Privacy Policy will take effect as soon as it has been updated. 

This policy was last updated as of July 2026.