How to delete your WinCome Sports account permanently

Win Bracket Context

Tournament context for Delete Account

Account deletion on WinCome Sports is permanent and irreversible. The 7-day cooling period is built into the flow to make sure the decision is intentional, not impulsive. Once the cooling period ends, the account, the bracket history, and the captain calibration profile are all deleted.

Account deletion is a serious step, and we treat it seriously. The 7-day cooling period exists for one reason: to give you space to confirm the decision is right. If you reach the end of the cooling period and still want to delete, the deletion is irreversible. The wallet refund goes back to your original deposit method within 7 business days.

Win Bracket Deep Dive

The 7-day cooling period on WinCome Sports account deletion

The 7-day cooling period is a structural feature of the account deletion flow. When a user requests account deletion, the request is queued for 7 days. During the 7-day window, the user can log in, view their bracket history, and request account reactivation. After the 7-day window ends, the account, the bracket history, and the captain calibration profile are all deleted. The 7-day window is a responsible-play safeguard. Account deletion is a serious decision, and the team at WinCome Sports believes the user should have time to confirm the decision is right. The 7-day window gives the user time to reconsider, to talk to the customer care team, and to withdraw the deletion request if they change their mind. During the 7-day cooling period, the user can request account reactivation by contacting customer care. The reactivation request requires identity verification (PAN or Aadhaar) and a 24-hour hold. The 24-hour hold is another safeguard: it gives the user time to confirm the reactivation is intentional, not impulsive. After the 24-hour hold, the account is fully restored, including the bracket history, the captain calibration profile, and the wallet balance. The wallet balance at the time of the deletion request is refundable to the original deposit method. The refund is processed after the 7-day cooling period ends. The refund takes 7 business days to reach the original deposit method. If the user changes their mind about the deletion, the wallet balance is restored to the account with no refund needed.

What is deleted when the account is deleted

When the 7-day cooling period ends and the deletion is finalized, the following data is deleted from the WinCome Sports platform: the account profile, the bracket history, the captain calibration profile, the wallet history, the deposit and withdrawal records, the support ticket history, the trusted device list, and any 2FA recovery codes. The deletion is permanent and irreversible. The deletion is processed in three stages. Stage 1 (immediate) deletes the data from the production database. Stage 2 (within 7 days) deletes the data from the analytics database. Stage 3 (within 30 days) deletes the data from the backup storage. After Stage 3, the data is fully removed from the WinCome Sports platform. The user receives an email confirmation at each stage. The Stage 1 email is sent within 1 hour of the deletion request. The Stage 2 email is sent within 7 days. The Stage 3 email is sent within 30 days. Each email includes a deletion reference number that the user can quote to customer care if they have any questions. The legal records (KYC documents, transaction records for tax purposes) are retained for 7 years per Indian financial regulation. These records are stored in a separate, access-controlled system and are not connected to the user's WinCome Sports account. The user can request a copy of the legal records at any time via the contact desk. The request is processed inside 14 days.

Win Bracket Field Notes

A complete walkthrough of the WinCome Sports account deletion flow

The account deletion flow on WinCome Sports is a 4-step process: request, confirm, cool, delete. The 4 steps are designed to be clear, reversible (during the cooling period), and irreversible (after the cooling period). The 4 steps take 5 minutes for the request, 7 days for the cooling period, and 30 days for the full data deletion. Step 1 is the request. The user opens the account settings, clicks 'Delete Account', and submits the request. The request is logged in the system. The user is shown a summary of what will be deleted: the account profile, the bracket history, the captain calibration profile, the wallet history, the deposit and withdrawal records, the support ticket history, the trusted device list, and any 2FA recovery codes. Step 2 is the confirm. Within 1 hour of the request, the user receives an email with a confirmation link. The user must click the link to confirm the deletion. The confirmation link expires in 24 hours. If the user does not click the link inside 24 hours, the request is cancelled and the user can re-submit the request later. Step 3 is the cool. The 7-day cooling period starts the moment the user confirms the deletion. During the cooling period, the user can log in, view their bracket history, and request account reactivation. The reactivation requires identity verification (PAN or Aadhaar) and a 24-hour hold. Step 4 is the delete. After the 7-day cooling period ends, the deletion is processed. The deletion is processed in 3 stages: Stage 1 (immediate) deletes the data from the production database; Stage 2 (within 7 days) deletes the data from the analytics database; Stage 3 (within 30 days) deletes the data from the backup storage.

The wallet balance is refundable to the original deposit method. The refund is processed after the 7-day cooling period ends. The refund takes 7 business days to reach the original deposit method. If the user changes their mind about the deletion, the wallet balance is restored to the account with no refund needed. The deletion is permanent and irreversible. After the 7-day cooling period ends, the user cannot recover any data. The data is fully removed from the WinCome Sports platform within 30 days. The user receives an email confirmation at each stage of the deletion process. The legal records are retained for 7 years per Indian financial regulation. The legal records include KYC documents, transaction records for tax purposes, and AML/PMLA reports. The legal records are stored in a separate, access-controlled system and are not connected to the user's WinCome Sports account. The user can request a copy of the legal records at any time via the contact desk. The user has the right to file a complaint with the relevant data protection authority if the user believes the deletion has not been processed in accordance with the user's instructions. The data protection authority for India is the Data Protection Board of India. The user can file a complaint online or by post. The WinCome Sports team will cooperate with the data protection authority in any investigation.

Win Bracket Insider View

A complete guide to the WinCome Sports data retention policy

The WinCome Sports data retention policy is built on 3 principles: minimize, secure, and comply. The 3 principles cover the full lifecycle of user data: collection, storage, usage, sharing, and deletion. The 3 principles are designed to balance the user's right to privacy with the platform's need to operate a compliant fantasy sports business. Principle 1 is minimize. The platform collects only the data that is necessary for the operation of the platform. The 7 data categories (account, payment, gameplay, device, location, support, calibration) are the only data categories collected. The platform does not collect any data that is not in the 7 categories. The platform does not use cookies for tracking; the platform uses only essential cookies for session management. Principle 2 is secure. The platform stores data with 6 layers of security: encryption at rest, encryption in transit, access control, audit logging, backup encryption, and incident response. The encryption keys are rotated every 24 hours. The access control list is reviewed every 30 days. The audit logs are reviewed every 7 days. The backups are tested every 30 days. The incident response team is on call 24/7. Principle 3 is comply. The platform complies with all applicable laws and regulations: the Information Technology Act of 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, the Prevention of Money Laundering Act of 2002, the Public Gaming Act of 1867, the state-level gaming regulations, and the consumer protection laws. The platform also complies with the Federation of Indian Fantasy Sports (FIFS) code of conduct and the Indian Gaming Federation (IGF) code of conduct.

The 3 principles are operationalized in the data retention schedule. The schedule lists every type of data, the retention period, the storage location, the access control, and the deletion method. The schedule is reviewed every quarter by external counsel. The 2026 Q1 review was conducted by Khaitan & Co., Bengaluru; the review found no compliance gaps. The schedule has 3 retention categories: short-term (0-30 days), medium-term (1-7 years), and long-term (7+ years). Short-term data includes session logs, support ticket drafts, and cart history. Medium-term data includes account profile, gameplay history, captain-pick history, and wallet history. Long-term data includes KYC documents, AML reports, and tax records. The 7-year retention period for KYC documents and AML reports is required by the Prevention of Money Laundering Act of 2002 and the Income Tax Act of 1961. The 7-year period starts from the date of the last transaction. The data is stored in a separate, access-controlled system. The data is not connected to the user's WinCome Sports account. The user can request a copy of the data at any time via the contact desk. The deletion method is a 3-stage process: Stage 1 (immediate) deletes the data from the production database; Stage 2 (within 7 days) deletes the data from the analytics database; Stage 3 (within 30 days) deletes the data from the backup storage. After Stage 3, the data is fully removed from the WinCome Sports platform. The user receives an email confirmation at each stage.

Win Bracket Expert Corner

The WinCome Sports account security recommendations

The WinCome Sports account security recommendations are built on 4 best practices: unique password, 2FA, trusted device list, and regular review. The 4 best practices are designed to protect the user's account from unauthorized access. The 4 best practices are recommended by the customer care team to every user who signs up. Best practice 1 is the unique password. The user should use a unique password for the WinCome Sports account. The unique password should not be used for any other account. The unique password should be at least 12 characters with at least one number, one symbol, and one uppercase letter. The user should use a password manager to generate and store the unique password. Best practice 2 is the 2FA. The 2FA is mandatory on every WinCome Sports account. The user should use the WinCome Sports app (push notification) as the default 2FA method; the app push is the fastest and most secure option. The user should also have a backup 2FA method (SMS or email) in case the app is unavailable. Best practice 3 is the trusted device list. The user should only add devices to the trusted device list that the user owns and controls. The user should not add shared devices (e.g., library computers, hotel business centers) to the trusted device list. The user should revoke a trusted device immediately if the device is lost, sold, or compromised. Best practice 4 is the regular review. The user should review the account activity (deposits, withdrawals, contest entries, login history) at least once a month. The review helps the user detect any unauthorized access. The review is available from the account settings page.

The 4 best practices are supported by 4 account security features: login notifications, device change notifications, withdrawal confirmations, and account lockout. The 4 features are designed to alert the user to any unusual activity. Feature 1 is the login notification. The user receives an email notification for every login to the account. The notification includes the device, the location, and the timestamp. The user can review the notification and flag any login that is not authorized. The login notification is enabled by default; the user can disable it from the account settings. Feature 2 is the device change notification. The user receives an email notification for every new device added to the trusted device list. The notification includes the device, the location, and the timestamp. The user can review the notification and flag any device change that is not authorized. The device change notification is enabled by default; the user cannot disable it. Feature 3 is the withdrawal confirmation. The user receives an email and SMS confirmation for every withdrawal. The confirmation includes the amount, the method, and the destination. The user can review the confirmation and flag any withdrawal that is not authorized. The withdrawal confirmation is enabled by default; the user cannot disable it. Feature 4 is the account lockout. The account is locked after 5 failed login attempts inside 10 minutes. The account is unlocked automatically after 30 minutes, or the user can unlock it immediately via the password reset flow. The account lockout is a security feature, not a usability feature: it protects the account from brute-force attacks.