Reference

How t20win Handles Your Personal Data

This privacy policy sets out exactly what personal data t20win collects when you open an account, how we store and use it, and what rights you hold over…

Data collected only for account operationUPI, Paytm, PhonePe payment data protectedRight to access your own recordsContact us to correct or delete dataIndia-applicable law governs this policy
t20win How t20win Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

Email Our Privacy Team Send a written request to our dedicated privacy address and we will respond within…
Live Chat Support Our live chat is open around the clock.
Postal or Formal Notice If you need to send a formal written notice about your data rights, use…
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

Every layer of our data infrastructure is designed to limit exposure and keep your account information accurate and accessible only to you.

Encryption in Transit and at Rest

All data exchanged between your device and our servers — including UPI credentials and session tokens — is encrypted using current transport security standards. Stored records are encrypted at the database level so raw data is never exposed.

Cookie Controls You Manage

We use functional cookies to keep your session active and analytical cookies to understand which pages you visit. You can disable non-essential cookies through your browser settings at any point, and your account will continue to function normally.

Account Security Practices

We apply two-factor verification prompts when your account is accessed from a new device or location. If we detect an unusual login pattern linked to your registered mobile or email, we freeze the session and notify you before allowing access.

Data Retention and Deletion

Personal data is kept only as long as your account is active or as required by applicable Indian financial law. Once the retention period ends, records are permanently deleted from our live systems and backups within 90 days.

Who Can See Your Data Internally

Access to your personal records inside t20win is restricted by role. Only staff whose job requires it — such as verification agents or fraud analysts — can view identifiable data, and every access event is logged for audit.

Requesting Changes to Your Records

You may request a copy of the data we hold, ask us to correct inaccuracies, or request deletion of records where no legal retention obligation applies. Requests submitted via email or live chat are processed within 30 calendar days.

Common Privacy Questions From Our Account Holders

Below are the questions we receive most often about how t20win handles personal data, what rights you hold, and how to act on those rights. If your question is not answered here, contact us through live chat or email and we will respond within one business day.

We collect your name, email address, date of birth, registered mobile number, and the payment identifiers you connect — such as your UPI ID or Paytm handle. We collect only what is needed to verify your identity and operate your account.

Payment identifiers linked to UPI, Paytm, or PhonePe are stored in encrypted form and used only to process your transactions. We do not store full UPI credentials beyond what is needed for verification, and no payment data is shared with advertisers.

Yes. Submit a data-access request through live chat or to our privacy email with your registered account email. We will compile and send you a copy of your personal records within 30 calendar days of receiving the request.

Contact our privacy team via email or live chat and request deletion. We will remove your data from live systems where no legal retention obligation applies. Records required under Indian financial regulations are kept for the mandatory period and then deleted.

We do not sell or share your personal data with advertisers. Data may be shared with payment processors such as UPI or Paytm networks only to the extent needed to complete your transactions, and with regulatory bodies where Indian law requires disclosure.

Account data is retained while your account remains active. Transaction records are kept for the period mandated by applicable Indian financial law. Once the retention period ends, data is deleted from live systems and backups within 90 days.

Reach our privacy team directly via the email address at the bottom of this page or through live chat. If you feel your concern has not been addressed, you may also escalate to the relevant Indian data protection authority under applicable local law.