Reference

How winfortune Handles Your Personal Data

Our Privacy Policy sets out exactly what data we collect when you open an account, how we use it, how long we keep it, and how you can…

Data you controlNo third-party data salesUPI & Paytm payment data protectedAccount deletion on requestIndia-region terms
winfortune How winfortune Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct or delete your personal data, or if you have a question about how a specific piece of information is used, our privacy team is available through…

Email Privacy Team Send a written data request or correction notice to our dedicated privacy address. Include your registered email and account ID so we can locate your record and verify your identity before processing any change.
In-Account Privacy Form Log in, navigate to Account Settings, and select Privacy Request. The form routes directly to our data team, auto-attaches your account ID, and generates a ticket number you can reference in any follow-up correspondence.
Live Chat Support For urgent privacy concerns — such as suspected unauthorised access to your account data — our live chat is available around the clock. An agent will escalate data-security issues to the privacy team within one hour.
DATA HANDLING STANDARDS

Explore How We Protect Your Account Data

Our data practices are built around what Indian account holders actually need to know: who touches your data, how long it stays, and what you can do about it.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand which lobby sections load slowly. You can decline non-essential cookies from the cookie banner shown on your first visit without affecting account functionality.

Payment Data Isolation

UPI handles, Paytm wallet IDs and PhonePe tokens are passed to payment processors via encrypted API calls. We store only a masked reference — never a full UPI ID or wallet balance — on our own servers after a transaction completes.

Account Security Practices

Passwords are stored as salted hashes. Login attempts are rate-limited, and suspicious access patterns trigger an automatic email alert to your registered address. You can also enable two-factor authentication from Account Settings at any time.

Data Retention Schedule

Active account profiles are retained for as long as your account remains open. After account closure, profile data is deleted within 30 days; financial transaction logs are retained for the period mandated by applicable Indian law, then purged.

Third-Party Data Sharing

We share data with payment processors, fraud-detection services and hosting providers only — and only the fields each party needs. We do not share your data with advertisers, affiliate networks or data brokers under any circumstances.

Requesting Data Changes

Submit a correction or erasure request through the in-account Privacy Form or by email. We verify your identity via your registered contact details, process the request within 30 days, and send written confirmation once the change is applied.

Switch to Our Privacy FAQ for Quick Answers

These questions cover the most common things account holders in India ask about their data — from what we collect on sign-up to how you can get everything deleted. If your question is not answered here, the in-account Privacy Form or our email channel will get you a direct response within 72 hours.

We collect your name, email address, mobile number, date of birth and country of residence. When you make a deposit via UPI, Paytm or PhonePe, a masked payment reference is also stored. No government ID is held unless specifically required by applicable law.

No. We do not sell, rent or trade your personal data. It is shared only with payment processors (for UPI, Paytm and PhonePe settlements), fraud-detection services, and our hosting infrastructure — each receiving only what they strictly need.

Log in and go to Account Settings, then select Privacy Request and choose 'Download My Data'. We will prepare a data export within 30 days and send a download link to your registered email address. There is no charge for this request.

Yes. Submit an erasure request via the in-account Privacy Form or by emailing our privacy team. After identity verification, your profile data is deleted within 30 days. Transaction logs required by Indian law are retained for the legally mandated period only.

Payment calls are made over TLS-encrypted connections. We store only a masked transaction reference after settlement — never a full UPI ID, Paytm wallet number or PhonePe token. Your payment credentials never touch our own database directly.

We use essential session cookies (required for login) and optional analytics cookies. On your first visit, a cookie banner lets you accept or decline analytics cookies. Declining analytics cookies has no effect on account access or lobby functionality.

Contact our privacy team immediately via live chat for urgent matters or by email for formal complaints. We acknowledge all privacy complaints within 24 hours and aim to resolve them within 15 business days, providing written updates throughout the process.