Reference

How kindlotto Handles Your Personal Data

At kindlotto, your personal data belongs to you — we collect only what we need to run your account, process payments via UPI, Paytm or PhonePe, and keep…

Transparent data collectionUPI & Paytm payment data handled securelyAccount data access on requestNo third-party sale of personal dataIndia-specific data handling
kindlotto How kindlotto Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Data Team in Three Ways

If you have a question about your personal data — whether that is a request to access your records, a correction, or a deletion — our dedicated privacy support team is available…

Email Our Privacy Team Send your data request, account name and a brief description of what you need to our privacy email address. We acknowledge every email within 24 hours and resolve most requests within 72 hours.
Live Chat Support Open the chat window inside your kindlotto account at any hour. Our support agents can log a formal data request on your behalf and escalate it directly to the privacy team without delay.
In-Account Help Centre Navigate to Settings, then Privacy in your account dashboard to submit a structured data request form. This route gives you a reference number you can track through to completion.
DATA HANDLING PRACTICES

Six Ways We Protect and Manage Your Data

Every data practice described below is active inside your kindlotto account today.

What We Collect

We collect your name, contact details, device identifiers and payment method tokens when you open an account. We do not store raw UPI or Paytm credentials — only encrypted tokens that complete transactions without exposing your bank details.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand which parts of the platform you use most. You can manage cookie preferences through your browser settings or the cookie banner shown on your first visit.

Account Security

All account data is encrypted in transit using TLS and at rest using AES-256 encryption. Two-factor authentication is available on your account settings page and we recommend enabling it to prevent unauthorised access to your personal details.

Data Retention

Active account data is kept for as long as your account remains open. After closure, we retain records only as long as required by applicable Indian financial and tax regulations, then delete them from our systems in a verifiable process.

Who Sees Your Data

Your data is accessible to our payment processors, identity verification providers and, where required, regulatory authorities under Indian law. We do not sell, rent or trade your personal information to advertising networks or data brokers.

Your Right to Request Changes

You may request a copy of all data we hold on you, ask us to correct inaccurate records, or request deletion where no statutory obligation requires us to retain the data. Submit requests via email, live chat or the in-account form.

Your Privacy Policy Questions, Answered

The questions below cover the most common data-related queries we receive from people holding a kindlotto account in India. If your question is not listed here, our privacy team is reachable via email or live chat at any time of day.

We collect your full name, email address, mobile number and date of birth at registration. If you deposit via UPI or Paytm we also receive an encrypted payment token, but never your raw bank PIN or wallet password.

Payment data is tokenised by the payment gateway before it reaches our servers. We store only a reference token, not your UPI handle credentials or PhonePe account password. All tokens are encrypted using AES-256 encryption at rest.

Yes. Submit a deletion request through the in-account Privacy form, by email, or via live chat. We will delete data that is not required under Indian financial regulations within 30 days and confirm the deletion in writing.

We do not sell or share your personal data with third-party advertisers or marketing networks. Data is shared only with payment processors, fraud-prevention services and authorities where Indian law requires it.

After account closure, we retain identity and financial records for the period required under applicable Indian regulations — typically up to seven years for financial records. Non-essential data such as browsing logs is deleted within 90 days of closure.

Log in, go to Settings and select Privacy, then choose Request My Data. We will compile a downloadable file of all personal data linked to your account and deliver it to your registered email within 72 hours of the request.

We use strictly necessary cookies for login sessions and optional analytics cookies to improve platform performance. You can accept or decline optional cookies via the banner on your first visit, or update your preferences any time in browser settings.