Reference

How winmaker Handles Your Personal Data

This Privacy Policy sets out exactly what personal data winmaker collects when you use our platform, how we store it, who we share it with, and what rights…

Data CollectedRetention PeriodYour RightsCookie UseContact the DPO
winmaker How winmaker Handles Your Personal Data
REACH OUR TEAM

Contact Us About Your Privacy

If you want to access the data we hold on you, request a correction, or ask us to delete your account records, our Data Protection team is reachable through the channels below. We aim to respond to all data-related requests within 30 days of receipt.

Team online

Email the DPO

Write to our Data Protection Officer at the privacy address listed in your account dashboard. We acknowledge every request within two working days and resolve most within 30 days.

Live Chat

Our support agents are available around the clock via live chat on the winmaker platform. For data queries, select the Privacy topic so your message routes directly to the right team.

Postal Address

You may also send a written request to our registered correspondence address. Include your account email and the nature of your request so we can locate your records without delay.

DATA PROTECTION PRACTICES

How We Keep Your Account Data Secure

We apply encryption, access controls, and regular audits to every layer where your personal data is stored or transmitted.

Encryption at Rest and in Transit

All personal data stored in our databases is encrypted using AES-256. Data moving between your device and our servers travels over TLS 1.3, making interception by third parties significantly harder.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can adjust cookie preferences from the settings panel in your account at any time.

Account Security Controls

Two-factor authentication is available on every account. We recommend enabling it via your security settings. Failed login attempts are flagged and temporarily locked after a defined threshold.

Data Retention Periods

Transaction records and identity documents are retained for the period required by applicable law. Once that period lapses and your account is closed, we delete or anonymise your data within 60 days.

Third-Party Data Sharing

We share your data only with payment processors such as UPI, Paytm, and PhonePe, identity verification services, and regulatory bodies where disclosure is legally required. No data is sold for advertising.

Requesting Changes or Deletion

Submit a data access, correction, or erasure request through your account dashboard or by emailing our DPO. We will confirm receipt within two working days and act on valid requests within the statutory period.

Frequently Asked Questions About Your Data

These questions cover the data rights and privacy situations that come up most often. If your question is not here, reach our Data Protection Officer directly through the contact options listed above.

We collect your name, email, date of birth, and the payment identifiers tied to your UPI, Paytm, or PhonePe accounts. Device and log data — IP address, browser type, session timestamps — are also captured automatically for security purposes.

Yes. Submit a Subject Access Request through your account dashboard or by emailing our DPO. We will compile and deliver a readable copy of your data within 30 days of verifying your identity.

We share data only where necessary — with payment processors like Paytm and PhonePe, identity verification providers, and regulators where the law requires disclosure. We do not sell or rent your personal information to advertisers.

Applicable law determines the minimum retention period for transaction and identity records. After closure, once that period ends, we delete or anonymise your data within 60 days. You can ask us to confirm your exact retention schedule.

Log in to your account and use the Privacy Request option in settings, or email our Data Protection Officer directly. Include your registered email and the specific correction or deletion you are requesting so we can act promptly.

We use session cookies for login continuity and analytics cookies to measure page performance. You can review and update your cookie choices at any time from the Cookie Settings panel inside your account profile.

Access to your personal data within our organisation is limited to staff who need it for their specific role — such as support agents handling your query or compliance teams reviewing transactions. All staff access is logged and audited.