Privacy Policy

1. Data Controller and Compliance

We are fully compliant with the Digital Personal Data Protection Act (DPDPA) 2023 of India. This Privacy Policy details how we collect, process, secure, and share your personal and financial details. By using our platform, you consent to the data practices outlined herein.

2. Information We Collect

To verify eligibility and perform transparent audits, we gather the following data points:

• Personal Identity: Full Name, Date of Birth, Email Address, Mobile Number, City, and State.
• Financial Identity: PAN Card Number (Permanent Account Number), Loan Account Number, Bank or NBFC Name, original loan amount, current outstanding principal, EMI payments, start date, and tenure.
• Supporting Documents: Uploaded PDF/JPG copies of EMI schedules and sanction letters.

3. Purpose of Processing

Your details are processed strictly for the following purposes:

• To evaluate draw eligibility (ensuring loan is active and over 6 months old).
• To generate unique ticket numbers and prevent duplicate registration fraud (matching PAN and Account numbers).
• To calculate and assign Verification Scores (Bronze, Silver, Gold).
• To conduct bi-monthly randomized draws and identify winners.
• To coordinate with lender banks to settle winning accounts.

4. Data Storage and Security

All sensitive information, including PAN details and uploaded files, is stored on secure databases. Access is limited based on strict role-based access protocols. Uploaded files are renamed using secure hashes to prevent direct URL sniffing.

5. Third-Party Sharing

We do not sell, trade, or lease borrower information to third-party marketing companies. Data is shared only with:

• Program administrators and internal verification audits for validating eligibility.
• Your lender bank or NBFC for the sole purpose of verifying outstanding amounts and processing relief transfers.
• Auditing firms verifying draw transparency.

6. User Rights

Under the DPDPA 2023, you retain the right to request a summary of your personal data processed, request corrections, or withdraw your consent (resulting in the deletion of your registered ticket and details from our draw registry). To exercise these rights, please contact our Grievance Officer via the Contact page.