Reference

How y03 Handles Your Personal Data

At y03, we take your privacy seriously — this page sets out exactly what personal data we collect when you open an account, how we use it, and…

Data collected only for account operationNo sale of personal data to third partiesRight to access your data at any timeSecure encryption on all account dataContact us to update or remove your details
y03 How y03 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy

If you want to request a copy of your data, ask us to correct inaccurate details, or raise a concern about how your information is handled, our privacy team is available through…

Email Privacy Team Send your data request, correction query, or deletion notice to our dedicated privacy address. We log every message on receipt and aim to respond within five working days with a clear, specific reply.
Live Chat Support Our chat agents can raise a formal privacy ticket on your behalf during support hours. They cannot access your raw data directly but will route your request to the privacy team with a reference number you can track.
Account Settings Panel Certain data updates — such as changing your registered mobile number linked to Paytm or PhonePe — can be initiated directly inside your account settings without contacting support, subject to identity verification.
HOW WE PROTECT YOUR DATA

Data Handling, Cookies and Account Security at y03

We apply layered security practices across every part of the platform — from the moment you log in to the moment a withdrawal lands in your UPI wallet.

Encryption in Transit and at Rest

All data exchanged between your device and y03 servers travels over TLS encryption. Account records — including your linked UPI ID and contact details — are stored in encrypted form at rest, accessible only to authorised internal systems.

Cookie Use and Your Choices

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences through your browser settings. We do not use cookies to build advertising profiles for third-party networks.

Account Security Practices

Your account password is hashed and never stored in plain text. We recommend enabling two-step verification where available. Suspicious login attempts trigger an automatic flag and an alert email to your registered address.

Data Retention Periods

We retain active account data for as long as your account is open. After closure, financial records tied to UPI, Paytm, or PhonePe transactions are kept for the period required under Indian financial regulations, then deleted or anonymised.

Who Can Access Your Data

Internal access is role-based: support agents see only the fields needed to resolve your query, and payment processors receive only the transaction reference required to settle a deposit or withdrawal. No full data profile is shared externally.

Requesting Changes to Your Data

You can request a full export of your personal data or ask for specific records to be corrected at any time. Deletion requests are processed within 30 days, subject to our obligation to retain financial records under applicable law.

Common Questions About Your Privacy at y03

The answers below cover the questions we receive most often about data rights, how we use personal details, and what you can do if something needs to change. If your question is not listed, reach out through any of the contact paths in the section above.

We collect your name, email address, date of birth, and the payment identifiers you register — such as your UPI ID or Paytm-linked mobile. We collect only what is needed to operate your account and process transactions.

We do not sell your data. We share it only with payment processors — such as those handling UPI or PhonePe settlements — and with identity verification services, strictly for the purpose of completing those specific operations.

Email our privacy team or raise a request through live chat. We will compile and send you a copy of your personal data within five working days. The export includes account details, transaction references, and communication records.

Yes. Submit a deletion request via email or chat. We will remove your personal data within 30 days of verification, except for financial records that Indian regulations require us to retain for a defined period after account closure.

Non-financial personal data is deleted or anonymised promptly after account closure. Transaction records linked to UPI, Paytm, and PhonePe are retained for the period prescribed by applicable Indian financial and tax regulations, then removed.

We use session cookies for login continuity and analytics cookies to measure page performance. You can disable non-essential cookies through your browser settings at any time without affecting core account functions like deposits or withdrawals.

Contact our privacy team directly by email with a description of your concern. We will acknowledge your message within 24 hours and provide a formal response within five working days, including what steps we are taking to address the issue.