Reference

How y72 Handles Your Personal Data

At y72, your personal data belongs to you — and this policy tells you exactly how we collect, store and use it when you open an account or…

Data TransparencySecure Account StorageUPI & Paytm PrivacyYour Right to AccessIndian Law Compliance
Explore the lobby Read FAQ
y72 How y72 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about your personal data, want to request a correction or need to withdraw consent, our privacy team is reachable through the channels below.

Email Privacy Request Send a detailed request to our privacy address and include your registered account email. We acknowledge every request within one business day and resolve most within 72 hours.
Live Chat Support Our live chat team is available around the clock. Raise a privacy concern directly in the chat window and an agent will route your query to the data team on the same shift.
Account Settings Portal Log in to your y72 account and navigate to Privacy Settings to download your data, update marketing preferences or submit a deletion request without contacting support at all.
DATA HANDLING PRACTICES

Six Ways We Protect Your Privacy

Privacy at y72 is not a checkbox — it is built into how the account system, payment layer and support workflows operate.

Encrypted Data Storage

All personal data, including your UPI VPA and Paytm mobile number, is stored using AES-256 encryption at rest. Keys are rotated on a scheduled basis and access is restricted to authorised personnel only.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can review and withdraw cookie consent at any time from the cookie preference panel in your account.

Account Security Layer

Your account is protected by hashed passwords and optional two-factor authentication sent to your registered mobile number. We never store plain-text passwords or share login credentials with any partner.

Retention Schedule

We keep your transaction records for the period Indian financial regulations require, then delete or anonymise them. Non-transactional profile data is removed within 30 days of a verified account closure request.

Third-Party Data Sharing

We share only the minimum data required with payment processors like Paytm and PhonePe to complete your transactions. No profiling data is passed to advertisers; we do not sell personal data under any circumstances.

Data Access Requests

You have the right to request a copy of all data we hold about you. Submit the request via Account Settings or email our privacy team, and we will deliver a structured export within five business days.

Your Privacy Questions Answered

The questions below cover the rights you hold under this policy, how your data moves through our systems and what steps to take if you want to update, access or remove your information from our platform.

We collect your name, email address, mobile number and the payment identifiers linked to UPI, Paytm or PhonePe. We also record device type and session activity to detect unauthorised access and keep your account secure.

Payment identifiers such as your UPI VPA or Paytm mobile number are passed to the relevant processor in encrypted form to complete the transaction and are never stored in plain text on our servers beyond the required retention period.

Yes. Log in and go to Privacy Settings, then select 'Download My Data'. We will prepare a structured export and notify you when it is ready, usually within five business days of your confirmed request.

Open Account Settings, navigate to Communication Preferences and toggle off each channel individually. You can also click the unsubscribe link in any email we send. Changes take effect within 24 hours of confirmation.

We share only the minimum data necessary with payment processors — Paytm, PhonePe, UPI rails — to complete transactions. We do not sell personal data, and no profile or behavioural data is passed to advertising networks.

Transaction records are retained for the period required under applicable Indian financial regulations. Profile data not tied to transactions is removed or anonymised within 30 days of a verified account closure request submitted by you.

Email our privacy team directly with your account email and a description of your concern. We acknowledge every report within one business day and commit to a resolution response within five business days of receiving full details.

Related Pages

Dream Catcher Jewel Blast Book of Magic y72 Login