Reference

How matka1 Handles Your Personal Data

At matka1, your personal data belongs to you — we collect only what we need to operate your account, process payments via UPI, Paytm and PhonePe, and keep…

Data collected only for account operationUPI, Paytm & PhonePe transaction privacyYour right to access and deleteEncrypted data storageIndia-jurisdiction data handling
matka1 How matka1 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

Team online

Email Privacy Desk

Send your data access, correction or deletion request to our dedicated privacy email. We aim to respond within 72 hours and resolve straightforward requests within 14 working days of receipt.

Live Chat Support

Our live chat team is available around the clock. They can log a formal data request on your behalf and escalate it to our privacy desk so you do not have to wait for email confirmation to begin the process.

In-Account Request Form

Log in, navigate to Account Settings, and find the Privacy & Data section. Submit a request directly from there — it is timestamped automatically and routed to our data team without any additional steps from you.

HOW WE PROTECT YOUR DATA

Data Handling, Cookies and Account Security

matka1 applies layered security measures across every point where your data is stored or transmitted.

Encryption in Transit and at Rest

All data moving between your device and our servers travels over TLS 1.2 or higher. Stored account data — including payment identifiers linked to UPI, Paytm and PhonePe — is encrypted using AES-256 at rest so raw values are never exposed in our internal systems.

Cookie Usage and Your Choices

We use session cookies to keep you logged in, preference cookies to remember your language and lobby view, and analytics cookies to understand how the platform is used. You can manage or withdraw cookie consent at any time through your browser settings or our cookie banner.

Account Security Practices

Two-step login verification is available for all accounts. We log every authentication event — including failed attempts — and alert you by SMS or email if a new device tries to access your account, giving you the chance to block it immediately.

Data Retention Policy

We keep your account data for as long as your account is active or as required by applicable law. Once you close your account and any statutory retention period has passed, we delete or anonymise your personal data within 30 days of processing your closure request.

Third-Party Data Sharing

We share data only with payment processors (UPI networks, Paytm, PhonePe), identity verification providers, and fraud-prevention services strictly necessary to operate your account. Each third party is bound by a data processing agreement limiting their use of your information.

How to Request Changes or Deletion

You hold the right to access, correct, export or delete the personal data we hold about you. Submit your request via the in-account form or email our privacy desk — include your registered mobile number so we can match your request to the correct account without delay.

Your Privacy Policy Questions

The questions below cover the data rights and account privacy matters we hear about most. If your question is not listed here, reach us through live chat or the in-account privacy form and we will get back to you within 72 hours.

We collect your name, email address, mobile number, date of birth and the payment identifier you use — such as a UPI VPA or Paytm-linked number. We also log your IP address and device type for security and fraud-prevention purposes.

Your UPI VPA and Paytm details are shared only with the payment processor that handles your specific transaction. They are bound by a data processing agreement and cannot use your details for any purpose beyond completing or verifying that payment.

We retain your account data for the period required by applicable law in your jurisdiction. Once that period expires, we delete or fully anonymise your records within 30 days of processing your account closure request.

Yes. Submit a data access request through Account Settings under Privacy & Data, or email our privacy desk with your registered mobile number. We aim to deliver your data export within 14 working days of verifying your identity.

We use session cookies (essential), preference cookies (lobby and language settings) and analytics cookies (usage patterns). You can withdraw consent for non-essential cookies at any time through your browser settings or our cookie banner without losing access to your account.

Use the in-account Privacy & Data form or contact our live chat team to log a deletion request. Once we verify your identity and confirm no statutory hold applies, deletion or anonymisation is completed within 30 days.

This policy applies to all account data regardless of where you access the platform from. However, whether accessing the platform is lawful in your location depends on local law. It is your responsibility to confirm your use complies with applicable local regulations.