Reference

How 3zz Handles Your Personal Data

This Privacy Policy explains exactly what data 3zz collects when you open an account, make a deposit via UPI or Paytm, or contact our support team — and…

Account Data ProtectedUPI & Paytm Transaction PrivacyNo Third-Party Data SalesRight to Access & DeleteIndia-Specific Data Handling
3zz How 3zz Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have a question about how your data is stored, want to correct an entry, or need to submit a deletion request, our privacy team…

Email Privacy Team Send your data access, correction or deletion request to our dedicated privacy email address.
Live Chat Support Open the chat widget on any 3zz page and select the Privacy or Account…
Written Request Form For formal legal requests — including objections to processing or portability requests — use…
HOW WE PROTECT DATA

Security, Retention and Your Account Rights

Data protection at 3zz is built around specific technical controls and clear retention rules, not vague promises.

Encryption in Transit and at Rest

All data exchanged between your device and our servers — including UPI deposit confirmations and PhonePe withdrawal references — travels over TLS 1.2 or higher. Stored account records are encrypted using AES-256 at the database layer.

Cookie Controls You Can Manage

We use session cookies to keep your lobby active and analytics cookies to understand which pages load slowly on Indian mobile networks. You can disable non-essential cookies from the cookie preference panel in your account settings at any time.

Account Security and Login Alerts

Each login from an unrecognised device triggers an SMS alert to your registered Indian mobile number. You can review active sessions and revoke access to any device from the Security section of your account dashboard.

Data Retention Schedule

Transaction records linked to UPI, Paytm and PhonePe payments are kept for the period mandated by applicable Indian financial regulations. Account profile data is deleted within 30 days of a confirmed account closure request.

Third-Party Data Sharing

We share data with payment processors — such as UPI gateway providers — solely to complete your transactions. We do not sell your data to advertisers. Any third-party processor we use is bound by a data processing agreement aligned with applicable Indian privacy standards.

How to Request Changes or Deletion

Submit a request via the Data and Privacy form in your account settings or email our privacy team directly. We will confirm receipt within 48 hours and complete the action — correction, export or deletion — within the statutory response window.

Your Privacy Policy Questions

These are the data and privacy questions we hear most often. If your question is not covered here, contact our privacy team directly through the channels listed above.

We collect your name, email address, Indian mobile number and the payment identifiers from your UPI, Paytm or PhonePe transactions. We also collect device and session data to keep your account secure across logins.

No. We never store your UPI PIN, PhonePe password or Paytm MPIN. We only record the transaction reference numbers returned by the payment gateway after a deposit or withdrawal is completed.

Yes. Submit a data access request via the Data and Privacy form in your account settings or email our privacy team. We will compile and send you a full export of your account data within the applicable statutory window.

Transaction records are retained for the period required by applicable Indian financial regulations. If you close your account, profile data is deleted within 30 days of the confirmed closure, subject to any outstanding legal hold obligations.

Only with payment processors required to complete your UPI, Paytm or PhonePe transactions, and only to the extent needed. We do not sell or trade your personal data to marketers, advertisers or data brokers.

Use the deletion request option in the Data and Privacy section of your account settings, or write to our privacy team by email. We will confirm receipt within 48 hours and complete the deletion within the statutory response period.

Our data practices follow applicable Indian law. Access to account services depends on local law and is available where local law permits. The same data rights — access, correction, deletion — apply regardless of which Indian state you are in.