Reference

How magicwin Handles Your Personal Data

Our Privacy Policy sets out exactly what personal data we collect when you open an account, how we store and process it, and what controls you have over…

Data collected only for account operationNo sale of personal data to third partiesYou may request deletion at any timeEncrypted storage for all account dataIndian regulatory standards applied
magicwin How magicwin Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have a question about how your data is used, want to correct information on your account, or wish to submit a deletion request, our support team handles privacy queries through three dedicated channels. We aim to acknowledge every privacy-related request within 24 hours and resolve it within seven working days.

Team online

Live Chat

Open the chat widget inside your account dashboard and select the Privacy category. Our agents handle privacy queries around the clock and can escalate to our data team within one business day.

Email Support

Send your request to our dedicated privacy address from the email linked to your account. Include your account ID so we can match your request quickly and avoid delays in processing.

Account Settings

Many data controls — communication preferences, marketing opt-outs, and data download requests — are available directly inside Account Settings without needing to contact us at all.

HOW WE PROTECT YOUR DATA

Six Ways We Keep Your Account Data Safe

Data protection is not a checkbox for us — it shapes how we build every part of the account flow, from the moment you submit your first UPI deposit to the point…

Encrypted Storage

All personal data is stored using AES-256 encryption at rest. Database access is logged, and any read of personal records outside a defined workflow triggers an automatic security alert to our team.

Cookie Controls

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can manage cookie preferences from the footer of any page; withdrawing consent stops non-essential cookies immediately.

Account Security

Two-step verification is available for every account. We also monitor login geography; if we detect a sign-in from an unusual location, we pause it and send a confirmation prompt to your registered number before allowing access.

Data Retention

We keep account records for the period required by applicable Indian financial regulations. Once that period lapses and your account has no pending transactions, personal data is scheduled for deletion on a rolling 90-day cycle.

Third-Party Sharing

We share data with payment processors — UPI networks, Paytm, PhonePe — only to the extent needed to complete a transaction. No marketing partner receives your personal details without your explicit, separate consent.

Your Correction Rights

You may request a copy of the data we hold, ask us to correct inaccurate details, or submit a deletion request at any time via email or live chat. We confirm receipt within 24 hours and complete the action within seven working days.

Common Questions About Your Data at magicwin

The questions below cover the data rights and privacy practices we hear about most from account holders in India. If your question is not listed here, reach us through live chat or the privacy email address in your Account Settings.

We collect your name, date of birth, email address, mobile number and the identity documents needed for verification. Payment details are passed through UPI, Paytm or PhonePe networks; we only store the transaction reference, not your full credentials.

No. We do not sell personal data to any third party. Data is shared only with payment processors and identity verification services, and only to the minimum extent required to operate your account and comply with applicable regulations.

We retain records for the period mandated by applicable Indian financial and anti-money-laundering regulations. After that retention period ends and no transactions are pending, personal data enters our 90-day deletion cycle.

Yes. Submit a data access request via email from your registered address or through live chat. Select the Privacy category, include your account ID, and we will compile and send your data summary within seven working days.

Open live chat or email our privacy address. State whether you want a correction or a full deletion, and we will confirm receipt within 24 hours. Deletions are processed within seven working days, subject to any regulatory retention obligations that may apply.

We use essential session cookies to keep your login active and analytics cookies to improve the lobby experience. Non-essential cookies can be disabled from the cookie preference panel in the footer; essential cookies cannot be turned off as the site requires them to function.

Payment data passes through the UPI network or PhonePe's own encrypted gateway; we receive only a transaction reference ID. All data we do store is protected with AES-256 encryption and access-controlled to authorised personnel only.