Tiranga Lottery - Privacy Policy

Information we collect

Account and identity information

When you register at tirangalottery.io, we collect your full name, date of birth, email address, and mobile number. We also require a government-issued photo identity document, such as an Aadhaar card, PAN card, or Voter ID, to verify your identity, confirm you are 18 years of age or older, and satisfy Know Your Customer (KYC) obligations under applicable Indian regulations.

Financial and payment information

To process deposits, withdrawals, and prize payments, we collect payment details including UPI IDs linked to services such as PhonePe, Google Pay (GPay), or BHIM, as well as bank account numbers and IFSC codes where direct bank transfers are used. Full card numbers are never stored on our servers; card-based transactions are routed through PCI-DSS-compliant payment processors. Transaction reference numbers and timestamps are retained for audit and dispute resolution purposes.

Usage and device information

We automatically collect technical data when you visit or interact with tirangalottery.io, including your IP address, device type, operating system, browser version, pages viewed, lottery tickets purchased, session duration, and clickstream data. This information is gathered through server logs, cookies, and similar tracking technologies. Non-essential cookies are deployed only with your consent, which you may manage at any time through our cookie preference centre.

How we use your information

Providing the Tiranga Lottery service

We use your personal information to create and maintain your account, verify your identity at registration, process lottery ticket purchases, and credit prize winnings to your nominated UPI handle or bank account. Customer support interactions are also handled using the contact details you provide. This processing is necessary for the performance of our contract with you.

Legal and tax compliance

We are legally required to maintain financial transaction records, conduct ongoing fraud and anti-money-laundering checks, and report certain information to Indian regulatory and tax authorities. Where you win a prize exceeding the threshold prescribed under the Income Tax Act, 1961, we are obligated to deduct Tax Deducted at Source (TDS) at the applicable rate and issue a Form 16A. These compliance activities are carried out on the basis of our legal obligations and cannot be opted out of while your account is active.

Marketing and promotional communications

With your consent, we may send you draw notifications, bonus offers, and platform updates via SMS or email. You may withdraw this consent at any time by clicking "Unsubscribe" in any marketing message or by updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.

Your rights

Access, correction, and portability

You have the right to request access to the personal data we hold about you and to receive a copy in a portable, machine-readable format. You may also request correction of any inaccurate or incomplete information, such as a misspelled name or an outdated mobile number, by submitting a request through your account settings or by contacting the platform's support team directly.

Deletion and restriction

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires us to retain it. Please note that regulatory record-keeping requirements oblige us to retain KYC documents and transaction records for a minimum of five years after account closure, even following a valid deletion request.

Objection and consent withdrawal

Where we process your data on the basis of consent, such as for marketing communications or non-essential analytics cookies, you have the right to withdraw that consent at any time without penalty. You may also object to processing carried out on the basis of our legitimate interests. To exercise any of these rights, email us at the address in the Contact Us section below; we will respond within 30 days of receiving a verifiable request.

Contact us

For privacy-related queries or to exercise your data rights, contact the Data Protection Officer at [email protected]. We acknowledge all requests within 72 hours and aim to provide a full written response within 30 days of receipt.