Tiranga Lottery - Privacy Policy

Read the Tiranga Lottery privacy policy: what information we collect, how we use and protect it, your data-protection rights, and how to contact us with any privacy questions.

Information we collect

Account and identity data

When you register on Tiranga Lottery (tirangalotteryapp.in.net), we collect your full name, date of birth, email address, and mobile number. To satisfy KYC requirements under Indian regulations, we also collect a government-issued identity document, such as Aadhaar, PAN card, or Voter ID, to verify your age (you must be at least 18 years old) and confirm your identity before any withdrawal is processed.

Financial and payment data

To process deposits and prize payouts, we collect the payment details you provide, including UPI IDs linked to apps such as PhonePe, Google Pay (GPay), or BHIM, as well as bank account numbers and IFSC codes for NEFT or IMPS transfers. We do not store full debit or credit card numbers on our servers; card payments are tokenised and handled exclusively by PCI-DSS-compliant third-party processors. Transaction reference numbers and amounts are retained in our records for regulatory purposes.

Usage and device data

We automatically log technical information each time you access the Tiranga Lottery platform, including your IP address, device model, operating system version, browser type, pages visited, tickets purchased, and session timestamps. This data is gathered through server logs, cookies, and similar technologies and is used to keep the platform secure and functioning correctly.

How we use your information

Service delivery and transaction processing

Your personal data is used to create and maintain your Tiranga Lottery account, validate your identity, process deposits made via PhonePe, GPay, BHIM, or net banking, and credit prize winnings to your registered bank account or UPI handle. Without this processing, we cannot fulfil our contractual obligations to you as a registered player.

Legal compliance and fraud prevention

We are obligated under Indian financial and gaming regulations to retain transaction records for a minimum of five years, conduct ongoing KYC checks, and report suspicious activity to relevant authorities. We also analyse login patterns and transaction behaviour to detect fraud, multi-accounting, and money-laundering attempts. This processing is carried out on the basis of legal obligation and legitimate interest to protect the integrity of the platform and all its users.

Marketing communications

With your explicit consent, we may send promotional offers, bonus alerts, and new game announcements via email, SMS, or push notification. You can withdraw consent at any time by tapping "Unsubscribe" in any marketing message or by updating your notification preferences inside your account settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Your rights

Access, correction, and deletion

You have the right to request a copy of the personal data we hold about you, ask us to correct inaccurate information, or request deletion of your account and associated data where no legal retention obligation applies. To exercise any of these rights, log in to your Tiranga Lottery account and visit the Privacy Settings page, or submit a written request to our support team. We will respond within 30 days of receiving a verifiable request.

Objection and restriction

You may object to processing carried out on the basis of legitimate interest, for example, behavioural analytics, or ask us to restrict processing while a complaint is being investigated. Note that objecting to processing that is strictly necessary for regulatory compliance or contract performance may result in account suspension, as we cannot legally operate your account without fulfilling those obligations.

Complaints

If you believe your data rights have been violated, you may raise a complaint with our Data Protection Officer using the contact details below. You also have the right to escalate unresolved complaints to the relevant Indian supervisory authority once the Digital Personal Data Protection Act framework is fully notified.

Contact us

For privacy-related queries or to exercise your data rights, email us at [email protected]. We aim to respond to all requests within 3 business days. Please include your registered mobile number in the subject line so we can locate your account promptly.