Tiranga Lottery - Privacy Policy

Information We Collect

Personal Identification Data

When you register on tirangalotteryplay.in.net or participate in any Tiranga Lottery draw, we collect your full legal name, date of birth, mobile number, email address, and government-issued identification, specifically your Aadhaar card number or PAN card number, in line with Indian KYC requirements. Date of birth is verified at registration to confirm you are 18 years of age or older, as participation by minors is strictly prohibited under applicable Indian law.

Financial Data

We collect financial details necessary to process ticket purchases and prize disbursements. If you transact via UPI platforms such as PhonePe, GPay, or BHIM, we record your UPI virtual payment address (VPA) and the transaction reference number generated by the NPCI network. Where payment is made by debit or credit card, we retain only the card scheme, issuing bank name, and last four digits; full card numbers are processed exclusively by our PCI-DSS-compliant payment gateway and are never stored on our servers.

Technical and Usage Data

Our servers automatically log your IP address, device model, operating system version, browser type, and the sequence of pages you access each session. We use cookies and session tokens to keep you authenticated and to remember preferences such as your chosen draw notifications. You may manage cookie settings through your browser; however, disabling functional cookies may prevent certain platform features from operating correctly.

How We Use Your Information

Service Delivery and Prize Processing

Your personal and financial data is used to create and maintain your Tiranga Lottery account, authenticate your identity, process ticket purchases, verify winning entries against official draw results, and disburse prize amounts to your registered payment method, whether that is a PhonePe wallet, a GPay-linked bank account, or a BHIM UPI address. Prize transfers are typically completed within three to five business days of successful claim verification.

Regulatory Compliance and Fraud Prevention

We are legally required under the Prevention of Money Laundering Act, 2002 (PMLA) and guidelines issued by the Financial Intelligence Unit, India (FIU-IND) to monitor transactions, maintain records for a minimum of five years, and report suspicious activity to the relevant authorities. Automated systems analyse login behaviour and transaction patterns in real time to detect account takeovers and block unauthorised payments before they are settled through the NPCI network.

Platform Improvement and Marketing

Anonymised, aggregated usage data helps us identify technical errors, improve draw scheduling, and prioritise new features. Individual-level data is never sold to third-party advertisers. With your prior explicit consent, we may send promotional SMS or email messages about new Tiranga Lottery draws or special jackpot events. You may withdraw this consent at any time by replying STOP to any SMS or using the unsubscribe link in any marketing email, without any effect on your ability to continue using the platform.

Your Rights

Access, Correction, and Deletion

You have the right to request a copy of the personal data we hold about you, to ask us to correct any inaccurate or incomplete records, and to request deletion of your data where we no longer have a lawful basis for retaining it. Submit a written request to our Data Grievance Officer using the contact details below; we will acknowledge your request within 72 hours and provide a full response within 30 days. Financial transaction records subject to statutory retention periods, typically seven years under Indian tax and accounting law, cannot be deleted before those periods expire.

Consent Withdrawal and Non-Discrimination

You may withdraw consent for marketing communications at any time without affecting your access to Tiranga Lottery services. You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights under applicable Indian law have been violated. We will not restrict your account, alter your prize eligibility, or apply any other penalty solely because you submitted a data rights request or withdrew marketing consent.

Third-Party Data Transfers

Where we share your data with third-party service providers, such as UIDAI-authorised KYC verification partners, cloud infrastructure providers, or fraud-screening vendors, those transfers are governed by written data processing agreements requiring equivalent data protection standards to those applied on this platform. We do not transfer your data outside India except where required by applicable law or with your explicit consent.

Contact Us

How to Reach Us

For privacy-related queries or to exercise your data rights, email our Data Grievance Officer at [email protected]. We acknowledge all requests within 72 hours and aim to resolve them fully within 30 days.