Reference

How m80 Handles Your Personal Information

Your privacy matters to us, and this policy explains exactly what data m80 collects when you open an account, make a deposit via UPI or Paytm, or contact…

Data TransparencyAccount SecurityIndian Users CoveredCookie ControlContact Us Anytime
m80 How m80 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about your personal data, want to request a copy of what we hold, or need to ask us to delete your account information, our dedicated privacy team…

Email Privacy Desk Send a written data request to our privacy desk at any time. We verify your identity before acting on any request, and our team acknowledges receipt within one business day of your message arriving.
Live Chat Support Reach a support agent through the live chat widget on any page of our site. Agents can log a privacy request on your behalf and escalate it to our data team if the matter needs specialist handling.
Formal Written Request For legal or regulatory data matters, you may submit a formal written request through the secure form in your account dashboard. We process formal requests under applicable Indian data protection obligations and respond in writing.
HOW WE PROTECT YOU

Our Data Handling and Account Security Practices

We apply layered security measures across every part of our platform — from the moment you register to the moment a withdrawal clears to your PhonePe or UPI account.

Encrypted Data Storage

All personal data — including payment identifiers such as your UPI VPA and Paytm mobile number — is stored using AES-256 encryption at rest. Access to stored data is restricted to verified internal personnel with a documented operational need.

Cookie Management

Our site uses session cookies for login continuity and analytics cookies to measure page performance. You can adjust cookie preferences from the settings panel on any page, and opting out of analytics cookies does not affect your ability to access your account.

Account Access Controls

We enforce two-factor authentication on all account logins and send an immediate alert to your registered email or phone if a login attempt comes from an unrecognised device or location. You can review active sessions from your account security page.

Data Retention Policy

Transaction records and identity documents are kept for the period required under applicable Indian financial regulations. Once the retention period expires, data is securely deleted from our primary servers and backup systems within 30 days.

Third-Party Data Sharing

We share your data only with partners who are contractually bound to our privacy standards — payment processors handling UPI and PhonePe rails, fraud detection services, and statutory authorities where Indian law requires disclosure. We do not sell your data.

Your Right to Request Changes

You may request a full export of your personal data, ask us to correct inaccurate details, or submit a deletion request at any time through the privacy desk. We will confirm the action taken in writing within seven working days of completing it.

Frequently Asked Questions About Your Privacy at m80

Below are the questions our users ask most often about how their personal data is handled. If your question is not listed here, reach our privacy team directly via live chat or the email desk and we will respond within one business day.

We collect your full name, date of birth, email address, phone number, and the payment identifiers you use — such as your UPI VPA or Paytm mobile number. We also log IP addresses and device identifiers to support account security and fraud prevention.

Yes. Payment identifiers like your UPI handle and PhonePe number are encrypted at rest using AES-256 and are never stored alongside your full bank credentials. Only our regulated payment processor partners can access the transaction reference data needed to process a withdrawal.

You can submit a data export request at any time through your account dashboard or by writing to our privacy desk. After we verify your identity, we will compile and send a complete data export in a readable format within seven working days.

We retain transaction records and identity documents for the period mandated by applicable Indian financial regulations. Once that period ends, all data is deleted from our primary servers and backup systems within 30 days of the retention deadline passing.

We share data only with partners bound by contractual privacy obligations — payment processors for UPI and PhonePe rails, fraud-detection services, and Indian statutory authorities when disclosure is legally required. We do not sell or rent personal data to advertisers or data brokers.

Submit a deletion request through the secure form in your account dashboard or email our privacy desk directly. We verify your identity first, then confirm the deletion in writing within seven working days. Some data may be retained where Indian law requires it.

We use session cookies to keep you logged in and analytics cookies to monitor page performance. You can manage both from the cookie settings panel accessible on any page. Turning off analytics cookies will not affect your account access or deposit and withdrawal functions.