Reference

How y67 Handles Your Personal Data

At y67, your personal data belongs to you — we collect only what we need to run your account, process deposits via UPI, Paytm, and PhonePe, and keep…

Data collected only as neededUPI & Paytm transaction privacyYour right to access or deletePhonePe payment data protectedIndia-region account holders

Browse lobby Read FAQ

Jurisdiction, Scope and What This Policy Covers

y67 Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

This privacy policy applies to all accounts registered through y67.club and governs how we handle personal data submitted during account creation, login, wallet top-ups via UPI, Paytm, or PhonePe, and any support correspondence. Access to our platform and the protections described here depend on local law

1
and are available where local law permits. We process data in accordance with applicable data protection frameworks relevant to the jurisdiction from which you access our services. We do not sell your personal data to third parties. Data shared with payment processors — including UPI networks,
2
Paytm, and PhonePe — is limited to what those processors need to complete your transaction and is governed by their own privacy terms. If you are accessing our services from a region where data localisation rules apply, we aim to comply with those requirements to the
3
extent technically feasible.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access the data we hold on your account, request a correction, or ask us to delete your records entirely, our privacy team…

DATA HANDLING PRACTICES

How We Protect and Manage Your Data

We apply a layered approach to data security — from the moment you submit a UPI deposit to the point your withdrawal is verified and cleared.

Cookies and Tracking

We use session cookies to keep your lobby state, and analytics cookies to understand which pages load slowly on Indian…

Account Security

Passwords are stored as salted hashes — we cannot read your password, only verify it.

Payment Data Handling

When you top up via UPI, Paytm, or PhonePe, your VPA or wallet ID passes through an encrypted channel to…

Data Retention

Active account records are kept for as long as your account remains open.

Who Can Access Your Data

Internal access to personal data is role-restricted. Customer support agents see only what they need to resolve your ticket.

Requesting Changes or Deletion

You can request a copy of every data field we hold, ask us to correct inaccurate details, or ask for…

Your Privacy Questions, Answered by y67

Below are the questions we receive most often about how your data is stored, who can see it, and what rights you have as an account holder in India. If your question is not listed here, raise a support ticket and our privacy team will respond within 48 hours.

We collect your name, email address, registered mobile number, and the UPI or wallet ID you use for deposits. We also log IP addresses and device identifiers for fraud detection, but these are not linked to your public profile.

We share data only with payment processors — Paytm, PhonePe, UPI networks — and only what they need to complete your transaction. We do not sell personal data, and we do not share it with advertisers or data brokers.

We retain transaction logs for the period required by applicable financial regulations after account closure, then permanently delete all personally identifying information. You will receive a confirmation email once deletion is complete.

Yes. Submit a data access request via the Help Centre or our privacy email address, quoting your registered mobile number. We will compile and deliver a full data export to your registered email within 15 working days.

Log in, go to Account Settings, and update basic fields like your name or email directly. For fields that require identity verification — such as your registered mobile number — raise a support ticket and our team will guide you through the correction process.

We store only a masked transaction reference — enough to reconcile your deposit with your wallet. Full UPI virtual payment addresses and PhonePe wallet credentials are handled exclusively by those payment processors and are not retained on our systems.

You can withdraw consent at any time by submitting a deletion request through the Help Centre. Note that withdrawing consent means we can no longer operate your account, as basic data processing is necessary to verify identity and complete withdrawals.

How y67 Handles Your Personal Data

Reach Us About Your Privacy Rights

How We Protect and Manage Your Data

Cookies and Tracking

Account Security

Payment Data Handling

Data Retention

Who Can Access Your Data

Requesting Changes or Deletion

Your Privacy Questions, Answered by y67

01 What personal data does y67 collect when I open an account?

02 Does y67 share my data with third parties?

03 How long does y67 keep my account data after I close my account?

04 Can I request a copy of all the data y67 holds on me?

05 How do I ask y67 to correct incorrect personal details on my account?

06 Are my UPI and PhonePe payment details stored on y67 servers?

07 How do I withdraw consent for y67 to process my data?

Related Pages