Reference

How dfbocai Handles Your Personal Data

At dfbocai, we are clear about what personal data we collect when you open an account, how we store it, and what rights you hold over it.

Data Collected TransparentlyUPI & Paytm Transaction Records ProtectedYour Right to Access or DeleteIndia-Focused Data HandlingDirect Contact Path for All Requests
dfbocai How dfbocai Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you need to request access to your data, correct inaccurate records, or ask us to delete your account information, our privacy team is reachable through the channels below.

Email Privacy Request Send a written request to our dedicated privacy address. Include your registered email and a clear description of what you need — access, correction, or deletion. We respond within 48 hours of receipt.
Live Chat Support Our live chat team can log a privacy request on your behalf and escalate it to the data team immediately. Available around the clock so no request is delayed by time zone differences.
In-Account Help Centre Log in and navigate to Help Centre, then select Privacy and Data. You can submit a formal request directly from your account dashboard, and track its status without needing to contact us separately.
DATA HANDLING PRACTICES

Six Ways We Protect Your Account Data

Data protection at dfbocai is built around six concrete practices that cover collection, storage, access, cookies, retention and how you can request changes.

Encrypted Storage

All personal data — including your payment method details for UPI, Paytm and PhonePe — is stored using AES-256 encryption at rest. No readable personal data sits in unencrypted form on our servers at any point.

Cookie Controls

We use session cookies for login security and analytics cookies to understand how you navigate the lobby. You can adjust or withdraw cookie consent at any time through the cookie settings panel accessible from every page footer.

Account Security Layers

Your account is protected by hashed passwords, optional two-factor authentication via SMS or authenticator app, and automatic session timeout after a period of inactivity to prevent unauthorised access on shared devices.

Retention Schedule

We keep your data only as long as necessary — active account records are retained while your account is open, and transaction logs are held for the period required by applicable financial regulations, then deleted or anonymised.

Who Can Access Your Data

Internal access to personal data is restricted to staff who need it to operate your account, process payments or resolve disputes. No department outside those functions can pull your records without a documented reason.

Requesting Changes or Deletion

You can ask us to correct, export or permanently delete your personal data at any time. Submit the request via email, live chat or the Help Centre. We will confirm the action taken within 14 working days of verifying your identity.

Common Questions About Your Data on dfbocai

Below are the questions we receive most often about how dfbocai collects, stores and handles personal data. If your question is not here, contact our privacy team directly through email or live chat and we will respond with a clear, written answer within 48 hours.

We collect your name, email address, phone number, date of birth and the payment identifiers you use — such as your UPI ID or Paytm mobile number. We also log the device and IP address you connect from for security purposes.

We do not sell your personal data. We share it only with payment processors like UPI networks or PhonePe when needed to complete a transaction, and with fraud-detection services that help keep your account secure.

After account closure, we retain transaction records for the period required by applicable financial regulations. All other personal data is deleted or anonymised within 30 days of your confirmed account closure request.

Yes. Submit a data access request via email or through the Help Centre in your account dashboard. We will compile and send you a structured copy of your data within 14 working days of verifying your identity.

Contact our privacy team by email or live chat and state clearly that you want your data deleted. We will verify your identity, process the deletion and confirm it in writing. Regulatory records required by law are exempt from deletion.

We use strictly necessary cookies for login sessions and optional analytics cookies to improve the lobby experience. You can withdraw consent for non-essential cookies at any time from the cookie settings panel in the page footer.

Reach our privacy team directly at the email address listed in the Contact section of this policy. If you are not satisfied with our response, you may escalate the matter to the relevant data protection authority in your jurisdiction where local law permits.