Reference

How tombola Handles Your Personal Data

At tombola, we are clear about what personal data we collect, why we collect it, and how long we keep it.

Data collected transparentlyYour rights always availableSecure account storageIndia-compliant practicesContact us any time
tombola How tombola Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you want to request a copy of the data we hold, ask us to correct something, or raise a concern about how your information is being used, our privacy team is reachable through the channels below. We aim to acknowledge every request within 48 hours and resolve it within 30 days.

Team online

Email Support

Write to our privacy team directly at [email protected]. Include your registered email address and the nature of your request so we can locate your account quickly and respond accurately.

Live Chat

Open the chat widget from any page on tombola.click while logged in. Our agents are available seven days a week and can raise a formal data request on your behalf during the conversation.

Postal Address

For formal or legal data requests you prefer to send in writing, post your letter to our registered address listed at the foot of every tombola.click page. We respond within the statutory window.

DATA HANDLING STANDARDS

How We Protect and Manage Your Data

From the moment you create an account to the day you close it, tombola applies consistent security and data-management standards.

Encrypted Account Storage

All account data — including your UPI identifier, email and phone number — is stored using AES-256 encryption. Access is restricted to staff who need it to operate your account, and all access events are logged and audited regularly.

Cookie Controls

We use functional cookies to keep your session active and analytics cookies to understand how pages are used. You can adjust your cookie preferences at any time from the footer of tombola.click, and non-essential cookies are off by default on first visit.

Data Retention Schedule

We keep active account data for as long as your account remains open. After you close your account, we retain transaction records for the period required under applicable Indian financial and legal regulations, then securely delete remaining personal data.

Third-Party Sharing Policy

We share data with payment processors — including UPI networks, Paytm and PhonePe — only to complete transactions you authorise. We do not sell, rent or trade your personal data with advertisers or any unrelated third party under any circumstances.

Account Security Practices

Two-factor authentication is available on every account. We send an SMS or email alert any time a login occurs from an unrecognised device, giving you a clear signal to review access and contact us immediately if something looks unfamiliar.

Requesting Changes to Your Data

You can ask us to correct inaccurate details, restrict how we process your data, or delete your account entirely. Submit a request through live chat or email, and our privacy team will confirm receipt and walk you through the steps within 48 hours.

Frequently Asked Questions About Our Privacy Policy

The questions below cover the scenarios India account holders ask about most — from what data we hold to how you can update or remove it. If your question is not here, our privacy team is a chat or email away.

We collect your full name, email address, phone number, date of birth and any payment identifiers you use — such as your UPI handle or Paytm-linked number. We also log your login timestamps and the device type you use to access the site.

Payment identifiers like your UPI handle or Paytm-linked mobile are encrypted at rest and in transit. We never store full bank account numbers on our servers. Transaction records are held only as long as applicable Indian financial regulations require.

Yes. Email [email protected] from your registered address with the subject line 'Data Access Request'. We will compile and send a full summary of the personal data associated with your account within 30 days of receiving your request.

Submit a deletion request via live chat or email. Once verified, we will close your account and erase personal data that is not subject to a legal retention obligation. We will confirm completion in writing once the process is done.

We share data with payment partners — UPI networks, Paytm, PhonePe — only to complete transactions you initiate. We do not sell or share your data with advertisers or unaffiliated third parties for any marketing or profiling purpose.

Log in and visit the Account Settings page to update most details directly. For changes to identity documents or date of birth, contact our support team via live chat or email and we will guide you through the verification steps required.

We notify you by email at least 14 days before any material change takes effect. A summary of what changed appears at the top of this page. Continuing to use your account after the effective date means you acknowledge the updated terms.