Reference

How bigexch Handles Your Personal Data

At bigexch, your privacy is a standing commitment — not an afterthought. This policy explains exactly what data we collect when you open an account, how we use…

Data Collected With ConsentUPI & Paytm Payment PrivacyYour Right to Access DataAccount Security PracticesIndian Jurisdiction Covered
bigexch How bigexch Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to review, correct or remove your personal data, our privacy team is reachable through multiple channels.

Email Privacy Team Send a written request to our dedicated privacy address. Include your registered account email so we can verify your identity before accessing or modifying any personal record on your behalf.
Live Chat Support Open the chat window inside your bigexch account dashboard. Our support agents can log a formal privacy request on your behalf and confirm the case reference number in the same session.
In-Account Privacy Centre Navigate to Account Settings and select Privacy to download your stored data, withdraw marketing consent, or raise a deletion request directly — no email needed, resolved within the stated window.
HOW WE PROTECT YOU

Data Handling and Account Security at bigexch

Every layer of your account — from the moment a UPI deposit is initiated to the moment a withdrawal is confirmed — passes through encrypted channels.

Encrypted Data Storage

All personal data is stored on encrypted servers. Payment identifiers linked to UPI, Paytm and PhonePe are tokenised immediately after a transaction clears, so raw account numbers are never held in plain text within our systems.

Cookie Policy and Consent

We use strictly necessary cookies to keep your session active and, with your consent, analytics cookies to improve page performance. You can withdraw cookie consent at any time from the Privacy Centre in your account settings.

Third-Party Data Sharing

We share data only with processors who are contractually bound to our privacy standards — for example, KYC verification partners and fraud-screening services. No data is shared for advertising purposes without your explicit consent.

Data Retention Schedule

Transaction logs are kept for the period required by applicable law and then securely deleted. Account profile data is retained while your account remains active; once you request closure, deletion begins within 30 days.

Your Access Rights

You may request a copy of every data point we hold about you at any time. Correction requests are processed within seven working days. If you believe data has been handled incorrectly, you can escalate to the relevant Indian authority.

Account Security Practices

Two-step verification is available for all accounts and we strongly encourage you to enable it. Login attempts from new devices trigger an automatic email alert so you know immediately if someone else tries to access your profile.

Common Privacy Questions From Our Account Holders

Below are the questions we receive most often about data handling, your rights and how to exercise them. If your question is not covered here, reach out via the channels listed in the section above.

We collect your name, email address, phone number, date of birth and payment identifiers such as your UPI VPA or Paytm number. Document copies are collected only during the KYC verification step, which is required before your first withdrawal.

Only with contracted processors — KYC providers and fraud-screening services — who are bound by the same privacy standards we apply internally. We never sell your data or share it with advertisers without your explicit written consent.

Log in and go to Account Settings, then Privacy Centre, and select 'Download My Data'. Alternatively, email our privacy team with your registered email address. We will deliver a structured data export within seven working days of verifying your identity.

Yes. Submit a deletion request through the Privacy Centre or by email. We will delete or anonymise your data within 30 days of confirming your identity, except for records we are legally required to retain under applicable Indian regulations.

Transaction logs are retained for the minimum period required by law — typically linked to anti-money-laundering obligations. Once that period expires, records are securely deleted. You can ask us for the specific retention period applicable to your account.

Yes. Payment identifiers are tokenised immediately after each transaction. Raw UPI VPAs, Paytm wallet IDs and PhonePe references are never stored in plain text. Access to payment data is restricted to authorised fraud-prevention personnel only.

Contact our privacy team by email or live chat immediately and provide your account details. We investigate all such reports within 48 hours. If you remain unsatisfied after our response, you may escalate to the relevant Indian data protection authority.