Reference

How koko303 Handles Your Personal Data

At koko303, we collect only the data we need to run your account, process deposits via UPI, Paytm and PhonePe, and keep your sessions secure.

Account Data ProtectedUPI & Paytm Transactions EncryptedData Requests AcceptedCookies DisclosedIndia-Aware Policy
koko303 How koko303 Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you want to access, correct, or delete the personal data we hold for your koko303 account, our privacy team is reachable through three channels below.

Email Privacy Request Send a data access, correction or deletion request to our dedicated privacy address. Include your registered mobile number so we can locate your account record quickly and respond within 72 hours.
Live Chat Support Our live chat agents can log a formal privacy request on your behalf during support hours. They will pass the ticket directly to the data team and give you a reference number to track progress.
In-Account Help Centre Log in to your account and navigate to the Help Centre to raise a privacy query. The form routes straight to our compliance desk, keeping all your request details tied to your account record.
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security at koko303

We use a combination of encryption, access controls and scheduled data-retention reviews to make sure the information tied to your account stays accurate and secure.

Encryption in Transit and at Rest

All data moving between your browser or app and our servers is encrypted via TLS. Stored records — including payment references from UPI and Paytm — are encrypted at rest using AES-256 so raw values are never readable if a server were ever accessed without authorisation.

Cookie Use Disclosed

We set session cookies to keep you logged in, preference cookies to remember your language and deposit method, and analytics cookies to count page visits in aggregate. No cookies are shared with advertising networks. You can clear or block cookies through your browser settings at any time.

Account Access Controls

Your account can only be accessed with your registered credentials. We apply rate-limiting to login attempts and flag unusual access — for example, a new device in an unrecognised region — with a verification step sent to your registered mobile number before the session continues.

Data Retention Schedule

We keep account records for as long as your account remains active and for a defined period after closure, as required under applicable Indian financial regulations. Once the retention window closes, records are deleted from live systems and removed from backups in the next scheduled purge cycle.

Who Sees Your Data

Only koko303 personnel with a specific operational need can access your account data — for example, the payments team to resolve a PhonePe query or the compliance desk to process a data request. Access is logged and audited periodically so we can trace any unusual internal activity.

Requesting Changes or Deletion

You have the right to ask us to correct inaccurate details or delete your account data, subject to any retention obligations under local law. Raise the request through our Help Centre or privacy email and we will confirm the outcome in writing within 72 hours of processing.

Your Privacy Policy Questions, Answered

The questions below cover the situations account holders in India ask about most often — from what data we hold to how long we keep it and what you can ask us to change. If your question is not listed here, reach out through the live chat or privacy email and we will respond directly.

We collect your name, email address, mobile number and the payment identifiers linked to UPI, Paytm or PhonePe deposits. We also log device and session data to protect your account from unauthorised access. We do not collect more than we need to operate your account.

We share data only with payment processors — such as UPI rails and Paytm — strictly to clear transactions. We do not sell, rent or trade your personal data with advertisers or unrelated third parties. Any processor we work with is bound by a data-handling agreement.

We retain account records for a defined period after closure, as required under applicable Indian financial regulations. Once that period ends, your data is deleted from live systems and removed from backups during the next scheduled purge. You can ask us for the specific retention timeline.

Yes. Submit a data-access request through the in-account Help Centre or our privacy email, including your registered mobile number. We will compile the records we hold and send them to your registered email address within 72 hours of verifying your identity.

Raise a correction or deletion request via live chat, the Help Centre form, or our privacy email. We will verify your identity first, then make the change or deletion and confirm it in writing. Deletion may be partial where local law requires us to retain certain financial records.

We use session cookies for login continuity, preference cookies for language and deposit-method settings, and aggregate analytics cookies. No advertising cookies are set. You can manage or delete all cookies through your browser or device settings; blocking session cookies will log you out automatically.

Access depends on local law and is available where local law permits. We read your location at the jurisdiction level only — to check eligibility — and do not store that location data beyond the session check. Please verify that access is lawful in your specific state or territory within India.