WinZO Privacy Policy: Your Data, Your Rights – A Commitment to Secure & Safe Gaming in India
Our Promise of Trust
In the digital age, data is the currency of trust. At WinZO, India’s leading skill-based gaming platform, we recognize that your confidence in us is built on the bedrock of data security. Following the enforcement of the Digital Personal Data Protection (DPDP) Act, 2023, and the subsequent regulatory clarifications of February 2026, we have fortified our privacy framework to ensure that your personal information is not just processed, but protected with the highest level of integrity.
This Privacy Policy serves as a binding document between WinZO and its users. It outlines our commitment to transparency, explaining exactly how we handle the data you entrust to us as you engage in skill-based gaming, tournaments, and community interactions.
1. The Scope of This Privacy Policy
This policy applies to all users who access the WinZO application, website, or related services. By using WinZO, you consent to the data practices described herein. However, “consent” for us is not a one-time checkbox; it is an ongoing dialogue. In line with the February 2026 update to the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, we ensure that consent is specific, informed, and revocable at any time.
2. What Information We Collect
We adhere to the principle of “Data Minimization”—collecting only what is necessary to provide a seamless and secure gaming experience.
- Personal Identifiable Information (PII): We collect your name, email address, mobile number, and date of birth solely for account verification, age confirmation (ensuring users are 18+), and compliance with KYC (Know Your Customer) norms required for financial transactions.
- User-Generated Content: This includes your profile picture, gameplay statistics, chat messages in public forums, and contest entries. We monitor this data to ensure community guidelines are upheld and to prevent toxic behavior.
- Financial Data: To facilitate deposits and withdrawals, we process UPI IDs, bank account details, and transaction histories. Critically, WinZO uses PCI-DSS compliant payment gateways. We never store your actual card numbers or UPI PINs on our primary servers.
- Technical & Usage Data: We collect device identifiers, IP addresses, network carrier, and in-app behavior (e.g., time spent on a game, latency) to optimize performance, debug issues, and detect the use of unauthorized third-party tools or bots.
- Sensitive Personal Data: In specific scenarios (such as high-value tournament wins), we may collect government-issued ID proofs (PAN, Aadhaar) strictly for tax compliance and anti-money laundering (AML) purposes. This data is encrypted at rest and accessed only by authorized compliance officers.
3. How We Use Your Data
We use your data to deliver, improve, and secure the WinZO platform. Our processing activities are always aligned with legitimate business interests and legal obligations:
- Service Delivery: To authenticate your identity, process your deposits and withdrawals, and ensure fair matching of players in tournaments.
- Safety & Security: To detect fraudulent activity, prevent collusion, and enforce our terms of service against cheating. Our AI-driven fraud detection systems analyze gameplay patterns in real-time.
- Personalization: To recommend games you might enjoy based on your skill level and past activity.
- Communication: To send you transactional emails (withdrawal confirmations, OTPs) and, with your explicit consent, promotional offers.
4. Data Sharing and Disclosure
We do not sell your personal data. In the spirit of the February 2026 guidelines emphasizing “Accountability,” we maintain a strict list of third-party engagements:
- Service Providers: We partner with cloud hosting providers, payment processors, and customer support platforms. These entities are bound by strict data processing agreements that prohibit them from using your data for any purpose other than assisting WinZO.
- Law Enforcement: We cooperate with government agencies and law enforcement where required by law. Any disclosure is made only upon receipt of a valid legal order.
- Corporate Changes: In the event of a merger or acquisition, your data will be transferred with the same level of protection as outlined in this policy.
5. Data Retention and Deletion
You have the right to be forgotten. Under the DPDP Act, 2023, we retain your data only as long as necessary:
- Active Accounts: Data is retained for the duration of your active account status plus a short period to manage any pending disputes or transactions.
- Inactive Accounts: If your account remains inactive for 36 months, we will anonymize your personal data, rendering it irrecoverable, to reduce security risks.
- User Requests: You may request data deletion or portability at any time via the “Privacy Dashboard” in your app settings.
6. Your Rights (Updated Feb 2026)
With the full implementation of the DPDP Act, your rights have expanded. You have the right to:
- Confirmation and Access: Know what data we hold about you.
- Correction: Rectify inaccurate or incomplete data.
- Erasure: Request the deletion of your data (subject to legal retention requirements).
- Grievance Redressal: Contact our Data Protection Officer (DPO) if you feel your data has been mishandled. We guarantee a resolution timeline of 30 days as mandated by law.
7. Security Measures
Security is not a feature; it is a culture at WinZO. We employ:
- TLS 1.3 Encryption: All data transmitted between your device and our servers is encrypted to prevent man-in-the-middle attacks.
- Multi-Factor Authentication (MFA): We encourage all users to enable MFA for withdrawal requests.
- Regular Audits: Our infrastructure undergoes periodic penetration testing and vulnerability assessments by third-party cybersecurity firms.
Your privacy is paramount. As skill gaming evolves and regulations mature, WinZO remains dedicated to maintaining the highest standards of data ethics. By combining cutting-edge security with absolute transparency, we ensure that your focus remains on what matters most: playing, winning, and enjoying skill-based gaming in a safe environment.