Reference

How galisatta Handles Your Personal Data

At galisatta, we treat your personal data as yours — collected only for what we need, stored securely, and never sold to third parties.

No data sold to advertisersEncrypted account storageIndia-region data handlingRight to access your dataClear retention periods

Browse the lobby Read FAQ

What This Privacy Policy Covers

galisatta Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

This policy applies to every interaction you have with galisatta — from the moment you open an account to each session you spend in our lobby. We collect your name, email address, phone number, and payment details (including UPI handles, Paytm wallet IDs, and PhonePe-linked numbers)

1
solely to operate your account, process transactions, and meet verification requirements. Access to our platform and the processing of your data depend on local law and are available where local law permits. We do not process data for purposes beyond what is stated here, and we
2
do not share identifiable information with unrelated commercial parties. If you transact via UPI, Paytm, or PhonePe, those payment providers hold their own data under their respective policies.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

REACH OUR PRIVACY TEAM

Contact Us About Your Privacy

If you have questions about how your data is used, want to request a copy of your records, or need to raise a concern about data…

DATA SECURITY AND PRACTICES

How We Protect and Manage Your Account Data

Security at galisatta is built around encryption, access controls, and defined retention windows — not vague promises.

End-to-End Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. This covers payment instructions sent via UPI, Paytm, and PhonePe, as well as login credentials and session tokens.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand how our lobby is navigated. You can review and adjust cookie preferences through the settings panel inside your account at any time.

Account Security Controls

Your account is protected by password hashing and optional two-factor authentication via your registered mobile number. We never store raw passwords, and login attempts from new devices trigger a verification step automatically.

Data Retention Periods

We retain transaction records and identity documents for the period required under Indian financial regulations. Account data is deleted within 90 days of a verified account-closure request, unless a legal hold applies.

Who Has Access

Internally, only staff whose roles require it — account verification, fraud review, finance — can access identifiable user data. All such staff operate under confidentiality agreements, and access is logged and audited regularly.

Requesting Changes to Your Data

You can request correction of inaccurate data directly from your account profile page. For deletion or full-export requests, contact the privacy team via email or live chat; we process verified requests within 30 days.

Your Privacy Rights — Common Questions

These questions cover the data rights that matter most to your account — what we hold, how long we keep it, and how to act on your preferences. If your question is not covered here, our privacy team is reachable via live chat or email.

We collect your full name, email address, mobile number, date of birth, and payment identifiers such as your UPI handle or Paytm number. We also log device type and IP address for security and fraud-prevention purposes.

We share data only with payment processors (UPI, Paytm, PhonePe) to complete transactions and with identity-verification services required by regulation. We do not sell or rent your data to advertisers or unrelated commercial entities.

Submit a subject-access request through the privacy email listed on this page or via live chat. We verify your identity and deliver a structured data export within 30 days, in line with applicable Indian data-protection requirements.

Yes. If you close your account and submit a verified deletion request, we remove identifiable records within 90 days. Some transaction records may be retained longer where Indian financial regulations require it.

Payment identifiers are transmitted over TLS-encrypted connections and are never stored in plain text. PhonePe and Paytm transactions are handled by those providers' own secure infrastructure; we store only a reference token, not the full account number.

Session cookies keep your account active during play. Analytics cookies help us understand which lobby sections are used most so we can improve them. You can turn off non-essential cookies from the settings panel inside your account profile.

This policy applies to all accounts where access is available under local law. Processing of your data is subject to applicable Indian data-protection legislation, and your rights under those laws are fully recognised by our privacy team.

How galisatta Handles Your Personal Data

Contact Us About Your Privacy

How We Protect and Manage Your Account Data

End-to-End Encryption

Cookie Usage

Account Security Controls

Data Retention Periods

Who Has Access

Requesting Changes to Your Data

Your Privacy Rights — Common Questions

01 What personal data does galisatta collect when I open an account?

02 Does galisatta share my data with third parties?

03 How can I access a copy of the data galisatta holds about me?

04 Can I ask galisatta to delete my personal data?

05 How does galisatta protect my payment details like UPI and PhonePe information?

06 What are cookies used for on galisatta and how do I control them?

07 Does galisatta's privacy policy apply to me if I am in India?

Related Pages