Reference

How xm360 Handles Your Personal Data

At xm360, we are clear about what personal data we collect when you open an account, how we store it, and what rights you hold over it.

Account Data ProtectionCookie ControlsUPI & Paytm Transaction PrivacyData Retention PolicyRight to Request Deletion

Explore Lobby Read FAQ

What Data We Collect and Why

xm360 Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you open an account on xm360, we collect the details you submit during registration — your name, email address, mobile number, and date of birth — alongside payment identifiers such as your UPI handle, Paytm wallet reference, or PhonePe linked number, solely to process deposits

1
and withdrawals. We also log device identifiers, IP addresses and session activity to keep your account secure and detect unusual access patterns. We do not sell your personal data to third parties. Any sharing that does occur is limited to payment processors, identity verification partners, and
2
fraud-prevention services who are contractually bound to handle your data under the same standards we apply. Your eligibility to use xm360 and the data-processing activities associated with your account are subject to local law in your region.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Email Data Request Send a written data access, correction or deletion request to our privacy team via email. We acknowledge all requests within 48 hours and aim to resolve them within 30 days of receipt.

Live Chat Support Start a live chat session directly from your xm360 account dashboard to ask questions about what data we hold, how your UPI or PhonePe details are stored, or to escalate a privacy concern.

In-App Help Centre The Help Centre inside your account contains step-by-step instructions for submitting a formal data request, updating your registered mobile number, or withdrawing consent for marketing communications.

DATA HANDLING PRACTICES

Six Ways We Protect Your Account Data

From the moment your account is created, multiple layers of technical and procedural controls work together to keep your information accurate, accessible only to you, and retained only for as long as…

Encrypted Data Storage

All personal data — including your registered UPI details and identity documents — is stored using AES-256 encryption at rest. Access is restricted to authorised personnel who require it to operate or audit the platform.

Cookie Controls

We use first-party and third-party cookies for session management, fraud detection and analytics. You can review and adjust your cookie preferences at any time from the privacy settings panel inside your account.

Payment Data Isolation

Your Paytm wallet ID, UPI handle and PhonePe reference are handled exclusively by our PCI-compliant payment processor. We do not store raw card or wallet credentials on xm360 servers.

Account Security Alerts

We send an immediate notification to your registered mobile number and email whenever a new device logs in to your account, so you can spot and report unauthorised access without delay.

Retention Periods

We retain your account data for the period required by applicable financial and legal regulations. Once that period expires and your account is closed, personal identifiers are deleted or anonymised from our active systems.

Right to Correct or Delete

You can request a copy of the data we hold, ask us to correct inaccurate details, or request deletion of your account and associated records by contacting our privacy team through any of the channels listed on this page.

Your Privacy Questions Answered

The answers below cover the data rights questions we hear most often from account holders in India. If your question is not here, reach out via live chat or email and our privacy team will respond within two business days.

We collect your name, email address, mobile number, date of birth, and payment identifiers such as your UPI handle or Paytm reference. Device identifiers and session logs are also recorded for security and fraud-detection purposes.

Raw wallet credentials are not stored on our servers. Payment identifiers are passed to and held by our PCI-compliant processor. We only retain a transaction reference number to match your account deposit and withdrawal history.

Yes. Send a data access request to our privacy email or raise it through the Help Centre inside your account. We will compile and deliver your data summary within 30 days of verifying your identity.

Submit a deletion request via email or live chat. We will close your account, anonymise personal identifiers in our active systems, and confirm completion. Note that transaction records required by law are retained for the legally mandated period.

We share data only with identity verification providers, fraud-prevention services, and payment processors — each bound by data-protection agreements. We do not sell personal data to advertisers or unrelated third parties under any circumstances.

Some fields, like your email address, can be updated directly from account settings. For identity document corrections, contact our support team through live chat or email with the corrected details and they will update your records.

We retain financial transaction records for the period required by applicable Indian financial regulations. Once the mandatory retention period ends, personal identifiers are deleted or anonymised from our systems and are no longer accessible.

How xm360 Handles Your Personal Data

How to Reach Us About Your Data

Six Ways We Protect Your Account Data

Encrypted Data Storage

Cookie Controls

Payment Data Isolation

Account Security Alerts

Retention Periods

Right to Correct or Delete

Your Privacy Questions Answered

01 What personal data does xm360 collect when I open an account?

02 Is my UPI or PhonePe payment data stored on xm360 servers?

03 Can I request a copy of all the data xm360 holds about me?

04 How do I ask xm360 to delete my account and personal data?

05 Does xm360 share my data with third parties?

06 How can I update or correct incorrect information in my account?

07 How long does xm360 keep my data after I close my account?

Related Pages