Privacy Policy

1. The Data Fiduciary behind the platform

For everything the DPDPA describes, Teen Patti My Master is the Data Fiduciary — the entity that decides what is collected and why. We run the Teen Patti My Master real-cash gaming Android app together with the public site at teenpattimaster.lol. The grievance officer's name and the email routes for any data question sit at the foot of this policy.

2. The categories of information we hold

• Account information — the Indian mobile number that anchors your OTP login, the display name visible at tables, and any profile fields you choose to fill in yourself.
• Identity verification material — collected only when withdrawal-tier thresholds trigger the check: PAN, the last four digits of Aadhaar, your linked bank account or UPI handle, plus any proof-of-identity image you upload.
• Gameplay records — the catalogue of baazis played, the chaal-by-chaal stakes, the wins, the losses, and the timestamps of every table session. Held so that history, TDS reporting and collusion detection all work properly.
• Device and technical signals — the Android OS version, the app build number, your anonymised IP, and crash diagnostic logs from the app itself.
• Payment routing data — your UPI handle, a masked form of your bank account, and the transaction reference numbers returned by the payment processor. Full card numbers are never stored on our infrastructure; they remain solely with the processor.
• Support correspondence — the emails you send our support desk and the in-app chat transcripts of any conversation with a support agent.
• Cookies and web analytics — present only on the public website: a session cookie or two plus Google Analytics 4 set with IP anonymisation on. The Android app does not load third-party cookies of any kind.

3. The lawful reasons behind each collection

• Running the gaming platform itself — pairing you with a suitable table, processing each bet, and settling winnings into your wallet.
• Meeting Indian regulatory obligations, including the Income Tax Act, 1961 — most importantly the Section 194BA TDS auto-withholding mechanism.
• Moving rupees through UPI, IMPS and card rails for both deposits and withdrawals.
• Spotting fraud signals, table collusion, and unfair-play patterns; verified breaches may result in restrictions on the offending account.
• Replying to your support tickets and resolving any grievance you escalate to us.
• Improving the platform with aggregated, de-identified analytics — no individual user's behaviour is ever profiled.

4. Who else along the chain ever sees this data

• Payment processors — the UPI rail providers, the banks that settle transactions, and NPCI as the underlying network.
• Identity verification partners — when a withdrawal-tier threshold is crossed, regulated third-party verifiers run the Aadhaar and PAN checks against official sources.
• Government bodies — the Income Tax Department for the quarterly TDS filings, and any law-enforcement agency that arrives with a valid legal request under Indian statute.
• Hosting and cloud providers — the infrastructure partners on whose servers the platform runs, all bound by their own data-handling commitments.
• Web analytics — Google Analytics 4 with IP anonymisation switched on, used only on the public website.

We never sell your personal data — not to brokers, not to research firms, and not to advertising networks for cross-site profiling. That commercial model simply does not exist on this platform.

5. How long each category stays on file

• Account information: for the active life of the wallet plus a five-year tail after closure, which is the record-keeping minimum the Income Tax Act asks of every gaming operator in India.
• Identity verification documents: retained for five years from the date of collection, in line with prevailing anti-money-laundering norms.
• Gameplay records: held for five years from the round date so TDS reconciliation against your PAN can be performed if the Department raises a query.
• Support correspondence: kept for two years from the date the ticket was resolved.
• Anonymised analytics: stored without a hard deadline, but stripped of identifiers — the records cannot be traced back to your person.

6. The rights DPDPA 2023 gives every Indian player

• Right to access — request a copy of the personal data the platform currently holds about you.
• Right to correction — ask us to fix inaccurate or outdated fields on your profile or your records.
• Right to erasure — request deletion, with the caveat that certain records (Income Tax, anti-money-laundering) carry a statutory retention period we cannot override.
• Right to grievance — escalate any complaint to our named grievance officer (details at the foot of this page) and expect a substantive reply within thirty days.
• Right to withdraw consent — where the lawful basis for processing was your consent, you may pull that consent back at any time. Processing required by Indian law continues regardless.
• Right to nominate — name a nominee who can exercise these rights on your behalf if you should die or become incapacitated.

7. How the data is protected

Every byte that moves between your phone and our servers crosses an encrypted channel — TLS 1.2 or higher — and the sensitive fields at rest (identity scans, payment references) sit behind further encryption inside the database. Access controls are scoped so that only the staff who need a record to do their job ever see it. We are not currently certified against any specific information-security framework, and any customer-facing security claim will be refreshed on this page as and when a recognised certification is achieved.

8. Players under eighteen

The platform is strictly for adults — eighteen and above — and we do not knowingly collect any data from minors. If you have grounds to think someone under eighteen has slipped into the platform, please flag it to [email protected] and the account will be closed and the data purged in line with applicable law.

9. Revisions to this policy over time

Indian data law and the platform itself both evolve, and this policy will move alongside them. Anything material will be flagged inside the app and republished here, with the effective date at the top of the page refreshed so you can tell at a glance when the last meaningful update happened.

10. Reaching the grievance officer

• Grievance Officer: Rahul
• Grievance email: [email protected]
• General support: [email protected]
• Response SLA: within 30 days of receipt

Should our resolution leave you dissatisfied, the DPDPA 2023 envisages a further escalation route to the Data Protection Board of India, available to every Indian Data Principal once the Board's procedural framework is fully in force.

Statutes and reference sources

• DPDPA 2023 — full text (IndiaCode)
• MeitY — Ministry of Electronics & IT
• Income Tax Department of India