Last updated: September 2026
PaisaGames is a rewards-based digital advertising platform operating on a cost-per-action model: advertisers pay us a fee when a user completes their task — an app install, a survey, a video, a level in their game — and we share that fee with the user as a reward. We accept no funds from users. There is no deposit, entry fee, stake, wager or purchase anywhere on the Platform, and nothing you hold is ever placed at risk on an outcome. Money moves in one direction only: advertiser → us → you. We are not a lottery, betting, gambling or real-money gaming service.
Your privacy matters to us. This Policy explains what personal data we collect, why, how we protect it, and the rights you have under India's Digital Personal Data Protection Act, 2023. It describes what the Platform actually does — including the things people most want to know: what we keep after an identity check, what we send to an offer network, and what survives when you delete your account.
This Privacy Policy explains how PaisaGames ("we", "us", "our") collects, uses, discloses, stores, and protects your personal data when you use our website or our Android and iOS applications (together, the "Platform"). We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and process your data in accordance with the DPDP Act, the Information Technology Act, 2000, and rules made thereunder. By using the Platform, you consent to the practices described here.
(a) Account data you give us: your name, email address, password (stored only as a one-way bcrypt hash, never in readable form), mobile number, chosen language, and the referral code of anyone who referred you. (b) If you sign in with Google, Facebook or Apple: the name, email address and profile picture that provider releases to us — we never receive your password for those accounts. (c) Verification data: see the KYC section below, which sets out exactly what is kept and what is not. (d) Payout data: the UPI ID or email address you ask us to pay to, and — where the payout method supports it — the name the payment network returns for it. (e) Data collected automatically: IP address, the country derived from it, a device identifier, browser and operating-system details, the pages and offers you open, offer clicks and completions, reward and withdrawal history, and support or dispute messages you send us. (f) Data from partners: offer and advertiser networks tell us which tasks you completed; IP-reputation providers return a risk assessment of the network you connect from. Your identity is verified by our own team only; no third party is involved.
We process your data, on the basis of your consent and/or legitimate uses permitted by law, to: create and operate your account; verify your identity and age (KYC); credit Rewards and process withdrawals; detect, prevent, and investigate fraud, abuse, and security incidents; decide your withdrawal limits; show and personalise offers; provide support and handle disputes; send service and (with consent) marketing communications; comply with legal, tax, and regulatory obligations; and improve and secure the Platform.
Where processing is based on consent, you may withdraw it at any time by contacting privacy@paisagames.com or using in-app controls. Withdrawing consent does not affect the lawfulness of prior processing and may limit your ability to use certain features — for example, you cannot withdraw money without completing KYC, because that verification is a legal requirement rather than a preference. For users below 18, the Platform is not intended for use and we do not knowingly process their data.
KYC is mandatory before your first withdrawal and is required under applicable anti-money-laundering and regulatory norms: until your identity is verified and your account approved, you may earn Rewards but not withdraw them. Verification is performed BY OUR OWN TEAM ONLY. We do not use any third-party identity-verification provider, and none of your details are shared with any external service for verification purposes. You enter them yourself and a member of our team reviews them before your account is approved. We deliberately retain the minimum needed to carry out and evidence that review. Specifically: EMAIL is confirmed by a one-time code sent via Amazon SES and verified locally; only the verified address is kept. MOBILE is the number you provide; a one-time code is sent via 2factor.in for verification, and the verified number is recorded. AADHAAR — we store only the LAST FOUR DIGITS and the name you state; we do not store your full Aadhaar number or a copy of the Aadhaar document. PAN — we store only the LAST FOUR CHARACTERS and the name you state. Bank account and UPI details are not collected as part of identity verification — see "Personal Data We Collect" above for how your payout destination is handled separately, at the time you request a withdrawal.
To protect the Platform, its advertisers, and honest users, we collect and analyse: a device identifier and how many accounts share it, your IP address and the country behind it, whether the connection is a VPN, proxy, TOR exit or hosting/datacentre address, a network threat score, whether the app reports a rooted or emulated device, and behavioural and velocity patterns such as how quickly an offer was completed or how many withdrawals were requested in a day. VPN, proxy and threat assessments come from specialist IP-reputation providers, which receive your IP address for that purpose and nothing else. This processing is necessary to prevent fraud, multi-accounting, and abuse, and to keep payouts legitimate.
Automated systems score risk and detect fraud, and may hold a withdrawal for review, limit an account, or refuse a registration. Separately, a withdrawal that our own rules have already flagged for HUMAN review may be sent to an AI model, operated by a specialist AI provider under contract, to produce a written second opinion for the administrator who will decide it. What is sent is a bundle of risk signals only: the withdrawal amount and method, account age, whether KYC is verified, prior withdrawal count, how many accounts share the device, IP address and country, the VPN/proxy/root/emulator flags, and our own risk score and reasons. Your name, email address, mobile number, KYC data, and payout destination are NOT sent. The AI never approves, blocks, or releases a payout — it is advisory, a person decides, and if the model is unavailable the review simply proceeds without it. If an automated system affects your account, you may ask for a human to review it by writing to support@paisagames.com, and we will explain the outcome to the extent that doing so does not compromise our fraud defences.
We run no third-party analytics, no advertising pixels, and no cross-site tracking of our own. The cookies we set are: a session cookie that keeps you signed in and its matching security (CSRF) token; a cookie recording your cookie-banner choice; your language preference; a referral cookie that remembers who referred you so they can be credited when you register; a pre-launch access cookie while the site is in private preview; and small preference flags that remember, for example, that you dismissed a banner. Separately, when you open an offer, the advertiser or offerwall network may set its own cookies to confirm you completed it — those are controlled by that third party, and blocking them can mean the advertiser refuses to pay for your completion. You can manage non-essential cookies through our cookie banner and your browser settings. See our Cookie Policy for details.
We do not sell your personal data, and we do not share it for third-party advertising. We share the minimum necessary with: (a) offer and advertiser networks — when you open an offer we pass a PSEUDONYMOUS account identifier so the network can tell us which account to credit; we do not send them your name, email address, phone number, or KYC data; (b) regulated payment and payout providers (Razorpay for UPI payouts), which receive the payout destination and the amount for the method you chose; (c) Amazon SES, our email provider, which receives your email address and one-time verification codes, and your email address for transactional and service messages; (d) 2factor.in, our SMS provider, which receives your verified phone number and one-time verification codes for SMS-based identity verification; (e) the IP-reputation and AI providers described in the two sections above; (f) our hosting, database and security providers, which process data on our instructions under contract; and (g) courts, regulators, tax authorities, or law-enforcement agencies where we are legally required to, and advertisers or payment partners where we must report fraud. Your identity verification takes place entirely within our team — no third party is involved in checking your Aadhaar, PAN, or other identity details. A provider is only involved where you actually use the feature it powers.
The Platform runs on cloud hosting and its database is operated by our hosting provider, so some processing takes place on servers outside India, and several of the providers named above operate globally. Where data leaves India, we transfer it only to providers contractually bound to protect it, and only in compliance with applicable law and any restriction notified by the Government of India. Your KYC details are reviewed by our own team and are not sent to any identity-verification provider, in India or elsewhere.
We retain personal data only as long as necessary for the purposes above or as required by law. Financial and KYC records may be retained for up to eight (8) years to meet tax and anti-money-laundering obligations. Fraud-related identifiers — such as blocked email addresses and device records — are retained to stop the same person simply re-registering. Ordinary activity data is retained while your account is open, and afterwards only for as long as is needed to close out a pending payout, dispute, or investigation.
You can delete your account at any time from Profile in the app, or by emailing support@paisagames.com if you can no longer sign in. Withdraw your balance first: an unwithdrawn balance is forfeited on deletion and cannot be restored. Deletion removes your account record and the data attached to it — profile, credentials, balances, earnings and offer history, referrals, saved payout destinations, notifications and sessions. Two things deliberately remain. First, records we are legally required to keep, described in the retention section above, held in restricted storage and never used to contact you or to advertise. Second, a CLOSURE RECORD of the deleted account — the email address, name, mobile number, country, the balances and KYC status at the moment of deletion, and the date — together with a block on that email address. This applies to every deletion, not only to accounts closed for fraud, and we would rather say so plainly than let you discover it later. The block is what makes deletion stick: without it, signing in again with Google, Facebook or Apple would silently create a fresh account. The closure record is what lets our support team help if the deletion was a mistake — they can lift the block so you can register again. It is used for nothing else. If you want the closure record itself erased, write to privacy@paisagames.com and we will delete it unless a legal retention duty applies.
We apply industry-standard safeguards: TLS encryption in transit, encryption of sensitive data at rest, one-way hashing of passwords and one-time codes, access control on the principle of least privilege, a separate administrator login with mandatory two-factor authentication, rate limiting, audit logging, and the deliberate practice of never storing full Aadhaar or PAN numbers — data we do not hold cannot be leaked. No method of transmission or storage is completely secure; you remain responsible for safeguarding your own credentials and for never sharing a one-time code with anyone, including anyone claiming to be from PaisaGames.
Subject to the DPDP Act, you have the right to: (a) access a summary of your personal data and how it is processed; (b) correct, complete, or update your data; (c) erase your data where it is no longer necessary; (d) nominate another person to exercise your rights in the event of your death or incapacity; and (e) grievance redressal. To exercise these rights, email privacy@paisagames.com from your registered address. We may need to verify your identity before acting, and we will respond within the timelines set out below.
Section 15 of the DPDP Act places duties on you as well. You must not impersonate another person when providing data; must not suppress material information when providing data for any document, identity proof, or address proof issued by the State; must not register a false or frivolous grievance or complaint; and must furnish only information that is verifiably authentic when exercising your right to correction or erasure. Breach of these duties is punishable with a penalty of up to ₹10,000 under the Act.
If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal, in the form and within the time required by the DPDP Act and rules made under it. Our notice will describe the nature and extent of the breach, its likely consequences, the measures we have taken to mitigate risk, and what you can do to protect yourself. We maintain internal logging and monitoring specifically so that a breach can be identified and reported within statutory timelines.
For privacy questions, requests, or complaints, contact our Grievance Officer at grievance@paisagames.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days, in line with applicable law. The Grievance Officer's designation and contact details are published on our Terms of Service page. If you are not satisfied with our response, or if we do not respond within the stated period, you have the right under section 13 of the DPDP Act to complain to the Data Protection Board of India. Exhausting our grievance process first is a precondition to approaching the Board.
Section 5(3) of the DPDP Act requires this notice to be available in English and in the languages listed in the Eighth Schedule to the Constitution of India. The Platform interface is available in several of those languages, and you can switch using the language selector. This notice itself is currently published in English. If you would prefer it in any Eighth Schedule language, write to privacy@paisagames.com and we will provide it in that language at no cost; we are also working to publish all of them on this page.
Our Android and iOS apps collect the same data described above, on the same basis, regardless of which features are available on a given platform. The Android app mirrors the website, including Offer browsing; the iOS app is narrower by design — it covers account management, KYC, balance tracking and withdrawal, and does not itself list Offers, to comply with Apple's App Store guidelines (see the Terms of Service for detail). This does not change what data either app collects. Both apps request only these device permissions: internet and network access, permission to show notifications, and vibration for those notifications. They do not request your location, contacts, photos, microphone, files, or call logs, they do not read an advertising identifier, and they do not track you across other apps or websites. Where the app can tell that a device is rooted or emulated, that signal is used solely for fraud prevention as described above. Your use of the app is also subject to the rules of the store you installed it from.
With your consent, we may send promotional messages by email or in-app notification. Every marketing message includes a way to opt out, and you can unsubscribe at any time. We will continue to send essential service and transactional messages — one-time codes, withdrawal and KYC updates, security alerts — regardless of your marketing preferences, because they are needed to operate your account.
The Platform is intended only for individuals aged 18 and above, and we do not knowingly process the personal data of a child. Section 9 of the DPDP Act prohibits processing that is likely to cause any detrimental effect on a child's well-being, and prohibits tracking, behavioural monitoring, and targeted advertising directed at children — none of which we undertake. Age is confirmed at registration and again at KYC before any withdrawal. If we learn that a person below 18 has registered, we will suspend the account and delete the associated data.
Offers may direct you to third-party websites and apps with their own privacy practices. Once you leave the Platform, that third party — not us — decides what it collects and how it uses it. We are not responsible for those practices and encourage you to read their policies before sharing information with them.
We may update this Policy from time to time, including when we add or change a category of provider described above. Material changes will be notified via the Platform or email at least 7 days before they take effect. Continued use after the effective date constitutes acceptance. If you want to know the identity of a specific provider that processes your data, write to privacy@paisagames.com and we will tell you.
PaisaGames — Data Protection Team. Email: privacy@paisagames.com. Grievance Officer: grievance@paisagames.com. The Grievance Officer's designation and further operator details are published on the Terms of Service page.