Reference

How o67 Handles Your Personal Data

At o67, we are committed to being clear about what personal data we collect from your account, how we use it, and the choices you have over it.

Data You ControlTransparent CollectionAccount-Level SecurityIndia-Specific ScopeYour Right to Erasure
o67 How o67 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Data Protection Team

If you have a question about how we process your data, want to request a copy of the information we hold, or wish to raise a concern, our dedicated privacy team is…

Email Our Privacy Team Send your data request or privacy concern directly to our dedicated address. Include your registered account email so we can locate your record quickly and confirm your identity before processing any request.
Live Chat Support Our live chat window on o67.net connects you to a support agent who can log your privacy request and escalate it to the data team. Available seven days a week during published support hours for India accounts.
Account Settings Portal Certain data choices — marketing preferences, cookie consent, and communication opt-outs — can be managed directly inside your account settings without contacting support, giving you immediate control over those specific preferences.
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

Our data handling practices are built around keeping your account information accurate, accessible to you, and protected from unauthorised access.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to understand how pages on o67.net are used. You can adjust non-essential cookie preferences at any time through the cookie banner or your browser settings.

Account Security Measures

Passwords are stored as salted hashes — never in plain text. We enforce secure HTTPS connections across every page and require identity verification before any sensitive account change, including withdrawal address updates, is processed.

Data Retention Schedule

Account identity records are held for the duration your account is active, plus any period required by applicable law. Session and device logs rotate on a 90-day cycle. You may request deletion of non-mandatory records at any time.

Third-Party Data Sharing

We share data only with partners directly involved in running your account — payment processors for UPI, Paytm, and PhonePe transactions, identity verification services, and fraud-prevention providers bound by strict data agreements.

Your Right to Access

You may request a full export of the personal data we hold on your account. We will prepare and deliver that export within 30 days of verifying your identity. Requests can be submitted via email or through the live chat channel.

Requesting Corrections or Erasure

If any data we hold is inaccurate, contact our privacy team to have it corrected. Where erasure is permitted under applicable law, we will delete the relevant records and confirm the action to you in writing within the response window.

Common Privacy Questions About o67 Accounts

The questions below cover the data rights and privacy practices that India account holders ask about most. If your question is not addressed here, reach our privacy team directly through live chat or email at any time.

We collect your name, email address, date of birth, contact number, and payment details linked to your chosen method — UPI, Paytm, or PhonePe. Device identifiers and login session data are also recorded to protect your account from unauthorised access.

We share your data only with service partners essential to running your account — payment processors, identity verification providers, and fraud-prevention services. All partners are contractually bound to use your data solely for their assigned function and nothing else.

Account identity records are retained while your account is active and for any legally required period after closure. Session logs are purged on a 90-day rolling cycle. You can request deletion of non-mandatory records by contacting the privacy team directly.

Send a data access request to our privacy team by email or live chat, including your registered account email. After we verify your identity, we will prepare and deliver a full data export within 30 days of receiving a confirmed request.

Yes, where applicable law permits erasure, we will delete the relevant records and confirm the action to you in writing. Some data — such as transaction records required by law — cannot be erased before the legally mandated retention period expires.

We store passwords as salted hashes, enforce HTTPS on every page, and require identity confirmation before processing sensitive account changes. Access to account data within our systems is restricted to authorised personnel only, with activity audit logs maintained.

Contact the privacy team via email or live chat with the details you need corrected. For minor changes like contact number or email, your account settings panel may allow direct edits. Corrections to identity documents require submission through our support channel.