Reference

Your Rights and Our Policy Commitments

y90 operates under a defined legal framework that governs how your account, data, and activity are managed — access to our services depends on local law and is…

Account TermsData PolicyJurisdiction RulesCookie PracticesContact Rights

Browse lobby Read FAQ

How Our Legal Terms Apply to Your Account

y90 Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you open an account on y90, you enter into a direct agreement with us that covers account eligibility, data retention, and the handling of funds processed through UPI, Paytm, and PhonePe. Our terms are governed by the laws applicable in the jurisdiction where your account

1
is registered — if local law does not permit access to our services, these terms do not create any entitlement. We retain transaction records in line with statutory requirements, and your account data is stored on encrypted servers. Any changes to your personal data, payment details,
2
or account status go through our verified account-management process. We will notify you of material changes to these terms by email or in-app message before they take effect.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

LEGAL CONTACT PATHS

How to Reach Us on a Legal or Policy Matter

If you have a question about your rights, a data request, or need clarification on how our terms apply to your account, our policy support team…

DATA AND SECURITY PRACTICES

How We Handle Your Data and Keep Your Account Secure

Security and transparency sit at the centre of how y90 manages accounts. We use industry-standard encryption on all stored data and enforce two-factor authentication for logins and withdrawal requests.

Data Collection

We collect account registration details, transaction records for UPI, Paytm and PhonePe payments, and device metadata. Nothing beyond what is needed to operate your account and meet statutory obligations is retained.

Cookie Practices

Our site uses session cookies for account login and analytics cookies to understand how pages are used. You can manage cookie preferences from the settings panel in your account dashboard at any time.

Account Security

Every login is protected by password hashing and optional two-factor authentication via SMS. Withdrawal requests above a threshold trigger an additional identity verification step before funds are released.

Data Retention

Account data is retained for the period required by applicable law. Once that period lapses and your account is closed, we delete personal data from active systems within 30 days and from backup archives within 90 days.

Your Access Rights

You may request a copy of the data we hold about you, ask us to correct inaccurate records, or request deletion where law permits. Submit these requests through our email support channel with your account reference.

Complaints and Escalation

If a policy concern is not resolved to your satisfaction through our support team, you may escalate it in writing to our compliance officer. We will respond to escalations within 14 calendar days with a documented decision.

Common Questions About Your Legal Rights on y90

These questions cover how our terms apply to Indian accounts, what data rights you hold, and how to act on them. If your question is not here, our support team can provide a written answer within one business day.

y90 is operated by a company incorporated in a regulated jurisdiction. The law governing your account depends on where you reside — access to our services is only available where local law permits, and Indian law applies to residents accessing from India.

We collect your name, email address, phone number, date of birth for age verification, and payment identifiers associated with UPI, Paytm or PhonePe transactions. Device and session data are also logged for security purposes.

Send a written request to our legal support email address with your account ID and a description of the data you need. We will compile and deliver a structured data export within seven business days of verifying your identity.

Yes. Submit a deletion request through our email channel. We close the account immediately and remove personal data from active systems within 30 days. Statutory transaction records are retained for the period required by law before permanent deletion.

We use session cookies for authentication and optional analytics cookies. You can disable analytics cookies from the cookie settings panel in your account dashboard — disabling them does not affect your ability to log in or use your account.

Transaction records linked to UPI, Paytm and PhonePe are kept for the period mandated by applicable financial regulations. After that retention window closes, they are removed from all our systems in the same deletion cycle as your account data.

Start with our live chat or email support team. If the matter is not resolved, escalate in writing to our compliance officer — include your account reference and a summary of the issue. We respond to all escalations within 14 calendar days.

Your Rights and Our Policy Commitments

How to Reach Us on a Legal or Policy Matter

How We Handle Your Data and Keep Your Account Secure

Data Collection

Cookie Practices

Account Security

Data Retention

Your Access Rights

Complaints and Escalation

Common Questions About Your Legal Rights on y90

01 Where is y90 legally incorporated and which law governs my account?

02 What personal data does y90 collect when I open an account?

03 How do I request a copy of my personal data?

04 Can I ask y90 to delete my account and all associated data?

05 How does y90 use cookies and can I turn them off?

06 What happens to my UPI or Paytm transaction records if I close my account?

07 How do I raise a formal complaint about a legal or policy matter?

Related Pages