Privacy Policy

No material change: wording, formatting, dates or contact details only.

Cosmetic change: formatting, typos, or contact details.

20261001_rev01 → 20261017_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 This Policy explains how we collect, receive, store, disclose, share, and use your personal data for the purpose of your participation and consumption of our products and/or services offered by us through our website and/or software application **(collectively, "Platform")** or during any interaction with us, and how you can exercise your privacy rights
 Before using our Platform or availing any of our products and/or services, you are advised to carefully read this Policy. If you do not agree with the terms of this Policy, please do not access this Platform. By visiting and/or using our Platform, you are consenting to process your personal data in the manner as set forth in this Policy.
 **1\. DATA PRIVACY DISCLAIMER**
+The scope of this policy is limited to the product and/or services provided by us within the territory of India and applies to users who request for these products and/or services within the Indian territory.
+The scope of this Policy is limited to the product and/or services provided by us within the territory of India and applies to users who request for these products and/or services within the Indian territory.
 **2\. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU?**
 When you interact with us, we collect different types of information from you based on the type of interaction.
 "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
 "Processing", "Processed", "Process" in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organization, structuring, storage, adaptation, retrieval, use, alignment, or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure, or destruction.
+We endeavor to collect only such personal data that is reasonably necessary to perform our services for you. When you interact with our Platform or otherwise with us, we may collect the following personal data from you directly:
+We endeavour to collect only such personal data that is reasonably necessary to perform our services for you. When you interact with our Platform or otherwise with us, we may collect the following personal data from you directly:
 - 1\. **General Data** - your first name, last name, email, mobile number, address, country, state, gender, age or date of birth, application history and installation data;
+- 2\. **Government Identification Data** - data that enables us to identify you, e.g. your Aadhaar card and PAN card;
+- 2\. **Government Identification Data** - data that enables us to identify you, e.g. your Aadhaar card, PAN card, driving licence and voter ID;
 - 3\. **Technical and Network Activity Data** - data about your device and your usage of our Platform, including your IP address, device ID, user ID, hardware model and version, mobile network information, operating system and other online identifiers, type of browser, browsing history, search history, access time, pages viewed, URLs clicked on, forms submitted, and physical location;
 - 4\. **Authentication** - data required for authentication, such as username, OTP, Captcha and password;
 - 5\. **Financial Data** - your bank details, including account name, account number, IFSC code and credit card (last 4- digit number);
 - 6\. **Employment Data** - data about education qualification, occupation, designation, company name, resume.
 - 7\. **SMS Data** - We collect, transmit and store SMS data from your phone to verify and analyse your financial position, to determine your cash flow, credits, income, and spending pattern. Please note that such data is limited to details of the transactions contained in the SMS. Personal SMS data or sensitive information such as OTP, personal SMSs, account details, etc is filtered out and not stored.
+- 8\. **Transaction Data** - details of products you buy, sell, redeem or have delivered through our business partners on our Platform (such as digital gold and silver), including your orders, holdings and transaction history.
 You can choose not to give us personal data when we ask you for it. If you decide not to give us your personal data, it may restrict our relationship with you.
 **3\. HOW DO WE COLLECT YOUR PERSONAL DATA?**
 **Information you directly provide to us:**
 - Geo-location data through IP addresses;
 - Device information like device id, device model etc. and other unique identifiers;
 - Data collected via the use of cookies.
 **Information we collect from other sources:**
+We may collect or receive data about you from third-party sources and process this data in accordance with this policy. The sources may include, but is not limited to:
+We may collect or receive data about you from third-party sources and process this data in accordance with this Policy. The sources may include, but is not limited to:
 - Publicly accessible sources;
 - Marketing & Advertising vendors;
 - Analytics Providers;
 - Event management agencies;
+- Social media Platforms.
+- Social media Platforms;
+- Business partners whose products you choose to use through our Platform, such as providers of digital gold and silver (see Section 10).
 If you connect your social media account to our Platform, you will share certain personal data from your social media account with us. This may include your name, email address, photo, list of social media contacts, and any other data you make accessible to us.
 **4\. LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA**
 We will collect personal data by lawful and fair means and, where appropriate, with the knowledge of the individual concerned. We only collect and process personal data about you where we have a lawful basis. Lawful basis on which we would process data from you includes:
 - Processing for legitimate uses where processing is necessary in order to provide you with our products and/or services, such as:
 - **(i)** To enforce our terms and conditions;
     **(ii)** To ensure compliance with our legal obligations and to also comply with our obligations towards public authorities;
     **(iii)** To enforce any legal right or claim;
     **(iv)** For responding to a medical emergency involving a threat to your health or life or that of any other individual;
+    **(v)** For taking measures to ensure safety of, or provide assistance or services to any individual any disaster, or any breakdown of public order;
+    **(v)** For taking measures to ensure safety of, or to provide assistance or services to any individual any disaster, or any breakdown of public order;
     **(vi)** For legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention or prevention of fraud;
     **(vii)** As otherwise described to you at the time of collection of your personal data.
     **(viii)** To improve services, refine credit risk evaluation, optimize platform performance, and support research and data analysis in collaboration with IT service providers.
 **5\. HOW DO WE USE YOUR PERSONAL DATA?**
 **To manage our relationship with you.**
 We will use your personal data to:
 - Verify your identity; to help provide our products and/or services and to administer those products and/or services
+- To enable you to use products of our business partners that you choose on our Platform (such as digital gold and silver), including opening and running your account with them and showing your holdings and transactions;
 - To register you on our Platform and/or for the events, seminars, etc.
 - Provision for you to subscribe the premium features of our Platform
+- Communicate with you concerning our service (for example by email, push notifications text messaging, and online messaging channels), so that we communicate news regarding the Platform to you, details about new features and content available on our Platform
+- Communicate with you concerning our service (for example by email, push notifications, text messaging, and online messaging channels), so that we communicate news regarding the Platform to you, details about new features and content available on our Platform
 - To provide multiple cashback rewards & offers to you for our products and/or services
 - For marketing (where you have agreed to this) and for market research purposes, including internal demographic studies, to provide, optimize and personalize our products and/or services and data (where you have agreed to this) about our products and/or services
 - Provide online or offline products and/or services such as contests and employment opportunities
+- Identify you and authenticate your access rights access to our Platform
+- Identify you and authenticate your access rights to our Platform
 - Invite you to provide feedback or surveys or attend events
 - To enhance personalized services and improve credit risk assessments
 - To send you communication, including through WhatsApp business messages, in relation to your use of the Platform and/or Services
 - To respond to your queries and provide you with data when you request it or when we believe our products and/or services may be of interest to you. If we intend to share electronic marketing with you, we will ask for your consent where required and you can opt out at any time
 - Perform analytics, market research and segmentation to understand your preferences, improve our products and/or services and our communications to you.
 - To make platform and its content available and to further optimize & develop it.
 **To achieve other purposes.**
 We shall also use your personal data for legal and regulatory purposes, such as:
 - For our internal and external audit requirements and for information security purposes;
+- To gain insights and feedback on our products and/or services in order to correct or improve them, by analysing data from external sources such as Google, Facebook and Twitter (and others).
+- To gain insights and feedback on our products and/or services in order to correct or improve them, by analysing data from external sources such as Google, Facebook and X (and others).
 **6\. HOW DO WE USE PERSONAL DATA WHEN YOU VISIT OUR OFFICES?**
 When you visit our offices, we process your personal data in accordance with this privacy statement and some specific information regarding the use of visitor data and the potential use of CCTV in our offices is provided in the reception area.
 **7\. HOW DO WE PROTECT YOUR PERSONAL DATA?**
 We implement reasonable technical and organizational measures in relation to the data and personal data that is processed by us. We take reasonable measures to protect all personal data from unauthorized processing or accidental disclosure, alteration, misuse, destruction or loss or unauthorized access and modification that compromises the confidentiality, integrity, and availability of such data.
+While we endeavor to always protect our Platform, operations and data against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet, we cannot guarantee that any data, during transmission or while stored on our systems, will be safe and secure from intrusion by others.
+While we endeavour to always protect our Platform, operations and data against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet, we cannot guarantee that any data, during transmission or while stored on our systems, will be safe and secure from intrusion by others.
 **8\. YOUR RIGHTS IN CONNECTION WITH YOUR PERSONAL DATA**
 We respect your right to access and control your personal data, and we will respond to requests to exercise your rights under applicable laws and, where applicable, will correct, update, or erase your personal data.
 **You have the following rights:**
 - **Right to access data :** At any point, you can contact us for a summary of your personal data we hold about you, the processing activities undertaken with respect to such personal data, the identities of all those persons with whom your personal data has been shared by us along with the description of the personal data so shared, and any other data related to your personal data and its processing.
 - **Right to request correction:** If your personal data is incomplete, inaccurate, misleading, or out of date, you can inform us about the same and your personal data will be corrected, completed, or updated.
 - **Right to request erasure:** If you believe that we should discontinue the use of your personal data, you have the option to request the deletion of your personal data, unless retention is necessary for compliance with any law for the time being in force.
+- **Right of grievance redressal** In case of any grievance, you can also raise a request to alter your consent choices at [dpo@nw18.com.](mailto:dpo@nw18.com)
+- **Right to nominate** In the event of death or incapacity to exercise these rights, you can nominate any other individual to exercise such rights.
+- **Right to withdraw your consent** You can withdraw your consent easily by emailing us on [dpo@nw18.com.](mailto:dpo@nw18.com) The withdrawal of consent previously granted for the processing of personal data does not affect the lawfulness of the processing until the withdrawal. However, opting out will result in cessation of the respective services.
+- **Right of grievance redressal:** In case of any grievance, you can also raise a request to alter your consent choices at [dpo@nw18.com](mailto:dpo@nw18.com).
+- **Right to nominate:** In the event of death or incapacity to exercise these rights, you can nominate any other individual to exercise such rights.
+- **Right to withdraw your consent:** You can withdraw your consent easily by emailing us at [dpo@nw18.com](mailto:dpo@nw18.com). The withdrawal of consent previously granted for the processing of personal data does not affect the lawfulness of the processing until the withdrawal. However, opting out will result in cessation of the respective services. For Digital Gold & Silver and other business partner products, you can also withdraw your consent in \[Settings > Privacy\]. If you withdraw consent given for a partner product, you will no longer be able to use that product through our Platform. Requests about a business partner's own use of your personal data should be made to that partner (see Section 10).
 For exercising any of your rights, you can contact us using [dpo@nw18.com.](mailto:dpo@nw18.com) We will need you to furnish proof of your identity before you can exercise these rights. We may not be able to process any requests made in the event you fail to establish your identity, or if we are unable to authenticate your identity.
 **9\. SHARING/DISCLOSURE OF PERSONAL DATA**
+As far as this is necessary for the purposes set out above, we will share your personal data with the following recipients who either have a need to know and who will process it for us based on our instructions and for no other purpose:
+As far as this is necessary for the purposes set out above, we will share your personal data with the following recipients who either have a need to know and who will process it for us based on our instructions and for no other purpose (except business partners, as explained under "Business partners" below):
 **General Disclosure:**
 We may disclose your personal data will include:
 - Our related companies;
 - Your personal data might also have to be shared in the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
 **External service providers:**
 Occasionally, to provide our products and/or services, it is necessary to collaborate with external service providers. We may use these service providers to assist us with some features or functions of our Platform. These external service providers shall process your personal data on our behalf subject to appropriate safeguards only insofar as it is necessary for them to provide their products and/or services to us. Our prior authorization is required before they are permitted to transfer responsibility for processing personal data to a third party.
+**Business partners:**
+When you choose to use a product offered by a business partner on our Platform, such as a provider of digital gold and silver, we share your personal data with that partner with your consent, as described in Section 10. The partner is named on our Platform before you give your consent. Such partners decide how they use your personal data for their own purposes and are responsible for that use under their own privacy policies.
 **Business Transfers:**
 We provide personal data to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.
 In the event if we merge with or acquired by another company or in case of re-organization or re-structuring of business, we and our affiliates may share your personal data, wholly or in part, with another business entity.
 - To prevent or detect or investigate offences or cyber incidents or for the prosecution or punishment of offences;
 - To raise or defend against legal claims;
 - To protect our users, systems, and products and/or services.
 We only share your personal data with recipients that have an adequate level of data protection by implementing appropriate technical and organizational security measures, or we take measures to ensure that all recipients provide an adequate level of data protection as prescribed by applicable law. We do not sell your personal data to anyone.
+**10\. PERSONAL DATA TRANSFER, STORAGE AND PROCESSING GLOBALLY**
+**10\. BUSINESS PARTNER PRODUCTS**
+**DIGITAL GOLD & SILVER**
+Through our Platform, you can buy, sell and take delivery of digital gold and silver sold by our partners (each, a "Precious Metals Partner"). The Precious Metals Partner for your transactions is named on our Platform before you give your consent. The Precious Metals Partner sells, stores and delivers the metal. We provide the technology to access the Precious Metals Partner's service from your Moneycontrol account. We do not sell, store or deliver the metal, and we do not receive your payments.
+**Data we collect and share with the Precious Metals Partner**
+With your consent, we collect and share with the Precious Metals Partner:
+- 1\. your name, mobile number (verified by OTP), email address, PIN code and Moneycontrol user ID, to open and run your account with the Precious Metals Partner;
+- 2\. your PAN or other identity document, and your name as it appears on it, when the Precious Metals Partner needs it for KYC;
+- 3\. your delivery address, when you request physical delivery;
+- 4\. your bank account holder name, account number and IFSC, so that the Precious Metals Partner can pay your sale proceeds into your account; and
+- 5\. your buy, sell and delivery orders, so that the Precious Metals Partner can carry them out.
+**Data we receive from the Precious Metals Partner**
+The Precious Metals Partner shares with us your gold and silver balance and transaction history. We use this to show your holdings to you on our Platform, to help with your queries and to settle our arrangement with the Precious Metals Partner.
+**Payment data**
+You make payments on the payment page of the Precious Metals Partner's payment gateway. We do not collect or store your card, UPI or net banking details for this service.
+**The Precious Metals Partner's responsibility:** Each Precious Metals Partner decides how it uses your personal data for its own purposes and is responsible for that use under its own privacy policy, which is linked on our Platform before you transact. A Precious Metals Partner may share your personal data with its custodian, trustee, courier and payment partners to provide the service. We require our Precious Metals Partners not to use the personal data they receive from us to send you marketing communications.
+**Retention:** We keep personal data relating to this service while your Digital Gold & Silver access is active, and afterwards only for as long as the law requires or a legal claim may arise.
+**Your rights:** The rights in Section 8 apply. To withdraw your consent for this service, go to \[Settings > Privacy\] or write to [dpo@nw18.com](mailto:dpo@nw18.com). If you withdraw consent, your gold and silver remain with the Precious Metals Partner, and you can access them on that partner's own website or app.
+**11\. PERSONAL DATA TRANSFER, STORAGE AND PROCESSING GLOBALLY**
 We operate globally and may transfer your personal data to our affiliates or third parties in territories outside India for the purposes described in this Policy in accordance with applicable data protection laws, provided that no such restriction is notified by the Government/ appropriate authority.
+**11\. HOW LONG DO WE KEEP YOUR PERSONAL DATA?**
+**12\. HOW LONG DO WE KEEP YOUR PERSONAL DATA?**
 We will retain your personal data which we have collected for as long as we reasonably consider it necessary for achieving the abovementioned purposes and as is permissible under applicable law. This is determined on a case-to-case basis.
 We will delete your personal data whenever you request us to do so. However, we may archive and/or retain your personal data for as long as there are statutory retention obligations or potential legal claims are not, yet time barred.
+**12\. SAFEGUARDING THE PRIVACY OF CHILDREN**
+**13\. SAFEGUARDING THE PRIVACY OF CHILDREN**
+We do not knowingly collect or solicit personal data from minors. Our products and/or services are not designed for any person who is under 18 years of age, and we do not knowingly permit such persons to register for products and/ or services or share data through any of the web forms without verifiable consent from minors' parents or lawful guardians. Further, we do not undertake tracking or behavioral monitoring of children or targeted advertising directed at children.
+We do not knowingly collect or solicit personal data from minors. Our products and/or services are not designed for any person who is under 18 years of age, and we do not knowingly permit such persons to register for products and/ or services or share data through any of the web forms without verifiable consent from minors' parents or lawful guardians. Further, we do not undertake tracking or behavioural monitoring of children or targeted advertising directed at children. Digital Gold & Silver and other Business partner products on our Platform are available only to users aged 18 years or above.
 If we learn that we have collected personal data from a minor without verified parental consent, we will erase such personal data.
 If you believe that a child under 18 years may have provided us their personal data, please contact us on [dpo@nw18.com.](mailto:dpo@nw18.com)
+**13\. CONTACT INFORMATION**
+**14\. CONTACT INFORMATION**
 If you have questions or comments regarding this Policy or want to exercise any of your rights or express your grievances regarding the processing of your personal data, please contact us using the contact details given below:
 **Network18 Media & Investments Limited**
+Apurv Narula
+Mr. Apurv Narula
 [dpo@nw18.com.](mailto:dpo@nw18.com)
 If you are not satisfied with the resolution provided you may log your complaint with the Data Protection Board of India following the procedure prescribed by them.
+**14\. CHANGES TO THIS PRIVACY POLICY**
+**15\. CHANGES TO THIS PRIVACY POLICY**
 We reserve the right to change this Policy at our sole discretion at any time. Any material changes to this Policy will be posted on this page. We encourage you to review this Policy regularly for such changes. The updated Privacy Policy will take effect as soon as it has been updated.
+This Policy was last updated as of 24th December 2024.
+This Policy was last updated as of 14th October 2026.