Digital Personal Data Protection (DPDP) Notice

Privacy and information security are fundamental to the way MTMPay designs, develops, and delivers its services. We are committed to:

• Processing personal data lawfully, fairly, and transparently.
• Collecting only the minimum personal data reasonably necessary for the requested services.
• Using appropriate technical and organisational safeguards to protect personal data.
• Respecting the rights of Data Principals.
• Maintaining accountability in our processing activities.
• Regularly reviewing and improving our privacy and security practices.

For the purpose of this Notice:

We process personal data only for legitimate business purposes, including:

MTMPay does not sell or rent your personal data to third parties. Personal data is shared only where necessary to provide our services, comply with legal obligations, protect our legitimate interests, or where you have provided consent, as applicable.

We process personal data:

• With your consent, where applicable.
• To provide services requested by you.
• To comply with legal and regulatory obligations.
• To protect our platform and users against fraud and misuse.
• To maintain network, system, and transaction security.
• For other lawful purposes permitted under applicable law.

Where consent is required, MTMPay provides a clear notice at or before the time personal data is collected explaining:

• What information is being collected.
• Why the information is required.
• How it will be used.
• Whether it may be shared with authorised service providers or regulatory authorities where required.
• How users may exercise their rights and contact MTMPay.

Where permitted by applicable law, certain processing activities may be carried out without consent where another lawful basis applies.

MTMPay collects and processes only the personal data that is reasonably necessary to provide requested products and services, comply with applicable legal and regulatory obligations, prevent fraud, protect users, maintain platform security, and improve service quality.

Personal data is processed only for the purposes for which it was collected or for other compatible and lawful purposes permitted under applicable law.

We retain personal data only for as long as reasonably necessary to provide services, meet statutory obligations, resolve disputes, and comply with AML/KYC requirements. Where retention is no longer required, data is securely deleted or anonymised.

Users are encouraged to ensure that the information they provide is accurate, complete, and up to date. MTMPay may request updated information where necessary to maintain accurate records.

Subject to applicable law, you may:

• Access your personal data.
• Request correction of inaccurate information.
• Update incomplete information.
• Request deletion where legally permissible.
• Withdraw consent where processing is based on consent.
• Raise privacy-related grievances.

Certain information may continue to be retained where required under applicable law.

Where processing is based on your consent, you may withdraw that consent using available account features or by contacting us.

Withdrawal of consent may affect your ability to use services requiring identity verification, fraud prevention, regulatory compliance, or secure transaction processing.

MTMPay incorporates privacy and data protection considerations into the design, development, implementation, operation, and maintenance of its products, services, systems, and business processes.

To help protect our users and platform, MTMPay may use automated systems to identify unusual activity, detect fraud, prevent unauthorised access, and enhance platform security. Significant decisions are subject to appropriate review where required.

Our Services are intended only for individuals who are 18 years of age or older and are legally competent to enter into a binding contract under Indian law. We do not knowingly collect personal data of children.

Our websites and applications use cookies to maintain secure sessions, improve performance, analyze usage, and enhance user experience. Users may manage cookie preferences in browser settings.

Personal data is primarily processed and stored in India. Where personal data is processed outside India, appropriate safeguards and applicable legal requirements will be followed.

In the event of a merger, acquisition, restructuring, investment, or sale of assets, personal data may be transferred as part of such transaction, subject to applicable legal requirements and confidentiality obligations.

In the event of a breach requiring notification, MTMPay will investigate the incident, mitigate risks, notify competent authorities where required, and communicate with affected users where legally necessary.

Our platforms may contain links to third-party services. MTMPay is not responsible for their privacy practices. Users are encouraged to review third-party policies directly.