Privacy policy

Gyaan Rewards — Privacy Policy Version 2.0 Effective date: 12 September 2026 1. Who we are Gyaan Rewards is operated by Money Talks. CIN: U52842MH2026PTC300285 GSTIN: 27ARPPG5290L0Z5 Registered address: The Orion Business Park, Shop No. 21, Shimpoli Junction, S.V. Road, Natakwala Lane, Opp. Shimpoli, Borivali West, Mumbai, Maharashtra 400092 Privacy and grievance contact: support@gyanrewards.com Responsible person: Kamlesh Gawai For the purposes of applicable data-protection law, including the Digital Personal Data Protection Act, 2023 and applicable rules and provisions when they apply to the relevant processing, Money Talks acts as the organisation responsible for the personal data processing described in this Policy. 2. What personal data we collect Depending on how you use Gyaan Rewards, we may process: • full name; • display name; • Gyaan ID; • email address; • mobile number; • date of birth; • country and eligibility information; • account authentication and security information; • promotion entries and results; • payment and transaction references; • Telegram account information where you use the Telegram Mini App; • payout information from verified winners; • tax or KYC information where required; • IP address and device or security signals; • communications you send to support; and • information reasonably necessary to investigate fraud, abuse, security incidents or disputes. We aim to collect information that is relevant to the purposes described in this Policy. 3. How we use personal data We process personal data to: • create and administer accounts; • authenticate users; • verify email addresses and mobile numbers; • determine promotion eligibility; • administer promotions and entries; • process applicable payments, Telegram Stars transactions and payouts; • prevent duplicate accounts, fraud, abuse and manipulation; • verify winners and administer prize claims; • meet tax, accounting and other legal obligations; • provide support and respond to grievances; • maintain security and investigate incidents; • maintain records needed to demonstrate the integrity of promotions; and • operate, maintain and improve the service. We do not sell personal data. 4. Legal basis and lawful processing Depending on the processing activity and the law applicable at the time, personal data may be processed on the basis of consent, performance of a requested service or contract, compliance with a legal obligation, certain lawful uses recognised by applicable law, or another lawful basis available under applicable law. Where consent is required, we will seek it in the manner required by applicable law. 5. Account and promotion verification We may require email or mobile verification before allowing particular account actions or promotion participation. A verified mobile number may be used to help maintain account integrity, prevent duplicate or abusive accounts and contact a verified winner where applicable. Verification does not create a right to participate in a promotion that the user otherwise does not qualify for. 6. Payments and payouts Where a promotion provides paid entry, payment processing may be performed by a third-party payment provider. Where Telegram Stars are used, the applicable Telegram systems process the relevant transaction. We may receive transaction references, payment status and other information necessary to confirm a transaction without receiving information that the payment provider does not make available to us. For prize payouts, verified winners may be required to provide bank or other payout information. Payout information is used for the payout, tax, compliance, fraud-prevention and record-keeping purposes for which it is collected. 7. Sharing of personal data We may share personal data with service providers that help us operate the service, including providers for: • hosting and infrastructure; • databases and storage; • email and communications; • authentication and security; • payment processing; • Telegram services; • fraud and abuse prevention; • KYC or verification where required; and • technical, professional or compliance services. We may also disclose information where required by law, lawful government request, court order or to protect the rights, safety, security or integrity of users and the service. Service providers are permitted to process personal data only for appropriate operational purposes and subject to applicable contractual, legal or security requirements. 8. International processing Some service providers may process personal data outside India. Where personal data is transferred or processed internationally, we will apply the safeguards and comply with the restrictions required by applicable law. 9. Security We use reasonable technical and organisational measures appropriate to the nature and risk of the processing, including access controls, protected credentials and secrets, encryption or protected storage where appropriate, audit logging, rate limiting and security monitoring. No internet service can guarantee absolute security. If we become aware of a security incident requiring notification under applicable law, we will follow the applicable notification requirements. 10. Retention We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting, fraud-prevention, security, dispute or audit requirements. Our target retention schedule is: Account and profile information: While the account remains active and generally up to 365 days after account closure, unless a longer period is required for law, fraud prevention, security or disputes. Promotion and entry records: For the period necessary to operate the promotion, maintain the permanent public draw record where applicable, resolve disputes and satisfy legal or audit requirements. Payment, payout, tax and accounting records: For the period required by applicable tax, accounting, payment, financial or other legal obligations. Security and audit records: Generally up to 365 days unless a longer period is reasonably necessary to investigate or prevent fraud, security incidents, disputes or legal claims. Support communications: Generally up to 365 days unless a longer period is reasonably necessary to resolve a complaint, dispute or legal matter. Where a longer retention period is legally required, the relevant records may be retained for that period. 11. Your privacy rights Subject to applicable law and any conditions or exceptions that apply, users may have rights including: • to obtain information about personal data processed about them; • to request correction of inaccurate or incomplete personal data; • to request erasure where the legal conditions for erasure are satisfied; • to withdraw consent where processing is based on consent; • to obtain grievance redressal; and • to exercise other rights available under applicable data-protection law. To exercise a privacy right or raise a privacy question, contact: support@gyanrewards.com Attn: Kamlesh Gawai We aim to acknowledge privacy or grievance requests within 3 working days. We may need to verify the identity or authority of the person making a request before acting on it. 12. Account deletion and privacy controls Users may use the privacy controls made available in their account to manage available settings. Where the service provides an account-deletion function, deletion requests are processed subject to records that must be retained for legal, tax, fraud-prevention, security, dispute or audit purposes. Deletion of an account does not automatically require deletion of records that we are legally required or reasonably entitled to retain. 13. Children's data Gyaan Rewards is intended for persons aged 18 or older. We do not knowingly permit persons under 18 to participate in adult promotions. Where applicable law imposes additional requirements concerning children's data, those requirements will be followed. 14. Cookies and similar technologies We use cookies and similar technologies primarily for authentication, session management, security, fraud prevention, preferences and service operation. The Cookie Policy explains these technologies in more detail. 15. Changes to this Policy We may update this Privacy Policy from time to time. The version number and effective date will be shown on the published Policy. Where required, we will provide notice and obtain any required consent before introducing materially different processing. 16. Contact Money Talks Attn: Kamlesh Gawai support@gyanrewards.com Registered address: The Orion Business Park, Shop No. 21, Shimpoli Junction, S.V. Road, Natakwala Lane, Opp. Shimpoli, Borivali West, Mumbai, Maharashtra 400092