Privacy Policy

1. Our Commitment to Privacy

ValuePay Financial Technologies Private Limited (“ValuePay”, “Company”, “we”, “us”, or “our”) is committed to safeguarding the privacy and confidential information of our retailers, Customer Service Point (CSP) agents, distributors, and their consumers. This Privacy Policy describes how we collect, process, store, and protect transaction and identity data across our Bharat Bill Payment System (BBPS), Mobile & DTH Recharge switch, and Instant 24x7 Payout platforms.

2. Collection of Personal & Business Information

To provide authorized fintech utilities and satisfy regulatory Know-Your-Customer (KYC) requirements, we collect information when you register as a partner or initiate transactions:

• Agent Identity Information: Full name, Aadhaar number (masked/encrypted verification), Permanent Account Number (PAN), date of birth, and biometric / OTP consent.
• Business Details: Trade name, shop / retail address, GSTIN registration certificate, and business establishment licenses.
• Financial & Settlement Data: Linked bank account numbers, IFSC codes, UPI Virtual Payment Addresses (VPAs), and transaction wallet top-up records.
• Transaction Records: Consumer mobile numbers, DTH subscriber IDs, electricity / water consumer account numbers (CA numbers), payout beneficiary details, timestamp, and IP address.

3. Purpose and Use of Data

We process collected data exclusively for the following authorized business and legal objectives:

• Clearing and validating utility bills with the National Payments Corporation of India (NPCI) and respective state utility boards under BBPS guidelines.
• Executing real-time mobile and satellite DTH recharges through direct telecom operator switches.
• Routing instant bank payouts via IMPS, UPI, and NEFT clearinghouses with automated beneficiary validation.
• Calculating and distributing transparent real-time commissions into your agent wallet.
• Complying with Anti-Money Laundering (AML), Prevention of Money Laundering Act (PMLA), and Central Bank reporting obligations.

4. Data Security & Storage Standards

ValuePay applies bank-grade security protocols across all operational infrastructure:

• End-to-End Encryption: All API communication is strictly encrypted via Transport Layer Security (TLS 1.3) and 256-bit AES algorithms.
• PCI-DSS & ISO 27001 Certification: Certified cardholder and transaction data environments with automated vulnerability scans and annual audits.
• Restricted Access: Role-based access controls (RBAC) ensure only authorized compliance officers can review KYC documentation.
• Data Sovereignty: In compliance with national data localization mandates, all financial logs and user records are stored strictly on secured servers located within India.

5. Disclosure to Third Parties

ValuePay does not sell, lease, or monetize user data to commercial advertising brokers. Information is disclosed strictly to certified institutional entities required to execute transactions:

• NPCI and Bharat BillPay Central Unit (BBPCU) for bill payment settlement and reconciliation.
• Licensed scheduled banks for processing IMPS and UPI payouts.
• Authorized telecom operators (Jio, Airtel, Vi, BSNL, Tata Play) for validating recharge packs.
• Law enforcement or judicial authorities when officially mandated by law or court order.

6. Data Retention & Account Deletion

As mandated by banking regulations and the Prevention of Money Laundering Act (PMLA), transaction logs, settlement reports, and KYC records are maintained for a statutory period of five (5) to ten (10) years from the date of account closure. Upon formal partner de-registration, active login access is revoked immediately.

7. Contact & Data Protection Officer

For any questions, requests, or concerns regarding your personal data or this Privacy Policy, you may contact our designated compliance team: