Privacy Policy

1. Introduction

This Privacy Policy explains how Weserv Techno Innovative Pvt Ltd ("Company", "we", "us", "our"), the owner and operator of the website and platform bigpaybharat.com ("Platform", "BigPayBharat", "Service"), collects, uses, stores, discloses, and protects the personal information of users, retailers, distributors, master distributors, and visitors ("you", "User") who access or use our Service.

By registering on, accessing, or using BigPayBharat, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use the Platform.

This policy is published in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, to the extent applicable.

2. Information We Collect

We may collect the following categories of information when you register for, access, or use our Service:

a) Information You Provide to Us

• Full name, date of birth, gender
• Mobile number and email address
• Residential and shop/business address
• Government-issued identification such as Aadhaar, PAN, GST number, or other KYC documents
• Bank account, UPI, and payment/settlement details
• Photographs, signatures, and biometric data submitted for AePS/eKYC verification (where applicable)
• Login credentials (username, password – stored in encrypted/hashed form)
• Any information shared with our customer support team

b) Information Collected Automatically

• IP address, browser type, device identifiers, and operating system
• Log data including access times, pages viewed, and referring URLs
• Transaction history, wallet balance, and usage patterns on the Platform
• Location data (where enabled), for fraud prevention and service delivery
• Cookies and similar tracking technologies (see Section 7)

c) Information from Third Parties

• Verification data from KYC/AML service providers, NPCI, banking partners, and payment gateways
• Information from our distributor/retailer network required to process onboarding or transactions

3. How We Use Your Information

We use the information collected for purposes including, but not limited to:

• Creating and managing your account (Retailer, Distributor, Master Distributor, or Admin)
• Processing transactions such as money transfer, BBPS bill payments, mobile recharge, AEPS, UPI payments, and travel bookings
• Verifying your identity and completing KYC/AML obligations as required by RBI, NPCI, and other regulators
• Calculating and disbursing commissions and settlements
• Detecting, investigating, and preventing fraud, unauthorized transactions, and security incidents
• Sending transactional alerts, OTPs, service updates, and support communications
• Improving our Platform, services, and user experience
• Complying with legal, regulatory, and law-enforcement requirements
• Sending promotional communications, where you have consented to receive them (with an option to opt out)

4. Legal Basis for Processing

We process your personal data on the basis of: (a) your consent at the time of registration and use of the Service; (b) the necessity to perform our contractual obligations to you; (c) compliance with legal and regulatory obligations applicable to a fintech/payment facilitation platform; and (d) our legitimate business interests, such as fraud prevention and Platform security.

5. Sharing & Disclosure of Information

We do not sell your personal information. We may share your information with:

• Banking & payment partners – banks, payment aggregators, NPCI, and switch providers necessary to process your transactions
• KYC/verification partners – for identity verification, Aadhaar-based authentication, and AML checks
• Service providers – hosting providers, SMS/email gateways, and analytics providers who process data on our behalf under confidentiality obligations
• Regulatory & government authorities – where required under applicable law, court order, or to protect our legal rights
• Your upline/downline network – limited operational data (e.g., transaction status) may be visible to your Distributor/Master Distributor as necessary for account management
• Business transfers – in the event of a merger, acquisition, or sale of assets, subject to confidentiality commitments

6. KYC, AePS & Regulatory Data

As a fintech services platform, certain services (such as AEPS, money transfer, and wallet-based transactions) require us to collect sensitive personal data, including Aadhaar and biometric information, in compliance with applicable RBI/NPCI/UIDAI guidelines. Such data is collected, stored, and processed strictly for the purpose of identity verification and fraud prevention, and is not used for any unrelated purpose. Biometric data used for AePS authentication is processed through UIDAI-compliant channels and is not permanently stored by us beyond what is legally required.

7. Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies to keep you logged in, remember your preferences, understand how you use the Platform, and improve performance. You can control or disable cookies through your browser settings; however, disabling cookies may affect the functionality of certain features on the Platform.

8. Data Security

We implement reasonable security practices and procedures, including encryption, access controls, firewalls, and secure servers, to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Passwords are stored in encrypted/hashed form. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account remains active, and thereafter for a period necessary to comply with our legal, regulatory, accounting, or reporting obligations (including RBI/NPCI record-keeping requirements), resolve disputes, and enforce our agreements. Transaction records may be retained for a minimum period as mandated under applicable financial regulations.

10. Your Rights & Choices

Subject to applicable law, you may have the right to:

• Access, review, and request a copy of the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for optional/promotional communications at any time
• Request deletion of your account and associated data, subject to our regulatory record-retention obligations
• Raise a grievance regarding the handling of your personal data (see Section 14)

To exercise any of these rights, please contact us using the details in Section 15.

11. Children's Privacy

Our Service is intended only for users who are 18 years of age or older and legally competent to enter into a contract under Indian law. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information.

12. Third-Party Links & Services

Our Platform may contain links to third-party websites or integrate third-party services (such as payment gateways, travel booking partners, or bill payment aggregators). We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party service before providing your information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a revised "Last Updated" date. Your continued use of the Platform after such changes constitutes your acceptance of the revised policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the details of the Grievance Officer are provided below. Any complaints or concerns regarding the processing of your personal data may be directed to:

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: