Privacy Policy

2.1 Who we are

Dhun Dil Ki is the "Data Fiduciary" for personal data collected on the Platform, as defined in the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy explains what we collect, why, and the choices you have.

2.2 Data we collect

**Account data:** name, email address, password (stored in hashed form), date of birth, sign-in method (including Google sign-in), profile photo and bio.
**Guardian and child data:** for participants under 18, the guardian's name, relationship, mobile number and email, and the child's name and date of birth.
**Contest content:** audio and video performances, titles, captions, and entry details.
**KYC and payout data:** ID and PAN details, bank account details, and verification documents, collected only from winners and guardians who request payouts.
**Payment data:** order and transaction details from our payment gateway. We do not store full card numbers or UPI PINs.
**Voting data:** votes cast, and technical signals such as IP address and device information used to detect fake votes.
**Technical data:** device type, browser, pages viewed, error logs, and cookies needed to keep you signed in and to run the Platform.
**Messages:** emails and support requests you send us.

2.3 Why we use your data

To create and manage accounts, and verify age and guardianship.
To run contests: receive entries, display performances, count votes, score entries and declare results.
To process payments, refunds, wallet balance and prize payouts, and to meet tax and KYC rules.
To detect and prevent fraud, fake votes and abuse, and to keep the Platform secure.
To send service messages (such as OTPs, receipts, results and policy updates).
To answer your requests and complaints.
To meet legal obligations.

We do not sell your personal data. We do not use children's data for advertising or profiling.

We process your data on the basis of your consent and for legitimate uses permitted by the DPDP Act (for example to meet legal duties, to respond to a request you made, or to prevent fraud). For children, consent is given by the parent or legal guardian. You can withdraw consent at any time (see 2.9). Withdrawal does not affect processing done before, and some data must be kept where the law requires.

**Payment gateway and banks**, to process payments and payouts.
**Cloud hosting and storage providers** (including Amazon Web Services, with servers in India), to store content and run the Platform.
**Email and messaging providers**, to send service emails and OTPs.
**Google**, if you choose to sign in with Google.
**Public display:** your artist name, profile photo, performance and rank are shown publicly as part of a contest. For minors, only limited details are shown (see the Child Safety Policy).
**Authorities and courts**, where required by law or to protect rights and safety.

All service providers are required to protect your data and use it only for our purposes.

2.6 Where data is stored

Our primary servers are in India. If any provider processes data outside India, we ensure it is done as permitted by Indian law.

2.7 How long we keep data

Account and profile data: while your account is active, and then for up to 3 years after closure for legal, tax and dispute purposes unless you ask for earlier deletion and the law allows it.
KYC, payment and payout records: for as long as tax, accounting and anti-fraud laws require.
Vote and fraud-prevention logs (such as IP addresses): up to 12 months.
Contest videos and audio: until you (or the guardian for a minor) delete them or ask us to remove them, or until the contest archive is closed.
Support emails: up to 3 years.

When data is no longer needed, we delete or anonymise it.

2.8 Security

We use encryption in transit (HTTPS), hashed passwords, access controls, optional two-step verification and passkeys, and regular monitoring. No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

2.9 Your rights

You can ask us to: (a) tell you what data we hold and how it is used, (b) correct or update your data, (c) erase your data, (d) withdraw consent, (e) resolve a grievance, and (f) nominate another person to exercise your rights if you die or become unable to do so. Guardians can exercise these rights for their children. Write to support@dhundilki.com or use the options in your Profile. We respond within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.

2.10 Cookies

We use only essential cookies and similar storage to keep you signed in, protect against fraud and remember settings. We do not use advertising cookies. You can control cookies in your browser, but some parts of the Platform may stop working.

2.11 Changes

We will update this policy when our practices change and show the new version number and date. For material changes we will notify you and, where required, ask for fresh consent.

2.12 Contact

For privacy questions or to exercise rights: support@dhundilki.com, subject "Privacy request". The Grievance Officer's details are on the Grievance Redressal page.

---

2.1 Who we are

2.2 Data we collect

**Account data:** name, email address, password (stored in hashed form), date of birth, sign-in method (including Google sign-in), profile photo and bio.
**Guardian and child data:** for participants under 18, the guardian's name, relationship, mobile number and email, and the child's name and date of birth.
**Contest content:** audio and video performances, titles, captions, and entry details.
**KYC and payout data:** ID and PAN details, bank account details, and verification documents, collected only from winners and guardians who request payouts.
**Payment data:** order and transaction details from our payment gateway. We do not store full card numbers or UPI PINs.
**Voting data:** votes cast, and technical signals such as IP address and device information used to detect fake votes.
**Technical data:** device type, browser, pages viewed, error logs, and cookies needed to keep you signed in and to run the Platform.
**Messages:** emails and support requests you send us.

2.3 Why we use your data

To create and manage accounts, and verify age and guardianship.
To run contests: receive entries, display performances, count votes, score entries and declare results.
To process payments, refunds, wallet balance and prize payouts, and to meet tax and KYC rules.
To detect and prevent fraud, fake votes and abuse, and to keep the Platform secure.
To send service messages (such as OTPs, receipts, results and policy updates).
To answer your requests and complaints.
To meet legal obligations.

We do not sell your personal data. We do not use children's data for advertising or profiling.

**Payment gateway and banks**, to process payments and payouts.
**Cloud hosting and storage providers** (including Amazon Web Services, with servers in India), to store content and run the Platform.
**Email and messaging providers**, to send service emails and OTPs.
**Google**, if you choose to sign in with Google.
**Public display:** your artist name, profile photo, performance and rank are shown publicly as part of a contest. For minors, only limited details are shown (see the Child Safety Policy).
**Authorities and courts**, where required by law or to protect rights and safety.

All service providers are required to protect your data and use it only for our purposes.

2.6 Where data is stored

Our primary servers are in India. If any provider processes data outside India, we ensure it is done as permitted by Indian law.

2.7 How long we keep data

Account and profile data: while your account is active, and then for up to 3 years after closure for legal, tax and dispute purposes unless you ask for earlier deletion and the law allows it.
KYC, payment and payout records: for as long as tax, accounting and anti-fraud laws require.
Vote and fraud-prevention logs (such as IP addresses): up to 12 months.
Contest videos and audio: until you (or the guardian for a minor) delete them or ask us to remove them, or until the contest archive is closed.
Support emails: up to 3 years.

When data is no longer needed, we delete or anonymise it.

2.8 Security

2.9 Your rights

2.10 Cookies

2.11 Changes

We will update this policy when our practices change and show the new version number and date. For material changes we will notify you and, where required, ask for fresh consent.

2.12 Contact

For privacy questions or to exercise rights: support@dhundilki.com, subject "Privacy request". The Grievance Officer's details are on the Grievance Redressal page.

---

Table of Contents

2.1 Who we are

2.2 Data we collect

2.3 Why we use your data

2.6 Where data is stored

2.7 How long we keep data

2.8 Security

2.9 Your rights

2.10 Cookies

2.11 Changes

2.12 Contact

Privacy Policy

Table of Contents

2.1 Who we are

2.2 Data we collect

2.3 Why we use your data

2.6 Where data is stored

2.7 How long we keep data

2.8 Security

2.9 Your rights

2.10 Cookies

2.11 Changes

2.12 Contact

Privacy Policy

Table of Contents

2.1 Who we are

2.2 Data we collect

2.3 Why we use your data

2.4 Legal basis: consent

2.5 Who we share data with

2.6 Where data is stored

2.7 How long we keep data

2.8 Security

2.9 Your rights

2.10 Cookies

2.11 Changes

2.12 Contact

Privacy Policy

Table of Contents

2.1 Who we are

2.2 Data we collect

2.3 Why we use your data

2.4 Legal basis: consent

2.5 Who we share data with

2.6 Where data is stored

2.7 How long we keep data

2.8 Security

2.9 Your rights

2.10 Cookies

2.11 Changes

2.12 Contact