This privacy policy explains how Toppay (“we”, “us”, this website) handles information on web-toppay.in. It applies to this website and the account platform served from it.
Information we collect
Account information. When you register or sign in, we process the mobile number associated with your account and the credentials you set. Passwords and MPINs are stored in hashed form and are not retrievable in plain text by us or by anyone else.
Transaction information. Records of deposits, withdrawals and transfers made through your account, including amounts, timestamps, status and, where applicable, blockchain transaction references and network identifiers.
Technical information. Standard server and application logs, which may include IP address, browser type, device type, referring page and timestamps. These are used for security, fraud prevention and diagnosing faults.
Support correspondence. Messages you send us and the information you choose to include in them.
Information we do not collect
The public guide pages on this website do not collect account credentials. We never ask for your password, OTP, MPIN, wallet seed phrase or private key through any channel — by email, by message, or on any page. Any request of that kind did not come from us.
How we use information
- To authenticate you and provide access to your account.
- To process and record transactions you initiate.
- To detect, investigate and prevent fraud and unauthorised access.
- To respond to your support requests.
- To maintain, secure and improve the service.
- To comply with applicable legal and regulatory obligations.
We do not sell your personal information.
Cookies and local storage
This site uses cookies and browser storage that are necessary for the service to function — principally to keep you signed in during a session and to remember basic preferences. Blocking these will prevent the login from working. We do not use them to build advertising profiles.
Sharing
We may share information with service providers who operate infrastructure on our behalf (such as hosting and database providers) under obligations of confidentiality, and with authorities where disclosure is required by applicable law or necessary to investigate fraud.
Data security
The site is served over HTTPS with HSTS enabled, applies a content security policy, and stores credentials in hashed form. No system can be guaranteed completely secure, so your own precautions matter: use a unique password, never share OTPs or MPINs, and never install applications sent to you by unsolicited message.
Data retention
Account and transaction records are retained for as long as your account is active and thereafter for the period required to meet legal, accounting, dispute-resolution and fraud-prevention obligations. Technical logs are retained for a shorter operational period.
Your rights
Subject to applicable law and to our legal retention obligations, you may request access to the personal information we hold about you, request correction of inaccurate information, or request deletion. Identity verification is required before we act on any such request, precisely because acting on an unverified request would itself be a security risk.
Children
This service is not directed at, and may not be used by, anyone under 18 years of age.
Changes to this policy
We may update this policy as the service or applicable law changes. The revised version applies from the date it is published on this page.
Contact
For privacy questions, use the channels listed on the Toppay customer care page.
Last updated: 2026-08-15 · Published by TopPay · Read the disclaimer