Data Protection Addendum (WhatsApp & Telegram Communications)

Last Updated: October 18, 2025

1. Scope

This addendum supplements our Privacy Policy and explains how personal information exchanged through messaging apps (WhatsApp, Telegram, Signal, or similar) is collected, processed, and secured.

2. Purpose of Messaging Support

We provide messaging channels solely for:

Responding to user queries and support requests.
Facilitating affiliate registration guidance.
Communicating responsible-gaming resources.

We never request sensitive financial data (e.g., full card numbers, bank passwords).

3. Data Collected Through Messaging

Typical data includes:

Name and phone number.
Inquiry details or affiliate code (if shared).
Chat timestamps and technical metadata (IP, device type).

Screenshots or attachments voluntarily sent by users are stored temporarily (max 30 days).

4. Legal Basis for Processing

Processing relies on user consent and legitimate interest (customer support).
By initiating a chat, you consent to data processing under this addendum.

5. Storage and Security

Chat logs stored on end-to-end encrypted servers.
Access restricted to trained support agents.
Periodic deletion of records older than 30 days.
Encrypted backups retained for legal audit only.

6. Third-Party Responsibility

WhatsApp LLC and Telegram FZ-LLC are independent controllers of user data. Their privacy terms apply in addition to ours. Review their respective policies for details.

7. User Rights

You may request:

Deletion of chat history from our records.
Copy of stored conversation data.
Withdrawal of consent for future communication.

Submit requests via /contact/ or email our Data Protection Officer.

8. Incident Response

Any suspected breach in messaging data is logged, investigated within 48 hours, and users are notified if their information is affected.

9. Cross-Border Transfers

Messaging providers may process data on servers outside India. We require contractual assurances that adequate safeguards exist consistent with the Digital Personal Data Protection Act 2023.

10. Retention & Deletion

Inactive chat records purged after 30 days unless law requires longer storage (for AML compliance or fraud investigation).

11. Updates

This addendum is reviewed every six months and revised when new communication channels are introduced.

Summary: my99exch.id protects your messaging data through encryption, limited retention, and strict consent controls to ensure safe communication.