We may collect your Personal Information when you use our services or Platform or otherwise interact with us during the course of our relationship. We collect Personal Information which is relevant and absolutely necessary for providing the services requested by you and to continually improve the 100 KARMA Platform.

Personal and Sensitive Personal Information collected includes but not limited to:

• name, age, gender, photo, address, phone number, e-mail id, your contacts and DOB details
• PAN card number, KYC related information such as videos or other online/ offline verification documents as mandated by relevant regulatory authorities, your business-related information
• OTP sent to you by 100 KARMA
• your device details such as device identifier, internet bandwidth, mobile device model, browser plug-ins, and cookies or similar technologies that may identify your browser/100 KARMA Application and plug-ins, and time spent, IP address and location
• your Short Messaging Service (SMS(es)) that are stored on your device for the purposes of, including but not limited to, registering you and your device for bill payments or other services, OTPs for logins, enhancing your security, bill payments and recharge reminders, and any other legitimate uses with your explicit consent

We and our service providers or business partners may also collect your Personal Information from third parties or information made publicly available including financial history and other information for the purpose of verifying and authenticating an investment transaction request you place with us. This is done in order to prevent suspicious transactions, or to comply with court judgements and bankruptcies, from credit reference and fraud prevention agencies. Additionally, we and our service providers or business partners may also collect vehicle-related information when you opt for vehicle insurance. In case of employment opportunities with 100 KARMA, we and our service providers or business partners may also collect your resume, your past employment and educational qualification for background checks and verifications, through online or offline databases that are otherwise legitimately obtained and are subject to the third party's terms of use and/or privacy statement.

Information may be collected at various stages of your usage of the 100 KARMA Platform such as:

• visiting 100 KARMA Platform
• registering on 100 KARMA Platform as an “user” or “merchant” or any other relationship that may be governed by terms and conditions listed on 100 KARMA Platform
• transacting or attempting to transact on 100 KARMA Platform
• accessing links, e-mails, chat conversations, feedbacks, notifications sent or owned by 100 KARMA Platform and if you opt to participate in our occasional surveys
• otherwise dealing with any of the 100 KARMA Affiliates/Entities/Subsidiaries/Associates
• while applying for career opportunities with 100 KARMA

100 KARMA may process your Personal Information for the following purposes:

• creation of your account and verification of your identity and access privileges
• provide you access to the products and services being offered by us, merchants, affiliates, subsidiaries, associates, or business partners
• to conduct the KYC compliance process as a mandatory prerequisite as per the requirements of various regulatory bodies
• to validate, process and/or share your KYC information, nominee details with other intermediaries, Regulated Entities (REs) or AMCs or financial institutions or with any other service providers as may be required
• to process payments on your behalf and on your instructions; communicate with you for your queries, transactions, and/or any other regulatory requirement, etc.
• to authenticate a transaction request; validate a standing instruction for a Systematic Investment Plan or confirm a payment made via the services
• enhancing your user experience in various processes/submission of applications/availment of product/service offerings by analysing user behaviour on an aggregated basis;
• to monitor and review products/services from time to time; customize the services to make your experience safer and easier, and conducting audits
• to allow third parties to contact you for products and services availed/requested by you on 100 KARMA Platform or third-party links
• to carry credit checks, screenings or due diligence checks as lawfully required by us; detect and protect us against error, fraud, money laundering and other criminal activity; enforce our terms and conditions
• to inform you about online and offline offers, products, services, and updates; customizing and improving your experience by marketing, presenting advertising, and offering tailored products and offers
• to resolve disputes; troubleshoot problems; technical support and fixing bugs; help promote a safe service
• to identify security breaches and attacks; investigating, preventing, and taking action on illegal or suspected fraud or money laundering activities and conducting forensic audits as part of internal or external audit or investigation by 100 KARMA or government agencies located within India or outside the Indian jurisdiction
• to meet legal obligations

While we may also process your Personal Information for other legitimate business cases, we ensure to take appropriate steps to minimize the processing to the extent possible, making it less intrusive to your privacy.

We use data collection devices such as "cookies" or similar technologies on certain pages of the Platform to help analyse our web page flow, measure promotional effectiveness, and promote trust and safety. "Cookies" are small files placed on your device hard-drive/storage that assist us in providing our services. Cookies do not contain any of your Personal Information. We offer certain features that are only available through the use of a "cookie" or similar technologies. We also use cookies to allow you to enter your password less frequently during a session. Cookies or similar technologies can also help us provide information that is targeted to your interests. Most cookies are "session cookies," meaning that they are automatically deleted from your device hard-drive/storage at the end of a session. You are always free to decline/delete our cookies or similar technologies if your browser/device permits, although in that case you may not be able to use certain features on the Platform and you may be required to re-enter your password more frequently during a session. Additionally, you may encounter "cookies" or other similar technologies on certain pages of the Platform that are placed by third parties. We do not control the use of cookies by third parties.

Your Personal Information is shared as allowed under applicable laws, after following due diligence, assessing the recipient’s privacy policies and practices, and in line with the purposes set out in this policy. Personal Information is shared only after a contractual obligation is imposed on the recipients to adhere to similar or no less stringent privacy practices of 100 KARMA.

We may share your Personal Information in the course of your transaction with different categories of recipients such as business partners, service providers, merchants, affiliates, associates, subsidiaries, legally recognized authorities, regulatory bodies, financial institutions, internal teams such as marketing, security, investigation team etc.

Personal Information will be shared, as applicable, on need-to-know basis, for the following purposes:

• for enabling the provision of the products/services availed by you and facilitating the services between you and the service provider, as requested
• for complying with applicable laws as well as meeting the Know Your Customer (KYC) requirements as mandated by various regulatory bodies, whose regulated service/product you opt through our services/Platforms
• for completing a payment transaction initiated by you on a merchant site, where based on your instructions, the merchant requests to fetch your Personal Information from us
• if it is required by financial institutions to verify, mitigate or prevent fraud or to manage risk or recover funds in accordance with applicable laws/regulations
• for services related to communication, marketing, data and information storage, transmission, security, analytics, fraud detection, risk assessment and research
• enforce our Terms or Privacy Policy; respond to claims that an advertisement, posting or other content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public
• if required to do so by law or in good faith we believe that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process
• with the internal investigation department within 100 KARMA or agencies appointed by 100 KARMA for investigation purposes located within or outside the Indian jurisdiction
• should we (or our assets) plan to merge with, or be acquired by any business entity, or re-organization, amalgamation, restructuring of our business then with such other business entity

While the information is shared, 100 KARMA ensures that the processing is carried out only on behalf of 100 KARMA and this policy is applicable to the extent possible.

To the extent applicable, we store Personal Information within India and retain it in accordance with appliable laws and for a period no longer than it is required for the purpose for which it was collected.However, we may retain Personal Information related to you if we believe it may be necessary to prevent fraud or future abuse or if required by law such as in the event of the pendency of any legal/regulatory proceeding or receipt of any legal and/or regulatory direction to that effect or for other legitimate purposes.

Once the Personal Information has reached its retention period, it shall be deleted in compliance with 100 KARMA’s policy on retention and data deletion.

100 KARMA is an ISO27001 and PCI-DSS certified entity and has deployed technical and physical security measures to safeguard user’s Personal Information and Sensitive Personal Information. We understand that as effective as our security measures are, no security system is impenetrable. Hence, as part of our reasonable security practices, we undergo strict internal and external reviews to ensure appropriate information security encryption or controls are placed for both data in motion and data at rest within our network and servers respectively. The database is stored on servers secured behind a firewall; access to the servers is password-protected and is strictly limited.

Further, you are responsible for maintaining the confidentiality and security of your login id and password. Please do not share your 100 KARMA login, password and OTP details with anybody. It shall be your responsibility to intimate us in case of any actual or suspected compromise to your Personal Information.

We have provided multiple levels of security to safeguard the 100 KARMA Application by login/logout option and 100 KARMA Application lock feature (“Enable Screen Lock”) that can be enabled by you. We have preventive controls implemented to ensure you use 100 KARMA Application on your device and the same login credentials cannot be used on different device without any additional authentication/OTP.

When you are availing products and services of service providers on 100 KARMA Platform, Personal Information may be collected by respective service providers and such Personal Information shall be governed by their privacy policy. You may refer to their privacy policy and terms of service to understand how your Personal Information will be handled by such service providers.

Our services may include links to other websites or applications when you visit our Platform. Such websites or applications are governed by their respective privacy policies, which are beyond our control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your browser or on the m-site you are redirected), use of any Personal Information that you provide on these websites or applications is governed by the privacy policy of the operator of the application/website, you are visiting. That policy may differ from ours and you are requested to review those policies or seek access to the policies from the domain owner before proceeding to use those applications or websites. We do not accept any responsibility or liability for usage of your Personal Information by these third parties or their policies.

We process your Personal Information with consent. By using the 100Karma Platform or services and/or by providing your Personal Information, you consent to the processing of your Personal Information by 100Karma in accordance with this Privacy Policy. If you disclose to us any Personal Information relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy. Further, you agree and authorize 100Karma to communicate with you via channels like Phone calls and E-mail for the purposes set out in this policy, irrespective of your registration with any authorized DND registries.

We provide all users with the opportunity to opt-out of receiving any of our services or non-essential (promotional, marketing-related) communications from us, after setting up an account. If you want to remove your contact information from all our lists and newsletters or discontinue any our services, please click on the unsubscribe button on the emailers.

You can access and review your Personal Information shared by you by logging in to 100 KARMA Platform using your secure login credentials and may also place a request for updating your Personal Information by writing to us. 100 KARMA may need to request specific information from you to confirm your identity and ensure authentication to correctly update your Personal Information. This is a security measure to ensure that Personal Information is not disclosed to any person who does not have a right to receive it or is not incorrectly modified.

In case you wish to delete your account or Personal Information, please use the ‘Help’ section of the 100Karma Platform. However, retention of your Personal Information will be subject to applicable laws.

For the above requests, 100Karma may need to request specific information from you to confirm your identity and ensure authentication. This is a security measure to ensure that Personal Information is not disclosed to any person who does not have a right to receive it or is not incorrectly modified or deleted.

In case, where you need any further information specific to the product/ services that you are availing or our use of your Personal Information, we request you to read through the Terms and Conditions specific to the product/service which is easily accessible through the 100 KARMA Platform. For seeking any further information on the same, you can write to us at the details mentioned in the ‘Contact Us’ section of this policy.

We do not knowingly solicit or collect Personal Information from children under the age of 18 and use of our Platform is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. If you are under the age of 18 years then you must use the Platform or services under the supervision of your parent, legal guardian, or any responsible adult.

Since our business changes constantly, so will our policies. We reserve the right, at our sole discretion, to change, modify, add, or remove portions of this Privacy Policy at any time without any prior written notice to you. We may, however, reasonably endeavour to notify you of the changes, it is your responsibility to review the Privacy Policy periodically for updates/changes. Your continued use of our services/Platform, following the posting of changes will mean that you accept and agree to the revisions. We will never make changes to policies in order to make it less protective of Personal Information already shared by you.

In case you have any questions or concerns regarding the processing of your Personal Information or this Privacy Policy you may write to us using this link https://100karma.com/support We are committed to answer your questions within the reasonable time limit. Any delay in the resolution time shall be proactively communicated to you.