Your Privacy Matters

Privacy Policy

MOCARD PAYMENT SERVICES PRIVATE LIMITED operates the Mocard mobile application and website. This Privacy Policy explains how user data is collected, used, shared, stored, and protected in compliance with Indian laws and RBI regulations.

Last updated: January 2026
01

Company Details

Legal Name

MOCARD PAYMENT SERVICES PRIVATE LIMITED

Registered Office

Plot No. 425/1271, Khata No. 209/511, College Road, Near Banki College, Cuttack, Odisha – 754008, India

Platform

Mocard mobile application and website https://mocard.in

Support Email

support@mocard.in

Compliance

This Privacy Policy is in compliance with Indian laws, RBI regulations, IT Act, IT Rules 2021, Google Play Store, and Apple App Store requirements.

02

Information We Collect

Personal Details

Name, email address, and mobile number provided during registration and account setup.

KYC Details

PAN card, Aadhaar (masked), selfie verification, and supporting documents as required by RBI KYC Master Directions.

Financial Data

Bank details (masked), UPI ID, and complete transaction history for payment processing and compliance.

Device Data

Device information, IP address, operating system, and browser type for security and fraud prevention.

Analytics Data

Usage analytics collected via Google Analytics and Firebase for service improvement and user experience optimization.

03

Purpose of Data Use

Account Creation

Creating and managing your Mocard account with secure authentication and personalized services.

KYC Verification

Verifying your identity as per RBI guidelines and applicable Indian laws. Full KYC is mandatory for all users.

Payment Processing

Facilitating Wallet, UPI, bill payments, recharges, P2P transfers, and merchant payments securely.

Fraud Prevention

Detecting and preventing fraudulent activities using automated fraud detection systems and manual AML controls.

Legal Compliance

Ensuring compliance with RBI, NPCI, IT Act, PMLA regulations, and other applicable laws.

Customer Support

Responding to your queries, resolving issues, and continuously improving our service quality.

04

Data Sharing Practices

Payment Partners

Necessary data shared with Paysprint, Razorpay, and partner banks for secure transaction processing.

Regulatory Bodies

Data shared with NPCI, RBI, and other regulators as required by law and financial regulations.

Cloud Providers

Data stored on AWS India servers with industry-standard encryption and strict access controls.

Analytics Partners

Anonymized data shared with analytics partners (Google Analytics, Firebase) on a need-to-know basis for service improvement.

05

Data Storage & Security

Secure Infrastructure

All data is stored on secure AWS servers located in India, ensuring compliance with data localization requirements.

Encryption

Industry-standard encryption protocols for data at rest and in transit to protect your sensitive information.

Access Control

Role-based access control ensures only authorized personnel can access sensitive data on a need-to-know basis.

Continuous Monitoring

24/7 monitoring for potential security threats, vulnerabilities, and suspicious activities.

Security Audits

Regular security audits and assessments to maintain the highest security standards.

06

Data Retention Policy

Retention Period

Financial and KYC data is retained for a minimum of 8 years as required by RBI regulations and Indian laws.

Legal Requirements

Data may be retained longer if required by applicable laws, regulations, legal proceedings, or regulatory audits.

Account Closure

Upon account closure, automatic deletion of non-mandatory data is triggered. Legally required data is retained.

Archival

Some records may be archived for audits, investigations, or legal compliance purposes.

07

Your Rights

Access

You have the right to access your personal data and request a copy of all information we hold about you.

Correction

You can request corrections to any inaccurate or incomplete personal information in your account.

Account Closure

You may request closure of your account via app settings or by contacting support, subject to pending transactions.

Data Deletion

Request deletion of your data, subject to legal retention requirements. Non-mandatory data will be automatically deleted.

08

Children's Privacy

Age Restriction

Our platform is intended only for users aged 18 years and above. We do not knowingly collect data from minors.

Eligibility

Users must be 18+ years with Full KYC completed to use wallet or payment services.

Parental Rights

If you believe a minor has provided us with personal information, please contact us immediately for removal.

Get in Touch

Questions About Your Privacy?

We are here to help. Reach out to our team for any privacy-related concerns or to exercise your data rights.

Our Commitment to You

Data stored securely on AWS India servers
Compliant with RBI, NPCI & IT Act regulations
Industry-standard encryption protocols
AML & PMLA guidelines compliant
8+ years data retention as per RBI
Full KYC verification for all users