Privacy Policy

Last Updated: December 2025

This Privacy Policy explains how Shiv Enterprises, operating its digital bill payment product under the brand name "DularPay" ("DularPay", "we", "us", or "our"), collects, uses, stores, protects, and shares your information when you use our website, agent portal, and bill payment/loan repayment services (collectively, the "Services").

DularPay operates as a registered Agent Institution (AI) under the Bharat Bill Payment System (BBPS), powered by NPCI and integrated through authorized system providers, and follows applicable RBI and NPCI data security and privacy guidelines.

Scope

This Policy applies to:

Customers making bill payments or loan repayments via DularPay agents or digital channels
DularPay agents and their authorized staff
Visitors to the DularPay website and web applications

Information We Collect

1. Identity and Contact Information

Full name
Mobile number and email address
Postal address (where applicable)
Government-issued identifiers (such as PAN, Aadhaar number, only where legally permitted)

2. Transaction and Billing Information

Bill details (biller name, consumer number, loan account number)
Transaction amount, date, time, and reference numbers
Payment method details (bank, UPI handle, masked card details as permitted)
BBPS transaction ID and status codes received from NPCI and billers

3. Agent and Operational Information

Agent profile details (name, contact details, KYC documents)
Shop/Outlet details and business identifiers
Login and access logs for the agent portal

4. Device and Usage Data

IP address and approximate location
Browser type, device type, and operating system
Pages visited, time spent, and interaction logs on our website

How We Use Your Information

We use your information for the following purposes:

To process and complete bill payments and loan repayments via BBPS
To authenticate your identity and comply with KYC/AML requirements
To send transaction confirmations, receipts, and alerts
To resolve disputes, failed transactions, and chargebacks
To provide customer and agent support
To detect and prevent fraud, unauthorized access, and misuse of our Services
To meet legal, regulatory, and audit requirements under RBI and NPCI guidelines

Legal Basis for Processing

We process your personal data on the following legal bases, as applicable:

Performance of a contract (for processing your bill/loan payment)
Compliance with legal obligations (RBI, NPCI, BBPS regulations)
Legitimate interests (fraud prevention, security, service improvement)
Your consent, where specifically required by law (for certain communications or optional data)

Data Localization and Storage

In accordance with RBI’s Storage of Payment System Data directive and NPCI’s data security framework for BBPS, all payment system data processed by DularPay (including customer data, payment credentials, and transaction data) is stored only on servers located within India.

Any processing by third-party service providers must also comply with this data localization requirement, and where data is processed outside India for limited purposes, it is brought back and stored in India as per regulatory timelines.

Data Retention

We retain your data only for as long as necessary to:

Complete the transaction and provide related support
Comply with legal and regulatory record-keeping requirements
Maintain audit logs required by RBI/NPCI and other regulators

After the retention period, data is securely deleted, anonymized, or archived in compliance with applicable laws.

Information Sharing and Disclosure

DularPay does not sell your personal data. We may share your data only with:

NPCI / BBPS infrastructure: For routing and settlement of bill payments
Banks and payment partners: For processing payments and refunds
Billers and service providers: To validate and update bill/loan status
Regulators and law enforcement: When required under applicable law
Service providers: Such as hosting, security, analytics or communication partners, under strict confidentiality agreements

All such sharing is done on a need-to-know basis and strictly in line with RBI, NPCI, and BBPS procedural guidelines.

Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

Maintain your session during use of the portal
Improve website performance and security
Understand usage patterns to enhance user experience

You can control cookies through your browser settings; however, disabling essential cookies may impact the functionality of our Services.

Data Security Measures

We implement industry-standard security controls to protect your information, including:

256-bit SSL/TLS encryption for data in transit
Encryption and access controls for data at rest
Role-based access for agents and employees
Regular security audits, logging, and monitoring
Compliance with applicable PCI-DSS and BBPS security standards

While we strive to use commercially acceptable means to protect your data, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

Subject to applicable law, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of data where legally permissible
Object to or restrict certain types of processing
Withdraw consent for optional processing, where applicable

To exercise these rights, you can contact us using the details in the "Contact Us" section below. We may need to verify your identity before processing your request.

Children’s Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact us so we can delete it where appropriate.

Third-Party Links and Services

Our website or Services may contain links to third-party websites, apps, or services (including banks, billers, and other providers). We are not responsible for the privacy practices or content of those third-party sites. Please review their privacy policies separately before sharing your data with them.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in laws, regulations, or our practices. The "Last Updated" date at the top indicates when this Policy was last revised. Material changes may be notified via our website or email where appropriate.

Grievances and Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, you can contact:

Grievance Officer: Pratik Kumar]
Email: grievance@dularpay.com
Support Email: support@dularpay.com
Phone: +91 91427 08956 or +91 73522 23225
Address:DularPay(Shiv Enterprises), Hajipur, Vaishali, Bihar - 844115, India

We aim to acknowledge grievances within 24 hours and resolve them within a reasonable timeframe, subject to regulatory requirements.

Regulatory and BBPS Escalation

If you are not satisfied with our response, you may escalate the matter to NPCI/BBPS through their official support and complaint channels as provided on the Bharat Bill Payment System website.

Consent

By using DularPay’s Services, visiting our website, or transacting through our agents, you confirm that you have read, understood, and agree to this Privacy Policy.