This Privacy Policy governs the collection, use, storage and protection of your personal data by MomentPlay (operated by Moment Enterprise, Durgapur, West Bengal, India) in compliance with the Information Technology Act, 2000, IT (Amendment) Act, 2008, IT Rules, 2011, IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. WHO WE ARE
MomentPlay is an Over-The-Top (OTT) streaming platform operated by:
- Business Name: Moment Enterprise
- Address: Durgapur, West Bengal, India
- Email: studios@momentgroupofcompany.com
- Website: https://momentplay.in
- App: MomentPlay (Android & iOS)
We are a "Data Fiduciary" as defined under the DPDP Act, 2023, responsible for determining the purpose and means of processing your personal data.
2. DATA WE COLLECT
2.1 Information You Provide
- Phone Number — used for authentication via OTP
- Name — for personalisation and communication
- Email Address — for subscription receipts and notifications
- Date of Birth — for age verification and birthday offers
- Anniversary Date — for special occasion offers (optional)
- Payment Information — processed by Razorpay (we do NOT store card details)
2.2 Information Collected Automatically
- Device information (model, OS version, device ID)
- IP address and approximate location
- App usage data (content watched, search history, watch time)
- FCM token for push notifications
- Log data (errors, crashes, performance data)
2.3 Information from Third Parties
- Payment status from Razorpay
- Firebase Analytics and Crash reporting
3. HOW WE USE YOUR DATA
| Purpose | Legal Basis (DPDP Act 2023) |
|---|---|
| Account creation and authentication | Consent / Contract |
| Processing subscription payments | Contract |
| Sending OTP via SMS/WhatsApp | Consent |
| Push notifications (subscription, content) | Consent |
| Personalised content recommendations | Legitimate Interest |
| Birthday/Anniversary special offers | Consent |
| Subscription renewal reminders | Contract |
| Customer support | Legitimate Interest |
| Legal compliance and fraud prevention | Legal Obligation |
| Analytics and platform improvement | Legitimate Interest |
4. DATA SHARING & DISCLOSURE
We do NOT sell, rent or trade your personal data. We share data only with:
- Razorpay Financial Solutions Pvt. Ltd. — payment processing (PCI DSS compliant)
- SMS Alert — OTP delivery via SMS
- Interakt (by Haptik) — WhatsApp OTP and notifications
- Google Firebase — push notifications and analytics
- Bunny.net — video content delivery (CDN)
- Government authorities — when required by law under Section 69 of the IT Act, 2000
⚠️ All third-party processors are contractually bound to handle your data securely and only for specified purposes, in compliance with applicable Indian law.
5. DATA STORAGE & SECURITY
- All data is stored on servers located in the European Union (Hostinger KVM) with adequate data protection standards equivalent to or exceeding Indian requirements
- Data in transit is encrypted using TLS 1.2/1.3 (HTTPS)
- Passwords are never stored; we use OTP-based authentication
- Payment data is tokenised by Razorpay — we never store card numbers
- Access to your data is restricted to authorised personnel only
- We conduct periodic security reviews and vulnerability assessments
6. DATA RETENTION
- Account data — retained while your account is active + 3 years after deletion
- Payment records — 7 years (as required under Indian tax laws)
- OTP logs — 30 days
- Watch history — 2 years or until you delete it
- Inactive accounts — deleted after 3 years of inactivity with prior notice
7. YOUR RIGHTS UNDER DPDP ACT 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access — request a copy of your personal data we hold
- Correction — request correction of inaccurate or incomplete data
- Erasure — request deletion of your personal data (right to be forgotten)
- Withdraw Consent — withdraw consent for data processing at any time
- Grievance Redressal — raise complaints with our Grievance Officer
- Nomination — nominate a person to exercise rights on your behalf
To exercise these rights, contact us at: studios@momentgroupofcompany.com
We will respond within 30 days as required under applicable law.
8. GRIEVANCE OFFICER
As mandated by the IT (Intermediary Guidelines) Rules, 2021 and DPDP Act, 2023, we have appointed a Grievance Officer:
Grievance Officer: Sanu Das
Organisation: Moment Enterprise
Address: Durgapur, West Bengal, India
Email: studios@momentgroupofcompany.com
Response Time: Within 15 days of receiving grievance
9. CHILDREN'S PRIVACY
MomentPlay is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13 years of age. If you believe we have inadvertently collected data from a child, please contact our Grievance Officer immediately for prompt deletion.
For users aged 13-18, parental consent is required as per DPDP Act, 2023 provisions for minors.
10. CONTENT CLASSIFICATION
In compliance with IT Rules 2021, all content on MomentPlay is classified as:
- U (Universal) — suitable for all ages
- U/A 7+ — parental guidance for children under 7
- U/A 13+ — parental guidance for children under 13
- U/A 16+ — parental guidance for children under 16
- A (Adult) — restricted to users 18 years and above
11. COOKIES & TRACKING
Our website (momentplay.in) uses essential cookies for functionality. Our mobile app does not use browser cookies but may use similar technologies for:
- Authentication tokens (stored securely)
- User preferences and settings
- Analytics (via Firebase)
You can opt out of analytics in your device settings. Essential cookies cannot be disabled as they are necessary for the service to function.
12. THIRD-PARTY LINKS
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of third-party sites. We encourage you to read their privacy policies before sharing any personal data.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. We will notify you of significant changes via:
- In-app notification
- WhatsApp message (if opted in)
- Email (if provided)
Continued use of MomentPlay after changes constitutes acceptance of the updated policy.
14. GOVERNING LAW & JURISDICTION
This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Durgapur, West Bengal, India.
Applicable laws include:
- Information Technology Act, 2000 and amendments
- Digital Personal Data Protection Act, 2023
- IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
- Consumer Protection Act, 2019
15. CONTACT US
For any privacy-related queries, requests or complaints:
- Email: studios@momentgroupofcompany.com
- Website: https://momentplay.in
- Address: Moment Enterprise, Durgapur, West Bengal, India