Privacy Policy

1. Scope and data fiduciary

This Policy applies to the BIGREWARD website, wallet, offers, support and related services. BIGREWARD is a product of Karvi Digital Solutions, a Micro Enterprise (Services) registered under Udyam Registration Number UDYAM-AP-03-0128420, located in Tanuku, AP. Karvi Digital Solutions determines why and how personal data is processed for the service, subject to applicable Indian law.

2. Personal data we may collect

Account and profile data

Name, email address, authentication identifiers, account status, country and information you voluntarily provide.

Offer and reward activity

Campaigns viewed or started, BIGREWARD click IDs, event names, advertiser conversion/postback status, timestamps, BR Coin activity, approvals, reversals and reward history.

Device, network and security data

IP address, country inferred from IP, browser and user-agent information, device or session identifiers, operating-system category, referral information and fraud/security indicators such as proxy, VPN, datacentre, duplicate-device or unusual-location signals.

Redemption and support data

Mobile number, UPI or other payout details required for the chosen reward method, request status, WhatsApp preference, support messages and evidence you submit. Payment credentials are used only for processing and verification and are access-restricted.

Analytics and communications

Page interactions, aggregated usage metrics, email delivery status and communication preferences where enabled.

3. Why we process personal data

• Create and secure your account and maintain your session.
• Display device- and country-eligible campaigns.
• Create click attribution, receive postbacks and validate offer events.
• Calculate, approve, reverse and redeem BR Coins.
• Detect duplicate, fraudulent, manipulated or otherwise invalid activity.
• Provide customer support and resolve tracking or reward disputes.
• Maintain accounting, audit, security and legal records.
• Measure and improve the platform, subject to applicable consent requirements.
• Comply with law, enforce our Terms and protect users and partners.

Where consent is the applicable basis, you may withdraw it using the Contact process. Withdrawal does not make earlier lawful processing invalid, and some service functions may no longer work afterward.

4. When data is shared

We may share limited data with:

• Advertisers and offer partners to attribute a click or event, validate eligibility and resolve disputes. BIGREWARD normally sends a pseudonymous click identifier rather than your account email.
• Payout and communications providers to deliver an approved reward or service message.
• Hosting, database, security and analytics providers acting for platform operations under appropriate controls.
• Professional advisers, regulators or authorities where necessary to comply with law, establish rights or prevent harm.
• A successor organisation in a lawful merger, restructuring or transfer, subject to appropriate notice and safeguards.

We do not sell personal data. Third-party advertisers independently control data you submit directly on their websites or apps; their privacy policies apply to that processing.

5. Cookies, sessions and attribution

BIGREWARD uses essential browser storage and similar technologies to keep you signed in, remember preferences, secure sessions and operate offer attribution. A campaign click may generate a unique identifier that is passed to the advertiser in its declared click-ID parameter and returned to BIGREWARD through a server postback when an event occurs.

Blocking essential storage or attribution may prevent sign-in, tracking or reward eligibility. Any non-essential advertising or analytics technology will be handled according to applicable notice and consent requirements.

6. Retention

We keep personal data only for as long as reasonably necessary for the purpose collected, including active account use, pending rewards, fraud prevention, support, audits, disputes and legal obligations. Retention periods vary by record type. Data may be deleted, anonymised or securely archived when no longer required, subject to legitimate legal or operational holds.

7. Security

We use access controls, protected credentials, encryption in transit, audit records, fraud monitoring and service-provider safeguards designed to protect data. No online system can be guaranteed completely secure. Please protect your Google account and notify us promptly if you suspect unauthorised BIGREWARD activity.

8. Your privacy rights

Subject to applicable law, you may request information about your personal data, correction or completion of inaccurate data, erasure where permitted, withdrawal of consent, grievance redressal and nomination where applicable. We may verify your identity and may retain information that must lawfully be kept or is necessary to establish or defend legal claims.

Submit a request through the Contact page. Clearly state “Privacy Request” and the account email concerned. Do not send passwords or one-time codes.

9. International processing

Some service providers may process data outside your state or outside India. Where this occurs, Karvi Digital Solutions will use contractual, technical and organisational measures appropriate to applicable law and any government restrictions on cross-border transfers.

10. Children

BIGREWARD is intended only for people aged 18 or older. We do not knowingly permit children to create reward accounts. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

11. Changes to this Policy

We may update this Policy when the product, providers or legal requirements change. The effective date will be updated and material changes will be communicated through an appropriate channel.

12. Privacy contact and grievances

For privacy requests or grievances, contact Karunakar, Grievance Officer, at [email protected] or use the Contact page. Business location: Tanuku, AP. Include enough information to identify your account and request, but never include a password, OTP or full banking credential.