Use only what is needed. Keep private data private.

1. Scope and applicable framework

This policy applies to Magic+ websites, supporter pages, accounts, streamer tools, payments, OBS services, support communications and related launch features.

It is intended to operate alongside applicable Indian law, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 as applicable and as provisions come into force, and the Information Technology Act, 2000.

2. Data we may collect

The information collected depends on whether you browse, support as a guest, create a supporter account, operate a streamer profile or contact Magic+.

• Account data: name, email, authentication records and account preferences
• Supporter data: display name, messages, voice text, interaction choices, receipts and refund activity
• Streamer data: public handle, channel details, contact information and platform links
• Verification and payout data: legal name, PAN, bank or settlement details and related records
• Payment metadata: payment reference, amount, status, method category, timestamps, refunds and risk signals
• Technical data: IP address, device/browser information, logs, cookies, security events and approximate region
• Content data: messages, blocked-word matches, moderation actions, Magic Drop selections and Boost participation
• Communications: support enquiries, attachments and complaint history

3. Payment credentials

Payment checkout is handled through third-party payment providers. Magic+ does not ask users to send passwords, OTPs, complete card credentials or UPI PINs.

Magic+ may receive payment references, status, amount, method category, masked details, refund status and fraud-prevention signals required to operate the service.

4. How data is used

Personal data is used only for lawful purposes connected with operating, securing and improving Magic+.

• Create and secure accounts
• Display creator-approved public profile information
• Process support interactions and payment status
• Deliver receipts, refunds and account history
• Settle eligible streamer payments
• Apply moderation, fraud prevention and safety controls
• Operate Magic Goal, Wall, Drop and Boost
• Provide support and grievance handling
• Meet tax, accounting, legal and regulatory requirements
• Measure reliability and improve product performance

5. Consent and other lawful processing

Where consent is required, Magic+ will request clear consent for the stated purpose. You may withdraw consent through available account controls or the Contact Us page, subject to lawful retention and transactions already completed.

Some data may also be processed where necessary to provide a service you requested, comply with law, prevent fraud, protect users or meet other lawful purposes recognised under applicable Indian law.

6. Public and private information

A streamer’s display name, public handle, channel links and creator-selected page content may be visible publicly.

Legal name, PAN, bank details, payout information, private analytics, moderation settings, security records and OBS source information are not intended for public display.

Guest supporters do not receive a public profile. A guest display name may appear in a creator-enabled live interaction or supporter wall.

7. Sharing of data

Magic+ may share only the information reasonably required with service providers and authorities.

• Payment processors and banking partners
• Authentication, database, hosting, email and security providers
• Streamers receiving a supporter interaction and necessary payment-status information
• Professional advisers, auditors or service contractors under confidentiality obligations
• Government, law-enforcement, courts or regulators where legally required
• A successor operator during a lawful business transfer, subject to appropriate protection

8. Cookies, logs and analytics

Magic+ may use necessary cookies or similar technologies for login, security, preferences, fraud prevention and basic performance analytics.

Where non-essential analytics or marketing cookies are introduced, appropriate notice or consent controls will be provided as required.

9. Data retention

Data is kept only for as long as reasonably necessary for the purpose collected, account operation, disputes, refunds, fraud prevention, tax, accounting and legal compliance.

Closing an account does not require immediate deletion of transaction or compliance records that must lawfully be retained. Public profile content will be removed or deactivated when the account is closed, subject to technical backup cycles.

10. Security

Magic+ uses reasonable technical and organisational safeguards appropriate to a launch-stage online service, including role-based access, private admin routes, authentication controls, logging and restricted access to payout information.

No internet service can guarantee absolute security. Users must protect their credentials and report suspected unauthorised access promptly.

11. Your rights and choices

Subject to applicable law and verification, you may request information about personal data processing, correction of inaccurate data, completion of incomplete data, erasure where permitted, grievance handling and withdrawal of consent.

Where the Digital Personal Data Protection Act applies, eligible users may also exercise the right to nominate another individual in accordance with applicable requirements.

12. Children

Magic+ accounts and payments are intended for adults aged 18 or above.

Magic+ does not knowingly permit minors to independently create accounts, provide payment credentials or enter paid transactions. Suspected underage accounts may be restricted pending verification.

13. International service providers

Some hosting, security, authentication or support providers may process data outside the user’s state or outside India, subject to contractual safeguards and applicable legal restrictions.

Magic+ will not transfer personal data to a location prohibited by applicable Indian law.

14. Data breach response

Magic+ will investigate suspected personal-data breaches, take reasonable containment steps and provide notices to affected users or authorities where required by applicable law.

15. Changes and grievances

This policy may be updated as the product, service providers or legal requirements change. Material updates will be communicated through the website or account interface where reasonably practical.

Privacy requests and grievances can be submitted through the Contact Us page. Identity or account verification may be required before disclosing or changing personal data.