Privacy Policy — Ticgetz Gold

“Ticgetz” is a brand and trademark operated by RGB Net Productions, a sole proprietorship wholly owned by Mr. Trishar Arun, based in Bengaluru, Karnataka, India. RGB Net Productions is the sole legal entity responsible for the Ticgetz platform. References to “Ticgetz”, “we”, “us” or “our” in these documents mean RGB Net Productions.

For the purposes of the DPDP Act, RGB Net Productions is the “Data Fiduciary” that determines the purpose and means of processing your personal data in connection with Ticgetz Gold.

Personal data you provide: • Name, mobile number and email address • KYC information required to transact in bullion — such as PAN, date of birth, address and, where applicable, an identity document image and photograph • Bank account details (account number and IFSC) used to pay you the proceeds of a sale • Delivery address and recipient contact details when you redeem physical products • Nominee details, where you choose to record a nominee • Communications, feedback and support requests

Payment information is collected and processed directly by our payment aggregator; we receive only a transaction reference, status and masked instrument details. We never receive or store your full card number, CVV, UPI PIN, MPIN or bank password.

Information collected automatically: • Device and browser type, operating system and identifiers • IP address and approximate location • Usage data such as pages viewed, features used and transaction history • Cookies and similar technologies (see our Cookie Policy).

We process your personal data, on the basis of your consent or as otherwise permitted by law, to: • create and manage your account and authenticate you, including MPIN and biometric unlock; • execute, settle and record your purchases, sales, systematic plans and redemptions; • complete identity verification (KYC) and apply the transaction limits required by law and by our partner; • pay sale proceeds to your registered bank account and deliver redeemed products; • issue invoices and maintain the transaction records we are required to keep; • provide customer support and handle grievances; • detect, investigate and prevent fraud, money laundering and misuse; and • comply with legal, regulatory and tax obligations. We will seek fresh consent where required for any new purpose. We do not use your KYC data for marketing.

We may share your personal data with: • Augmont Goldtech Private Limited, our digital gold partner, which requires your identity, KYC, bank and delivery details to allocate metal, complete KYC, settle sales and fulfil physical redemptions; • our payment aggregator (Cashfree Payments) to process payments and refunds; • the logistics partner handling your physical delivery, limited to the recipient name, address and contact number; • service providers who host, analyse or support the Platform, under confidentiality obligations; • authorities, regulators or third parties where required by law, to enforce our terms, or to protect rights and safety; and • a successor in the event of a business transfer. We do not sell your personal data, and we do not share KYC data with advertisers.

We implement reasonable technical and organisational security measures aligned with industry standards to protect your data against unauthorised access, alteration, disclosure or destruction. These include encryption of data in transit, encrypted storage of identity documents with restricted access, one-time-password authentication, and an optional MPIN and biometric lock on your account.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach, we will act in accordance with applicable law.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy. Transaction, invoice and KYC records relating to bullion purchases are retained for the periods required under applicable tax, accounting and anti-money-laundering law — generally at least eight years from the date of the transaction — even after you close your account. When data is no longer required, we delete or anonymise it.

Subject to applicable law, you have the right to: • access a summary of the personal data we process about you; • seek correction, completion, updating or erasure of your personal data; • withdraw consent at any time (which will not affect processing already carried out, and may mean you can no longer transact); • nominate another individual to exercise your rights in the event of death or incapacity; and • grievance redressal. Please note that we may be unable to erase KYC and transaction records we are legally required to retain, and that withdrawing consent does not affect your title to metal already allocated to you. To exercise these rights, contact our Grievance Officer at care@ticgetz.com. We may need to verify your identity before acting on a request.

Ticgetz Gold is available only to users aged 18 and above and we do not knowingly open accounts for or process the personal data of a child (a person under 18). Consistent with the DPDP Act, we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe we have collected a child's data, please contact us so we can delete it and close the account.

We use cookies and similar technologies to operate, secure and improve the Platform, to keep you signed in, and to understand usage (including through Google Analytics). You can control cookies through your browser settings; disabling them may affect functionality, including your ability to stay signed in. See our Cookie Policy for details.

Some of our service providers may process data outside your state or country. Where personal data is transferred or processed by third parties, we take reasonable steps to ensure it is protected consistently with this Policy and applicable law, including any restrictions notified by the Government of India under the DPDP Act. KYC and bullion transaction data is processed within India.

We may update this Privacy Policy from time to time. The updated version will be posted on the Platform with a revised “Last updated” date. We encourage you to review it periodically. Continued use after changes take effect constitutes acceptance of the updated Policy.

For any privacy questions, requests or complaints, contact our Grievance Officer:

Grievance Officer: Trishar Arun RGB Net Productions (Sole Proprietorship) Bengaluru, Karnataka, India Email: care@ticgetz.com Phone: +91 82964 08498 Effective Date: 5 July 2026 Last updated: 5 July 2026