Payment Security

How a payment actually works here

When you confirm a booking, we hand the payment partner three things: the amount, the currency and a reference for your booking. You are then taken to the partner's own secure page to enter your card, net-banking or UPI details. That page belongs to them; we never see what you type into it.

The partner authorises the payment with your bank — including any additional authentication your bank requires, such as a one-time password sent to you by the bank itself — and tells us whether it succeeded. Only on success do we issue your ticket or voucher.

The practical consequence is worth stating plainly: your full card number, CVV, net-banking password and UPI PIN never reach our servers. They cannot be leaked from a system that never held them.

What we keep, and why

Against each booking we retain the amount and currency, the date and time, the payment status, the method in general terms, and the payment partner's transaction reference. That set is what lets us reconcile a booking, answer a question about a payment, and send a refund back to where it came from. It is deliberately not enough to initiate a new charge.

Refunds go only to the original payment method used for the booking. We cannot redirect one to a different card or account — a rule of the payment networks that also happens to be one of the more effective defences against refund fraud.

Four things we will never ask you for

How to tell a genuine request from a fraudulent one

Travel is a favourite target for payment fraud, because bookings involve real money, real urgency and a customer who is often about to travel. These are the marks of a genuine JackpotsWorld payment:

• It starts on this website. A genuine payment page is reached by booking on jackpotsworldtours.com. Check the address bar says jackpotsworldtours.com before you begin — not a lookalike with an extra word, a hyphen or a different ending.
• It goes to a business account, through a payment partner. We never ask for money to be sent to a personal bank account, a personal UPI ID, a wallet or by cash to an individual.
• It comes from our address. Our email comes from @jackpotsworldtours.com. A message from a free mailbox — gmail, outlook, yahoo — is not from us, however closely the name matches.
• It is not a threat. Fraud runs on urgency: a ticket about to be cancelled, a refund about to lapse, a booking that will be released in ten minutes unless you pay right now. We do not work that way. A real deadline of ours can always be confirmed by calling the number on this page.
• It does not need a screen-sharing app. We will never ask you to install AnyDesk, TeamViewer or any remote-access tool, or to scan a QR code in order to receive a refund. Scanning a QR code sends money; it never collects it.

If you think something is wrong

1. Stop. Do not complete the payment, and do not share anything further.
2. Call us on +91 9177847799 using the number on this page rather than one from the message you received. We will tell you within a minute whether the request is ours.
3. Tell your bank immediately if you have already shared a card number, a PIN or an OTP, and ask them to block the card. Speed matters more than anything else at that point.
4. Report it. In India, cyber fraud can be reported on the national cybercrime helpline 1930 and at cybercrime.gov.in. Reporting quickly materially improves the chance of the money being stopped.
5. Forward the message to us at support@jackpotsworldtours.com so we can warn others.

Keeping your own side secure

• Use a strong, unique password for your account here, and do not reuse it elsewhere.
• Turn on whatever additional authentication your bank offers for card and UPI transactions.
• Avoid entering payment details on public or shared Wi-Fi where you can.
• Check your card and bank statements after booking, and query anything you do not recognise with your bank first.
• Sign out when you have finished on a shared device.

Our side

The site is served over HTTPS throughout. Access to booking and payment records is restricted to the people who need it for their work and is controlled by individual accounts rather than shared logins. Payment credentials are handled entirely by our authorized payment partners, whose own systems are subject to the security standards required of payment processors. Where a security issue affects your data, we will tell you and the relevant authority as required by law — see section 9 of the Privacy Policy.

If you believe you have found a security vulnerability on this website, please report it to support@jackpotsworldtours.com rather than disclosing it publicly, and give us a reasonable opportunity to fix it.