Booking travel means handing over real personal information — a passport number, a date of birth, a phone number that will be used to reach you abroad. This policy sets out exactly what we take, what we do with it and what we will not do with it. It is written for this business and its three services, not adapted from a template for a larger one.
1.Who we are
JackpotsWorld Tours & Travels is a travel agency constituted as a proprietorship and based in Hyderabad, Telangana, India. We operate the website at jackpotsworldtours.com and book flights, hotels and tour packages. In this policy "we", "us" and "our" mean JackpotsWorld Tours & Travels, and "you" means anyone who uses the website or books through us.
For the purposes of applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 with the rules made under it, we are the party that determines why and how your personal data is processed in connection with our own services.
2.What this policy covers
This policy covers personal data we collect through jackpotsworldtours.com, by email at support@jackpotsworldtours.com, by telephone on +91 9177847799, and in the course of arranging and servicing a booking.
It does not cover what an airline, hotel, tour operator or payment partner does with your data under its own privacy policy once we have passed the information needed to fulfil your booking. Those organisations are independently responsible for their own handling of it, and section 5 explains what reaches them.
3.Information we collect
3.1 Information you give us
- Identity and contact details — name as it appears on your travel document, gender or title where an airline requires it, date of birth, email address, telephone number and postal address.
- Travel document details — passport number, issuing country, date of issue and expiry, and for domestic travel the type and number of the photo ID you will present. We collect these only where the airline, hotel or destination requires them for the booking to be issued.
- Details of fellow travellers — the same information for anyone you book on behalf of. If you give us someone else's details you confirm you are entitled to do so and that they know this policy applies to them.
- Booking preferences — seat, meal and room preferences, bedding, and any accessibility requirement or assistance you ask us to arrange with an airline or hotel.
- Correspondence — the content of your emails and messages to us, and notes taken during telephone calls about your booking.
- Account details — the email address and password credentials for an account on the site, if you create one.
Health and accessibility information. If you tell us about a medical condition, a mobility requirement or a dietary need so that we can arrange assistance, that information is treated as sensitive. We use it only to make the arrangement you asked for, pass it only to the airline, hotel or operator that has to act on it, and delete it once the trip is complete and any related claim is closed.
3.2 Information collected automatically
- Technical data — IP address, browser type and version, device type, operating system, screen size and language settings.
- Usage data — pages visited, searches run on the site, the time and duration of a visit, and the page that referred you to us.
- Cookies and local storage — small files and browser storage used to keep you signed in, remember your light or dark theme choice, hold a search or a booking in progress, and keep the site secure. The Cookie Policy lists these by purpose.
3.3 Information from other sources
We receive booking status, ticket numbers, confirmation references, schedule changes and cancellation notices from airlines, hotels and tour operators, and payment status and reference numbers from our authorized payment partners. Where you reach us through an advertisement or a referral partner, we may receive the fact that the referral occurred.
4.Why we use it
We use your personal data for the following purposes, and for no others:
- To make and issue your booking. Searching fares and availability, reserving with an airline, hotel or operator, issuing tickets and vouchers, and sending confirmations.
- To service the booking afterwards. Date changes, cancellations, refunds, reissues, passing on schedule changes and answering your questions about it.
- To take payment and make refunds. Passing the amount and reference to our payment partner, reconciling what has been paid, and returning money to the original payment method.
- To meet legal and regulatory obligations. Tax and accounting records, statutory invoicing, and information airlines are required to submit to border and aviation authorities.
- To keep the service secure. Detecting and preventing fraud, unauthorised access and abuse of the website.
- To improve the site. Understanding which pages and searches are used so we can fix what is not working.
- To send you service messages. Booking confirmations, payment receipts, itinerary updates, departure reminders and refund notifications. These are not marketing and are sent for as long as you hold a live booking with us.
- To send you offers, if you have asked for them. Only with your consent, and only until you withdraw it.
Our lawful basis is your consent for optional processing such as marketing and non-essential cookies, the necessity of processing to perform the booking contract you have entered into, and compliance with a legal obligation for records we are required to keep.
5.Who we share it with
We do not sell your personal data. We do not rent it, and we do not share it with third parties for their own marketing. We share it only with the following recipients, and only with what each of them actually needs:
- Airlines, hotels and tour operators — the traveller names, contact details, travel document details and preferences required to issue and honour the reservation you have asked for. This is the core of what we do; a booking cannot be made without it.
- Our authorized payment partners — the transaction amount, currency and a booking reference, so that a payment can be taken or a refund returned. Section 6 explains what we do and do not hold ourselves.
- Technology providers — the hosting, email delivery and infrastructure providers that run the website and send our transactional messages, acting on our instructions and bound to confidentiality.
- Professional advisers — our accountants and, where necessary, legal advisers, in connection with our statutory records or a dispute.
- Government and regulatory authorities — where we are required by law to disclose information, including advance passenger information that airlines must submit for international travel, and any disclosure required by a court order or a lawful demand from an authorised agency.
6.Payment information
Payments are securely processed through our authorized payment partners. Card numbers, CVV codes, expiry dates, net-banking credentials and UPI PINs are entered on the payment partner's own secure page and are never stored on our servers.
What we retain against a booking is the amount, the currency, the date, the payment status, the method used in general terms, and the partner's transaction reference. That is enough to reconcile the booking and to process a refund, and not enough to charge you again.
Refunds are returned only to the original payment method used for the booking. We do not accept a substitute account or card, which is both a requirement of the payment networks and one of the more effective defences against refund fraud.
We will never ask you for your card PIN, your net-banking password, an OTP or your UPI PIN — not by telephone, not by email, not by any messaging application. Anyone who does is not us. See Payment Security.
7.Transfers outside India
Travel is international by nature. When you book a flight to, a hotel in, or a package covering another country, the personal data needed for that booking necessarily reaches the airline, hotel or operator concerned and may be stored or processed in the country of travel or in the country where that supplier operates. Border and aviation authorities of the destination may also require advance passenger information under their own laws.
Where we transfer data outside India ourselves, we do so only for the purposes described in section 4, only to recipients bound by confidentiality obligations, and in accordance with applicable Indian law. We cannot, however, place Indian law on a foreign government's own legal powers, and we say so plainly rather than implying a protection we cannot deliver.
8.How long we keep it
- Booking records, invoices and payment references — retained for as long as required under applicable tax, accounting and company law, which in India is generally at least eight financial years from the end of the relevant year.
- Travel document details — retained until the trip is complete and any refund, claim or dispute connected to it is closed, and deleted thereafter unless a statutory record requires otherwise.
- Health and accessibility information — deleted once the trip is complete and any related claim is closed.
- Account details — retained while your account is open, and deleted on closure other than what forms part of a statutory booking record.
- Correspondence — retained for up to three years from the last contact, so that a later question about an old trip can still be answered.
- Marketing consent records — retained for as long as we need to prove that consent was given and to honour its withdrawal.
9.How we protect it
The website is served over HTTPS, so traffic between your browser and us is encrypted in transit. Access to booking data is restricted to the people who need it to do their work, and is controlled by individual accounts rather than shared logins. Payment credentials are never handled by our systems, as section 6 describes. Backups are taken so that a failure does not become a loss.
No system is perfectly secure, and any organisation claiming otherwise is overstating its position. If a breach occurs that is likely to affect you, we will notify you and the relevant authority as required by applicable law, and tell you what happened, what data was involved and what you should do.
10.Your rights
Subject to applicable law, you may ask us to:
- Give you a copy of the personal data we hold about you, and a summary of the processing described in this policy.
- Correct anything inaccurate, incomplete or out of date. Note that a name already ticketed by an airline is governed by that airline's rules, so correcting our record does not by itself correct the ticket.
- Erase personal data we no longer need, other than records we are legally required to retain under section 8.
- Withdraw consent you have given, at any time, including consent to marketing and to non-essential cookies. Withdrawal does not affect processing carried out before it.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Complain to us, and afterwards to the relevant data protection authority if you remain dissatisfied.
Write to support@jackpotsworldtours.com from the email address on your booking, or call +91 9177847799. We will ask you to verify your identity — a request of this kind is exactly the sort of thing an impersonator makes — and will respond within 30 days of a verified request.
11.Cookies
We use cookies and browser storage that are strictly necessary to run the site — keeping you signed in, holding a booking in progress, remembering your theme choice and protecting against abuse — together with limited analytics to understand how the site is used. The Cookie Policy explains each category, what it is for, and how to control it in your browser.
12.Marketing messages
We send marketing only to people who have asked for it. Every marketing email carries a working unsubscribe link, and you can also tell us to stop at any time by writing to the support address. Unsubscribing from marketing does not stop service messages about a live booking — a gate change or a refund confirmation is something you need whether or not you want our offers.
13.Children
The website is intended for adults. We do not knowingly allow anyone under 18 to create an account or make a booking with us. Children can of course be travellers on a booking; where they are, their details are provided by the booking adult, who confirms they are entitled to provide them. If you believe a child has given us personal data directly, write to us and we will delete it.
14.Other websites
Our pages and confirmations link to airlines, hotels, payment partners and other third parties. Following such a link takes you to a site we do not control and whose privacy practices are its own. This policy stops at our boundary; read theirs when you arrive.
15.Changes to this policy
We may update this policy as our services, our systems or the law change. The current version always sits at this address with the effective date shown at the top. Where a change materially affects how we use data you have already given us, we will tell you by email or by a notice on the site before it takes effect.
16.Contact and grievances
Questions about this policy, requests to exercise your rights, and privacy complaints all go to the same place. Please mark a complaint clearly as a Grievance so it reaches our Grievance Officer.
- Email: support@jackpotsworldtours.com
- Phone: +91 9177847799, 24 hours a day, 7 days a week
- Address: JackpotsWorld Tours & Travels, Hyderabad, Telangana, India
We acknowledge grievances within one working day and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate the matter to the data protection authority competent under applicable Indian law.
Related documents
This policy sits alongside the terms you book under and the way we handle money.