Home Membership Circulars Knowledge Hub Contact us

NCDEX Nidhi

Privacy Policy

Effective Date: 29th July 2026

This Privacy Policy (“Policy”) describes how National Commodity & Derivatives Exchange Limited (“NCDEX”, “we”, “us” or “our”) may collect, use, process, store, share, and protect Personal Data (as defined below) in connection with NCDEX NIDHI (“NCDEX Nidhi”), a platform-as-a-service (PaaS) based mutual fund distribution platform operated by NCDEX, accessible at [www.ncdexnidhi.com]. NCDEX Nidhi is intended to facilitate access to the Authorized User(s) (defined below) and visitors to technology-enabled functionalities.

This Policy applies to the mutual fund intermediaries / participants, including asset management companies, stock brokers, clearing members, mutual fund distributors, investment advisers brokers, and other intermediaries (“Intermediaries”) and the Intermediaries may allow such number of its employees to use NCDEX Nidhi on behalf of them (“Authorized Users”, “you” or “your”) and visitors who access and use NCDEX Nidhi as well as to the investors whose personal data is submitted to NCDEX Nidhi by the Authorized Users on their behalf.

This Policy applies only to the Personal Data (as defined below) processed by NCDEX through NCDEX Nidhi. It does not apply to any third-party websites, applications, or platforms (“Third-Party Sites”) that may be linked to or accessible from NCDEX Nidhi. NCDEX does not endorse any Third-Party Site and is not responsible for their content, security measures, or privacy practices. Any Personal data shared by an Authorized User with such Third-Party Sites shall be governed exclusively by the respective privacy policies and terms applicable to such Third-Party Sites.

By accessing or using NCDEX Nidhi, the Authorized Users and visitors acknowledge that they have read and understood this Policy. If the Authorized Users are submitting the Personal Data of investors, the Authorized Users represent that they have obtained valid consent from such investors for the processing of such Personal Data as described in this Policy and in accordance with Applicable Law, the Terms of Use and regulations. This Policy should be read alongside our Terms of Use and other applicable policies.

Authorized Users’ access to and use of this Policy are governed by and will be construed in accordance with laws of India, without regard to the principles of conflicts of law of other jurisdictions. Each party submits to the exclusive jurisdiction of the court in Mumbai, for the purposes of determining any dispute arising out of this Policy, its construction or the transactions contemplated by it.

1. DEFINITIONS

In this Policy, unless the context otherwise requires, the following terms shall have the meanings ascribed to them below. All capitalized terms used herein but not specifically defined shall have the meanings ascribed to them under the Terms of Use.

    • “AMFI” means the Association of Mutual Funds in India;
    • “Applicable Laws” means all statutes, enactments, acts of legislature or parliament, laws, ordinances, rules, bye-laws, regulations, notifications, guidelines, policies, directions, directives, and orders of any governmental authority, regulatory body, or exchange, including but not limited to the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“IT Rules”), the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection (DPDP) Rules, 2025 (“DPDP Rules”), Securities and Exchange Board of India Act, 1992, the SEBI (Mutual Funds) Regulations, 1996, the Prevention of Money Laundering Act, 2002, as applicable from time to time and all relevant circulars and directives issued by SEBI, RBI, AMFI, DPBI or any other competent authority, as amended from time to time;
    • “Authorized Users” shall mean the employees, representatives, or personnel of such Intermediaries who are authorized to access and use the platform on behalf of the relevant Intermediary.
    • “DPBI” means Data Protection Board of India;
    • “Intermediary” shall include market participants and any other entity accessing the NCDEX Nidhi platform and entering into service agreements with NCDEX.
    • NCDEX Nidhi “Personal Data” means any data or information relating to an identified or identifiable individual as defined under Digital Personal Data Protection Act, 2023, including, without limitation, information such as name, mobile number, email address, PAN, and any other information capable of identifying such individual. ;
    • “Specified Purpose” means the particular purpose(s) for which the Authorized User accesses, avails, uses, or interacts with NCDEX Nidhi and/or the facilities, products, features, functionalities, and services made available thereon, including for onboarding, verification, facilitation, execution, processing, reporting, compliance, support, operational, security, regulatory, and other activities undertaken in connection with NCDEX Nidhi, in accordance with this Policy, the Terms of Use, Applicable Laws and respective Service Agreements;
    • “SEBI” means the Securities and Exchange Board of India;
    • “RBI” means the Reserve Bank of India; and
    • “Intermediary Data” means information provided by the Intermediary to NCDEX for the limited purpose of analyzing, contacting, and onboarding user to avail the services through NCDEX Nidhi. Such information may include, without limitation: business type, city, business incorporation details, GST registration details, bank account information (including account name and number), preferred mode of payment (e.g., credit card, debit card, net banking, cash on delivery, UPI), and basic contact details necessary to reach out to the Authorized User.

2. DATA COLLECTION

  1. NCDEX, may collect, receive, access, store, process, use, disclose, transfer, or otherwise handle Personal Data in connection with the access to and use of NCDEX Nidhi and for the Specified Purpose, in accordance with this Policy.
  2. The categories of Personal Data processed through NCDEX Nidhi may include, inter alia: (i) Personal information about investor; (ii) Personal information about the distributor; (iii) Transaction details; (iv) Holdings

3. Information that you provide to us

You may be required to give us Personal Information about yourself while visiting NCDEX Nidhi or corresponding with us by phone, e-mail, chat or when we troubleshoot problems reported by you. The information you give us may include without limitation:

    • Personal details, including but not limited to date of birth, age, marital status, birthplace, nationality, mother tongue, photographs, signature specimen and Government-issued identifiers including but not limited to Aadhar, PAN.
    • Contact information, including but not limited to name, postal address, telephone number and email address;
    • Financial information, including but not limited to bank account details, credit/debit card details, credit score/ credit information report, e-KYC, billing information, tax information and payroll information (as applicable); and
    • Other information, that NCDEX is required to collect as per specific mandate from bank or payment gateway or as a requirement under Applicable Law, regulation, rule or statute in India.

We may also occasionally require you to participate in optional surveys. Your Personal Data may be collected through such surveys. We may also require additional information about you for performing ongoing due diligence (necessitated under the Applicable Law) based on your risk assessment, transaction value, etc.

You must ensure that all your data and/or information shared with us is accurate, correct and complete, at all times. You understand that you must promptly inform us of any changes to your data and/or information which may impact your use of our NCDEX Nidhi. We shall not be liable or responsible for any loss or damage that may occur to you or other third parties on account of provision of incorrect data and/or information provided by the User.

4. Information that we collect automatically

With regard to each of your visits to NCDEX Nidhi, we may automatically collect and analyse the following demographic and other information:

    • Device Information: Information obtained with consent from your mobile phone or other access device. It includes device ID, device type, geo location information, connection information, mobile network information, transactional and promotional SMS, communication information including contacts and call logs.
    • Technical information: Information including the internet protocol (IP) address used to connect your device to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform and other similar information.
    • Access Information: Information including the full uniform resource locators (URL) clickstream to, through and from NCDEX Nidhi including date and time; information about transactions and trades executed or attempted to be executed by you; material or information that you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information including scrolling, clicks, and mouse-overs, and methods used to browse away from the page and any phone number used to call our customer service number.
    • Transactional Information: For enabling you to make payments while accessing NCDEX Nidhi , we may store your financial information such as your bank account or details mentioned on your credit cards or debit cards, or other payment instrument details etc. that are required for a successful transaction. We also store transaction details such as amount spent, counterpart details, beneficiary information, account balance, transaction ID, date and time of transaction. Further, we may also store information relating to your income, lifestyle levels and usage pattern.
    • Correspondence Information: For quality and training purposes or for its own protection, NCDEX may monitor or record its telephone conversations with you or anyone acting on your behalf. By communicating with NCDEX, you acknowledge that your communication may be overheard, monitored, or recorded without further notice or warning.
    • Cookies: We also collect anonymous information through our use of cookies and web beacons. We may collect and store any information you provide us when you use NCDEX Nidhi, including when you add information on a web form, add or update your account information, participate in community discussions, chats, or dispute resolutions, or when you otherwise correspond with us regarding NCDEX Nidhi .

In addition to above, for the mobile application of NCDEX Nidhi, we may collect any other authorization or information that enables NCDEX to provide a smooth mobile experience, including but not limited to, SMS access for auto OTP verification, camera/gallery/contacts access and any other permissions required to enable certain functionalities within the mobile application.

5. Information that we receive from other sources

We may receive information about you if you use any of the other websites/apps we operate or the other services we provide. Such data may be shared internally and combined with data collected through use of NCDEX Nidhi. We also work closely with select third parties including, for instance, subcontractors such as advertising networks, analytics providers, search information providers and may receive information about you from such sources. We collect non-personally identifiable information to track the total number of visitors to NCDEX Nidhi in aggregate form and identify the type of internet web browser and operating system used by the visitor. This information allows us continuously to improve NCDEX Nidhi.

6. PURPOSE OF DATA PROCESSING

  1. We shall process Personal Data solely for the Specified Purpose for which such Personal Data has been collected or made available through NCDEX Nidhi and shall not process such Personal Data for any purpose that is incompatible with or unrelated to the disclosed purpose, except as otherwise required or permitted under Applicable Laws.
  2. NCDEX shall ensure that the processing of Personal Data is limited to what is necessary for the Specified Purpose and carried out in accordance with Applicable Laws.
  3. Further, NCDEX may use the Personal Data collected/ stored for providing or improving the services, user experience, risk checks, strengthening the security checks, for analysis and for offering new features in the existing services or offering altogether new product/ service. NCDEX may collect and use some of Authorized User information in an aggregated form to compile statistical and demographic profiles for its business and marketing activities and to customise its services for the Authorized User.

7. DATA SHARING AND DISCLOSURE

  1. We may share the Personal Data processed through NCDEX Nidhi with the following entities/ or in the following circumstances for the Specified Purpose and on need-to-know-basis:
    • For the purpose of providing backend technology and transaction processing services, NCDEX may engage third-party processors (“Data Processor”) which processes transaction-related data through integrations with NCDEX Nidhi solely on the instructions of NCDEX. Such third-party processors act merely as a data processor and do not independently determine the purpose or means of processing Personal Data or User Data.
    • Service Providers: Technology vendors and communication platforms and other authorized Data Processors, third-party vendors, consultants and/ or service providers engaged for the operation, maintenance, hosting, support, or facilitation of services in relation to NCDEX Nidhi;
    • Product Partners: Entities, including asset management companies (“AMCs”), registrars and transfer agents (“RTAs”), brokers, banks, clearing corporations, depositories, and other financial sector participants, to the extent necessary for facilitating, processing, validating, settling, or reporting mutual fund transactions and related activities; and
    • Regulatory Authorities: Governmental, judicial, statutory, law enforcement, or regulatory authorities including but not limited to SEBI, DPBI, AMFI, RBI or income tax authorities, where such disclosure is required under Applicable Laws or pursuant to a valid legal or regulatory requirement.
    • Business Transfers: NCDEX and its group entities or affiliates (to the extent Personal Data is collected by them) may, in compliance with Applicable Laws, share/transfer/assign the Personal Data and other information of the Authorized User with any other business entities, in the event of a merger, sale, re-organization, amalgamation, joint ventures, assignment, restructuring of business or transfer or disposition of all or any portion of NCDEX’s business.
    • Explicit Consent: NCDEX will not share Personal Data for any other purpose, without prior consent of the Authorized User.
  2. Processing of Personal Data by the service providers, Data Processors, product partners or any third party shall be subject to confidentiality, security, and data protection obligations under the Applicable Law and/or contractual obligations between NCDEX and such Data Processors or third parties.

8. DATA RETENTION

  1. Personal Data shall be retained to fulfil the Specified Purpose for which such Personal Data was collected or processed, for resolution of disputes, for the purpose of investigations or ongoing prosecutions or in case of any suspicious/illegal transactions, for enforcement of any agreements, and/ or for any other legitimate or lawful purpose permitted under Applicable Laws. Upon fulfilment of such Specified Purpose, the Personal Data shall be deleted, erased, or anonymized, unless its retention is required to comply with applicable legal, regulatory, statutory, compliance, or enforcement requirements. Where Personal Data is held by a Data Processor on behalf of NCDEX, deletion, erasure, or anonymization shall be affected in accordance with the timelines and procedures set out in the written agreement between NCDEX and such Data Processor, and any request by a Data Principal in this regard shall be addressed to NCDEX, which shall coordinate with the relevant Data Processor.
  2. The retention period may be extended in accordance with the Applicable Law. We make no warranties and shall not be liable regarding non-availability or non-retention of any information and/or data provided by you beyond the deletion of your account.

9. DATA SECURITY

  1. NCDEX implements reasonable and appropriate technical, organizational, physical, and administrative security measures to safeguard Personal Data processed through NCDEX Nidhi against unauthorized access, collection, use, disclosure, alteration, loss, destruction, or misuse. Such measures are designed having regard to the nature and sensitivity of the Personal Data, the risks associated with its processing, applicable legal and regulatory requirements, and generally accepted industry standards and practices. Where Personal Data is processed by a Data Processor, the security obligations of such Data Processor are set out in its written agreement with NCDEX and are limited to the systems, environments, and processing activities within such Data Processor’s control and NCDEX shall remain responsible to Data Principals in respect of all processing carried out on its behalf.
  2. NCDEX may implement security measures including encryption protocols, access restrictions and controls, authentication mechanisms, secure server infrastructure, logging and monitoring systems, network and application security controls, backup and recovery procedures, and other reasonable security practices intended to preserve the confidentiality, integrity, availability, and resilience of Personal Data processed through NCDEX Nidhi.
  3. NCDEX may engage Data Processors, authorized third-party service providers, infrastructure providers, payment service providers, cloud hosting providers, or technology partners in connection with the operation and maintenance of NCDEX Nidhi. NCDEX shall endeavor to ensure that such entities are subject to appropriate confidentiality, security, and data protection obligations consistent with Applicable Laws and industry practices.
  4. While NCDEX endeavors to adopt commercially reasonable security safeguards and industry-standard security practices, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, NCDEX does not guarantee or warrant that NCDEX Nidhi or any systems used in connection therewith shall be entirely immune from cyberattacks, hacking attempts, malware, unauthorized access, data breaches, or other security incidents.
  5. NCDEX reserves the right to monitor, investigate, prevent, mitigate, and respond to any suspected or actual security incident, fraudulent activity, unauthorized access, misuse, or violation of Applicable Laws in using NCDEX Nidhi, including through the use of system logs, IP addresses, device information, access records, and other relevant technical information, to the extent permitted under Applicable Laws.

10. AUTHORIZED USER CONSENT

  1. The Authorized User hereby provides its express consent, including electronic consent where applicable, for the collection, access, storage, processing, use, and sharing of Personal Data through NCDEX Nidhi for the Specified Purpose and in accordance with this Policy, the Terms of Use, and Applicable Laws and regulations.
  2. The Authorized Users shall be responsible for maintaining the confidentiality and security of its login credentials, authentication details, passwords, OTPs, and other access mechanisms associated with NCDEX Nidhi, and shall ensure that the same are not disclosed or made accessible to any unauthorized person.
  3. The Authorized Users acknowledge that the Personal Data shall also be utilized to send Authorized User promotional emails, however, User will be provided the ability to opt-out of receiving such emails. If Authorized User opt out, we may still send you non-promotional emails, such as emails about the services of NCDEX Nidhi.

11. RIGHTS OF DATA PRINCIPALS

  1. Subject to Applicable Laws, individuals whose Personal Data is processed in connection with NCDEX Nidhi, may exercise the following rights against NCDEX, namely the right to:
    • seek access to information relating to the processing of their Personal Data and the identities of any Data Processors or other entities with whom Personal Data has been shared;
    • request correction, completion, updating, or erasure of their Personal Data;
    • withdraw consent, where the processing of Personal Data is based on consent;
    • avail grievance redressal mechanisms in relation to the processing of their Personal Data; and
    • nominate another individual to exercise such rights in the event of death or incapacity, in accordance with Applicable Laws.
  2. Such rights shall be exercisable subject to legal and regulatory requirements and contractual obligations agreed between NCDEX and Data Processors, including any obligation relating to retention, verification, record maintenance, fraud prevention, regulatory reporting or any compliance under Applicable Laws.

12. MINORS

NCDEX Nidhi is intended solely for use by persons who are competent to contract under Applicable Laws and is not intended for use by individuals below the age of 18 (eighteen) years. Authorized Users are requested to ensure that Personal Data relating to minors is not submitted or made available through NCDEX Nidhi except in accordance with Applicable Laws and regulatory requirements.

13. COOKIES AND SIMILAR TECHNOLOGIES

  1. NCDEX Nidhi may use cookies, pixel tags, and similar tracking technologies (“Cookies”) to enable and enhance the functionality, security, performance, and user experience of NCDEX Nidhi. Such Cookies may be used for purposes including user authentication, session management, remembering user preferences, analyzing usage patterns, improving platform functionality, maintaining security, and facilitating efficient navigation of NCDEX Nidhi.
  2. Cookies generally do not collect Personal Data directly; however, certain technical information associated with the Authorized Users’ device or browser, including IP address, browser type, device identifiers, operating system, access time, and browsing behavior, may be collected and processed in connection with the use of such technologies.
  3. Most web browsers automatically accept Cookies by default. Authorized Users may modify their browser settings to decline or disable Cookies; however, doing so may affect the availability, functionality, or performance of certain features of NCDEX Nidhi. NCDEX does not control the use of Cookies by any Third-Party Sites or third-party service providers that may be linked to or integrated with NCDEX Nidhi.

14. THIRD PARTY LINKS AND SERVICES

  1. NCDEX Nidhi may contain links to, integrations with, or provide access to Third-Party Sites. Such Third-Party Sites are governed by their own terms, privacy policies, and practices, and NCDEX neither controls nor endorses such Third-Party Sites or their content, services, security measures, or privacy practices.
  2. Authorized Users acknowledge and agree that NCDEX shall not be responsible or liable for the availability, accuracy, legality, security, or content of any Third-Party Sites, or for any collection, processing, storage, disclosure, or handling of Personal Data by such Third-Party Sites. Access to and use of any Third-Party Sites shall be at the Authorized User’s sole risk and subject to the applicable terms and policies of such Third-Party Sites.

15. CHANGES TO THIS PRIVACY POLICY

  1. NCDEX reserves the right to amend, modify, update, or revise this Policy from time to time to reflect changes in Applicable Laws, regulatory requirements, business practices, technology, or the functionality of NCDEX Nidhi. Any such updated version of the Policy shall become effective upon being published or made available through NCDEX Nidhi, unless otherwise stated.
  2. Authorized Users are encouraged to periodically review this Policy to remain informed about the manner in which Personal Data is collected, processed, used, stored, and protected. Continued access to or use of NCDEX Nidhi following any modification to this Policy shall constitute the Authorized User’s acknowledgement and acceptance of such revised Policy.

16. GRIEVANCE OFFICER

If the Authorized User/any other person whose Personal Data is processed by NCDEX has any queries, concerns, or grievances relating to the collection, processing, use, disclosure, or protection of Personal Data under this Policy or in connection with NCDEX Nidhi, the Authorized User/ such other person may contact the designated Grievance Officer at or write to us at the following address: Email ID: askmf@ncdex.com; Contact Number: (+91-22) 1800-266-2339 (Toll-Free)