Security
Last updated: 1 July 2026 · genierewards.app
1. Infrastructure
Genie Rewards runs on servers located in India. All traffic is encrypted with TLS; data is encrypted at rest. Access to production systems is limited to a small number of engineers with hardware-key authentication.
2. Payments
We never see or store card or UPI details. All payment collection is handled by Razorpay, a PCI DSS Level 1 certified payment gateway.
3. Fraud prevention
Diner identity is anchored to a WhatsApp-verified number. Spins are limited per diner per visit and screened with device and velocity checks. Redemptions are code-verified so a reward cannot be claimed twice.
4. Access control & audit
Role-based access separates staff, managers and owners. Sensitive actions — including every win-probability change — are written to an immutable audit trail visible to the account owner.
5. Reporting a vulnerability
Found something? Please write to hello@parel.co. We acknowledge reports within 48 hours and appreciate responsible disclosure.