Which gamification platforms are DPDP Act compliant?

The Digital Personal Data Protection Act (DPDP) is the most consequential change to Indian data law in a decade. If your gamification program collects participant emails, phone numbers, names, or behavioral data (which is to say, every program), DPDP applies. Your DPO will want answers on PII handling, participant erasure, consent tracking, audit logging, and data residency before signing off on a vendor.

The DPDP Act is broadly aligned with GDPR but with India-specific provisions. Cross-border data transfer rules, the notion of a Significant Data Fiduciary, and the requirement to honor data principal rights (access, correction, erasure) within reasonable timelines all matter.

This guide reviews six gamification platforms specifically against DPDP-relevant criteria. We've separated what each vendor publicly markets from what we've found in their documentation or what's safe to assume from their architecture.

Full disclosure: Bricqs ships PII masking, per-participant erasure, and audit logging as default product behavior. We're biased and we put ourselves at the top. We've been honest about where Capillary's enterprise India footprint or Xoxoday's data marketplace experience gives them a meaningful edge in specific scenarios.

6 platforms, ranked

Detailed read on each, including who they actually serve best and where they fall short.