RBI has instructed Payment System Operators (PSOs) to store entire payment data in systems located only in India.
Payment data includes name, mobile number, Aadhaar number, OTP, PIN.
In case the processing is done abroad, the data should be deleted from the systems abroad and brought back to India within one business day or 24 hours.