E-commerce entities (with >2 crore users in India), gaming intermediaries (with >50 lakhs users in India) and social media intermediaries (with >2 crore users in India) must erase personal data after three years from the date the Data Principal last approached the fiduciary, except for enabling the Data Principal to access their account or any virtual tokens issued by or on behalf of the Data Fiduciary