Reference

How We Handle Your Account Information

We collect what we need to run your account, process deposits via bKash, Nagad and Rocket, and verify withdrawals. This policy explains what we gather, how we use it, and how you can request changes or deletion.

Account registration dataWallet transaction recordsDevice and session logsSupport ticket historyVerification documents
winbd16 How We Handle Your Account Information
PRIVACY CONTACT

How to Reach Us About Your Data

If you want to review what we hold, correct an error, or request deletion, contact us through any of these channels. We aim to respond within three business days and resolve most requests within a week.

Live Chat Open the chat bubble in the bottom corner of any page and ask for the privacy team. We can pull your account snapshot, confirm what data we hold, and process correction or deletion requests during the conversation.
Email Support Send your request to our support address with your registered mobile number and account email. Attach a copy of your ID if you need us to verify your identity before releasing data or processing a deletion.
Account Settings Log in, go to account settings, and use the data request form to download your transaction history, update contact details, or flag your account for closure. Deletion takes effect within seven days after we confirm your identity.
DATA SECURITY

How We Protect Your Information

Your account password is hashed before storage, and we never see it in plain text. Deposits and withdrawals are processed over encrypted connections, and your bKash, Nagad or Rocket PIN stays with your wallet provider — we never ask for it. Device sessions expire after thirty minutes of inactivity, and we log unusual login patterns to flag potential account takeovers.

Encrypted Connections

Every page load, login attempt and payment request runs over SSL. Your session token is signed and expires automatically if you leave the tab idle, so if someone picks up your unlocked phone they cannot access your wallet balance or…

Minimal Data Collection

We collect only what we need to verify your age, process payments and comply with record-keeping obligations where applicable.

Cookie Control

Essential cookies keep you logged in and remember your language choice. Optional analytics cookies help us see which pages load slowly, but you can disable them in your browser without losing core functionality.

Retention and Deletion

We hold your account data for as long as your account is open, plus any period required by local law where applicable.

Privacy Policy Questions

We collect your mobile number, email address, date of birth and chosen wallet method — bKash, Nagad or Rocket. We also log your device type and IP address to prevent duplicate accounts and detect unusual login patterns.

Yes. Log in, go to account settings, and use the data request form. We will send you a copy of your profile details, transaction history and support tickets within three business days.

We share transaction data only with the payment processor handling your bKash, Nagad or Rocket transfer, and only to complete that payment. We do not sell your personal information to marketing companies or data brokers.

We hold your data for as long as your account remains active, plus the period required by local record-keeping obligations where applicable. When you request deletion, we anonymise transaction logs within seven days and remove personal identifiers.

Yes. Contact support via live chat or email, confirm your identity, and we will close your account and delete your personal details within seven days. We keep anonymised transaction records for regulatory compliance where required by local law.

Essential cookies keep you logged in and remember your language preference. Optional analytics cookies help us measure page load speed, but you can disable them in your browser settings without losing core account functionality.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.