What We Collect and Why It Matters
We collect your name, contact details, and account credentials when you register. When you make a deposit or withdrawal through bKash, Nagad, or Rocket, we log the transaction reference and wallet identifier — not your full mobile banking PIN or password. Device data such as browser
-
1
type, IP address, and session timestamps are recorded automatically to detect unusual login behaviour and protect your account from unauthorised access. We also use cookies to remember your session state and language preference so you do not have to re-enter them on each visit. Data collected
-
2
during payment processing is handled in line with the requirements of each payment rail — bKash, Nagad, and Rocket each operate under their own terms, and we pass only the minimum information needed to complete your transaction. Retention periods vary by data type: account identifiers are
-
3
held while your account remains active, and transaction records are kept for the period required to resolve disputes or comply with applicable requirements. If your account is closed, we begin a deletion process for personal identifiers within a reasonable window, subject to any outstanding balance or
-
4
dispute. Access to and availability of this policy is subject to your local law and eligible regions.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.