Reference

How bh999a Handles Your Data

Your account runs on a small set of personal details — your name, mobile number and wallet reference — and this page sets out plainly what we keep, why we keep it and who gets to see it.

Wallet details from bKash, Nagad, RocketCookie choices you controlCorrection and deletion requestsAccount care in Bangladesh
bh999a How bh999a Handles Your Data
SECURITY IN PRACTICE

Account Security and Data Handling

Security on your account is mostly about access. Logins run on a one-time code sent to your registered number, so a password alone will not open the account. Change that number through the profile screen rather than through chat, and the old number no longer receives codes once verification finishes. Session data is used to flag a login from an unfamiliar handset, which is why we sometimes ask you to confirm before a withdrawal moves. Keep your wallet PIN out of any message to us — no genuine team member needs it.

What We Log

We keep the handset model, app version, IP address and login time for each session. It is how an unfamiliar login gets flagged before your wallet balance moves anywhere.

Cookies You Control

The session cookie keeps you signed in and cannot be switched off while you use the account. Analytics and preference cookies are yours to accept or refuse, and the choice sticks on that browser.

Retention Windows

Transaction and verification records stay while your account is open and for the accounting period after it closes. Marketing preferences are dropped as soon as you switch them off.

Changes on Request

Ask for a correction when your name or wallet number is wrong, and for deletion when you close the account. We confirm what changed and what has to stay on record by law.

REACH OUR DESK

Where to Send a Data Request

Every privacy request goes through a channel we can verify, so nothing gets actioned from an unconfirmed message. Open the help desk from your account menu, or start a chat with the support team from the same screen you use for wallet questions. Ask for a copy, a correction, a deletion or a cookie change, and keep your request ID — it is how the team traces your case end to end. Anything concerning money in or out is handled by the wallet desk, since those records sit with the payment team.

Account Help Desk Send a request from the help desk inside your logged-in account. It carries your account ID automatically, so we never ask you to paste a password or a wallet PIN into a message.
Live Chat Chat suits quick questions, like switching off marketing messages or checking whether a cookie setting saved. Our team can confirm what is on file without you leaving the conversation.
Wallet Desk Payment records for bKash, Nagad, Rocket and Upay sit with the wallet desk. Ask here when your request involves a transfer reference, a sender number or a receipt tied to your account.

Questions We Get About Your Data

The same handful of questions come up from account holders in Dhaka, so we have answered them plainly here. Short version: you can see what we hold, ask for a correction, refuse non-essential cookies and close the account. What we cannot do is wipe records that a payment dispute or a legal duty requires us to keep. Each answer points to the screen or the desk where the change actually happens.

Yes. Send a request from the help desk inside your account and we will put together a copy of the profile, verification and transaction records we hold, then hand it to you through the same channel.

Only to settle what you asked for. A bKash, Nagad or Rocket transfer needs your sender number and reference matched on the payment side, and that is the extent of what leaves our systems for a deposit.

Go to the profile screen, request a number change and verify both the old and the new number with the one-time codes we send. Once that finishes, the old number no longer receives login codes.

Your profile and marketing preferences are removed. Transaction and verification records stay for the accounting period that follows, because payment disputes and legal duties can reach back past the closure date.

You can refuse analytics and preference cookies and keep full account access. The session cookie has to stay, otherwise the login page cannot remember you between clicks and every screen would ask you to sign in again.

Start with live chat if you see a login or a transfer you do not recognise, and the team will freeze the session while it checks. For anything about the policy wording itself, use the help desk.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.