Reference

Privacy Policy for BD98 Account Holders

We collect only what we need to run your account, process your bKash, Nagad and Rocket transactions, and keep the platform secure. This policy explains what we gather, how we use it, and how you can request changes or deletion.

Account dataPayment informationDevice logsCookie usageContact records
BD98 Privacy Policy for BD98 Account Holders
HOW WE PROTECT

Security Measures and Data Handling

We encrypt payment data in transit and at rest, restrict access to customer records by role, and monitor login patterns to flag suspicious activity. This section covers the technical and operational steps we take to keep your information secure and how you can strengthen your own account protection.

Encrypted Transfers

Every page on BD98 uses HTTPS with TLS encryption so login credentials, wallet transaction details and session tokens are protected while moving between your device and our servers. Passwords are hashed and never stored in plain text.

Access Controls

Support staff can view only the fields necessary to verify your identity and resolve payment issues. Full account histories are restricted to operations and compliance teams, and all access is logged for audit purposes.

Session Management

When you sign in from a new device or location, we may send a one-time PIN to your registered mobile number. Sessions expire after inactivity, and you can sign out remotely from the account-security page if you lose a device.

Data Retention

Active account records and payment logs are kept while your account is open. After closure, we archive transaction history for the period required by Bangladesh financial-record rules and eligible-region regulations, then delete it unless a legal hold applies.

PRIVACY CONTACT

How to Reach Us About Data Requests

If you need to access, correct or delete your personal information, or if you have questions about how we handle wallet transaction records, use any of these channels. Response times vary by request complexity, but we aim to acknowledge data-access inquiries within two business days.

Live Chat Open the chat icon in the bottom corner of any BD98 page. A support agent can start a data-access request or answer questions about what we store and how long we keep it.
Email Request Send your account username and a description of what you want to review, update or delete. Include your registered mobile number so we can verify ownership before releasing account data.
Account Settings Log in and visit the profile section to update your email, change your password, or review recent login history. For deeper data requests like transaction export or account deletion, contact support directly.

Common Questions About Your Data

We ask for a mobile number, email address and password. When you make your first deposit using bKash, Nagad or Rocket, we record the transaction reference and amount to track funds and process withdrawals.

We do not sell or rent your payment records. We may share transaction data with payment processors to reconcile deposits and with regulators if required by Bangladesh law or eligible-region compliance obligations.

We archive closed-account records for the retention period set by local financial regulations in Bangladesh and eligible regions, typically several years, then delete them unless a legal hold or dispute requires longer storage.

Yes. Contact support by live chat or email with your username and registered mobile number. We will verify your identity, then send an export of your profile, transaction log and login history within a few business days.

We use session cookies to keep you signed in and remember language preferences, plus analytics cookies to measure page load times. You can block cookies in your browser, but some features like staying logged in will not work.

Log in, go to account settings, and edit the contact fields. You will need to confirm the new mobile number with a PIN code sent to that device before the change takes effect.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.