Reference

How We Handle Your Personal Information

We built this policy so you know exactly what happens to your data from the moment you open an account. Every detail about collection, storage and sharing is laid out here — because clarity around your bKash, Nagad or Rocket transaction records is something…

Data TransparencyAccount-Level ControlLocal Payment PrivacyWithdrawal VerificationContact Paths Open
super8 How We Handle Your Personal Information
HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We take a practical approach to protecting your information. Every layer — from encrypted connections to internal access controls — exists because mobile wallet users in Bangladesh need confidence that their bKash or Nagad details stay private.

Encryption in Transit

All data moving between your device and our servers travels through SSL-encrypted channels. This covers login credentials, payment confirmations from bKash, Nagad or Rocket, and any personal details you update in account settings.

Cookie Usage

We use cookies to remember your session, language preference and device type so the platform loads correctly on return visits. No cookie stores your bKash PIN or wallet password.

Account Verification

When you request a withdrawal to Nagad or Rocket, we may ask for identity confirmation. This step protects you from unauthorised payouts. Documents submitted for verification are stored separately from general account data and accessed only by the verification team.

Data Retention Period

Transaction records and account activity logs are kept for the duration required by applicable financial regulations in your jurisdiction. Once that window closes, records are permanently deleted from our active servers.

Internal Access Controls

Not every team member can view your personal data. Access is role-based — only agents handling your specific support ticket or verification request see the relevant information. Audit logs track who accessed what, so accountability is built into our operations.

Requesting Changes or Deletion

You own your data. To correct inaccurate details, update your phone number, or request full account deletion, use live chat or email support. We process corrections within one working day.

PRIVACY CONTACT PATHS

Reach Us About Your Data

If you have a question about how your information is handled, or you want to exercise a data right, these are the channels to use. We respond to privacy-related requests with priority because your account security depends on it.

Team online

Live Chat

Tap the chat icon from any page on mobile or desktop. Ask for a privacy query and the agent will escalate to the data team. You can request account data exports or deletion directly through this channel without switching apps.

Email Support

Send your privacy request to the address listed in your account settings under Help. Include your registered phone number so we can verify ownership quickly. Expect a confirmation that your request is being processed within one working day.

Account Settings Panel

Inside your account, the privacy section lets you review which data we hold, toggle marketing communications on or off, and submit a formal deletion request. All changes reflect immediately on your profile except deletion, which goes through verification first.

Common Questions About Your Data

These are the questions our support team receives most often around privacy, data rights and account information handling. If your question is not covered here, reach out through live chat for a direct answer.

We collect your name, phone number, email address, and device information at signup. When you make a deposit via bKash, Nagad or Rocket, the transaction reference and amount are also recorded. We do not store your wallet PIN or mobile banking password at any point.

We share data only with payment processors needed to complete your bKash, Nagad or Rocket transactions, identity-verification partners, and authorities if required by law in your jurisdiction. We never sell your personal details for advertising or marketing purposes to outside companies.

Open live chat or send an email through the address in your account Help section. Ask for a data export. After verifying your identity through your registered phone number, we compile and send you a downloadable file of all stored personal and transaction data.

Yes. Submit a deletion request via live chat or email. We verify your identity first to make sure no one else is requesting it. Once confirmed, your personal data is removed from active systems. Transaction records may be retained only as long as financial regulations in your jurisdiction require.

We store transaction references and amounts for your deposit and withdrawal history. Your wallet PIN, mobile banking password or full card number is never stored on our servers. Payment processing happens through encrypted channels directly with the payment provider.

We use session cookies for login persistence and preference cookies for language and device settings. No cookie contains sensitive payment data. You can disable or clear cookies in your mobile browser settings at any time — the only effect is needing to log in again on your next visit.

Records are retained for the period required by applicable financial regulations in the regions where we operate. After that window expires, data is securely deleted from active servers. Encrypted backup copies follow the same deletion schedule with a brief technical delay.

Access is role-based. Only team members directly handling your support request, verification case or payment query see your relevant details. Every access event is logged internally. Unauthorised access attempts trigger alerts and are investigated by our security team immediately.

We notify you through the email or phone number registered on your account before any changes go live. The updated policy is also posted on this page with a revised date at the top. Continuing to use the platform after notification counts as acceptance of the new terms.

Yes. Whether you log in from a low-end Android phone, a tablet or a desktop browser, the same SSL encryption and session security apply. Your account data stays consistent across devices — the security layer is server-side, not dependent on which handset or browser you use.