Reference

How bad678 Handles Your Personal Information

When you open an account with bad678, you share personal details with us — and this policy explains exactly what we collect, why we collect it, and how we keep it secure.

Account data protectionbKash, Nagad, Rocket payment privacyCookie and session controlsYour right to request data removal
bad678 How bad678 Handles Your Personal Information
REACH OUR PRIVACY TEAM

Contact Us About Your Data or This Policy

If you have a question about how we use your data, want to update the personal details on your account, or need to raise a concern about a bKash or Nagad payment record, our support team is the right place to start. Send your request with your registered account email and we will respond as quickly as our queue allows.

Team online

Live Chat

Open the chat widget inside your account dashboard and raise your data query directly. Our team will confirm your identity before discussing any account or payment record.

Email Support

Write to our support address from your registered email. Include your account ID and the specific data request — correction, access or removal — so we can act without delay.

Account Help Page

Log in, head to Account Settings, and use the Privacy Request form to submit a formal data access or deletion request. The form routes directly to our data team.

DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We apply several layers of protection across your account, your payment references and your session data. SSL encryption covers every page you load and every form you submit. Account access requires your password plus an OTP sent to your registered mobile number — so even if your password is compromised, your account stays locked. We keep your data only as long as it is needed for account operations or as required by law; when you request deletion and your account is closed, we begin the removal process within the period stated in our response to your request.

SSL Encryption

Every connection between your device and bad678 uses SSL encryption. This applies to login, account edits and any page where payment references are displayed or submitted.

OTP Account Access

Logging in triggers an OTP to your registered mobile number. No one can access your account without both your password and the one-time code sent to your phone.

Data Retention Limits

We do not keep your data longer than necessary. Once your account is closed and any legal retention period has passed, your personal records are deleted from our active systems.

Third-Party Controls

Any partner we share data with — such as payment processors handling bKash or Rocket transactions — operates under a data-handling agreement that prohibits onward sharing without your consent.

Frequently Asked Questions About Your Privacy

These are the questions we hear most from account holders in Bangladesh about how their data is used, stored and protected. If your question is not here, use the live chat or email route in the contact section above.

We collect your name, email address, phone number and login credentials. When you deposit via bKash, Nagad or Rocket, we store the transaction reference — not your PIN or mobile banking password.

Yes. Submit a data access request through the Privacy Request form in Account Settings or email us from your registered address. We will respond with a summary of the information we hold on your account.

Log in and use the Privacy Request form under Account Settings, or email support with your account ID and a deletion request. Once your account is closed, removal begins within the period we confirm in our reply.

We share data only with service partners — such as payment processors for bKash and Rocket — under strict agreements, or where required by applicable law. We do not sell your information to anyone.

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can manage cookie preferences through your browser settings; blocking certain cookies may affect account functionality.

We store only the confirmation reference and wallet type from each transaction. Your bKash or Nagad PIN is never transmitted to or stored on bad678 systems — that credential stays within your mobile banking app.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.