Reference

How exbaji Handles Your Personal Information

This privacy policy sets out exactly what data exbaji collects when you open an account, make a deposit via bKash, Nagad or Rocket, or contact our support team — and what we do with it.

Account data collected at registrationPayment records — bKash, Nagad, RocketCookie and device dataYour right to request or delete dataDirect contact path for privacy queries
exbaji How exbaji Handles Your Personal Information
PRIVACY CONTACT PATHS

How to Reach Us About Your Privacy

If you want to review, correct or request removal of data we hold, reach out through one of the channels below. Our support team handles privacy requests separately from general account queries, so flag your message as a data or privacy request when you write in. We aim to acknowledge your request promptly and work through it as local regulations allow.

Email Privacy Request Send a written privacy request to our support email. Mark the subject as 'Data Request' so it reaches the right team without delay.
Live Chat on Mobile Open the live chat from the account menu on your mobile browser. Ask the agent to log a formal privacy query and you will receive a reference number.
Account Settings Path Go to Account, then Settings, then Privacy on your dashboard. You can download a summary of stored data directly from that screen.
DATA CARE PRACTICES

How We Protect and Manage Your Information

We apply SSL encryption to all data moving between your device and our servers — whether you are depositing via Nagad on a mobile browser or accessing your account on desktop. Account security is tied to the mobile number you register with, and any change to payment wallet details triggers a verification step before it takes effect. Data is not shared with advertising networks. Here is how we manage the four key areas of your privacy on exbaji.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to understand page flow. You can decline non-essential cookies through the banner shown on your first visit.

Account Security

Your account is protected by OTP verification sent to your registered mobile number. Any wallet change — bKash, Nagad or Rocket — requires re-verification before it is saved.

Data Retention

Transaction records are kept for the period required under applicable financial rules in eligible regions. Account data is retained while your account is active and for a defined period after closure.

Third-Party Access

We share data only with payment processors — such as the networks that operate bKash and Rocket — and only to the extent needed to complete your transaction.

Common Questions About Your Data on exbaji

These are the questions we hear most often about how your information is handled. If your question is not here, use the live chat or email path in the contact section above.

We store the name, mobile number and email you submit at registration, plus the wallet ID linked to your bKash, Nagad or Rocket account. Device and login session data is also logged automatically.

Yes. Send a deletion request via email or live chat, marked as a data request. We will process it in line with our retention obligations and confirm once the data has been removed.

We share payment data only with the processors needed to complete your bKash, Nagad or Rocket transaction. We do not sell your data or pass it to advertising networks.

Go to Account, then Settings, then Privacy on your dashboard to download a stored-data summary. You can also send a written request to our support team and we will compile a full record.

No. Transaction records are kept for the period required under the financial regulations that apply in eligible regions. After that period, they are removed from active storage.

After account closure, we retain only what is legally required for the applicable retention period. Once that period ends, your personal and payment data is deleted from our systems.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.