Reference

How tibaji Handles Your Personal Information

When you open an account with us, you share personal details and payment information — including your bKash, Nagad, or Rocket wallet credentials. This page explains exactly what we collect, why we collect it, and what control you have over it.

Transparent data collectionbKash, Nagad, Rocket wallet privacyAccount data you can request or removeBangladesh-focused policy scope
tibaji How tibaji Handles Your Personal Information
DATA HANDLING STANDARDS

How We Protect and Manage Your Account Data

Your account data is stored on secured servers with encryption applied both in transit and at rest. We apply access controls so that only the parts of our team with a specific operational need can view your personal records. Payment details connected to your Rocket or bKash wallet are handled through tokenised processes — meaning the raw wallet number is never stored in plain text on our systems. Data retention periods depend on the type of record: active account data is held while your account is open, and certain transaction logs are kept for the period required by applicable financial record-keeping rules. After that period, records are deleted or anonymised.

Encryption in Transit

All data passing between your device and tibaji is encrypted via SSL. This covers login sessions, bKash deposit flows, and account form submissions equally.

Cookie Controls

We use session cookies to keep you logged in and functional cookies to remember your wallet preference. You can manage non-essential cookies through your browser settings at any time.

Retention and Deletion

Active account records are held while your account remains open. Once an account is closed, we retain only what applicable financial rules require, then delete or anonymise the rest.

Third-Party Access Limits

Payment processors handling Nagad, Rocket, and bKash transactions receive only the data they need to complete that transaction. No marketing or profiling access is granted to them.

REACH OUR PRIVACY TEAM

Contact Us About Your Privacy Rights

If you want to access, correct, or delete the personal data we hold on your account, our support team handles these requests directly. Reach us through the channels below. We aim to respond to all data-related requests within a reasonable period, and we will confirm receipt as soon as your message comes through. Include your registered account email or the mobile number linked to your bKash or Nagad wallet so we can locate your record without delay.

Live Chat Open the chat window on tibaji while logged into your account. Describe your data request clearly and our team will confirm the next steps.
Email Support Send your privacy request to our support address. Include your account email or the mobile number linked to your Nagad or bKash wallet for faster verification.
Account Settings Some data preferences — such as cookie consent and marketing communications — can be adjusted directly inside your account settings without contacting support.

Common Questions About Your Data at tibaji

Below are the questions we hear most often about how your personal information is used, stored, and managed on this platform. If your question is not covered here, our live chat team can help you directly from your account page.

We collect your name, contact details, date of birth, and the wallet number you register — such as your bKash or Nagad number. Device and session data are also logged for security purposes.

Wallet identifiers are processed through tokenised systems. The raw wallet number is not stored in plain text; only a secure reference token is retained to link your payment history to your account.

Yes. Send a data access request via live chat or email, including your registered account email or linked mobile number. We will verify your identity and provide the details we hold.

Contact our support team through live chat or email and submit a deletion request. We will remove your data subject to any retention obligations under applicable financial record-keeping rules.

Only with partners who operate the service — payment processors for Rocket, bKash, and Nagad transactions, identity verification services, and our infrastructure providers. We do not sell your data.

Transaction logs required by applicable financial rules are retained for the mandatory period, then deleted or anonymised. Non-essential account data is removed promptly after account closure.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.