Reference

How kfbapp Handles Your Personal Data

This Privacy Policy covers what data we collect when you open an account, make a deposit through bKash, Nagad or Rocket, or contact our support team. Access to kfbapp and the rights described here depend on your local law and eligible region.

Account data protectionbKash, Nagad, Rocket payment dataYour right to access recordsData retention policyContact us to request changes
kfbapp How kfbapp Handles Your Personal Data
HOW WE PROTECT DATA

Our Approach to Data Security and Retention

We apply encryption at the point your data enters our system — whether that is account registration details or a payment reference from a Rocket transfer. Data is not shared with third parties for marketing. We keep transaction records for as long as required to resolve disputes and meet the obligations that apply in your eligible region under local law.

Encrypted Account Storage

Your account details — name, mobile number, linked wallet — are stored using encryption. We do not log your bKash or Nagad PIN at any point in the transaction flow.

Cookie Control

Cookies on this site manage session state and remember your preferences. You can clear or block them through your mobile or desktop browser settings without losing your account data.

Data Retention Limits

We hold account and payment records for the minimum period needed for dispute resolution and compliance. After that window, records are deleted or anonymised in line with applicable rules for your region.

Requesting Corrections

You can request a correction, access copy or deletion of your data at any time via live chat or account settings. We verify your identity using your registered mobile number before actioning any change.

PRIVACY CONTACT PATHS

Reach Us About Your Data

If you want to review, correct or request deletion of the data we hold on your account, our support team handles privacy requests directly. Send your request through one of the channels below with your registered mobile number and account email so we can verify your identity before making any changes.

Live Chat Start a live chat session from any page on the kfbapp site. Confirm your registered mobile number and we will pull your account data record during the session.
Email Support Email our privacy team with your account email and the specific data you want to access or remove. We aim to respond within two business days of receiving your verified request.
Account Settings Log in, go to Account Settings, and submit a data request form directly. This path is the fastest for simple corrections like updating your registered mobile number.

Your Privacy Questions Answered

These are the questions we hear most often about data, account records and your rights on kfbapp. If your question is not covered here, use live chat or email support to get a direct answer.

We collect your name, email address, mobile number and the payment method you register — bKash, Nagad or Rocket. We also log device and session data to protect your account from unauthorised access.

No. Your PIN stays inside your own wallet app. We only record the transaction reference and wallet number to verify a deposit or withdrawal against your account record.

Yes. Submit a data access request via live chat or Account Settings using your registered mobile number and email. We verify your identity before sharing or exporting any record.

We retain transaction records for the minimum period needed to resolve disputes and meet obligations applicable in your region under local law. After that period, records are deleted or anonymised.

We do not sell or share your data with third parties for marketing purposes. Data is shared only with payment processors like bKash, Nagad or Rocket to complete your transaction.

Log in and go to Account Settings, or start a live chat session. Confirm your registered mobile number and we will process the deletion request in line with the rules applicable to your eligible region.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.