1. What we collect
Your name, email address, optional phone number and preferred language; the identity documents you upload for verification; your payout addresses; and the record of every deposit, purchase, accrual and withdrawal on your account. We also keep sign-in times and the IP address used when you accepted these documents.
2. Why we hold it
To operate your account, to move money correctly, to verify identity where the law or our own risk controls require it, and to answer your support tickets. We do not sell your data and we do not use it for advertising.
3. Who else sees it
Our payment processor sees the information it needs to accept a deposit. Our hosting and email providers process data on our instructions. Authorised staff see what they need to answer a ticket or review a withdrawal. We disclose data to an authority only where we are legally required to.
4. How it is stored
Passwords are hashed and two-factor secrets are encrypted. Identity documents live outside the public web root and are reachable only through a signed, authorised link. Access to administrative actions is recorded in an audit log.
5. How long we keep it
Financial records are kept for as long as the law requires, and the ledger itself is append-only and never deleted. Identity documents are kept while your account is open and for the period we are required to retain them afterwards.
6. Your rights
You may ask for a copy of what we hold, correct anything inaccurate, and close your account. Closing an account does not erase the financial ledger, which we are required to retain. Requests go to the support desk.
7. Cookies
We set a session cookie so you stay signed in, a cookie remembering your chosen language, and a referral cookie that lasts thirty days so the person who invited you is still credited if you register later. We run no third-party analytics or advertising scripts.
Questions about this document should go to the support desk, which will answer in English or Bengali.