BDPAY

Privacy

What we collect, why we need it, and how we keep it safe.

Version 2026-10

Draft. This text explains how BDPAY works and is waiting for legal review. It will be final before BDPAY opens to the public.

What we collect

Your mobile number, the phone you use (its name, type and an app-generated ID), and the language you choose.

For verification: your NID number, name, date of birth, photos of your NID card and a selfie. For level 2: your address, occupation and source of funds.

Your payments, and security events such as sign-ins, wrong PINs and new phones, with the network address they came from.

Why we need it

To open and run your account, and to show you your own history.

Because the law requires us to know every customer and to watch for fraud and money laundering.

To keep your account safe: one account per phone, PIN locks, and warnings when something looks wrong.

Who we share it with

The Election Commission, to check your NID and selfie. Your mobile operator, to check whether your SIM is registered to your NID. Banks and payment networks, to move money you ask us to move.

Bangladesh Bank, BFIU and other authorities when the law requires it. We do not sell your information.

How we protect it

Your NID number is stored encrypted. Your PIN is never stored, only a one-way scrambled form of it.

BDPAY staff see only part of your number, name and NID, see only what their role needs, and every look-up is recorded in a log nobody can change.

How long we keep it

As long as your account is open, and afterwards for as long as the law requires for financial records.

Your choices

Change the app language at any time. Freeze your account if you think someone else is using it. Close your account after moving your balance to your bank.