Reference

How xz66 Handles Your Personal Information

When you open an account with us, we collect only what we need to run your wallet, process your bKash, Nagad or Rocket transactions, and keep your account secure.

Data collected at account setupbKash, Nagad, Rocket transaction recordsYour right to access or remove dataCookie and device usageContact path for privacy requests
xz66 How xz66 Handles Your Personal Information
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to request a copy of your data, ask us to correct something, or raise a concern about how your information is handled, you can reach our team through any of the channels below. We aim to respond to privacy requests within a reasonable timeframe. All requests are logged and tracked until resolved.

Email Support Send your privacy request by email. Include your registered account name and the specific action you are requesting — access, correction or deletion of your data.
Live Chat Start a live chat session from your account dashboard. Verify your identity with the OTP sent to your registered number, then describe your data request to the agent.
Account Help Centre Log into your account, head to the Help section, and submit a Privacy Request ticket. You will receive a reference number to track the status of your submission.
HOW WE PROTECT DATA

Security, Cookies, Retention and Account Access

We use SSL encryption across every page and every transaction so data in transit cannot be intercepted. Your account session is protected by OTP verification each time you log in from a new device. Below are the four areas that cover how we handle your data day to day.

Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies to understand how the lobby is used. You can manage cookie preferences through your browser settings at any time.

Data Retention Period

We keep your account and transaction records for as long as required by applicable law and our fraud-prevention obligations. When retention is no longer required, data is deleted or anonymised.

Account Security Practices

Every login triggers an OTP to your registered mobile number. If we detect an unfamiliar device or location, your session is paused until you confirm identity through that OTP step.

Your Right to Request Changes

You can ask us to correct inaccurate account details or request deletion of your data where no legal obligation requires us to hold it. Submit your request through live chat or the Help Centre ticket form.

Common Questions About Your Data and Rights

Below are questions we hear most often about how your personal information is handled on this platform. If your question is not covered here, raise it directly through the live chat or the Help Centre ticket form.

We collect your name, mobile number, date of birth and the transaction references from your bKash, Nagad or Rocket payments. We do not store your wallet PIN or full banking credentials.

We share data only with payment processors, fraud-prevention services and any authority that lawfully requires it. We do not sell your personal information to third-party advertisers or marketing services.

Log into your account, open the Help Centre and submit a Privacy Request ticket. Include your registered name and the type of request. You will receive a reference number to track progress.

Yes. Where no legal or fraud-prevention obligation requires us to retain your data, we will delete or anonymise it on request. Submit your deletion request through live chat or the Help Centre form.

All transaction data passes through SSL-encrypted connections. We store only the payment reference and amount needed to match the transfer to your account wallet — your wallet PIN is never captured or stored.

Yes. Access and all related data processing depend on your local law and the eligible regions in which the platform operates. Check whether use is permitted under the laws that apply to you.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.