Reference

How iboss Handles Your Privacy

We keep your account data, payment details and activity logs under strict internal controls. This policy explains what we collect, why we collect it, and how you can request changes or deletion — all shaped around the bKash, Nagad and Rocket payment flows you…

Data Collection TransparencyPayment Info ProtectionAccount Control RightsDeletion Requests
iboss How iboss Handles Your Privacy
PRIVACY HELP CHANNELS

How to Reach Us About Your Data

If you have a question about your personal information, want to correct something, or need a record of what we hold, our support channels are built for quick resolution. You do not need to fill out a formal legal letter — just reach out through any of the paths below and reference your account email or phone number so we can locate your records quickly.

Team online

Live Chat

Open live chat from any page on our site. Tell the agent you have a privacy query and they will escalate to the data team. You can ask for a summary of stored data, request corrections to your name or contact details, or ask how long we retain specific records.

Email

Send your privacy request to our support email with the subject line 'Privacy Request' and your registered phone number. We aim to acknowledge within one working day and resolve most requests shortly after, depending on complexity and verification steps.

In-Account Request

Log into your iboss account, head to the settings area, and use the data request form. This is the fastest route because your identity is already verified by your active session — no extra documents needed for straightforward queries like data export or preference updates.

DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We built our data practices around the reality of mobile-wallet payments and account access from phones. Every layer — collection, storage, sharing, retention and deletion — is designed so you stay in control of what happens with your information. Below are the specifics of how each area works inside iboss.

Encryption in Transit

All data moving between your device and our servers travels through encrypted channels. Whether you are logging in, depositing via Nagad, or browsing the lobby, your connection is protected from interception by standard SSL encryption protocols.

Cookie Usage

We use session cookies to keep you logged in and preference cookies to remember your language and layout choices. No advertising trackers from third parties run on our pages. You can clear cookies from your mobile browser settings at any time without losing your account.

Account Security Layers

Your account is protected by password plus OTP verification sent to your registered phone. If someone tries to log in from an unfamiliar device, we trigger an additional verification step. You can review active sessions and force logout remotely from account settings.

Data Retention Period

We keep transaction records and account activity for as long as your account remains active plus a limited period after closure, in line with applicable regulatory requirements in eligible regions. After that window, records are permanently deleted from our systems.

Deletion and Portability

You can request full deletion of your account and associated data through live chat or the in-account form. We also support data portability — ask us for a machine-readable export of your personal information and transaction history via the same channels.

Third-Party Sharing Limits

We share data only with bKash, Nagad and Rocket processors to complete your deposits and withdrawals, and with legal authorities if required by law in your jurisdiction. We never sell, rent or trade your personal details to marketing companies or data brokers.

Common Questions About Your Data Rights

These are the questions our support team fields most often about privacy, data access and account information. Each answer reflects how things actually work inside your iboss account and across our payment integrations with bKash, Nagad and Rocket.

We collect your full name, email address, phone number and a password you set. If you deposit via bKash, Nagad or Rocket, we also store the wallet identifier linked to that transaction so we can process withdrawals back to the correct account.

Yes. Log into your account, go to settings and submit a data export request. We compile your profile information, transaction history and session logs into a downloadable file. Alternatively, ask via live chat and the data team will send it to your registered email.

Open live chat or use the in-account settings form to request a correction. For name or phone number changes, we may ask you to verify your identity through an OTP step before updating. Email corrections go through once you confirm the new address.

Only with payment processors — bKash, Nagad, Rocket — to complete your deposits and withdrawals, and with authorities if legally compelled in eligible jurisdictions. We do not sell your information to advertisers, affiliates or any third-party marketing platforms.

We retain transaction data while your account is active and for a limited period after closure, as required by applicable regulations. Once that retention window closes, records are permanently removed from all active databases and backups.

Yes. Submit a deletion request through live chat or the in-account form. We process full account removal after confirming your identity. Any pending withdrawals are settled to your bKash, Nagad or Rocket wallet before we wipe your records.

We use session cookies for login state and preference cookies for layout choices. No third-party advertising trackers are present. You can block or clear cookies in your mobile browser settings — doing so will log you out but will not affect your stored account data.

When you send funds from your bKash app to our displayed account number, the transfer runs through bKash's own encrypted network. We receive only a transaction reference and amount confirmation — we never see or store your bKash PIN or app credentials.

Yes. Before any material change takes effect, we send a notification to your registered email and display an in-account alert. You have time to review the update and, if you disagree, request account deletion before the new terms apply.

Availability of our services and the specific data protections that apply depend on your local law and eligible regions. We follow the regulatory framework relevant to each jurisdiction where we operate, and we update our practices when requirements change.