Reference

How sflash Handles Your Personal Information

We collect only what we need to run your account, process your bKash, Nagad or Rocket transactions, and keep your wallet secure.

Data Collection TransparencyPayment Info ProtectionAccount Control RightsCookie DisclosureRetention Limits
sflash How sflash Handles Your Personal Information
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We apply layered security and clear internal rules so your data stays under control. Below are the specific practices that govern how sflash stores, uses and eventually removes the information tied to your account.

Encryption in Transit

Every connection between your device and our servers uses SSL encryption. Whether you are depositing via bKash on a 4G connection or browsing the lobby on Wi-Fi, data travels in an encrypted tunnel that blocks interception.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand which pages load slowly on mobile devices.

Account Security

Your account is protected by a PIN or OTP sent to your registered mobile number. If someone tries to access your account from an unfamiliar device, we trigger a verification step before granting entry.

Data Retention

We keep transaction records and account data for as long as required by applicable regulations in your region. Once the mandated period ends, records are anonymised so they can no longer be linked back to you personally.

Third-Party Sharing

We share data only with payment processors like bKash, Nagad and Rocket to complete your deposits and withdrawals, and with fraud-detection partners who help us flag suspicious activity on accounts.

Your Right to Request Changes

You can ask us to correct inaccurate data, export a copy of everything we hold on you, or request deletion of your account entirely. Send the request via live chat or email with your registered number for verification.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

If you have questions about your personal information, want to correct something, or need a copy of the data we hold on you, reach out through any of these channels. We aim to acknowledge every privacy-related request promptly and resolve it as quickly as possible.

Live Chat Open the chat bubble from any page on your mobile or desktop browser. Tell the agent your request is about personal data and they will route you to the privacy team without delay.
Email Send your data request to our support email address with the subject line containing your registered mobile number. We use that number to verify your identity before processing any changes to your stored information.
Account Settings Inside your account dashboard you can update your name, email and mobile number directly. For deeper changes like full data deletion, submit a request through chat or email and we handle the rest.

Common Questions About Your Data at sflash

Below are the questions our support team receives most often about personal data, cookies, and account privacy. If your question is not covered here, reach out through live chat or email and we will respond directly.

We collect your full name, mobile number, email address and the wallet identifier you use for bKash, Nagad or Rocket. We also record your device type and IP address for security purposes. No additional documents are required at registration unless verification is triggered.

No. We do not sell or share your personal data with advertising networks or unrelated third parties. Data is shared only with payment processors to complete transactions and with fraud-prevention partners who protect your account from unauthorised access.

Send a message through live chat or email with your registered mobile number in the subject line. Our privacy team verifies your identity and then prepares a data export file. You receive it within a reasonable timeframe depending on the volume of records.

Yes. Submit a deletion request via live chat or email. After identity verification, we remove your personal data and anonymise transaction records as required by applicable regulations. Once deleted, the account cannot be recovered.

We use session cookies to keep you logged in and analytics cookies to monitor page performance on mobile networks. You can disable or clear cookies through your browser settings at any time. Disabling session cookies will require you to log in again each visit.

Payment confirmations from bKash, Nagad or Rocket come through encrypted channels. We store only the transaction reference, amount and timestamp — never your wallet PIN. Your wallet credentials remain entirely within your mobile money provider's system.

Yes. If we make material changes to how we collect or use your data, we send a notification to your registered email address or display an in-account message before the new terms take effect. Minor formatting changes do not trigger a notification.

We retain transaction records for the period required by applicable regulations in your region. After that window closes, records are anonymised so they cannot be traced back to your account. You can request early deletion subject to regulatory constraints.

No. Internal access is limited to authorised personnel who need specific data to process your support requests or fulfil compliance obligations. Access logs are maintained and reviewed to prevent misuse of personal information.

This policy covers all users who access our platform from eligible regions. Service availability depends on your local law. If you are accessing from a jurisdiction where our services are not permitted, we recommend you review local regulations before creating an account.