Privacy Policy

Privacy Policy

Your data security is our highest priority.

Last updated: March 1, 2026

📋

1. Information Collection

Personal Information

We collect your mobile number, name, and optionally email during registration. NID number may be required for KYC verification.

Transaction Information

Amount, time, type (top up, metro ticket, QR payment, P2P) and associated device information for each transaction is stored.

Device Information

Browser type, operating system, IP address, and device identifiers are collected for security and fraud prevention.

🔐

2. Use of Information

Service Delivery

Your information is used to manage your wallet, purchase metro tickets, process QR payments, and complete P2P transfers.

Security

Used for fraud detection, prevention of unauthorized access, and rate limiting enforcement.

Improvement

Aggregated data may be used for service quality improvement, user experience analysis, and new feature development.

🛡️

3. Data Protection

Encryption

All data transmission is protected by SSL/TLS 256-bit encryption. Stored data uses AES-256 encryption.

Authentication

JWT-based authentication, 4-digit PIN, OTP verification, and session management are in effect.

PCI DSS

Payment card information is handled in accordance with PCI DSS (Payment Card Industry Data Security Standard).

🤝

4. Third Parties

Payment Partners

Only information necessary for completing transactions is shared with bKash, Nagad, and bank partners.

NPSB

QR payments are routed through Bangladesh Bank's NPSB (National Payment Switch Bangladesh).

Legal Requirements

Information may be provided to regulatory bodies or courts as required by Bangladeshi law.

👤

5. Your Rights

Access

You can view and download your stored personal information at any time.

Correction

You can request updates to incorrect or incomplete information.

Deletion

You can request deletion of your account. However, some information may be retained for a specified period as required by law.

🍪

6. Cookies & Tracking

Essential Cookies

Essential cookies are used for session management and authentication.

Analytics

Aggregated usage statistics may be collected for service improvement. No personal tracking is performed.

Privacy Questions?

Contact us for any questions or concerns about your data.

📧 privacy@onetap.com.bd📞 +880 1XXX-XXXXXX