Reference

How heybali Handles Your Personal Information

Your privacy is a straightforward matter here. When you use your bKash, Nagad, or Rocket account to transact with us, we collect only what we need to run your account and keep it secure.

Data collected only as neededSecure account storageYour right to request accessContact us to update your dataApplies to eligible regions
heybali How heybali Handles Your Personal Information
REACH OUR TEAM

Contact Us About Your Data

If you want to access, correct, or delete your personal data, the fastest path is through our support channels below. For wallet-linked data tied to bKash, Nagad, or Rocket transactions, include your registered mobile number so we can locate your account quickly. Most data requests are handled within a few business days.

Live Chat Start a chat session from any page on the site. Available during our published support hours for account and privacy questions.
Email Support Write to our support address for formal data access or deletion requests. Include your registered mobile number and account email.
Account Settings Some personal details — like your contact number — can be updated directly inside your account profile without contacting support.
HOW WE PROTECT YOUR DATA

Data Handling, Cookies, and Account Security

We use SSL encryption on every page and every transaction, including payment flows through bKash, Nagad, and Rocket. Your session data is tied to your device token, so a login on your phone does not leave an open session elsewhere without your action. We also use cookies to remember your preferences and keep your account accessible across browser sessions — you can manage cookie settings from your browser at any time. Data retention follows the minimum period required for transaction reconciliation and any applicable regulatory obligation; personal data beyond that window is deleted or anonymised on a rolling schedule.

SSL Encryption

Every page and payment flow runs over SSL. Your bKash, Nagad, and Rocket transaction data is encrypted end-to-end between your device and our servers.

Session Control

Your login session is tied to your device token. Logging in from a new device triggers a one-time verification step to confirm it is really you.

Cookie Policy

We use functional and analytics cookies only. No advertising-network cookies are placed. You can clear or block cookies from your browser settings at any time.

Data Retention

Personal data is kept only for the period needed to complete transactions and meet regulatory requirements, then deleted or anonymised on a scheduled basis.

Privacy Policy — Frequently Asked Questions

These are the questions we hear most often about how your data is used. If your question is not covered here, reach us through live chat or email.

We collect your name, registered mobile number, email address, and the wallet identifier for your bKash, Nagad, or Rocket account. We collect only what is needed to verify and operate your account.

Wallet identifiers are shared only with the relevant payment processor to complete your transaction. We do not share them with advertisers or unrelated third parties.

We keep transaction records for the minimum period required by applicable regulations, then delete or anonymise them. Non-transactional data is removed promptly after account closure.

Yes. Contact our support team via live chat or email, include your registered mobile number, and we will provide a summary of the personal data held on your account within a few business days.

Send a deletion request through live chat or to our support email. We will confirm receipt and complete the request within the applicable processing window, subject to any retention obligations.

We use functional and analytics cookies to keep your session active and measure site performance. You can manage or clear cookies at any time through your browser settings without losing your account.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.