Reference

How Joya Best Handles Your Personal Information

Your account data stays with us — not sold, not shared beyond what it takes to run your account and process your payments through bKash, Nagad, and Rocket.

Account Data ProtectedPayment Info SecuredYour Rights RespectedBangladesh-Region Policy
Joya Best How Joya Best Handles Your Personal Information
HOW WE PROTECT DATA

Data Handling and Account Security

We built our data practices around the same principle as our payment setup — keep it simple, keep it secure. Your bKash, Nagad, and Rocket details are never stored as raw wallet credentials on our side; only tokenised references used to match your deposit or withdrawal pass through our system. Account access is protected by OTP verification on login, which means even if your password is compromised, a second confirmation step is required before anyone gets in. We review data access logs regularly and limit internal access to your personal information on a need-to-know basis.

Encryption in Transit

All data moving between your device and our platform is encrypted via SSL. This covers login, deposit flows through bKash or Nagad, and account updates.

OTP Login Verification

Every login triggers a one-time passcode to your registered number. This single step blocks most unauthorised access attempts before they reach your account.

Data Retention Policy

We keep your account data while your account is open and for the period required by applicable regulations after closure. Personal data not subject to legal holds is deleted on request.

Request Your Data

You can ask us at any time what information we hold about you. Contact support with your account details and we'll provide a summary within a reasonable timeframe.

REACH OUR PRIVACY TEAM

Contact Us About Your Data

If you want to know what personal data we hold, request a correction, or ask us to delete your account information, our support team handles these requests directly. We aim to respond to data-related queries within a reasonable timeframe. Reach out through any of the channels below and mention your account details so we can locate your records quickly.

Live Chat Start a chat session from your account dashboard. Our support team can pull your data profile and answer questions about what we hold and why.
Email Support Send your data request to our support address. Include your registered contact number or wallet ID so we can match your request to the right account.
Account Settings Some data preferences — like cookie settings and communication opt-outs — can be managed directly inside your account settings without contacting support.

Privacy Policy Questions Answered

The questions below cover what we get asked most often about account data, payment privacy, and how to exercise your rights. If something isn't covered here, contact support directly.

We collect your name, contact number, and the wallet details you use for bKash, Nagad, or Rocket transactions. We also log device and session data for security purposes.

We store only tokenised references needed to process your transactions — not raw wallet credentials. Your actual mobile banking PIN and full account number stay with your wallet provider.

Yes. Contact support with your registered account details and request a data summary. We'll identify what we hold and share it with you within a reasonable timeframe.

Submit a deletion request through live chat or email support. Once verified, we begin removing personal data not subject to legal retention requirements from active systems.

We share only what payment processors need to confirm a transaction, and data with fraud-prevention services where required. We do not sell personal information to advertisers or data brokers.

Availability and data rights depend on your local law and eligible region. Bangladeshi account holders are covered by this policy for all account activity conducted through supported channels.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.