Reference

Browse Our Privacy Policy Before You Start

We want you to understand exactly what happens with your information when you create an account or make a deposit through bKash, Nagad or Rocket.

Data Collection ExplainedYour Rights CoveredPayment Info ProtectedAccount ControlCookie Clarity

Explore the Lobby Read FAQ

Explore What This Policy Covers

xsona Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

This privacy policy applies to every interaction you have with xsona — from the moment you open the site on your mobile browser to each bKash, Nagad or Rocket transaction you complete inside your account wallet. We collect only the information needed to verify your identity,

1
process payments and keep your account secure. That includes your name, mobile number, email address, device identifiers and transaction records tied to your chosen payment method. We do not sell personal data to third parties for their own marketing. Data may be shared with payment processors
2
(such as bKash, Nagad or Rocket gateway partners) solely to complete your deposit or withdrawal request, and with fraud-prevention services that help us flag suspicious activity on your account. Retention periods depend on the type of data: transaction records are kept for the period required by
3
applicable regulations in your region, while session cookies expire when you close your browser unless you choose to stay logged in. Availability of our services depends on your local law and eligible regions. We store information on servers with encryption at rest, and all data in
4
transit between your device and our platform travels over SSL-secured connections. You can request a copy of your stored data or ask for deletion by contacting our support channel — we outline the process in the sections below.

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

PRIVACY CONTACT PATHS

Open a Channel to Our Privacy Team

If you have a question about how your data is handled, or you want to exercise any of your rights under this policy, reach out through the channels below. Our support agents are trained to escalate privacy-specific queries to the right internal team so you get a clear answer rather than a generic reply.

HOW WE PROTECT YOU

Check How We Secure and Manage Your Information

We built our data practices around giving you visibility and control. Each point below explains a specific part of how your information moves through our systems — from the cookies that remember your session to the encryption that shields your bKash, Nagad or Rocket payment details during every transaction.

Data Encryption

All personal and financial data is encrypted both in transit (via SSL) and at rest on our servers. When you send a deposit through bKash or Nagad, the transaction payload is encrypted before it leaves your device.

Cookie Usage

We use session cookies to keep you logged in and analytics cookies to understand which pages you visit. You can clear or block cookies in your mobile browser settings at any time without losing your account.

Account Security

Your account is protected by your mobile number and a one-time PIN sent during login. If you notice unfamiliar activity, lock your account instantly from the dashboard and contact support through live chat.

Data Retention

We keep transaction records for as long as local regulatory obligations require. Personal profile data stays active while your account is open. After you request deletion, we remove identifiable details within a reasonable processing window.

Third-Party Sharing

We share data only with payment gateway partners (bKash, Nagad, Rocket processors) and fraud-detection services. No personal information goes to advertisers or unrelated third parties for their independent use.

Requesting Changes

You can ask us to correct, export or delete your personal data at any time. Submit a request via live chat or email, include your registered number for verification, and we will process it according to our internal timeline.

Get Answers About Your Data Rights

Below are the questions our support team receives most often about personal data, account privacy and payment information handling. Each answer is specific to how xsona operates for users in eligible regions.

We collect your name, mobile number, email address, device type and browser identifier. If you deposit via bKash, Nagad or Rocket, we also store the transaction reference and amount for your account records.

No. We do not sell or rent your personal information to advertisers. Data is shared only with payment processors and fraud-prevention partners that need it to complete or verify your transactions.

Open a live chat session or email our support team with the subject 'Data Request' and your registered mobile number. We will compile your stored information and send it to your verified email address.

Yes. Send a deletion request through live chat or email. Once verified, we remove identifiable profile details. Some transaction records may be retained where local regulations require it.

Payment data travels over an SSL-encrypted connection and is stored in encrypted form on our servers. We do not keep your bKash or Nagad PIN — only the transaction reference and confirmation status.

We use session cookies for login persistence and analytics cookies to monitor page performance. You can disable or clear them from your mobile browser settings; your account will still function normally.

If we detect unauthorised access to personal data, we will notify affected accounts via email and in-app message. We also report incidents to relevant authorities where applicable regulations require disclosure.

Availability of our services and the specific rights you hold depend on your local law and eligible regions. We apply the same security and handling standards to every account regardless of location.

Transaction records are retained for the duration required by applicable regulations in the regions we serve. You can view your full history inside your account dashboard at any time while your account is active.

Go to your account settings dashboard and select the field you want to change. An OTP will be sent to your current number to verify the update. If you no longer have access to that number, contact support via live chat for manual verification.

Browse Our Privacy Policy Before You Start

Open a Channel to Our Privacy Team

Check How We Secure and Manage Your Information

Data Encryption

Cookie Usage

Account Security

Data Retention

Third-Party Sharing

Requesting Changes

Get Answers About Your Data Rights

01 What personal data does xsona collect when I create an account?

02 Does xsona share my data with outside companies for advertising?

03 How can I see what data you hold about me?

04 Can I delete my account and all associated data?

05 How does xsona protect my bKash or Nagad payment details?

06 What cookies does the site use and can I disable them?

07 Will I be notified if there is a data breach?

08 Does this policy apply differently depending on my location?

09 How long do you keep my withdrawal and deposit history?

10 How do I update my registered mobile number or email address?

Related pages