1. Introduction

This Privacy Policy (the "Policy") governs the processing of personal data by bKash Limited ("bKash," "we," "us," or "our"), as the data controller, in connection with your use of the bArta Chrome extension ("bArta"). By accessing or utilizing bArta, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy.

This Policy delineates the categories of personal data collected, the purposes for which such data is processed, the entities with whom it may be shared, and the safeguards implemented to protect its confidentiality and integrity. It further specifies your rights and obligations concerning your personal data.

2. Information We Collect

In providing bArta, we collect the following categories of personal data:

• bKash Merchant Wallet Number: Your registered mobile number linked to your bKash merchant account.
• Location Data: Geolocation information derived from your browser’s geolocation services.
• Transaction Data: Particulars of transactions facilitated through bArta, encompassing customer wallet numbers, transaction identifiers, amounts, timestamps, and statuses.

Such data is obtained through your direct input, automated collection during your engagement with bArta, and browser permissions authorizing geolocation services.

3. Use of Information

We collect and process your personal data with the utmost care, recognizing its highly sensitive nature, solely for the following specific, explicit, and legitimate purposes:

1. To verify your identity and link bArta to your bKash merchant account.
2. To bolster account security through location-based verification of login attempts.
3. To deliver real-time payment notifications and maintain an accurate transaction history.
4. To evaluate usage patterns for the purpose of enhancing bArta’s functionality and user experience.
5. To fulfill our legal and regulatory obligations as mandated by applicable law.

The processing of your personal data is conducted in strict compliance with the principles of lawfulness, fairness, and transparency, and is confined to the minimum extent necessary to achieve the aforementioned purposes.

4. Data Sharing and Disclosure

bKash is steadfastly committed to safeguarding the confidentiality of your personal data, which we regard as highly sensitive. We shall not share or sell your personal information to any third parties for their marketing purposes without your explicit and informed consent. However, we may conduct internal research on your demography and behavior and/or may share such information to third parties for observing your behavior in order to provide you with improved services or features that are most likely to meet your needs and to make your experience safer and easier as well as to protect your interest. We may retain your data for such periods as required by applicable laws and/or international best practices.

In accordance with the applicable laws and regulations of Bangladesh, we may disclose personal information to any of the following:

• Any regulatory, supervisory or government authority having jurisdiction over bKash
• Any person to whom bKash is required or authorized by law or a court of law to disclose such information
• Any organization, service provider or financial institution for the purposes of carrying out permissible functions and activities of bKash including but not limited to conducting market research and improving the service experience.

In all instances of disclosure, bKash ensures that such actions are lawful, proportionate, and accompanied by robust safeguards to protect the integrity and confidentiality of your personal data.

5. Security Measures

We employ rigorous technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Once your information is in our possession, we treat your data with utmost care and adhere to strict security guidelines. We are dedicated to maintaining the highest standards of security to ensure the protection of your personal data.

6. User Responsibilities

As a user of bArta, you bear the following responsibilities:

• Safeguarding the confidentiality of your account credentials, including your OTP and PIN.
• Promptly notifying bKash of any suspected unauthorized access to your account.
• Ensuring the security of your device and browser against malware or other threats.

You acknowledge that disclosing your account credentials to third parties may jeopardize the security of your personal data, and you shall be solely liable for any activities conducted through your account.

8. Policy Updates

We reserve the right to amend this Policy periodically to reflect changes in our practices or applicable legal requirements. We will notify you when such amendments take place. All amended terms automatically take effect instantly after they are initially posted on this Application. We will not reduce your rights under this Privacy Policy without your explicit consent. To make sure that you are aware of any changes, we urge you to review this Policy regularly to remain informed of our data protection practices.

Where mandated by law, we shall seek your consent for any material amendments to this Policy that impact your rights.

9. Compliance with Laws and Regulations

This Policy is governed by, and shall be construed in accordance with, the laws of the People's Republic of Bangladesh. We process your personal data in full compliance with all relevant data protection statutes and regulations, upholding the highest standards of privacy and security.