Reference

How Grap Win Handles Your Personal Information

Your privacy is handled with care at every step — from the moment you open your account to each bKash, Nagad, or Rocket transaction on your wallet.

Account Data ProtectionSecure Payment ProcessingYour Right to AccessCookie ControlsData Retention Policy
Grap Win How Grap Win Handles Your Personal Information
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We keep your account data protected through industry-standard security measures, including SSL encryption across all pages and during every payment session. Your bKash, Nagad, and Rocket payment details pass through secure processing channels and are never stored in full on our servers. Here is how we handle the four areas that matter most to your privacy.

Account Security

Your account is protected with password hashing and optional two-step verification. We flag unusual login attempts and can lock access at your request pending a review.

Cookie Usage

We use functional cookies to keep your session active and analytical cookies to understand how the platform is used. You can manage non-essential cookies through your browser settings at any time.

Data Retention

We hold your account data for as long as your account remains active and for a period after closure as required under applicable law. You may request deletion of non-required data by contacting support.

Requesting Changes

You can request a copy of your personal data, ask us to correct inaccurate details, or raise an objection to how your data is used by reaching out through our support email or live chat.

PRIVACY CONTACT PATHS

Reach Us About Your Privacy

If you have a question about your data, want to request a copy of your information, or need to raise a concern about how we handle your account details, our support team is the right place to start. You can reach us through the channels below, and we aim to respond to all data-related queries within a reasonable time. Availability may vary depending on your region and local regulations.

Live Chat Support Open the chat icon from any page inside your account. Our team handles data queries alongside general account support during operating hours.
Email Contact Send your privacy request or data question to our support address. Include your registered account email so we can locate your records quickly.
Account Help Centre The Help Centre inside your account covers common data and privacy questions — a good first stop before contacting the team directly.

Privacy Questions We Hear Most

These are the questions our account holders in Bangladesh ask most often about data, cookies, and their rights under this policy. If your question is not here, the support team can help directly.

We collect your name, email address, contact number, and the payment method you register — such as bKash or Nagad. Device and session data is also gathered automatically for security purposes.

Payment data passes through secure processing channels with SSL encryption. We do not store full wallet credentials. Transaction records are kept for account and compliance purposes as required by applicable law.

Yes. Contact our support team via live chat or email with your registered account details and request a data copy. We will process your request in line with applicable local law and eligible region rules.

Send a deletion request through our support email. Some data must be retained for legal and financial compliance, but non-required personal data can be removed. Our team will confirm what is covered.

We share data only where necessary — for example, with payment processors handling bKash, Nagad, or Rocket transactions, or where required by law. We do not sell personal information to any third party.

Non-essential cookies can be controlled through your browser settings. Functional cookies are required for your session to work correctly, but analytical cookies can be turned off without affecting your account access.
Reference

Privacy Policy

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.