Reference

How gstar Handles Your Privacy

We process your personal information with clear purpose — account verification, payment handling through bKash, Nagad, and Rocket, and keeping your session secure across devices.

Account Data ProtectionPayment Info HandlingDevice Session SecurityData Access Rights
gstar How gstar Handles Your Privacy
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Privacy is not a checkbox for us — it shapes how we build account flows, payment integrations, and session management. Below are the specific practices we follow to keep your data handled properly. Each point reflects real operational behaviour, not aspirational language.

Encryption at Rest and Transit All personal data — including bKash, Nagad, and Rocket wallet identifiers — is encrypted both during transmission and while stored on our servers. This means intercepted data is unreadable without the correct decryption key, reducing exposure risk substantially.
Cookie Usage and Control We use cookies to maintain your login session, remember device preferences, and understand which sections of the platform you use most. You can clear cookies from your mobile browser settings at any time. Essential cookies keep you logged in; analytics cookies help us fix slow pages.
Account Security Layers Your account is protected by OTP verification sent to your registered mobile number. If you log in from a new device, we trigger an additional confirmation step. This prevents unauthorised access even if someone obtains your password through other means.
Data Retention Periods Transaction records linked to bKash, Nagad, or Rocket payments are retained for the duration required by applicable financial regulations in eligible regions. Session logs and browsing data follow shorter retention windows and are purged on a rolling basis once no longer needed.
Who to Contact for Changes If you want to correct stored details — say your phone number changed, or you switched from Nagad to Rocket as your withdrawal method — open live chat or email us. We process updates after verifying your identity through a short OTP confirmation.
Data Access and Deletion Requests You can request a copy of all personal data we hold on you, or ask for deletion where local law permits. Submit the request through your account settings or via email. We aim to respond within a reasonable timeframe and will confirm what data was removed or exported.
PRIVACY HELP CHANNELS

Reach Us About Your Data

Have a question about what data we hold on you, or want to request a correction? We keep multiple channels open so you can reach us in whatever way suits your routine. Whether you are on the go or sitting at your desk, getting answers about your privacy rights should not feel complicated.

Live Chat Open live chat from any page on gstar — mobile or desktop. Ask about data access requests, account information updates, or how your bKash transaction details are stored. Our agents handle privacy queries directly without redirecting you elsewhere.
Email Support Send a detailed privacy request via email when you need a written record. Useful for formal data deletion requests, corrections to your stored identity details, or questions about how long your Nagad payment history is retained on our systems.
Account Settings Log into your gstar account and head to the profile section. From there you can update your phone number, change your linked Rocket wallet, or download a summary of the personal data currently stored against your account for your own records.

Common Questions About Your Data at gstar

Below we answer the things people actually ask us about privacy — from what happens to bKash transaction logs to how you can get your data deleted. If your specific question is not covered here, reach out through live chat or email.

We collect your name, phone number, date of birth, and the wallet details you provide for bKash, Nagad, or Rocket deposits. We also log your device type and IP address during registration to secure the account from the start.

Wallet identifiers and transaction references are stored in encrypted form on our servers. We do not store your full bKash or Nagad PIN. Payment data is accessible only to systems that process your deposits and withdrawals — no other part of the platform reads it.

Yes. Contact us via email or live chat with a deletion request. After verifying your identity through OTP, we remove personal data that is not subject to mandatory retention under applicable financial regulations in eligible regions. We confirm deletion once complete.

We share data only with payment processors handling your bKash, Nagad, or Rocket transactions, fraud-detection partners, and infrastructure providers. We do not sell personal information. Third parties receive only what is necessary to fulfil their specific role.

Financial transaction records are retained for as long as applicable regulations in eligible regions require. Once that obligation expires, records are securely purged. Session and browsing data follows a shorter cycle and is cleared on a rolling basis.

We use essential cookies to keep you logged in, plus analytics cookies that track page performance. You can disable non-essential cookies through your browser settings. Disabling essential cookies may log you out or prevent session continuity across pages.

Log into your gstar account, go to the profile section, and edit the field you want to change. If you are switching your linked Rocket or Nagad wallet, an OTP will be sent to your current registered number to confirm the update before it takes effect.

If you previously accessed the platform from an eligible region, data collected during that period remains governed by this policy. We do not collect new data from sessions originating in regions where our services are not available under local law.

We use OTP verification on login, particularly when a new device or browser is detected. Failed login attempts trigger temporary locks. Your password is stored in hashed form — even our own team cannot read it. If you suspect compromise, contact live chat immediately.

Absolutely. Submit a data access request through account settings or via email. After identity verification, we compile a summary of stored personal details, payment references, and activity logs. The export is delivered to your registered email within a reasonable timeframe.