Privacy Policy

Welcome to Instants Pay BD. We are a trusted and reliable payment gateway service provider committed to ensuring safe, fast, and secure digital transactions for our users.

This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our website, mobile applications, and payment services. By using our services, you agree to the terms outlined in this Privacy Policy.

We collect the following types of information to provide and improve our services:

• Personal Information: Full name, email address, phone number, date of birth, and national ID/passport number for identity verification.
• Financial Information: Bank account details, mobile banking numbers, card information (processed securely — we never store full card numbers).
• Transaction Data: Payment history, transaction amounts, dates, merchant details, and payment status.
• Device Information: IP address, browser type, operating system, device model, and unique device identifiers.
• Usage Data: Pages visited, features used, session duration, and interaction patterns on our platform.
• KYC Documents: Government-issued ID, selfie verification photos, and address proof documents for compliance purposes.

Your information is used for the following purposes:

1. Process Payments: To facilitate secure payment transactions between users, merchants, and financial institutions.
2. Identity Verification: To verify your identity through KYC (Know Your Customer) procedures as required by law.
3. Fraud Prevention: To detect, investigate, and prevent fraudulent activities and unauthorized transactions.
4. Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
5. Service Improvement: To analyze usage patterns and improve our platform's features, performance, and user experience.
6. Legal Compliance: To comply with applicable laws, regulations, and legal processes.
7. Communication: To send you transaction confirmations, security alerts, and important service updates.

Instants Pay BD processes payments through industry-standard secure channels. We support multiple payment methods:

• Mobile Banking: bKash, Nagad, Rocket, Upay, and other mobile financial services.
• Bank Transfers: Direct bank-to-bank transfers through secure banking APIs.
• Card Payments: Visa, Mastercard, and other major credit/debit cards (PCI-DSS compliant).
• Digital Wallets: Integration with popular digital wallet platforms.

We implement comprehensive security measures to protect your data:

• End-to-End Encryption: All data transmitted between your device and our servers is encrypted using AES-256 and TLS 1.3 protocols.
• Secure Data Storage: Personal and financial data is stored in encrypted databases with restricted access controls.
• Two-Factor Authentication (2FA): We offer and encourage 2FA for account login and high-value transactions.
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent third-party experts.
• Access Control: Only authorized personnel with strict need-to-know basis can access user data, with all access logged and monitored.
• Firewall Protection: Advanced firewall systems and intrusion detection/prevention systems protect our infrastructure.

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for the basic functioning of our website, including session management and security features.
• Analytics Cookies: Help us understand how users interact with our platform to improve services.
• Preference Cookies: Remember your settings, language preferences, and login information for convenience.
• Security Cookies: Used to detect fraud, prevent unauthorized access, and protect user accounts.

We may share limited information with trusted third-party service providers:

• Payment Processors: Banks and mobile financial institutions to process your transactions.
• Identity Verification: KYC/AML verification services to comply with regulatory requirements.
• Cloud Services: Secure cloud hosting providers for data storage and processing.
• Analytics Providers: To analyze platform usage and improve our services.
• Legal Authorities: When required by law, court orders, or government regulations.

We ensure all third-party partners maintain equivalent data protection standards and are contractually bound to protect your information.

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: Request limitation of how we process your data in certain circumstances.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to the processing of your data for marketing or profiling purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@instantspaybd.com. We will respond within 30 business days.

Instants Pay BD strictly prohibits the use of our platform for any illegal, unethical, or harmful activities. The following are expressly forbidden:

We take account security seriously and implement multiple layers of protection:

• Strong Password Requirements: Minimum 8 characters with a mix of uppercase, lowercase, numbers, and special characters.
• Login Monitoring: We monitor login attempts and notify you of suspicious activities or logins from new devices.
• Session Management: Automatic session timeout after periods of inactivity to prevent unauthorized access.
• Transaction Alerts: Real-time SMS and email notifications for all transactions on your account.
• Device Fingerprinting: We track authorized devices and flag unrecognized device access attempts.

We retain your data for the following periods:

• Active Accounts: Personal and financial data is retained as long as your account remains active.
• Transaction Records: Retained for a minimum of 5 years as required by financial regulations and tax laws.
• KYC Documents: Stored securely for 5 years after account closure, as mandated by anti-money laundering (AML) regulations.
• Communication Records: Customer support interactions are retained for 3 years for quality assurance and dispute resolution.
• Log Data: Server and access logs are retained for 1 year for security monitoring purposes.

After the retention period expires, your data will be securely deleted or anonymized in accordance with our data disposal procedures.

Instants Pay BD services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

If we discover that we have inadvertently collected data from a person under 18 years of age, we will immediately:

• Delete all associated personal data from our systems.
• Suspend and close the account.
• Notify the parent or legal guardian if contact information is available.

If you believe a minor has provided us with personal information, please contact us immediately at support@instantspaybd.com.

We are committed to fair and transparent dispute resolution:

• Transaction Disputes: Users can raise a dispute within 30 days of a transaction through our support portal or email.
• Investigation Process: All disputes are investigated within 7–14 business days. Both parties may be contacted for additional information.
• Refund Processing: Approved refunds are processed within 5–10 business days to the original payment method.
• Unauthorized Transactions: If you notice any unauthorized transaction, report it immediately. We will freeze the transaction and investigate promptly.
• Chargebacks: We follow standard chargeback procedures as defined by card networks and banking regulations.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• The “Last Updated” date at the top of this page will be revised.
• Significant changes will be communicated via email notification or a prominent notice on our website.
• Continued use of our services after changes constitutes acceptance of the updated policy.
• We encourage you to review this page periodically for the latest information on our privacy practices.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Company Name: Instants Pay BD
• Email: support@instantspaybd.com
• Website: https://www.instantspaybd.com
• Support Hours: 24/7 Customer Support