2.1 Registration & Identity Verification

2.2 Login & Authentication

2.3 Device Binding

• All financial transactions are protected by end-to-end encryption.
• Every transaction requires PIN or biometric confirmation before processing.
• Real-time fraud detection systems monitor all transactions for suspicious activity.
• Transactions exceeding defined thresholds require additional authentication.
• Instant SMS and push notifications are sent for every transaction to keep you informed.
• Transaction limits are set per day and per transaction to minimize risk in case of unauthorized access.

• All data transmitted between the Nec Pay app and our servers is protected using SSL/TLS (Secure Socket Layer / Transport Layer Security) encryption.
• We use HTTPS protocols exclusively for all communications.
• Our servers are hosted in secure, certified data centers with restricted physical and digital access.
• API security measures including token-based authentication are enforced for all integrations.

• Our platform is protected by enterprise-grade Firewalls and Intrusion Detection & Prevention Systems (IDPS).
• Regular penetration testing and vulnerability assessments are conducted by independent security experts.
• 24/7 security monitoring is in place to detect and respond to threats in real time.
• Data backups are performed regularly and stored in encrypted, secure environments.
• Disaster recovery and business continuity plans are maintained to ensure uninterrupted service.

• Transaction monitoring to detect unusual patterns.
• Automatic blocking of suspicious transactions pending user verification.
• Instant alerts for any high-risk activity on your account.
• Anti-money laundering (AML) screening on all transactions as per Bangladesh Bank guidelines.

• Full name, date of birth, gender.
• National ID (NID) / Passport / Birth Certificate number.
• Photograph / Selfie for KYC verification.
• Permanent and present address.

• Registered mobile number.
• Email address.

• Bank account or card details (for fund transfers).
• Transaction history and wallet balance.
• Merchant payment and remittance records.

• Device type, model, and operating system.
• IP address and device identifiers.
• App usage data, logs, and crash reports.
• Location data (only with your explicit permission).

• Fingerprint or Face ID data used solely for authentication purposes and stored only on your device.

• Create and manage your Nec Pay account.
• Verify your identity for KYC and AML compliance.
• Process and record all financial transactions.
• Detect and prevent fraud and unauthorized access.
• Send transaction alerts, notifications, and service updates.
• Improve app performance and user experience.
• Respond to customer support requests.
• Comply with all legal and regulatory requirements of Bangladesh Bank.

• Bangladesh Bank & Regulatory Authorities - as required by law.
• Bangladesh Financial Intelligence Unit (BFIU) - for AML/CFT compliance.
• Banking & Remittance Partners - solely for transaction processing.
• Technology Service Providers - under strict confidentiality agreements.
• Law Enforcement Agencies - when legally required by court order or government directive.
• With Your Consent - for any other purpose with your explicit approval.

• Your data is stored in secure, encrypted servers located in compliance with Bangladesh Bank regulations.
• Financial transaction records are retained for a minimum of 5 (five) years as required by regulatory guidelines.
• Upon account closure, personal data will be retained for the legally mandated period and then securely deleted or anonymized.

• Access - Request a copy of your personal data held by us.
• Correction - Request correction of inaccurate or outdated information.
• Deletion - Request deletion of your account and data, subject to regulatory obligations.
• Restriction - Request restriction of processing of your data in certain circumstances.
• Withdraw Consent - Withdraw consent for optional data processing at any time.
• Complaint - Lodge a complaint with relevant authorities if your rights are violated.

• You will be notified via the app, SMS, or email.
• The “Last Updated” date will be revised accordingly.
• Continued use of the app after notification constitutes acceptance of the updated policy.

• The Digital Security Act, 2018.
• The Payment and Settlement Systems Regulations, 2014.
• Bangladesh Bank Mobile Financial Services (MFS) Guidelines.
• The Information and Communication Technology (ICT) Act, 2006.
• Anti-Money Laundering Act, 2012.
• Prevention of Terrorist Financing Act, 2009.