Reference

Check How We Protect Your Privacy

We keep this straightforward. When you use glion, your personal and payment data passes through systems we control — and this page tells you exactly what we collect, why we hold it, and how you can ask us to change or remove it.

bKash data handlingNagad transaction recordsRocket payment privacyAccount data rightsCookie controls
glion Check How We Protect Your Privacy
HOW WE HANDLE DATA

Explore Our Data Practices and Security

Your data sits behind multiple layers of protection. Here is how we approach each area of privacy management — from what cookies do on your device to how long we keep transaction records and who inside our team can access what. We believe clarity builds confidence, so every practice described below reflects our actual operational setup.

Data Collection

We collect only what you give us directly — name, phone, email — plus device and session data generated when you browse. bKash, Nagad or Rocket transaction references are stored to reconcile your deposits and withdrawals accurately.

Cookie Usage

Our site places functional cookies to keep you logged in and analytics cookies to understand traffic patterns. You can clear or block cookies through your mobile browser settings at any time; blocking may affect session persistence on your account.

Account Security

Your password is hashed and never stored in plain text. Session tokens expire after inactivity. If you log in from a new device, we send an OTP to your registered mobile number before granting access — an extra layer tied to your own SIM.

Data Retention

Transaction records stay for the duration required under applicable financial regulations in your region. Marketing consent records and session logs have shorter retention windows. Once retention expires, data is permanently purged from active systems.

Third-Party Sharing

We share data only with payment processors like bKash, Nagad and Rocket to complete your transactions, and with fraud-prevention partners where legally required. We do not pass your details to advertisers, data brokers, or unrelated third parties.

Your Rights and Requests

You can ask us to show what data we hold, correct inaccuracies, withdraw marketing consent, or delete your account entirely. Submit through live chat, email or account settings. We verify identity via your registered number before processing any request.

PRIVACY CONTACT PATHS

Open a Privacy Request With Us

If you want to ask about your data, request a correction, or ask for deletion, reach us through any of these channels. We aim to respond to privacy-related requests within a reasonable timeframe once we verify your identity through your registered mobile number or email.

Live Chat Open the chat widget from any page on our site. Tell the agent your request is about privacy or data access, and they will route it to the data team.
Email Send your privacy request to our support email address listed on the contact page. Include your registered mobile number so we can verify ownership. We acknowledge receipt and confirm the next steps after identity verification is complete.
Account Settings Inside your account dashboard, find the privacy section where you can toggle marketing communications, download a summary of stored data, or submit a formal deletion request. Changes to marketing preferences take effect immediately; deletion requests go through verification first.

Switch to Answers on Common Data Questions

These are the questions we hear most often from account holders about how their information is used, stored and shared. Each answer reflects our actual data handling — not a generic statement. If your question is not listed here, reach out through any of the support paths above.

We collect your name, mobile number, email address, and a password you create. During verification we may ask for an ID document. Device identifiers and IP address are logged automatically when you access the site from your phone or computer.

Transaction reference numbers and amounts are stored on our encrypted servers to reconcile deposits and withdrawals. We do not store your mobile wallet PIN or full bKash, Nagad or Rocket account credentials — only the reference needed to match each payment.

Only with payment processors to complete transactions you initiate and with fraud-prevention partners where law requires it. We never sell your personal information to advertisers or data brokers. Third-party access is limited to the minimum needed for each specific purpose.

Open live chat or send an email to our support address requesting deletion. We verify your identity through your registered mobile number. Once confirmed, your account is deactivated and personal data is queued for permanent removal according to our retention schedule.

Functional cookies keep your session active so you stay logged in. Analytics cookies help us understand page traffic. You can block or clear both types through your mobile browser settings — though blocking functional cookies means you will need to log in each visit.

We retain transaction data for the period mandated by applicable financial regulations in eligible regions. Once that window closes, records are permanently deleted from active databases. Session logs and marketing preference data have shorter retention timelines.

Yes. Go to the privacy section inside your account dashboard and request a data export. We compile the file and make it available for download after verifying your identity. The export includes account details, transaction history, and stored preferences.

Toggle off marketing consent inside your account settings and the change takes effect immediately — no more promotional emails or SMS. Your account and gameplay remain unaffected; withdrawal of marketing consent does not impact your ability to deposit or withdraw funds.

Passwords are hashed, sessions expire after inactivity, and logging in from a new device triggers an OTP sent to your registered mobile number. These measures ensure that even if someone knows your password, they still need physical access to your SIM to get in.

The core policy applies to everyone using our platform. However, where local law in Bangladesh or another eligible region grants additional data rights — such as broader deletion or portability rights — we honour those. Availability of services depends on your local law and eligible regions.