Reference

How cstar Handles Your Privacy

We keep this straightforward. This policy explains what personal data we collect when you use your account, how we store it, and what control you have over it.

Data transparencyAccount controlLocal payment privacyMobile-first protectionClear contact paths
cstar How cstar Handles Your Privacy
DATA HANDLING PRACTICES

Explore How We Protect Your Information

Privacy is not a single feature — it runs through every part of how we operate. From the moment you enter your phone number to the point where a Nagad withdrawal hits your wallet, multiple layers of protection apply. Below we break down six areas that matter most to your day-to-day experience on cstar, so you know exactly what happens behind the scenes with your information.

Encryption at Rest

All personal and financial data stored on our servers is encrypted using industry-standard protocols. Even if storage media were physically accessed, your account details, transaction logs and identity documents would remain unreadable without the decryption keys held separately.

Cookie Management

We use functional cookies to keep you logged in and remember your language and layout preferences. Analytics cookies are anonymised.

Account Security Layers

Your account is protected by your password plus OTP verification sent to your registered mobile number. If you log in from a new device, we flag it and may ask for additional confirmation before granting full access to wallet functions…

Data Retention Policy

We retain your personal data only as long as your account is active or as required by applicable regulations.

Third-Party Sharing

We share data with payment processors like bKash, Nagad and Rocket solely to complete transactions you initiate. We do not pass your personal details to advertisers or data brokers.

Your Rights and Requests

You have the right to request access to the data we hold about you, ask for corrections, or request deletion where local law permits.

PRIVACY CONTACT PATHS

Reach Us About Your Data

Have a question about your personal information or want to make a data request? We keep multiple channels open so you can reach us in the way that suits you. Our support team handles privacy queries with the same priority as account or payment issues, and you can expect a response within a reasonable timeframe after submitting your request through any of the paths below.

Live Chat Open the chat widget from any page on cstar. Let the agent know your query is about personal data — they will route it to the privacy handling team. Available around the clock for initial intake, with follow-up confirmation sent to your registered email.
Email Request Send your data access, correction or deletion request to our support email. Include your registered phone number and account username so we can locate your records quickly. We acknowledge every privacy email and provide a timeline for resolution.
Account Settings Some privacy controls are available directly inside your cstar account. You can update contact details, change your notification preferences and review which devices have active sessions — all from the settings page on mobile or desktop browser.

Check Common Privacy Queries

Below are the questions we hear most about how your data is handled on cstar. If your specific concern is not covered here, reach out through live chat or email and our team will clarify directly.

We collect your full name, phone number, email address and date of birth during registration. When you make your first deposit through bKash, Nagad or Rocket, we also record the transaction reference and wallet identifier to match payments to your account.

No. We do not sell or share your personal data with advertisers, data brokers or any external marketing service. The only sharing that occurs is with payment processors to complete your deposits and withdrawals, and where legally required by applicable authorities.

Open live chat or send an email to our support team with the subject line referencing a data access request. Include your registered phone number and username. We will compile a summary of your stored data and send it to your registered email within a reasonable processing period.

Yes. You can request deletion of your personal data by contacting support. We will remove or anonymise your records after verifying your identity, subject to any mandatory retention periods required under applicable law in your region.

Once you request account closure, we retain your data only for the period required by regulatory obligations. After that window passes, your personal details and transaction history are either permanently deleted or anonymised so they cannot be linked back to you.

We use functional cookies to maintain your login session and remember preferences like language settings. Analytics cookies collect anonymised usage patterns. You can clear or block cookies through your mobile browser settings at any time — this may require you to log in again on your next visit.

When you initiate a deposit or withdrawal through bKash, Nagad or Rocket, the transaction is processed over encrypted channels. We store only the reference ID and wallet identifier — we never store your wallet PIN or full payment credentials on our servers.

Yes. When we update our privacy practices in any meaningful way, we send a notification to your registered email or phone number. The updated policy is also published on this page with a revision note so you can see exactly what changed.

Our support team has a dedicated process for privacy-related queries. When you flag a message as a data or privacy request through live chat or email, it is routed to the team members trained in data handling procedures who will manage your case through to resolution.

Your account data stays the same regardless of device. We use session tokens to recognise you across devices, and if a login from an unfamiliar device is detected, we verify through OTP before granting full wallet and withdrawal access to protect your information.