Reference

Privacy Policy at xking

We keep this straightforward. This page explains exactly what personal information we collect, how we store it, and what rights you have over your own data when you use xking in eligible regions where local law permits access.

Data Collection ScopebKash, Nagad, Rocket Payment DataAccount Security PracticesYour Rights Over Your Information
xking Privacy Policy at xking
DATA HANDLING DETAIL

How We Protect and Manage Your Information

Privacy is not a single checkbox — it runs through every layer of how we operate. Below are the specific practices we follow so your data stays under your control while you use xking in regions where access is permitted under local law.

Encryption at Rest

All personal data, including bKash, Nagad and Rocket transaction references, is encrypted when stored on our servers. Even internal staff access is restricted to role-based permissions — no single team member can view full account details without audit logging.

Cookie Management

We use session cookies to keep you logged in and preference cookies to remember your language and last-used payment method. You can disable non-essential cookies from your browser settings without losing core account functionality.

Account Security

Login sessions are tied to your device fingerprint. If we detect a new device or unusual location, we send an OTP to your registered mobile number before granting access.

Data Retention

We keep transaction and identity records only as long as required by applicable regulations in your region. Once the retention period ends, records are permanently deleted from active systems and from backups within a defined cycle.

Your Right to Deletion

You can ask us to close your account and erase all associated data. After verifying ownership via OTP, we initiate deletion. Any pending withdrawals through bKash, Nagad or Rocket are processed before the account is removed.

Third-Party Sharing

We share data only with payment processors (bKash, Nagad, Rocket, Upay, bank transfer providers) to complete your transactions and with fraud-prevention services to protect your wallet. We do not sell or rent your information to advertisers or data brokers.

PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Got a question about what we hold or want something changed? Here are the direct paths to our privacy-related support. We aim to respond to data requests within a reasonable timeframe, and we will confirm receipt so you know your query is being handled.

Live Chat Open the chat icon on any page of xking from your phone or browser. Tell the agent your request is about personal data — they will escalate it to our data handling team who process deletion, correction or access requests…
Email Support Send your data request to the support email listed in your account settings. Include your registered mobile number so we can locate your records quickly. We acknowledge every email and provide a reference number for tracking.
Account Settings Inside your account panel you can update your name, mobile number and linked payment method at any time. Changes to core identity fields may trigger a brief verification step via SMS to confirm you are the account holder.

Common Questions About Your Privacy

These are the questions our support team receives most often about data and privacy. If your specific concern is not here, reach out through live chat or email and we will answer directly.

We collect your mobile number, chosen display name, and the payment method you link (bKash, Nagad or Rocket reference). We may also store your IP address and device identifier for security purposes. No additional personal documents are required unless a verification step is triggered.

Transaction references are shared only with the respective payment processor to complete your deposit or withdrawal. We do not pass your payment history to marketing partners, advertisers or any unrelated third party. Internal access is audit-logged.

Open live chat or send an email from your registered address asking for a data export. After we verify your identity via OTP, we compile and deliver your data package. This typically includes account details, transaction history, login logs and any support interactions.

Yes. Contact support and request full account deletion. We verify ownership through your registered mobile number, process any outstanding Rocket or bKash withdrawals, then permanently remove your records once regulatory retention obligations in your region are fulfilled.

We use session cookies for login persistence and preference cookies to remember your last payment method and display settings. You can disable non-essential cookies via your mobile browser settings. Disabling session cookies means you will need to log in each visit.

We tie sessions to your device fingerprint and send an OTP to your registered number whenever a login attempt comes from an unrecognised device or location. This way, even if someone has your password, they cannot access your wallet without your phone.

Retention depends on the applicable regulations in your region. Once that mandatory period expires, we permanently delete your data from active databases and from encrypted backups within a defined cleanup cycle. We do not hold data indefinitely.

Our infrastructure serves users across eligible regions. Where data is processed on servers outside your country, we apply the same encryption and access controls described in this policy. We do not transfer data to jurisdictions with weaker protections without equivalent safeguards.

We notify you through an in-app message or email when material changes occur. You can review the updated policy and decide whether to continue using the platform. If you disagree with changes, you may request account deletion at any time.

Yes. Whether you access xking through a mobile browser, a saved home-screen shortcut, or a desktop session, this single privacy policy governs all data collection and processing equally. There is no separate policy for different devices.