Privacy Policy
Last Updated: October 2026 · Committed to transparency, KYC security, and data privacy in Bangladesh.
Privacy Sections
1. Introduction
At Basinda, we recognize the critical importance of safeguarding the personal data of Bangladeshi citizens, residents, and property hosts. This Privacy Policy details the types of personal data we collect, how it is secured, and the choices available to you regarding our use of your information.
2. Information We Collect
To ensure high-trust, authentic residential tenancies, we collect the following categories of information:
Full Name, National Identity (NID) number, Birth Registration Number (for non-adults), date of birth, photographs of NID/Birth certificate, and self-portrait verification image.
Mobile phone number (used for SMS OTP verification), email address, emergency contacts, permanent address (Division, District, Upazila, Ward).
Co-habitant family members, relationships, ages, and student status for hostel registrations.
Rent payment logs, transaction reference numbers, billing timestamps, invoice histories, and payment status codes.
3. Purpose of Data Processing
- Identity Authentication & Trust: Preventing impersonation and validating tenant and landlord legitimacy.
- Booking & Tenancy Coordination: Providing property owners with verified tenant profiles upon booking request submission.
- Regulatory Compliance: Complying with Bangladesh law enforcement tenant registry requirements (Thana / Police tenant verification format support).
- Security & Anti-Fraud Probes: Protecting platform accounts against unauthorized access, credential stuffing, and duplicate spam accounts.
4. Security of NID and Sensitive Documents
National ID images and self-photographs represent sensitive citizen identifiers. Basinda implements strict technical safeguards:
- Encrypted Transport: All document transmissions are enforced using TLS 1.3 / HTTPS encryption.
- Restricted Access Controls: Document images are shielded behind authenticated API endpoints with role-based authorization; they are never publicly exposed or indexable by search engine web crawlers.
- Watermarking & Validation: Uploaded media undergo server-side MIME type verification and size limits to prevent injection of malicious payloads.
5. Payment Gateway Security (SSLCommerz)
Basinda delegates card and banking credential processing to SSLCommerz, a PCI-DSS certified payment aggregator regulated by Bangladesh Bank. We never view, record, or store:
- Credit or debit card numbers, expiration dates, or CVV/CVC codes.
- Mobile Financial Service (bKash/Nagad/Rocket) personal account PINs.
- One-Time Passwords (OTPs) sent by your issuing bank.
6. Information Sharing
We strictly do not sell, rent, or trade your personal data to advertising networks. Information is disclosed solely in the following bounded contexts:
- Counterparty Inquiries: Relevant contact and tenancy details are shared with the respective landlord or hostel administrator when a rental reservation or lease agreement is confirmed.
- Legal & Law Enforcement: In strict response to court subpoenas, warrants, or lawful requests issued by Bangladesh law enforcement agencies in connection with criminal investigations.
7. Your Rights & Access
You retain the right to:
- Access and review all personal and family profile information stored in your account.
- Request rectification of inaccurate contact, employment, or residence records.
- Request account deactivation and unlinking of past tenancies upon settlement of all outstanding rent obligations.
8. Contact the Privacy & Compliance Team
For inquiries regarding your personal data or privacy rights, please reach out to our team: