Privacy Policy

Effective Date: 19 February 2026

Bulsho Development Bank ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Bulsho Development Bank mobile application and related services.

1. Information We Collect

1.1 Personal Identification Information

• Full name
• Phone number
• Email address
• Residential address
• Government-issued identification (National ID / Passport)

1.2 Biometric Information

• Facial recognition for identity verification
• Fingerprint authentication

1.3 Financial Information

• Bank account numbers
• Transaction history
• Account balances
• Payment and transfer details

1.4 Device and Usage Data

• IP address
• Device ID
• Device model and operating system
• App usage logs

1.5 Location Data

We may collect precise or approximate location data when necessary for fraud prevention, security monitoring, and regulatory compliance.

1.6 Permissions

The app may request access to:

• Camera (for identity verification and document scanning)
• Photo gallery (for document uploads)
• Contacts (if required for transfer functionality)
• SMS (for secure OTP verification)

2. How We Use Your Information

• To create and manage your bank account
• To verify your identity (KYC compliance)
• To process transactions and payments
• To prevent fraud and enhance security
• To comply with legal and regulatory requirements
• To improve app functionality and performance

3. Data Sharing and Disclosure

We do not sell your personal information.

We may share your information with:

• Regulatory authorities and government agencies when legally required
• Trusted service providers assisting with hosting, security, analytics, and infrastructure
• Fraud detection and risk management providers

4. Data Retention

We retain personal and financial data as required by banking and financial regulations, typically for a minimum of 5–7 years after account closure.

5. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption
• Encrypted data storage
• Multi-factor authentication (MFA)
• Role-based access controls
• Continuous monitoring and fraud detection systems

6. Your Rights

You may:

• Request access to your personal data
• Request correction of inaccurate information
• Request account deletion (subject to regulatory retention obligations)

To exercise these rights, contact us at: [email protected]

7. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect information from minors.

8. International Data Transfers

Your data may be processed in secure cloud infrastructure environments. We ensure appropriate safeguards are implemented.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

10. Contact Us