Privacy Policy

Shahjalal Islami Bank PLC ("We," "Our," or "Us") is committed to protecting the privacy and security of your personal and financial information. This Privacy & Policy outlines how we collect, use, disclose, and safeguard your data when you use ShahjalalTouchPay (Mobile Apps & Web) for Internet Banking services.

By accessing or using ShahjalalTouchPay, you agree to the terms of this policy. If you do not agree, please refrain from using our services.

1. Information We Validate

We may collect the following types of information:

A. Account Information

•   Account title, address, date of birth, nationality
•   Contact details (phone number, email)
•   Account details, transaction history, payment records, and beneficiary details

•   IP address, device model, operating system version
•   Browser type, approximate location (if enabled for branch/ATM locator)
•   Cookies and usage analytics
•   App permissions (camera for QR scanning, SMS for OTP verification)

•   Login credentials (User ID, Password)
•   Biometric data (fingerprint, facial recognition – if enabled)
•   One-Time Passwords (OTP) and transaction verification codes

2. How We Use Your Information

We use your data to:

•   Provide, maintain, and improve ShahjalalTouchPay services
•   Verify identity and prevent fraud or unauthorized access
•   Process transactions and ensuring account security
•   Send notifications (transaction alerts, security updates)
•   Comply with legal obligations, including Bangladesh Bank regulations

3. Data Sharing & Disclosure

We may share your information only with:

•   Regulatory authorities (Bangladesh Bank, law enforcement)
•   Trusted third-party service providers (IT security, banking operations)
•   Affiliates & partners (strictly for banking-related services)

4. Data Security Measures

We implement industry-standard security measures, including:

•   End-to-end encryption (SSL/TLS) for all transactions
•   Two-factor authentication (2FA) for account access
•   Regular security audits and real-time fraud monitoring
•   Secure servers & firewalls to prevent breaches

5. User Responsibilities

To protect your account, you must:

•   Never share login credentials or OTPs (bank staff will never ask for these)
•   Avoid using public Wi-Fi for financial transactions
•   Log out after each session
•   Report suspicious activity immediately via customer support

6. Cookies & Tracking Technologies

We use cookies to:

•   Enhance app/website functionality
•   Analyze performance and user behavior
•   Personalized services (where applicable)
You may disable cookies in browser settings, but some features may not work properly.

7. Data Retention

We retain your information only as long as necessary for:

•   Legal and regulatory compliance
•   Fraud prevention and security audits
•   Service improvements

8. Policy Updates

We may update this policy periodically. You will be notified via:

•   In-app notifications
•   Email/SMS alerts
•   Website announcements
Continued use of ShahjalalTouchPay constitutes acceptance of changes.

9. Permitted Use & Restrictions

•   Allowed: Personal/non-commercial transactions only.
•   Prohibited: Illegal activities, money laundering, or fraudulent transactions.

10. Liability & Termination

•   Bank’s Liability: We are not responsible for losses due to:
      - Credential sharing or unauthorized access.
      - Technical failures beyond our control (e.g., network outages).
•   Termination: We may suspend/terminate access for policy violations or suspicious activity.

11. Governing Law

This policy is governed by Bangladeshi law and Bangladesh Bank regulations.