Skip to content
BiniBini home

Privacy Policy

How Bini collects, uses and discloses your personal information.

Effective 2026-09-13

Bini Fintech Ltd built the Bini app as a Commercial app. This SERVICE is provided by Bini Fintech Ltd and is intended for use as is. This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service, and for meeting the legal and regulatory obligations that apply to us as a provider of investment services. We will not use or share your information with anyone except as described in this Privacy Policy. The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are accessible at Bini unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience, while using our Service, we may require you to provide us with certain personally identifiable information. This includes your name, contact number, email ID, photographs, National ID (NID), specimen signature, e-TIN certificate, and tax payment slips. We may also collect bank or brokerage account details where these are needed to process an investment.

We collect these because opening an investment account is a regulated process and the information is required to verify your identity and complete your KYC. The information that we request will be retained by us and used as described in this privacy policy.

The app does use third-party services that may collect information used to identify you. Link to the privacy policy of third-party service providers used by the app:

Log Data

We want to inform you that whenever you use our Service, we collect data and information (through third-party products) on your phone called Log Data. This happens during normal use of the app and when the app reports an error. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilising our Service, the time and date of your use of the Service, and other statistics.

Cookies and Local Storage

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device’s internal memory.

In the app

The Bini app does not use these “cookies” explicitly. However, the app may use third-party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

On this website

We do not set advertising cookies and we do not track you across other sites. Two things may be stored in your browser:

  • A cookie set by Cloudflare when you submit the newsletter signup form and it runs its Turnstile check. It records that a person, not a script, submitted the form. Cloudflare may process this outside Bangladesh.
  • An identifier saved in your browser's local storage when you subscribe to the newsletter. Local storage is not a cookie. It lets you unsubscribe from the same browser without waiting for an email. It is not a login and is not linked to anything else.

You can clear both at any time from your browser settings. Clearing them does not unsubscribe you. To unsubscribe, use the link in any newsletter or the /unsubscribe page on this site.

Service Providers

We use a small number of outside companies to run the Service. They process information on our behalf, under contract, and only for the purpose we give them. They are not permitted to use it for their own purposes. We do not sell your information to anyone.

  • Hosting and storage. Our application, database and document storage run on servers we operate at a third-party cloud infrastructure provider. The provider supplies the infrastructure and plays no part in how your information is used.
  • App diagnostics and analytics. Google Play Services, Google Analytics for Firebase and Firebase Crashlytics receive device and usage data when the app runs or reports an error.
  • Website security. Cloudflare protects this website and checks that form submissions come from a person rather than a script.
  • Newsletter delivery. An external email service provider sends the newsletter and holds subscriber email addresses.

Some of these providers operate outside Bangladesh, so some of your information is processed outside Bangladesh. We do not publish the location of our systems.

How We Protect Your Documents and Information

How your documents are stored

Your NID, signature, e-TIN and tax slip images are held in encrypted private storage. There is no public link to any of them. When you or an authorised staff member needs to view a document, a temporary link is generated at that moment. It expires on its own after one hour.

Our hosting provider supplies the infrastructure only. It has no account on our systems, no role in how your information is used, and is contractually barred from using it for any purpose of its own. We do not publish details of our hosting arrangements, because that is itself part of keeping them secure.

The keys that decrypt these files are held separately from the storage itself, so the documents cannot be read from the storage alone.

Passwords and investment confirmation

Passwords are stored as hashes, which means we do not hold your actual password. Every investment is confirmed using a security key held on your own phone. That key never reaches our servers.

Who your information goes to

We keep records of your account for compliance purposes. As required by regulation, your KYC information is shared with the relevant Asset Management Company (AMC) whose fund you invest in, the same way it would be if you opened an account directly with a bank or a brokerage house.

Beyond that, we do not hand your documents to anyone for their own purposes. We may disclose information where the law requires it, for example on the order of a court, a regulator or a tax authority.

Access and audit logs

Not everyone at Bini can see your documents. Access is restricted by role, and every view or download is recorded in an audit log showing who accessed the document and when.

Your consent

No account can be opened in your name without your consent. We will not use your information for any purpose you have not agreed to, other than where the law requires us to keep records, to share KYC information with the AMC, or to respond to a lawful request.

Staff obligations

Every member of our team is bound by our data privacy and confidentiality policy, and that policy is not limited to paper. No one from Bini will ever contact you by phone, email or message to ask for your password, PIN or OTP. We continue to strengthen this framework to keep our investors' trust.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. If we discover that a child under 13 has provided us with personal information, we delete it from our servers immediately. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take the necessary action.

Users between the ages of 13 and 18 are welcome to use Bini to learn about investing. They can browse funds, read our educational content and use our tools. They cannot open an investment account or make an investment, because regulatory requirements in Bangladesh restrict investment accounts to adults. Because no investment account can be opened, we do not collect NID, e-TIN, signature or tax documents from users under 18.

Access, Correction and Deletion of Information

You have a right to request a copy of the information we hold on you at any time. You also have the right to ask us to correct it, and to ask us to delete it.

What we can delete

Information that is not tied to an investment account can be deleted on request. This includes your newsletter subscription and your marketing preferences.

Some diagnostic and analytics information collected by our app providers is not linked to your account and cannot be separated out for one individual. Where that is the case we will tell you what we were able to remove and what remains.

What we are required to keep

If you have opened an investment account, we cannot delete your KYC records on request. The Money Laundering Prevention Act, 2012 requires records of an account and its transactions to be preserved for at least five years from the date the account is closed, and BSEC or our partner institutions may require a longer period for some records.

What we can do in that case is close your account, stop using your information for anything beyond the legal requirement, and restrict access to the records for the remainder of the retention period. Once that period ends, the records are deleted.

How to make a request

For any of these requests, please email us at hello@bini.live

Newsletter Subscriptions

If you subscribe to the Bini newsletter from this website, we store the following against your subscription:

  • Your email address, which is what we send the newsletter to.
  • The page you subscribed from, so we know which content brought you in.
  • An identifier saved in your browser's local storage, which lets you unsubscribe from the same browser without waiting for an email. It is not a login and is not linked to anything else.
  • A one-way salted hash of your IP address. The address itself is never stored and cannot be recovered from the hash; we keep it only to recognise repeated signups from one network.
  • The country your connection resolved to, and your browser's user-agent string.
  • The date you subscribed, and — if you leave — the date you unsubscribed, how you confirmed it, and any reason you chose to give.

Subscribing runs a Cloudflare Turnstile check to confirm a person, not a script, submitted the form. Turnstile is Cloudflare's privacy-preserving alternative to a CAPTCHA; it sets no advertising cookie and does not track you across sites. Its policy is here:Cloudflare Privacy Policy

Newsletters are sent using an external email service provider.

You can unsubscribe at any time — from the link in any newsletter, or at /unsubscribe on this site. When you unsubscribe we keep a record of your address on a suppression list rather than deleting it outright, so that we do not email you again by mistake. To have that record removed entirely, email us at hello@bini.live

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. This policy is effective as of 2026-09-13.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at hello@bini.live