PRIVACY POLICY FOR Nexa

Collection of Personal and Technical Data

We collect and process personal information including name, address, contact details, National ID, and billing information to provide internet services. Additionally, we may collect network usage data, IP addresses, and device information for lawful monitoring, service optimization, and security purposes. All data collection is conducted in accordance with applicable regulatory requirements in Bangladesh.

Lawful Use and Processing of Data

Your personal data is processed only for legitimate purposes including service delivery, billing, customer support, regulatory reporting, and fraud prevention. Processing is carried out based on contractual necessity, legal obligations, and legitimate business interests in compliance with the Personal Data Protection Act, 2024, which introduces restrictions on how data is processed, stored, and transferred.

Regulatory Compliance and Data Disclosure (BTRC)

As a licensed ISP, we are required to comply with directives of the Bangladesh Telecommunication Regulatory Commission (BTRC). This may include submission of operational and subscriber-related information to regulatory systems when mandated by law.

We may disclose personal data to government authorities, law enforcement agencies, or regulators where legally required, including for national security, lawful interception, or compliance purposes.

Data Storage, Security, and Localization

We implement appropriate technical and organizational safeguards including encryption, access controls, monitoring, and secure data storage. In line with emerging regulatory expectations, data may be stored within Bangladesh to ensure regulatory oversight and protection. Data retention is limited to what is necessary for legal, regulatory, and operational purposes, and anonymization may be applied where required.

User Rights and Data Protection Principles

In accordance with the Personal Data Protection Act, 2024, users have the right to access, correct, or request deletion of their personal data, subject to legal and regulatory obligations. We are committed to ensuring transparency, accountability, and protection of user privacy, while balancing statutory requirements that may allow government access to data under

Payment Security:

All payments are securely processed through SSLCommerz Payment Gateway. We do not store sensitive financial credentials such as card or mobile wallet PINs on our systems.