Home Privacy Policy

Privacy Policy

How Nagad Pay collects, uses and protects your information.

Last updated: 16 October 2026

This Privacy Policy applies to the Nagad Pay website (nagadpay.com), mobile app and related services. By registering or using our services, you agree to the collection and use of information as described here.

1. Information We Collect

We collect information that you give us when you register, complete KYC, use our services or contact us. This may include:

  • Name, mobile number, email address and business / shop details
  • KYC documents such as PAN and Aadhaar (masked where required) and photographs
  • Bank account details used for settlement and payouts
  • Transaction records - recharges, bill payments, money transfers, AEPS and wallet activity
  • Device, browser, IP address and log information collected for security

2. How We Use Your Information

Your information is used only to run and improve our services, including to:

  • Process recharges, bill payments, money transfers and other transactions
  • Verify your identity, complete KYC and prevent fraud or misuse
  • Send OTPs, transaction alerts, receipts and important service updates
  • Provide customer support and resolve complaints and disputes
  • Meet legal, regulatory and audit requirements

3. Aadhaar & Biometric Data

For AEPS and Aadhaar-based services we follow the rules of UIDAI and our banking partners:

  • Biometric data (fingerprint / iris) is captured only through certified devices and is sent in encrypted form for authentication
  • We do not store biometric data on our servers
  • Aadhaar numbers are used only for the service requested and are masked wherever they are displayed

4. Sharing of Information

We do not sell or rent your personal data. We share it only when it is needed to provide the service or when the law requires it:

  • Banks, payment networks, BBPS and service providers who process your transactions
  • Technology partners who help us operate the platform, under confidentiality obligations
  • Regulators, government authorities or law enforcement agencies when legally required

5. Data Security

We use reasonable security practices to protect your data, including:

  • Encrypted (HTTPS) connections across the website and app
  • Strong password rules, OTP verification and a separate Transaction PIN
  • Restricted, role-based access to data for our staff
  • Regular monitoring, updates and security reviews of our systems

No system is 100% secure. Never share your password, OTP or Transaction PIN with anyone - our team will never ask for them.

6. Data Retention

We keep your information only for as long as it is needed to provide our services and for the period required under applicable laws (such as RBI and anti-money-laundering rules). After that it is deleted or anonymised.

7. Your Rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can:

  • Ask for a summary of the personal data we hold about you
  • Ask us to correct or update inaccurate information
  • Ask us to delete your data, where we are not required to keep it by law
  • Withdraw consent for promotional messages at any time
  • Raise a grievance with us (see below)

8. Cookies

Our website uses cookies to keep you signed in securely, remember your preferences and understand how the site is used. You can block or delete cookies from your browser settings, but some features (like login) may not work without them.

9. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page with the "Last updated" date shown at the top.