Mushfile Privacy Policy — Your Data, Our Responsibility

Mushfile collects certain personal information to deliver a reliable service. We keep data collection to a strict minimum — only what is necessary.

Identity Information

• Full Name (as provided during registration)
• Date of Birth (for age verification)
• National ID or Passport Number (for KYC verification)
• Current Address

Contact Information

• Email Address
• Mobile Phone Number

Financial Information

• Mobile Banking Number (bKash / Nagad / Rocket)
• Bank Account Number (for withdrawals)
• Transaction History (Deposits & Withdrawals)

Technical Information

• IP Address & Device Type
• Browser & Operating System Information
• Site access times & session data
• Cookies & Location Data (subject to your permission)

Mushfile collects information in several ways — directly from you and through automated means:

• Registration Form: Information you provide directly when creating your account.
• KYC Verification: Via ID document copy and selfie upload.
• Payment Processing: Payment-related information collected during deposits and withdrawals.
• Cookies & Tracking: Your browsing behavior is collected automatically.
• Support Contact: Information shared via live chat or email.

Mushfile uses collected data only for specific, legitimate purposes. Your information is never used for anything unnecessary.

Mushfile never sells your data to third parties for marketing or advertising purposes. If you'd rather not receive promotional emails, you can unsubscribe at any time.

Mushfile does not sell your data for commercial purposes. However, there are limited circumstances where sharing certain information with specific third parties may be necessary:

• Payment Providers: Limited information is shared with bKash, Nagad, Rocket, or your bank solely to process transactions.
• KYC Partner: Partnered with a trusted KYC provider for secure identity verification.
• Legal Authorities: In response to a court order or a valid request from a law enforcement agency.
• Fraud Prevention Services: Partnered with a security provider to protect your account.

Mushfile employs industry-leading security measures to protect your data. Security isn't just a promise — it's at the core of our technology infrastructure.

• SSL 256-Bit Encryption: All communication between your browser and Mushfile's servers is encrypted.
• Database Encryption: Sensitive stored data (such as passwords and financial information) is always kept encrypted.
• Firewall & DDoS Protection: Unauthorized server-level access is actively prevented.
• Two-Factor Authentication (2FA): An additional layer of security for logins and withdrawals.
• Suspicious Activity Detection: Our AI-powered system detects unusual login activity or transactions automatically.

Mushfile uses cookies and similar technologies on its website. Cookies are small text files stored in your browser that help improve the quality of our services.

Cookie Type

• Essential Cookies: Used to maintain login sessions and ensure security. These cannot be turned off.
• Functional Cookies: To remember your preferences (language, theme).
• Analytical Cookies: Used to collect site usage statistics. These can be turned off.

You can manage cookies through your browser settings. Please be aware that disabling certain cookies may limit some functionality on the site.

Mushfile takes your data rights seriously. You may exercise any of the following rights at any time:

Mushfile only retains your data for as long as necessary. Retention periods vary depending on the type of information:

• While your account is active: Account and identity information is retained.
• Financial Transaction Data: A minimum of 5 years, as required by law.
• Communication Records: Minimum 2 years (for dispute resolution purposes).
• After account closure: Unless required by law, most data is deleted within 6 months.

Mushfile may update this Privacy Policy as needed. For significant changes, you will be notified via your registered email or through a platform notification.

Continued use of the platform after any changes constitutes your acceptance of the updated policy. The date of the latest update is always displayed at the top of the page.