Y27 Privacy Policy — Your Data, Our Responsibility

This privacy policy applies to all users of y27 platform services and provides a complete description of how personal data of users in Bangladesh is collected, stored, and used. When you visit our website, create an account, or use any of our services, you automatically agree to the terms of this policy. Please read this document carefully, and if any part is unclear, contact our Mobile Help Center for assistance. We reserve the right to update this policy at any time, and your continued use of the platform after any changes constitutes your agreement to the revised policy. Protecting your privacy is one of our highest priorities, and we always operate with full transparency.

When you register on the y27 platform, we collect your name, email address, mobile number, date of birth, and address in Bangladesh. National ID or passport information may be required for identity verification, and is stored exclusively using secure encrypted methods. Payment method details are collected during financial transactions, but full card or account numbers are never stored. When you use our platform, your device type, browser information, IP address, and usage patterns are automatically logged. This information is used to ensure platform security and to improve your experience.

Collected data is primarily used for account management, identity verification, transaction processing, and customer service. We analyze your usage patterns to continuously improve the platform's services and experience. Where applicable, data may also be used to meet legal obligations in Bangladesh and to prevent fraud. With your consent, we may contact you about relevant offers or updates, though you may request to stop receiving such communications at any time. Your data is never sold or rented to any third party — that is our commitment.

Y27 never transfers your personal data to third parties for commercial purposes. However, limited information may be shared with trusted partners for payment processing, identity verification, or technical services, all of whom operate under strict confidentiality agreements. Data may be disclosed as a legal obligation upon receipt of a valid order from a Bangladeshi court or regulatory authority. Any such data sharing is kept to the minimum necessary. All our partners comply with international data protection standards and ensure the security of your information.

To keep your data secure, y27 uses industry-standard SSL/TLS encryption, firewalls, and regular security audits. Sensitive information such as passwords is never stored in plain text; instead, strong hashing algorithms are used. Our server infrastructure is continuously monitored, and systems are in place to detect any suspicious activity immediately. In the event of a data breach, we will promptly notify affected users and take the necessary steps. To further secure your account, use a strong password and never share your login credentials with anyone.

As a user in Bangladesh, you have the right to view, correct, and request deletion of your own data. You can send a data request to our support team at any time, and we will respond within a reasonable timeframe. The option to opt out of marketing communications is always available and will not affect your access to core services. Even after account closure, some data may be retained for a specified period due to legal obligations. For any questions or concerns regarding your privacy, please contact our FAQ page or reach out directly to support.

The y27 platform uses cookies and similar technologies to enhance your browsing experience. Essential cookies are necessary for the platform's core functionality, such as maintaining login sessions and security verification. Analytical cookies help us understand how users interact with the platform, which is used to improve our services. You can manage cookies through your browser settings, though disabling certain cookies may limit some platform features. We do not use any third-party advertising tracking cookies, and your browsing behavior is not shared externally.