Privacy Policy

MatchBD Privacy Policy

Version: 1 Last Updated: 24th August, 2026

1. OUR COMMITMENT

1.1. MatchBD is built on a privacy-first principle. We understand that matrimonial searching involves deeply personal information, and we take the responsibility of handling that information seriously.

1.2. This Privacy Policy ("Policy") explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights and controls you have over your data.

1.3. By registering for, accessing, or using the MatchBD mobile application, website, or any related services (collectively, the "Platform"), you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree to this Policy, you must not register for or use the Platform.

1.4. This Policy forms part of the MatchBD Terms and Conditions. Capitalised terms not defined here have the meanings given in the Terms and Conditions.

2. IMPORTANT LIMITATION -- INFORMATION YOU SHARE WITH OTHER MEMBERS

2.1. This Policy governs how MatchBD handles your data. It cannot govern what another Member does with information you choose to give them.

2.2. Once you disclose information to another Member -- whether through Platform Chat, phone number exchange, or any other means -- that information leaves MatchBD's technical control. MatchBD cannot prevent another Member from copying, storing, screenshotting, or further sharing information you have provided to them.

2.3. If you share your contact number, address, photographs, or any other personal detail with another Member outside of the MatchBD Platform Chat, or outside of our prescribed consent-based exchange process, you do so entirely at your own risk. MatchBD disclaims all liability for any consequence arising from such disclosure.

2.4. Please share personal information gradually, cautiously, and only when you have good reason to trust the other party. We recommend involving family members in the process.

3. INFORMATION WE COLLECT

3.1. Information You Provide Directly

When you register for and use the Platform, you may provide:

Identity and contact data: Full name, gender, date of birth, mobile phone number, email address, city/district of residence.
Matrimonial profile data: Marital status, religion, sub-group, prayer/practice frequency, educational qualifications, occupation, income range, family background (parents' occupations, siblings, family type, family values), lifestyle preferences (diet, smoking, drinking), hobbies and interests, bio/about me text, partner preferences (age range, location, religion).
Media: Photographs (up to 6), profile photo, and any video content you choose to upload.
Verification data: Government-issued identity document images (National ID card front and back, passport, or birth certificate), selfie photograph for identity matching, parent/guardian NID or passport images (for family verification). These are stored in a private, access-controlled storage bucket and are never publicly accessible.
Communications: Platform Chat messages with other Members, reports and complaints filed against other Members, support requests and correspondence with MatchBD.
Transaction data: Package purchases, Gift Card redemptions, payment method selection, transaction amounts, payment gateway references.

3.2. Information Collected Automatically

When you use the Platform, we automatically collect:

Device model, operating system, unique device identifiers, app version.
IP address and approximate location (city-level, not precise GPS).
Browser type, language preference, and time zone.
Log data: access times, pages/screens viewed, app crashes, and system activity.
Interaction signals: profiles viewed, searches run, interests sent, matches made, messages sent, swipe actions.
Cookies and similar technologies (see Section 10).
Crash reports and error logs for performance monitoring.

3.3. Information from Third Parties

We may receive information about you from:

Payment service providers: Transaction confirmation, payment status, and fraud indicators from Nagad, bKash (via SSLCommerz), SSLCommerz, and card payment processors.
Family member registration: If a parent, guardian, or family member registers on your behalf, they may provide your information with your consent.
Other Members: Reports, complaints, or feedback about your conduct on the Platform.

3.4. Sensitive Personal Data

Certain information you provide -- including religion, community, sub-group, marital history, and family background -- may be classified as sensitive personal data under applicable law. By submitting such information, you give your explicit, informed consent to its processing for the purposes described in this Policy. You may withdraw this consent at any time by deleting your account, though withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. HOW WE USE YOUR INFORMATION

We process your personal data for the following purposes:

(a) Providing the Service: Creating and displaying your profile, operating the discover feed and matching engine, facilitating match requests (including identity blur -- withholding sender identity until receiver accepts), managing locked matches and FIFO unlock ordering, enabling Platform Chat, managing your account settings and preferences.

(b) Verification and Trust: Verifying your identity against submitted documents, issuing verification badges, detecting fraudulent or fake profiles, verifying family/guardian information, managing on-hold match requests (where family NID verification is pending, outgoing requests are held and invisible to receivers until verification is complete).

(c) Safety and Fraud Prevention: Monitoring for suspicious activity, enforcing daily send limits and rate limits, auto-suspending accounts after multiple reports from different Members, enforcing blocks across discover feed, matching, and chat, reviewing reported content and conduct.

(d) Human Matchmaking: If you opt into MatchBD's human matchmaking consultation service, sharing your profile data with trained MatchBD matchmaking consultants under strict confidentiality obligations.

(e) Payments: Processing Package purchases and Gift Card redemptions, managing match numbers and balances, issuing transaction receipts, preventing duplicate payments, supporting manual payment activation by admin when payment gateway webhooks fail.

(f) Communication: Sending push notifications (match requests, chat messages, expiry warnings, account updates), sending transactional emails (receipts, verification status), enforcing quiet hours (11 PM -- 7 AM Bangladesh Standard Time) for non-critical notifications.

(g) Improvement and Analytics: Analysing usage patterns to improve features, measuring platform performance and stability, training and improving our matching algorithms using de-identified data.

(h) Legal Compliance: Complying with applicable laws of Bangladesh, responding to court orders and lawful requests from authorities, enforcing our Terms and Conditions.

We do not sell your personal data to any third party.

5. WHAT OTHER MEMBERS CAN SEE

5.1. Profile Visibility

Your profile information is displayed to other Members according to your privacy settings, subject to the following rules:

5.2. Always Visible (Not Concealable)

The following information is always visible on your profile and cannot be hidden using privacy settings:

Your marital status (including "Currently Married" if applicable -- per Section 3.2 of the Terms).
Your religion, age, district/city, and verification badge status.
Your display name (system-generated, e.g., "KD103").
Your Package tier badge (if you have an active Package -- Crown icon with tier name).

5.3. Controllable by You

You may control the visibility of: photograph display settings, bio/about me text, income and occupation details, family background information, education details, contact preferences, search/discover appearance, and blocking settings.

5.4. Identity Blur

When you send a match request, your identity (including profile photos) is withheld from the receiver until they accept the request. This consent-based identity gate protects your privacy during the request phase. The receiver sees a blurred version of your profile until they choose to accept.

5.5. Never Shown to Other Members

The following information is never displayed to other Members under any circumstances:

Your mobile phone number and email address.
National ID, passport, or other identity document numbers or images.
Your exact home or workplace address.
Your payment details, transaction history, or match number balance.
Reports you have filed against other Members.
Your on-hold request status (requests pending family NID verification are completely invisible to receivers).

5.6. Screenshot Notice

We may deter or detect screenshots of profiles and chat within the Platform, but we cannot fully prevent them. Exercise caution when sharing sensitive information.

6. WHO WE SHARE INFORMATION WITH

6.1. We May Share Your Information With

(a) Other Members: Only the profile information that is visible according to your privacy settings and the rules in Section 5.

(b) Service Providers: Third-party service providers who assist us in operating the Platform, bound by confidentiality and data protection obligations:

Cloud hosting and infrastructure: Microsoft Azure (API hosting), Supabase (database, authentication, real-time chat, file storage).
Push notification delivery: Google Firebase Cloud Messaging (FCM).
Error monitoring and crash reporting: Sentry.
Payment processing: Nagad (mobile money), SSLCommerz (payment aggregator -- cards, mobile wallets, bKash).
App distribution: Apple App Store, Google Play Store, Expo Application Services (EAS).

(c) Onboarded Venues: If you choose to use an Onboarded Venue (restaurant, gift shop, event management firm, wedding venue, or other partner business), we may share minimum booking or service details (name, date, time) with the venue. We do not share your profile data, photos, or match history with venues.

(d) MatchBD Matchmaking Consultants: If you opt into human matchmaking consultation, your profile data (but not your identity documents, payment details, or chat history) may be shared with trained MatchBD consultants under strict confidentiality obligations.

(e) Legal and Regulatory Disclosure: We may disclose your information to law enforcement, regulatory bodies, or courts when required by law, court order, or lawful request, or when we reasonably believe disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our Terms.

(f) Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

6.2. We Do Not Share Your Data With

We do not share your personal data with advertisers, data brokers, or marketing list resellers. We do not sell, rent, or trade your personal information to any third party for their independent use.

7. DATA SECURITY

7.1. We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of data in transit (TLS/HTTPS).
Hashed and salted password storage.
Role-based access control for internal staff and admin panel.
Audit logging of all administrative actions (admin ID, action, target user, timestamp).
Private storage bucket for identity documents, accessible only through time-limited signed URLs generated by the server.
OTP-based authentication (4-digit OTP with 60-second resend cooldown).
Optional biometric lock (Face ID or fingerprint) after initial login.
Content moderation and review processes.
Regular security patching and vulnerability assessment.
Refresh-token rotation for session security.
Cleartext HTTP blocked on all app builds.
Duplicate payment prevention mechanisms.

7.2. MatchBD does not warrant absolute security against unauthorised access, data breach, or cyber-attack. No internet-based service can guarantee 100% security. In the event of a security incident, we will take immediate steps to contain, investigate, and remediate the issue.

7.3. You are responsible for keeping your login credentials confidential. MatchBD staff will never ask you for your password or OTP. If you suspect unauthorised access to your account, contact us immediately at info@matchbd.com.

7.4. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and, where required by law, the relevant authorities without undue delay.

8. DATA RETENTION

8.1. Active Account

While your account is active, we retain all data necessary to provide the Service.

8.2. After Account Deletion

When you delete your account, data is handled as follows:

Data Type	Retention Period	Reason
Public profile and photographs	Removed from visibility immediately; permanently deleted within 30 days	Service operation
Platform Chat records	Hidden from UI immediately; retained in backend for 12 months, then permanently deleted	Safety investigation, dispute resolution
Identity documents (NID, passport, selfie)	Retained for 12 months, then permanently deleted	Fraud prevention, legal compliance
Transaction and tax records	Retained for 6 years	Tax and regulatory compliance
Records relating to active complaints, investigations, or legal proceedings	Retained until the matter is concluded and any appeal period has lapsed	Legal obligation
Anonymised and aggregated analytics data	Retained indefinitely	Platform improvement (no personal identification possible)

8.3. Chat History When a Member Deletes Their Account

When one Member in a match deletes their account, the chat history for that match is hidden from the remaining Member's interface. The underlying records are retained in the backend for 12 months for safety and dispute resolution purposes, after which they are permanently deleted.

9. YOUR RIGHTS AND CONTROLS

9.1. You Have the Right To

(a) Access: Request a copy of the personal data we hold about you.

(b) Correction: Request correction of any inaccurate or incomplete personal data.

(c) Restriction: Restrict the visibility of certain profile fields using your privacy settings.

(d) Profile Hiding: Temporarily hide your profile from the discover feed without deleting your account.

(e) Deletion: Delete your account and request permanent removal of your personal data, subject to the retention periods in Section 8. Deleting your account does not entitle you to a refund of any fees paid or match numbers remaining.

(f) Consent Withdrawal: Withdraw your consent to the processing of sensitive personal data at any time by deleting your account.

(g) Objection: Object to the use of your data for marketing purposes.

(h) Blocking: Block any Member to immediately cease all communication and prevent future matching.

(i) Reporting: Report any Member for suspicious, abusive, or unlawful behaviour.

(j) Complaint: Lodge a complaint with the MatchBD Grievance Officer or with the relevant regulatory authority.

9.2. How to Exercise Your Rights

Requests should be sent to info@matchbd.com and will be actioned within thirty (30) days. We may require identity verification before processing your request.

9.3. Marketing Communications

You may opt out of promotional communications at any time. Transactional messages (receipts, verification updates, security alerts, match expiry warnings) cannot be declined while your account is active, as they are necessary for the operation of the Service.

9.4. Account Deletion

You may delete your account at any time through the Platform settings or by contacting info@matchbd.com. Upon deletion, your profile data, photographs, and identity documents will be permanently removed in accordance with the retention schedule in Section 8.

10. COOKIES AND TRACKING

10.1. What We Use

We use cookies and similar technologies for: maintaining your session and login state, storing your language and display preferences, measuring feature usage and platform performance, detecting and preventing fraud and abuse, and measuring the effectiveness of marketing campaigns.

10.2. Types of Cookies

Essential cookies: Required for the Platform to function (session management, security). These cannot be declined.
Analytics cookies: Help us understand how the Platform is used and identify areas for improvement. You may decline these.
Marketing cookies: Used to measure the effectiveness of promotional campaigns. You may decline these.

10.3. Third-Party Tools

Third-party analytics tools (such as Google Analytics and Google Tag Manager) may be used on our public marketing pages (website, landing pages). These tools are not applied to your private profile data, Platform Chat content, or identity documents.

11. AI AND AUTOMATED PROCESSING

11.1. How We Use AI

MatchBD uses automated systems to: generate compatibility scores and match recommendations, rank and order profiles in the discover feed (including boosted profiles), detect potentially fraudulent or fake profiles, prioritise moderation queues based on report severity, and generate AI-assisted bio suggestions (using your profile information, with your explicit action).

11.2. Limitations

AI recommendations are suggestions, not decisions about your rights. They do not determine whether you may marry anyone, whether you are eligible for the Platform, or whether your account should be suspended. All significant account actions (suspension, termination, verification rejection) involve human review.

11.3. Human Review

If an automated decision has a significant effect on you (e.g., profile rejection, account restriction), you may request human review by contacting info@matchbd.com.

11.4. Training Data

De-identified and aggregated data may be used to train and improve our matching algorithms. Your photographs, identity documents, and Platform Chat content are not used to train third-party AI models.

12. CHILDREN AND MINORS

12.1. MatchBD is strictly for adults of legal marriageable age -- not less than 21 years for males and not less than 18 years for females under the Child Marriage Restraint Act, 2017.

12.2. We do not knowingly collect personal data from anyone below these age thresholds. If we discover that an underage person has registered, the account will be immediately deleted, all associated data purged, and the matter reported to appropriate authorities.

12.3. If you believe a minor has registered on the Platform, please report it immediately to info@matchbd.com.

13. NON-RESIDENT BANGLADESHIS AND INTERNATIONAL TRANSFERS

13.1. MatchBD serves Bangladeshi nationals both within Bangladesh and abroad (probashi users). If you are a non-resident Bangladeshi, your data may be transferred to and processed on servers located outside Bangladesh through our hosting and infrastructure providers.

13.2. Where data is transferred internationally, we ensure that contractual safeguards are in place ensuring a standard of protection materially equivalent to the protections described in this Policy.

13.3. If you are located in the European Union or United Kingdom, you may exercise your rights under the General Data Protection Regulation (GDPR) or the UK Data Protection Act 2018 by contacting info@matchbd.com.

14. THIRD-PARTY LINKS

14.1. The Platform may contain links to third-party websites, services, or applications. This Policy does not apply to them. We encourage you to review the privacy policy of any third party before providing them with information. MatchBD is not responsible for the privacy practices of third-party services.

15. CHANGES TO THIS POLICY

15.1. MatchBD may update this Policy from time to time. Material changes will be notified to you at least seven (7) days before taking effect, through in-app notification, email, or prominent notice on the Platform. Continued use of the Platform after such notice constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically.

16. GOVERNING LAW

16.1. This Policy is governed by and construed in accordance with the laws of the People's Republic of Bangladesh, including the Cyber Security Act, 2023 and any applicable data protection legislation. Disputes arising from this Policy are subject to the dispute resolution provisions of the MatchBD Terms and Conditions.

17. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact:

Privacy and Data Protection / Grievance Officer Email: info@matchbd.com Phone: +8801986999888 Address: 102, Sukrabad, Dhaka, Bangladesh

MatchBD is operated under the laws of the People's Republic of Bangladesh.

Version 1 · Last updated 8/24/2026