Last updated: May 1, 2026
KYC.bd is built to support customers subject to the Bangladesh Personal Data Protection Act, 2023 ("DPA 2023"). This page summarizes our alignment with the Act's principles.
Lawful processing
We process personal data only on the documented instructions of our customers and only for purposes consistent with the consent collected from data subjects.
Data localization
Sensitive personal data of Bangladeshi residents is stored in Bangladesh-resident infrastructure unless the customer instructs otherwise and confirms compliance with cross-border transfer rules.
Consent management
Every verification request must include a consent reference. We provide consent receipts, audit trails, and revocation tooling.
Data subject rights
We assist Controllers in responding to access, correction, and erasure requests within statutory timelines.
Security & breach reporting
We follow the security requirements of the Act and notify affected Controllers within 72 hours of confirming a breach so they can meet their statutory reporting obligations.
Questions about this document? Contact legal@msg.bd. This page is a template for informational purposes and is not legal advice; consult qualified counsel for your jurisdiction.