Your data, handled responsibly

Privacy Policy

This Privacy Policy explains how AIBCO Limited ("AIBCO," "bookdei.com," "we," "us," or "our") collects, uses, stores, shares, and protects personal data when you use bookdei.com, our mobile applications, and related booking, payment, and support services (together, the "Platform"). It applies to travellers, property owners and managers, and visitors browsing the Platform from Bangladesh or abroad.

Effective 13 July 2026 · Last updated 13 July 2026

We handle personal data consistently with Bangladesh's data protection framework, including the Information and Communication Technology Act, 2006 (as amended), Cyber Security Act, 2023, BTRC Guidelines on Digital, Internet and OTT Services, National ICT Policy, Digital Commerce Operation Guideline 2021, and the principles of Bangladesh's draft Personal Data Protection Ordinance/Act as best practice.
1

Summary

  • •We collect data you provide, data collected automatically, and data received from payment, property, and identity-verification partners.
  • •We use data to process bookings and payments, communicate with you, operate rewards and referrals, secure the Platform, and—with consent where required—send marketing.
  • •We share only what is needed with property partners, licensed payment gateways, and contracted service providers.
  • •You may access, correct, delete, or request portability of your data and opt out of marketing.
  • •We do not sell personal data for third-party independent marketing.
2

Scope and who this policy covers

  • •Travellers who browse, search, or book stays, packages, flights, or visa services.
  • •Property owners and managers listing hotels, resorts, guesthouses, houseboats, and homestays.
  • •Visitors interacting through our website, app, WhatsApp Business number, or social pages without an account.

This policy does not cover independent third parties once they process data under their own privacy notices. Please review those notices.

3

Personal data we collect

  • •Identity & contact: name, mobile, email, address, and NID or passport details where verification or visa support requires them.
  • •Account & booking: credentials, history, dates, guest count, room preferences, and special requests.
  • •Payment: wallet number, tokenised card details, and transaction references received through payment partners.
  • •Property partner: trade licence, TIN/BIN, bank details, ownership documents, and property media.
  • •Device & location: approximate IP location; precise location only with device permission.
  • •Communications: WhatsApp, in-app chat, notified call recordings, and email correspondence.
  • •Reviews & feedback: ratings, reviews, surveys, and submitted photos.

We do not knowingly collect religion, political opinion, health information, or other sensitive data unless you voluntarily provide it for a stated need such as dietary or accessibility support.

4

How we use your data

  • •Bookings: confirm stays, visas and flights; verify identity; collect payments and property payouts; send confirmations, tickets, changes, and reminders.
  • •Support: answer bilingual support requests and share relevant schedule, cancellation, weather, and safety alerts.
  • •Improvement and security: improve search and stability, prevent fraud and account abuse, and maintain tax, audit, and regulatory records.
  • •Marketing and loyalty: with consent, send offers and administer rewards/referrals. Opting out never affects existing bookings.
5

Legal basis for processing

  • •Performance of a contract for accounts, bookings, and property agreements.
  • •Consent for marketing, optional location access, and non-essential cookies; consent may be withdrawn.
  • •Legal obligations including Bangladesh Bank foreign-exchange rules, NBR tax requirements, and BTRC directives.
  • •Legitimate interests in fraud prevention, security, and Platform improvement, balanced against your rights.
6

How we share your data

  • •Property owners: only the guest and stay details needed to fulfil a reservation.
  • •Licensed payment gateways: to process payments and refunds; we do not store full card numbers.
  • •Verification and compliance partners: for visas, high-value bookings, identity checks, or legal requirements.
  • •Cloud and IT providers: under written confidentiality and data-processing terms.
  • •Authorities and professional advisers: only when lawfully required or necessary for their engagement.

We do not sell your personal data or give payment credentials to property owners.

7

Data storage, location, and security

  • •Booking and account data is hosted on secure cloud infrastructure and may be processed outside Bangladesh with contractual safeguards.
  • •TLS/SSL protects data in transit.
  • •Payment card details are tokenised by licensed gateways; raw card numbers are not stored by us.
  • •Role-based access limits employee access to need-to-know use.
  • •We regularly review the booking engine, admin dashboard, and support system.

No system is completely secure. If a qualifying breach occurs, we will notify affected users and relevant Bangladeshi authorities without undue delay.

8

Cookies and similar technologies

  • •Cookies keep you signed in, remember currency and destination, measure performance, and—with consent—personalise offers.
  • •Manage non-essential cookies through browser settings or our preference banner. Disabling essential cookies may prevent booking.
9

Your rights and choices

  • •Access a copy of your data.
  • •Correct inaccurate or outdated data.
  • •Request deletion, subject to legal and tax retention duties.
  • •Withdraw marketing consent through unsubscribe, WhatsApp opt-out, or support.
  • •Request booking history in a commonly used portable format.

Contact us to exercise a right. We aim to respond within 30 days and may verify your identity first.

10

Children and minors

The Platform is for people aged 18 or the applicable age of majority. We do not knowingly collect data directly from children. A parent or guardian may provide a minor's details only as needed for a family booking.

11

Property owner and partner data

We collect trade licence, TIN/BIN, National ID, and bank or wallet details to verify partners, make payouts, and meet NBR and Bangladesh Bank obligations. Use is governed by the Accommodation Fee Collection Agreement.

12

Data retention

  • •Booking and transaction records: at least 6 years for NBR tax and audit needs.
  • •Account data: while active and for a reasonable period after closure for disputes or claims.
  • •Support communications and call recordings: up to 12 months for quality assurance, unless an open dispute requires longer.
13

Contact us

  • •Email: privacy@bookdei.com
  • •WhatsApp: through the contact icon on bookdei.com
  • •Post: AIBCO Limited, Registered Office, Dhaka, Bangladesh

If our response does not resolve your concern, you may contact BTRC or the relevant consumer protection authority under the Digital Commerce Operation Guideline 2021.

14

Changes to this policy

We may update this policy for changes in services, technology, or Bangladeshi law. Material changes will be announced on the Platform or by email before taking effect.