Website Security

1. How we protect your information

• Encrypted connection. The site is served over HTTPS and our pages tell your browser to keep using it.
• KYC documents are encrypted. Passports, PAN and other documents you upload are stored encrypted. Only authorised staff can open them, after signing in, and access is logged.
• Passwords are stored as one-way hashes. We cannot read or recover them.
• Protected sign-in. Sign-in cookies cannot be read by page scripts, are sent only over HTTPS, and are not sent on cross-site requests. Repeated failed staff sign-ins are blocked for a period.
• Forms are protected against forgery and automated abuse, and what you submit is checked on our server, not just in your browser.
• Prices come from our server. The amount you pay is calculated on our side from the rate locked in your quote; it cannot be changed from your browser.
• Limited access. Staff see only what their role needs. Records are kept only as long as the law and our Privacy Policy require.
• Hardened site. We restrict where scripts and content may load from, block framing of our pages by other sites, and keep private folders (configuration, data and application code) out of reach of the web.

2. Staying safe from fraud

• Our website is www.bestdealfx.com. Check the address bar and the padlock before you sign in or pay.
• We never ask for your OTP, card PIN or CVV, internet-banking password or UPI PIN, by phone, WhatsApp, SMS or email.
• Pay only to the bank or UPI details shown on your own order page after you sign in. If someone sends different details, do not pay; call us.
• Our official contacts are on the Contact page: +91 9676321959, +91 9346758273 and info@bestdealfx.com. Treat any other number or address claiming to be us with caution.
• Do not install apps or share your screen at the request of a caller who says they are from us.
• If something looks wrong, stop and call us before you pay.

3. Reporting a security problem

If you believe you have found a weakness in this website, please tell us privately before you tell anyone else. Email info@bestdealfx.com with the subject "Security report" and include:

• what you found and the page or address involved;
• the steps to reproduce it, and screenshots if helpful;
• your name and a way to reach you (optional, but it helps us follow up).

We will acknowledge your report, look into it, and keep you informed. Please help us by:

• testing only with your own account and data, never viewing, changing or keeping anyone else's information;
• not running attacks that disrupt the service (denial of service, mass scanning, spam or brute-forcing);
• not attempting social engineering of our staff or customers, or physical attacks;
• giving us reasonable time to fix the issue before sharing it publicly.

We will not take legal action against anyone who finds and reports a problem in good faith and follows these guidelines. We do not currently run a paid bug-bounty programme.

4. What is outside this policy

• Websites and services run by others, such as Google, WhatsApp, banks and payment apps;
• Reports from automated tools with no proof that the issue can be exploited;
• Missing "best-practice" headers or settings with no demonstrated impact.

5. Contact

Security reports and fraud alerts: info@bestdealfx.com or +91 9676321959. This page is also published as a standard security.txt file. See also our Cookie Policy.