Privacy Policy — badbet Bangladesh

1. Introduction

badbet ("we", "us", "our") operates the online casino and sports betting platform accessible at badbet.club. This Privacy Policy describes how badbet collects, processes, stores, shares, and protects the personal data of individuals who access or use the badbet Platform, including visitors who browse the site without registering and registered users who hold an active Account.

By accessing the badbet Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you should discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated into our broader commitment to transparency and player protection on the badbet Platform.

2. Data We Collect

badbet collects personal data that falls into several broad categories depending on how you interact with the Platform. The specific data points collected are described below.

2.1 Identity Data

When you register an Account on badbet, we collect information necessary to verify your identity and comply with our Know Your Customer (KYC) obligations. This includes:

• Full legal name (as it appears on your national identity document)
• Date of birth (to verify that you are 18 years of age or older)
• Gender (optional, collected during registration)
• National Identity Card (NID) number or passport number
• Copies of identity documents submitted for verification purposes

2.2 Contact Data

• Email address
• Mobile phone number (used for two-factor authentication and account notifications)
• Residential address (district, city, and division within Bangladesh)

2.3 Financial Data

• Mobile wallet numbers associated with bKash, Nagad, Rocket, or Upay accounts
• Bank account details where applicable (for bank transfer deposits and withdrawals)
• Transaction history (deposits, withdrawals, and wager records) within your badbet Account

badbet does not store full payment card numbers. Card-based transactions are handled entirely by our certified third-party payment processing partners, who maintain their own security standards.

2.4 Technical and Device Data

• IP address at the time of registration and at each login
• Device type, operating system, and browser type
• Session identifiers and authentication tokens
• Geolocation data (country and region level, derived from IP address)

2.5 Behavioural and Usage Data

• Pages visited and time spent on each section of the Platform
• Games accessed, wagering patterns, and session duration
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)
• Support chat transcripts and email correspondence with our support team

2.6 Communications Data

• Preferences regarding marketing communications (opt-in and opt-out records)
• Content of voluntary feedback, survey responses, and complaints submitted to badbet

3. How We Collect Data

badbet collects personal data through the following channels:

3.1 Direct Collection

You provide data directly to badbet when you: register an Account; complete identity verification; make a deposit or withdrawal ; contact our support team; respond to a survey or promotion; or update your Account profile settings.

3.2 Automated Collection

When you access the badbet Platform, our servers and analytics systems automatically record technical data including your IP address, device identifiers, browser type, referring URL, and session activity. This data is collected via server logs, session cookies, and analytics tools operated by or on behalf of badbet.

3.3 Third-Party Sources

In certain circumstances, badbet may receive or verify data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, and banking partners) confirming transaction status and account ownership
• Identity verification service providers used to cross-check document authenticity
• Fraud detection and anti-money-laundering (AML) screening services

Data received from third-party sources is used solely for the purposes described in this Privacy Policy and is subject to the same security standards as data collected directly from you.

4. How We Use Your Data

badbet uses your personal data for the following purposes:

badbet will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required by applicable law, obtaining your consent.

5. Legal Basis for Processing

badbet processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and badbet — including Account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, anti-money-laundering checks, and age verification.
• Legitimate interests: Processing necessary for badbet's legitimate business interests — including fraud prevention, Platform security, and product improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Where you have given explicit, informed consent — most notably for the receipt of marketing and promotional communications. You may withdraw this consent at any time by updating your Account preferences or contacting our support team.

6. Data Sharing & Disclosure

badbet does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for each stated purpose.

6.1 Service Providers

badbet engages trusted third-party service providers who process data on our behalf under binding data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, banking partners, Visa, Mastercard), identity verification providers, cloud hosting and infrastructure providers, email and SMS notification services, and analytics and fraud detection platforms. All service providers are required to maintain appropriate technical and organisational security measures.

6.2 Game Providers

Game studios and live casino providers (including but not limited to Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) whose games are available on the badbet Platform may receive limited technical data — such as session identifiers and wager amounts — necessary to deliver a seamless gaming experience. These providers do not receive your full identity or contact details.

6.3 Legal and Regulatory Disclosure

badbet may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, valid legal process, or a good-faith belief that such disclosure is necessary to protect the rights, property, or safety of badbet, its users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a portion of badbet's business, personal data held by badbet may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

7. Payment Data

badbet treats payment data with the highest level of protection. All deposit and withdrawal transactions are processed over 256-bit SSL-encrypted connections. Mobile wallet transactions via bKash, Nagad, Rocket, and Upay are authenticated directly between you and the relevant payment provider using their own security infrastructure; badbet does not receive or store your mobile wallet PINs or one-time passwords.

Bank account details provided for withdrawal purposes are encrypted at rest using industry-standard encryption and are accessible only to authorised badbet personnel involved in payment processing and fraud prevention. Retention of bank account details is limited to the period necessary for ongoing transaction processing and regulatory record-keeping requirements, as described in Section 9.

8. Cookies & Tracking Technologies

badbet uses cookies and similar tracking technologies on the Platform to ensure correct functionality, improve user experience, and support analytics and fraud prevention. The types of cookies used are as follows:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They include session authentication tokens, security identifiers, and load-balancing cookies. These cookies cannot be disabled without impairing the functionality of the Platform.

8.2 Functional Cookies

These cookies remember your preferences — such as your selected language, display settings, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.

8.3 Analytics Cookies

badbet uses analytics cookies to understand how users interact with the Platform — which pages are most visited, where users encounter difficulties, and how game sessions progress. This data is aggregated and used solely to improve Platform performance. Analytics data is not used to identify individual users for marketing purposes.

8.4 Managing Cookies

You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from logging into your Account and using core Platform features. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may affect your experience.

9. Data Retention

badbet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is used in place of deletion, the resulting data may be retained indefinitely for aggregate statistical analysis.

10. Data Security

badbet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the badbet Platform
• Encryption at rest for sensitive data categories including identity documents, financial records, and authentication credentials
• Role-based access controls ensuring that badbet personnel can only access personal data that is strictly necessary for their specific job function
• Two-factor authentication for Account login, adding an additional layer of security beyond your password
• Regular penetration testing and security audits conducted by independent third-party security specialists
• Incident response procedures enabling badbet to detect, investigate, and notify users of any data breach in a timely manner

While badbet takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your Account credentials and for using a secure, private device when accessing the Platform.

11. Your Rights

As a user of the badbet Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]

• Right of Access: You have the right to request a copy of the personal data that badbet holds about you, along with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Some data may be corrected directly within your Account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal and regulatory retention obligations, meaning we may be unable to delete certain records during the mandatory retention period described in Section 9.
• Right to Restrict Processing: You have the right to request that badbet limits the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our legitimate interests basis for processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and to withdraw consent for marketing communications at any time without penalty.

badbet will respond to all verified rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty days, of which you will be notified.

12. Children's Privacy

The badbet Platform is strictly intended for adults aged 18 years and over. badbet does not knowingly collect personal data from individuals under the age of 18. If we become aware that a person under 18 has provided personal data to badbet, we will immediately suspend the relevant Account and take steps to delete the associated data as quickly as practicable.

If you are a parent or guardian and believe that a minor has registered on the badbet Platform, please contact us immediately at [email protected] We take underage access seriously and will prioritise any such report.

13. Third-Party Services

The badbet Platform may reference or integrate with third-party services — including payment processors, game providers, and analytics platforms — each of which operates under its own privacy policy. badbet is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with the badbet Platform.

Links to third-party services within the badbet Platform are provided solely for operational purposes (for example, redirecting you to your bKash or Nagad application to complete a payment). badbet does not endorse the privacy practices of any third-party provider and accepts no liability for data handling by those providers beyond the contractual obligations imposed upon them by badbet's data processing agreements.

14. Policy Amendments

badbet reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where amendments are material — that is, where they meaningfully affect your rights or the way we use your personal data — badbet will notify registered users via the email address associated with their Account prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the badbet Platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Policy, you should close your Account by contacting our support team and cease using the Platform.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way badbet handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the badbet Platform — the fastest way to reach our team for data-related queries.
• Email: [email protected] — for formal data subject access requests, erasure requests, and written privacy complaints.
• Response Time: badbet will acknowledge all privacy-related written enquiries within 48 hours and provide a substantive response within 30 days of receipt.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

All correspondence should be submitted in English. Please include your registered Account email address and a clear description of your request or concern to help us respond as efficiently as possible.