badbet Privacy Policy

badbet processes your personal data only for the specific, lawful purposes listed below. We do not use your data for any purpose not described in this Policy without first obtaining your consent.

• Account registration and management: to create, maintain, and administer your badbet account, including verifying your identity and age (21+).
• Payment processing: to process deposits via bKash, Nagad, Rocket, Upay, and bank channels, and to facilitate withdrawal requests back to your registered payment method.
• Fraud prevention and security: to detect and prevent unauthorised access, fraudulent transactions, money laundering, and other illegal activities affecting the platform.
• Responsible gaming compliance: to monitor wagering patterns, enforce deposit and loss limits, and respond to self-exclusion requests in accordance with our Responsible Gaming commitments.
• Customer support: to respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance.
• Legal and regulatory compliance: to comply with applicable laws, court orders, or requests from competent authorities.
• Platform improvement: to analyse anonymised usage data and improve the functionality, performance, and user experience of the badbet platform.
• Marketing communications (where consented): to send you promotional offers, bonus notifications, and news about new game releases. You may opt out of marketing communications at any time by contacting [email protected].

Each use of your personal data rests on one of the following legal grounds:

Contractual necessity: Processing required to deliver the services you have requested — including account management, payment processing, and bet settlement — is necessary for the performance of our agreement with you.

Legal obligation: Where processing is required to comply with applicable law, including age verification, anti-money laundering checks, and the retention of financial transaction records.

Legitimate interests: Processing undertaken for fraud detection, platform security, responsible gaming monitoring, and anonymised analytics, where our legitimate interests are not overridden by your data protection rights.

Consent: Where we send optional marketing communications, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

badbet does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your financial transactions. These providers operate under their own privacy policies and data security standards.
• Identity verification partners: Third-party KYC (Know Your Customer) service providers who assist us in verifying your age and identity in compliance with our legal obligations.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data required to deliver game functionality. They do not receive your personally identifiable data.
• Technology and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit any secondary use of your data.
• Legal and regulatory authorities: Where we are required by law, court order, or a lawful request from a competent authority to disclose your information.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

• Account data: Retained for the lifetime of your account, plus a period of 5 years following account closure to meet legal and regulatory obligations.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of each transaction in line with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account and for 5 years after closure. Copies of documents are stored in encrypted form.
• Support communications: Retained for 3 years from the date of the last interaction to support dispute resolution.
• Analytics data: Anonymised analytics data has no fixed retention period as it cannot be linked back to you as an individual.
• Marketing consent records: Retained until you withdraw consent, plus an additional period of 1 year for compliance audit purposes.

badbet uses the following types of cookies and similar technologies on the platform:

Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preferences, and protect against cross-site request forgery. You cannot opt out of these cookies without losing access to core functionality.

Performance and analytics cookies: These collect anonymised information about how users interact with the platform — which pages are visited most frequently, where errors occur, and how long sessions last. This data is used solely to improve platform performance. No personally identifiable information is included in analytics reports.

Preference cookies: These remember your settings such as display preferences and notification choices so you do not need to reconfigure them on each visit.

badbet does not use advertising cookies, retargeting pixels, or any third-party tracking technology that profiles you across external websites. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect platform functionality.

badbet implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• At-rest encryption for sensitive data stored in our databases, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication requirements for all internal staff accessing production systems.
• Intrusion detection and continuous monitoring systems to identify and respond to potential security incidents in real time.

As a user of the badbet platform, you hold the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that we may be required to retain some data to meet legal obligations even after account closure.
• Right to restriction of processing: You may request that we limit how we use your data in specific circumstances, for example while a dispute about its accuracy is resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we rely on your consent to process data (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing of your data based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

The badbet platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we discover or are notified that personal data has been submitted by or on behalf of a minor, we will immediately suspend the associated account, delete the data in question, and refund any real-money deposits where technically possible.

If you are a parent or guardian and believe that a minor in your care has accessed the badbet platform or provided their personal information, please contact us immediately at [email protected].

badbet operates primarily for users based in Bangladesh. Some of our technology and service providers may process data on servers located outside Bangladesh. In all such cases, we ensure that:

• Appropriate contractual safeguards are in place with the receiving party.
• The transfer is limited to data strictly necessary for the relevant service.
• The receiving party is bound by obligations of confidentiality and security equivalent to those described in this Policy.

badbet reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the badbet platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

For all privacy-related questions, data subject rights requests, or concerns about how badbet handles your personal information, please contact our support team:

Email: [email protected]
Response time: Within 14 business days of receipt
Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

All written data requests must include your registered account username or email address and a brief description of your request. We may ask for identity verification before processing any access, rectification, or erasure requests.