Privacy Policy — bhalobet

Section 1

Information We Collect

When you interact with bhalobet — whether by registering an account, making a deposit via bKash or Nagad, placing a bet on cricket or BPL markets, playing a slot game, or contacting our support team — we may collect and process the following categories of personal information:

1.1 Registration and Identity Data

When you create a bhalobet account, we collect your full legal name as it appears on your government-issued identification, a valid email address, and the mobile number associated with your bKash, Nagad, Rocket, or Upay mobile banking wallet. You may also be asked to provide your date of birth for age verification purposes, and a National Identity Card (NID) number or passport number if enhanced verification is required by our compliance team.

1.2 Financial and Transaction Data

All financial transactions on bhalobet are conducted in Bangladeshi Taka (BDT). We retain records of every deposit, withdrawal, bonus credit, and wager associated with your account. For mobile banking transactions, we store the transaction reference number and the registered wallet number used. We do not store your mobile banking PIN, OTP codes, or full wallet access credentials at any point.

1.3 Technical and Device Data

When you access bhalobet through any device — desktop, mobile, or tablet — our systems automatically collect certain technical information, including your IP address, browser type and version, device operating system, screen resolution, referring URL, session start and end timestamps, and pages or game sections visited during your session. This data is used to maintain platform security, detect suspicious access patterns, and improve our service.

1.4 Behavioural and Gaming Data

We record your in-platform activity, including the games you play, the markets you bet on, stake amounts, bet frequency, and session duration. This data is used to personalise your experience on bhalobet, to monitor for signs of problem gambling under our responsible gaming commitments, and to improve our product offering for players across Dhaka, Chittagong, Sylhet, and other regions of Bangladesh.

1.5 Communications Data

If you contact bhalobet through our support email at support@bhalobet, we retain a record of the correspondence, including your message content, timestamps, and any attachments, for the purpose of resolving your query and maintaining an accurate support history. Communications records are stored for a minimum of 12 months.

Data Category	Examples	Purpose
Identity Data	Full name, NID number, date of birth	Age verification, KYC compliance
Contact Data	Email address, mobile number	Account management, support
Financial Data	Transaction references, wallet number, BDT amounts	Payment processing, fraud prevention
Technical Data	IP address, browser type, device OS	Security monitoring, platform improvement
Gaming Data	Bet history, game sessions, stake amounts	Personalisation, responsible gaming
Communications Data	Support emails, chat logs	Query resolution, compliance records

Section 2

How We Use Your Data

bhalobet processes your personal data on the basis of contractual necessity (to deliver the services you have signed up for), legitimate interest (to protect the security and integrity of our platform), and legal obligation (to meet fraud prevention and age-verification requirements). We do not process your personal data for purposes that are incompatible with those stated in this Privacy Policy.

2.1 Service Delivery

Your registration data, contact details, and financial information are used to create and manage your bhalobet account, process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and provide you with access to sports betting markets, live casino games, slots, fishing arcade games, and the 24 Hour Grand Prix product.

2.2 Identity and Age Verification

We use your identity data — including your full name, date of birth, and NID number where provided — to verify that you meet the minimum age requirement of 18 years. This verification process is a legal and ethical obligation for bhalobet as a responsible gaming platform serving players in Bangladesh.

2.3 Fraud Prevention and Platform Security

Technical data including IP addresses, device fingerprints, and session metadata is processed continuously to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, and any other conduct that violates our Terms & Conditions. Suspicious activity patterns may trigger an automated account review or manual investigation by our compliance team.

2.4 Responsible Gaming Monitoring

bhalobet uses your gaming and behavioural data to identify patterns that may indicate problem gambling behaviour. Where our systems detect indicators such as extended session durations, rapidly increasing stake amounts, or unusual betting patterns, our responsible gaming team may reach out to offer support tools including deposit limits, session reminders, or self-exclusion. This processing is conducted in your best interest and in fulfilment of our responsible gaming obligations.

2.5 Service Communications

We may use your email address and mobile number to send you transactional communications relating to your account — including deposit confirmations, withdrawal notifications, verification requests, and important policy updates. We will only send you marketing communications if you have explicitly opted in to receive them. You may opt out of marketing emails at any time by contacting support@bhalobet.

Section 3

Cookies & Tracking Technologies

A cookie is a small text file placed on your device when you visit bhalobet. Cookies allow the platform to recognise your device across pages within the same session and between sessions (where persistent cookies are used). The following categories of cookies are used on bhalobet:

3.1 Strictly Necessary Cookies

These cookies are essential for the bhalobet platform to function. They maintain your login session as you move between pages, store your language and currency preferences, and protect the security of your account by enabling session authentication tokens. These cookies cannot be disabled without breaking core platform functionality.

3.2 Performance and Analytics Cookies

We use first-party analytics cookies to understand how players navigate bhalobet — including which pages are visited most frequently, where sessions typically begin and end, and how long players spend on different sections of the platform. This data is aggregated and anonymised before analysis. No individual player is identified through performance cookies.

3.3 Preference Cookies

Preference cookies remember your in-platform settings such as display preferences, notification settings, and your most recently visited game category. These cookies improve your experience by reducing the need to re-enter preferences on each visit.

3.4 Managing Cookies

You can manage or disable cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core features of bhalobet, including logging in and placing bets. Disabling performance or preference cookies will not affect the basic functionality of the platform but may reduce the personalisation of your experience.

Section 4

Data Sharing & Third Parties

bhalobet does not sell, rent, or otherwise transfer your personal data to third parties for commercial or marketing purposes. Your data may be shared with a limited set of trusted service providers who assist us in delivering our platform, subject to strict contractual data protection obligations. In all cases, third parties are permitted to use your data only for the specific purpose for which it was shared.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals in Bangladeshi Taka, bhalobet shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, and Upay. This typically consists of the transaction amount, transaction reference, and your registered wallet number. These payment providers operate under their own privacy policies, which we recommend you review separately.

4.2 Technology and Infrastructure Providers

bhalobet relies on third-party infrastructure providers for web hosting, content delivery, and database management. These providers may process technical data including IP addresses and session logs as part of their service delivery. All infrastructure providers engaged by bhalobet are contractually bound to handle data securely and to process it only on our documented instructions.

4.3 Game Content Providers

Live casino games and RNG slot games available on bhalobet are supplied by third-party game studios, which may include providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. Game providers may receive anonymised session identifiers to facilitate game loading and result settlement. No personally identifiable information beyond what is technically required for the game session is passed to game providers.

4.4 Legal and Regulatory Disclosure

bhalobet may be required to disclose personal data to law enforcement authorities, regulatory bodies, or other legally empowered entities where required to do so by applicable law, court order, or legal process. In such circumstances, we will disclose only the minimum data required to comply with the legal obligation and will notify you of such disclosure to the extent permitted by law.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bhalobet's business operations, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new data controller via the email address registered to your account, with no less than 30 days' advance notice.

Section 5

Data Retention & Storage

bhalobet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention schedules apply to the main categories of data we hold:

• Account and identity data — Retained for the duration of your active account plus a minimum of 5 years following account closure, for fraud prevention, legal compliance, and dispute resolution purposes.
• Transaction and financial data — Retained for a minimum of 5 years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• Gaming and behavioural data — Retained for up to 3 years from the date of the activity, for responsible gaming monitoring and platform improvement purposes.
• Support and communications data — Retained for a minimum of 12 months from the date of the communication, extended to 5 years where the communication relates to a formal complaint or dispute.
• Technical and device data — Session logs are retained for up to 12 months. Aggregated and anonymised analytics data may be retained indefinitely.

5.1 Data Storage Location

Your personal data is stored on secure servers. bhalobet takes reasonable technical and organisational measures to ensure that data is stored safely and is protected against unauthorised access, alteration, disclosure, or destruction. Where data is processed by third-party service providers, those providers are required to maintain equivalent security standards.

5.2 Data Deletion

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. You may also request earlier deletion of your data by contacting support@bhalobet, subject to our ability to comply with any overriding legal retention obligations that apply at the time of your request.

Section 6

Your Privacy Rights

The following rights are available to all registered players on bhalobet in relation to their personal data:

6.1 Right of Access

You have the right to request a copy of the personal data bhalobet holds about you, together with information about how that data is being processed. We will provide this information free of charge in a structured, commonly used format within 14 calendar days of your written request.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For minor corrections such as email address changes, you may update your details directly through your account settings. For corrections to identity data, please contact our support team with appropriate supporting documentation.

6.3 Right to Erasure

You may request that bhalobet delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the basis for processing), or where you object to processing and there are no overriding legitimate grounds. Erasure requests are subject to any legal retention obligations that require us to retain specific data categories for defined periods.

6.4 Right to Restrict Processing

You may request that bhalobet restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request, or where you have objected to processing and a determination is pending.

6.5 Right to Object

Where bhalobet processes your personal data on the basis of legitimate interest, you have the right to object to that processing. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

6.6 Right to Data Portability

You may request that bhalobet provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider. This right applies to data that you have provided to us directly and that we process on the basis of your consent or contractual necessity.

Section 7

Data Security Measures

bhalobet employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The following measures are maintained continuously across our platform infrastructure:

• SSL/TLS Encryption — All data transmitted between your device and bhalobet is encrypted using SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secured.
• Encrypted Data Storage — Sensitive personal data, including identity records and financial data, is stored in encrypted form within our database infrastructure. Encryption keys are managed separately from the encrypted data.
• Access Controls — Access to personal data held by bhalobet is restricted on a strict need-to-know basis. Only authorised personnel with a documented operational requirement may access player personal data, and all access events are logged for audit purposes.
• Intrusion Detection — Our platform infrastructure is monitored continuously for anomalous access patterns, brute force attempts, and other indicators of unauthorised activity. Automated alerts are triggered for out-of-pattern events.
• Password Security — Player passwords are stored using one-way cryptographic hashing algorithms. bhalobet staff cannot retrieve or view your password in plain text at any time.
• Regular Security Reviews — bhalobet conducts periodic internal reviews of our data security practices and infrastructure to identify and remediate potential vulnerabilities before they can be exploited.

7.1 Your Responsibility

While bhalobet takes extensive measures to protect your data at the platform level, you also play a critical role in keeping your account secure. You must not share your login credentials with any third party, must use a strong and unique password for your bhalobet account, and must notify us immediately at support@bhalobet if you suspect any unauthorised access to your account.

7.2 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bhalobet will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Notification will be sent to your registered email address and will include a description of the breach, the data affected, and the steps we are taking to address it.

Section 8

Policy Updates & Contact

bhalobet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable legal requirements. When material changes are made, the updated policy will be published on this page with a revised effective date. For significant changes that materially affect how your data is processed, we will also notify you directly via your registered email address.

8.1 Reviewing This Policy

We recommend that you review this Privacy Policy periodically to stay informed of how bhalobet protects your personal data. Continued use of the platform following the publication of any updated version constitutes your acceptance of the revised policy. If you do not agree with any changes, you should cease using bhalobet and contact us to request account closure and data deletion.

8.2 Contacting Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bhalobet handles your personal data, please contact our data support team at: support@bhalobet. Our team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (UTC+6) and will respond to all privacy-related enquiries within 14 calendar days.

8.3 Children's Privacy

bhalobet is strictly a platform for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a person under 18 has registered an account on bhalobet, please notify us immediately at support@bhalobet. Upon confirmation, we will close the account and securely delete all associated personal data without delay.