betaal Privacy
Policy

1. Introduction

betaal ("betaal", "we", "us", "our") operates the online casino and sports betting platform at betaal.org, serving adult players across Bangladesh. betaal respects your privacy and is committed to protecting the personal data you provide when using the betaal platform. This Privacy Policy ("Policy") explains in clear, formal terms how betaal collects, uses, stores, discloses, and protects personal data in connection with your use of the betaal website, account, games, betting markets, and support services.

This Policy applies to all personal data processed by betaal in connection with the betaal platform, regardless of how that data is collected — whether through the registration form, deposit and withdrawal flows, game activity, support correspondence, or automatic technical collection. By registering a betaal account or by continuing to use the betaal platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside betaal's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of your overall agreement with betaal.

2. Data Controller

For the purposes of this Policy, betaal is the data controller in respect of all personal data collected and processed through the betaal platform. betaal determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to betaal's support team at [email protected]. Please include "Privacy Request" in the subject line of your email, together with your registered mobile number, to allow betaal to locate your account promptly.

3. Data We Collect

betaal collects the following categories of personal data from Bangladesh players. Not all categories apply equally to every player — the specific data betaal holds about you depends on your level of interaction with the platform and whether you have completed identity verification.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, NID / passport number, photograph	Registration; KYC verification
Contact Data	Bangladesh mobile number, email address	Registration
Financial Data	bKash / Nagad / Rocket / Upay mobile number, transaction reference IDs, deposit and withdrawal amounts	Deposit & withdrawal transactions
Account Data	Username, encrypted password hash, account balance, bonus history, wagering history	Throughout account lifetime
Technical Data	IP address, device type, operating system, browser type, session duration, pages visited	Automatically on platform access
Gameplay Data	Game IDs played, bet amounts, win/loss records, RNG session logs	During gameplay
Communications Data	Support ticket content, live chat transcripts, email correspondence	When contacting support
Verification Documents	NID scan, utility bill, MFS statement	KYC / withdrawal verification

betaal does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is contained in standard government-issued identity documents submitted during KYC. betaal does not collect data relating to players' financial circumstances beyond what is necessary to process deposits and withdrawals and to comply with responsible gaming obligations.

4. How We Collect Data

betaal collects personal data through the following means:

• Direct collection: Data you provide when registering your betaal account, completing KYC verification, making a deposit or withdrawal, contacting betaal support, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically when you access the betaal platform, including your IP address, device identifiers, browser characteristics, session timestamps, and clickstream data, via server logs and first-party cookies.
• Third-party payment processors: Transaction confirmation data returned to betaal by bKash, Nagad, Rocket, and Upay following a successful deposit or withdrawal instruction. betaal receives only the data necessary to confirm the transaction outcome; it does not receive your full MFS account credentials or PIN.
• Identity verification partners: Where betaal uses a third-party KYC service to verify your identity documents, that service may return a verification result, a risk score, and extracted document data to betaal.
• Game studio providers: Live casino and electronic game providers (including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and Microgaming) may return gameplay session data to betaal for the purpose of crediting winnings, resolving disputes, and maintaining game integrity records.

5. Purpose & Legal Basis for Processing

betaal processes personal data only where there is a legitimate purpose for doing so. The following table sets out the primary purposes for which betaal uses your data, together with the legal basis relied upon for each processing activity.

Purpose	Legal Basis
Creating and managing your betaal account	Performance of contract
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay	Performance of contract
Verifying your age and identity (KYC)	Legal obligation; performance of contract
Preventing fraud, money laundering, and prohibited conduct	Legal obligation; legitimate interest
Responsible gaming monitoring and intervention	Legal obligation; legitimate interest
Providing customer support	Performance of contract; legitimate interest
Sending transactional communications (deposit confirmed, withdrawal processed, OTP)	Performance of contract
Sending promotional communications about betaal bonuses and offers	Consent (you may withdraw at any time)
Platform analytics and performance improvement	Legitimate interest
Maintaining financial and gaming records for audit purposes	Legal obligation

6. Data Sharing

betaal does not sell, rent, or trade your personal data to any third party. betaal may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

Payment Processors

bKash, Nagad, Rocket, Upay, and any other approved MFS providers receive the minimum data necessary to execute and confirm deposit and withdrawal transactions. betaal does not share your gameplay history or account balance with payment processors.

Identity Verification Partners

Where betaal engages a third-party KYC provider to verify identity documents, your identity data and uploaded documents are shared with that provider solely for the purpose of performing the verification check. KYC partners are contractually prohibited from using your data for any other purpose.

Game Studio Providers

Live casino and electronic game providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, and NetEnt receive a session token and player identifier to enable gameplay. betaal does not share your full name, NID details, or MFS number with game studios.

Fraud Prevention & Security Services

betaal may share technical data (IP address, device fingerprint, behavioural patterns) with specialist fraud prevention services where betaal has reasonable grounds to suspect fraudulent activity, money laundering, or a security incident affecting the betaal platform.

Legal & Regulatory Disclosure

betaal may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the legal rights of betaal or other players. betaal will, where legally permissible, notify you of such a disclosure request before complying.

7. MFS Payment Data

Given the Bangladesh market's reliance on mobile financial services, betaal wishes to be transparent about how bKash, Nagad, Rocket, and Upay transaction data is handled specifically:

• betaal records the MFS mobile number used for each deposit and withdrawal to enforce the one-account-per-player rule and to return withdrawals to the correct account.
• betaal does not store your MFS PIN, OTP, or full authentication credentials at any point. These are entered directly into your MFS provider's interface and are never transmitted to betaal's servers.
• Transaction reference numbers returned by MFS providers are stored by betaal for a minimum of five years to meet financial record-keeping obligations and to support dispute resolution.
• betaal uses transaction pattern analysis on MFS deposit and withdrawal data to identify potential money laundering or fraud indicators. This analysis is automated and does not involve human review unless a flag is triggered.
• betaal will not use your MFS mobile number to send unsolicited marketing messages. Transactional SMS (such as deposit confirmation or OTP) may be sent via your MFS provider's standard notification infrastructure where technically applicable.

8. Cookies

betaal uses cookies and similar tracking technologies on the betaal platform. A cookie is a small text file placed on your device by the betaal server when you access the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the betaal platform to function. These include session cookies that keep you logged in during a visit and security cookies that help prevent cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences, such as display settings and language choice. These are first-party cookies set by betaal.
• Analytical cookies: Used to collect anonymised data about how Bangladesh players navigate the betaal platform, which pages are visited most frequently, and where users encounter errors. This data is aggregated and does not identify individual players. betaal uses this data to improve platform performance.

betaal does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any other cookie technology that shares your data with external advertising networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the betaal platform.

9. Data Security

betaal implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and betaal's servers, including account login, deposit flows, and support communications.
• Password hashing: Your betaal account password is stored as a one-way cryptographic hash. betaal staff cannot retrieve your plaintext password.
• Access controls: betaal employee access to player data is restricted on a least-privilege basis. Only staff with a documented operational need may access player account data, and all access is logged.
• OTP two-factor authentication: Available to all betaal players and applied to sensitive account actions including password changes and withdrawal requests above defined thresholds.
• Infrastructure security: betaal's servers are hosted in access-controlled data centres with physical security controls, network intrusion detection, and regular vulnerability scanning.
• Incident response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, betaal will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

Despite these measures, no internet-based platform can guarantee absolute security. You also play an important role in keeping your betaal account secure by using a strong, unique password and keeping your OTP confidential. If you suspect your account has been compromised, contact betaal immediately at [email protected].

10. Data Retention

betaal retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with financial record-keeping and anti-money-laundering obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Transaction records: Deposit and withdrawal records are retained for a minimum of five (5) years.
• Support correspondence: Retained for a minimum of two (2) years from the date of the last communication in a support thread.
• Technical / server logs: Typically retained for ninety (90) days unless a security investigation requires extended retention.
• Promotional communications consent records: Retained for as long as the consent remains active, plus one (1) year following withdrawal of consent.

At the end of the applicable retention period, betaal will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original data. Anonymised or aggregated data that no longer identifies you may be retained indefinitely for statistical and analytical purposes.

11. Your Rights

As a betaal player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request", including your registered mobile number for account identification. betaal will acknowledge your request within 48 hours and respond substantively within 30 days.

• Right of access: You may request a copy of the personal data betaal holds about you, together with information about how that data is used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data betaal holds about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where betaal has processed your data unlawfully. This right is subject to betaal's legal obligations to retain certain data.
• Right to restriction: You may request that betaal restricts the processing of your data in certain circumstances, for example while a rectification request is pending.
• Right to object: You may object to processing based on betaal's legitimate interests, including profiling for fraud detection. betaal will comply unless it has compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where betaal processes your data based on your consent (such as for promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.

12. Children's Privacy

betaal operates a strict minimum age policy of 18 years. The betaal platform is not directed at, and betaal does not knowingly collect personal data from, any person under the age of 18. If betaal discovers that an account has been registered by a person under 18, the account will be closed immediately, all associated data will be handled in accordance with applicable law, and any balance in the account will be reviewed and managed in accordance with betaal's Terms & Conditions.

If you have reason to believe that a minor has registered a betaal account, please notify betaal immediately at [email protected]. betaal takes underage gambling extremely seriously and will act promptly on any credible report.

13. Changes to This Policy

betaal may update this Privacy Policy from time to time to reflect changes in its data practices, operational requirements, or applicable law. Where a proposed change is material — meaning it significantly alters how betaal processes your personal data or the rights available to you — betaal will provide at least fourteen (14) days' notice before the updated Policy takes effect, by posting a notice on the betaal platform and, where practicable, by sending a notification to your registered mobile number.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of any provision, or updates to contact details) may take effect immediately upon publication. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. betaal encourages you to review this Policy periodically. Continued use of the betaal platform following notification of a material change constitutes acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or betaal's data-handling practices, please contact the betaal support team using the details below. betaal is committed to resolving privacy-related concerns promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy Request" or "Data Rights Request"
• Response time: Acknowledgement within 48 hours; substantive response within 30 calendar days
• Language: English
• Hours: Monday to Saturday, 09:00–22:00 Bangladesh Standard Time (BST, UTC+6)

betaal does not provide telephone support for privacy requests. All formal data-related communications must be submitted in writing by email to ensure a complete and accurate record is maintained.