Privacy Policy for
restbet

1. Information We Collect

restbet collects personal data from players in Bangladesh through several channels: during account registration, throughout normal platform use, via payment transactions, through communications with our support team, and automatically through technical systems when you visit or interact with the platform. The specific categories of personal data we collect are described below.

1.1 Registration and Identity Data

When you create a player account with restbet, we collect your full legal name, date of birth, residential address in Bangladesh (including district and division), email address, and mobile phone number. This information is required to create and administer your account and to verify that you meet the minimum age requirement of 18 years. You may also be asked to provide additional identity documents — such as your Bangladesh National ID Card (NID) or passport — as part of our Know Your Customer (KYC) process, which is required before withdrawal requests are processed.

1.2 Financial and Payment Data

To facilitate deposits and withdrawals in Bangladeshi Taka (BDT, ৳), restbet collects information related to your chosen payment method. For mobile financial services such as bKash, Nagad, Rocket, and Upay, we record the registered mobile number associated with the account and the transaction reference numbers generated by the payment provider. For card payments via Visa or Mastercard, we collect the card type, the last four digits of the card number, and the card's expiry date. Full card numbers are never stored on restbet servers; payment card data is tokenised by our payment processor at the point of entry.

We retain records of all financial transactions on your account — including deposit amounts, withdrawal requests, bonus credits, and bet settlements — for audit and compliance purposes. These records form part of our anti-money laundering (AML) obligations and will be retained for the period specified in Section 5 of this Policy.

1.3 Betting and Gaming Activity Data

restbet records all gaming and betting activity conducted through your account. This includes: sports bets placed (market, selection, stake, odds, and outcome), casino game sessions (game name, provider, session duration, wager amounts, and results), lottery ticket purchases, Texas Hold'em poker hands played, and all bonus and promotion interactions. This data is used to operate the platform, calculate payouts, detect unusual or fraudulent activity, and improve our service offering for players in Bangladesh.

1.4 Technical and Device Data

When you access restbet via a web browser or mobile device, we automatically collect certain technical information including your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited on the platform, time spent on each page, and click-stream data. This information is collected via server logs and analytics tools and is used to maintain platform security, diagnose technical issues, and understand how players in Bangladesh interact with the platform so that we can continually improve the user experience.

1.5 Communications Data

If you contact the restbet support team via live chat, email, or any other available channel, we retain records of those communications. This includes the content of messages, the date and time of contact, the channel used, and the outcome of any support requests. Communications data is retained to maintain quality standards, train support staff, and resolve any disputes that may arise between the player and the platform.

2. How We Use Your Data

restbet uses the personal data it collects for specific, legitimate purposes. We do not use your data in any way that is inconsistent with the purposes described in this Policy. The primary purposes for which we process your personal data are as follows:

Purpose	Data Categories Used	Legal Basis
Account creation and management	Identity data, contact data	Contract performance
Processing deposits and withdrawals in BDT	Financial data, identity data	Contract performance
KYC and age verification	Identity documents, date of birth	Legal obligation
Fraud prevention and AML compliance	All categories	Legal obligation / legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / legitimate interest
Platform analytics and improvement	Technical data, gaming activity data	Legitimate interest
Personalised promotions (where opted in)	Gaming activity, contact data	Consent
Responsible gaming monitoring	Gaming activity, financial data	Legal obligation / legitimate interest

We will not use your personal data for purposes beyond those listed above without first notifying you and, where required, obtaining your explicit consent. You may withdraw consent for consent-based processing at any time by updating your communication preferences in Account Settings or by contacting the support team.

3. Data Sharing and Disclosure

restbet does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it in a manner consistent with this Privacy Policy.

3.1 Payment Service Providers

To process BDT transactions, we share necessary financial and identity data with our payment processing partners, which include the operators of bKash, Nagad, Rocket, and Upay mobile financial services, as well as the card payment networks Visa and Mastercard. These providers receive only the minimum data required to complete the specific transaction and are not permitted to use your data for any other purpose.

3.2 Identity Verification Partners

As part of our KYC process, we may share identity documents and personal data with third-party identity verification service providers. These providers verify the authenticity of submitted documents and confirm that your details match national identity records. All identity verification partners are bound by strict data processing agreements.

3.3 Game Technology Providers

The casino games, live dealer tables, and sports betting markets available on restbet are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (such as game round IDs and wagered amounts) to facilitate fair play auditing and dispute resolution. They do not receive your name, NID, or payment details.

3.4 Legal and Regulatory Disclosure

restbet may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally compelled to do so. We will only make such disclosures where we have received a valid legal request and, where legally permitted, we will notify you of any such disclosure.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of restbet's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via your registered email address before your data is transferred and becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

restbet uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players in Bangladesh use the site. A cookie is a small text file placed on your device by the restbet web server when you visit the platform. The following categories of cookies are used:

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They enable core features such as session authentication, secure account login, page navigation, and access to protected areas of the platform. Strictly necessary cookies cannot be disabled without severely impairing the functionality of the platform. No consent is required for these cookies as they are technically essential to service delivery.

4.2 Functional Cookies

Functional cookies remember your preferences and settings to provide a more personalised experience. Examples include your selected language (English), preferred time zone (Bangladesh Standard Time, UTC+6), and remembered payment method selections in the Cashier section. These cookies do not track your activity on other websites.

4.3 Analytics Cookies

We use anonymised analytics cookies to understand aggregate player behaviour on the platform, such as which game categories are most popular, which pages have the highest exit rates, and how players navigate through the deposit and withdrawal flow. This data is used exclusively for internal platform improvement purposes and is never shared with advertising networks. Analytics cookie data is aggregated and cannot be used to identify any individual player.

4.4 Managing Cookies

You can manage or delete cookies at any time through your web browser's settings. Please note that disabling functional or analytics cookies may affect your user experience on restbet, but will not prevent you from accessing core platform features. For guidance on managing cookies in your specific browser, please consult your browser's help documentation. restbet does not currently respond to browser "Do Not Track" signals, as there is no universally accepted standard for this functionality.

5. Data Retention

restbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes that may arise. The specific retention periods applicable to each data category are as follows:

• Account and identity data: Retained for the duration of your account relationship with restbet, plus a minimum of five (5) years following account closure. This retention period reflects AML and financial record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial audit requirements.
• KYC documents (NID, passport): Retained for five (5) years following the completion of the verification process or account closure, whichever is later.
• Betting and gaming activity logs: Retained for three (3) years from the date of the activity, or for the duration of any ongoing dispute, whichever is longer.
• Support communications: Retained for two (2) years from the date of the interaction.
• Technical and device data (server logs): Retained for ninety (90) days, after which they are automatically purged from active systems.
• Analytics data: Retained in anonymised, aggregated form for up to three (3) years for trend analysis purposes.

When data is no longer required for the stated purposes and no legal obligation requires its continued retention, restbet will securely delete or irreversibly anonymise that data. Players who request account closure should note that certain data will be retained beyond the closure date in accordance with the periods set out above.

6. Data Security Measures

restbet takes the security of your personal data seriously and implements a range of technical and organisational measures designed to prevent unauthorised access, loss, destruction, or alteration of the data we hold. Our key security measures include:

• 256-bit SSL/TLS encryption: All data in transit between your device and restbet servers is encrypted using industry-standard SSL/TLS protocols. This applies to all platform pages, including the login screen, cashier, and account settings.
• Data storage encryption: Sensitive personal data — including identity documents and payment records — is encrypted at rest in our databases using AES-256 encryption.
• Access controls: Access to player personal data within restbet is strictly role-based. Only authorised personnel with a legitimate operational need are granted access to personally identifiable player records. All access is logged and audited.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their restbet accounts. Internal staff access to administrative systems requires 2FA as a mandatory security control.
• Regular security assessments: restbet conducts periodic vulnerability assessments and security reviews to identify and remediate potential weaknesses in the platform's technical infrastructure.
• Incident response procedures: In the event of a data breach that may affect your personal data, restbet has a documented incident response procedure. Affected players will be notified via their registered email address within 72 hours of the breach being identified, along with guidance on the steps they should take to protect themselves.

7. Your Rights Over Your Data

As a registered player on restbet, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the restbet support team via live chat and submit a formal data subject request. We will acknowledge your request within five (5) business days and aim to provide a full response within thirty (30) days.

7.1 Right of Access

You have the right to request a copy of the personal data that restbet holds about you. We will provide this in a structured, commonly used, and machine-readable format (such as CSV or PDF) at no charge. For repeat or excessive requests, we reserve the right to charge a reasonable administrative fee.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For routine updates such as a change of email address or phone number, you can make these changes directly in Account Settings. For corrections to identity documents or date of birth, please contact the support team and provide documentary evidence of the correct information.

7.3 Right to Erasure

You may request that restbet delete your personal data in circumstances where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no overriding legal basis for continued processing; or (c) the data has been unlawfully processed. Please note that the right to erasure is not absolute — where we are legally required to retain your data (for example, for AML compliance), we will explain this to you and retain only the minimum data necessary to fulfil that obligation.

7.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or where you contest the lawfulness of our processing. During a restriction period, we will continue to store the data but will not actively process it beyond storage.

7.5 Right to Data Portability

Where processing is based on your consent or on contract performance, and processing is carried out by automated means, you have the right to receive your personal data in a portable format and to transmit that data to another service provider of your choosing.

7.6 Right to Object

You have the right to object to the processing of your personal data where processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You also have an unconditional right to object to processing for direct marketing purposes at any time.

8. Contact and Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way restbet handles your personal data, please contact our support team via live chat, which is available 24 hours a day, seven days a week. You may also reach us by email at the address listed in the footer of this page. We take all privacy-related enquiries seriously and will respond promptly and thoroughly.

8.2 Policy Updates

restbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to our platform and services. The "Last updated" date displayed at the top of the Policy document will always reflect the most recent revision date. Where changes are material — meaning they significantly affect how we collect or use your personal data — we will notify registered players via the email address associated with their account at least fourteen (14) days before the changes take effect. Your continued use of restbet following the effective date of any update constitutes your acceptance of the revised Policy.

8.3 Governing Law

This Privacy Policy is written in English and the English-language version is the sole authoritative version. Any disputes arising in connection with this Policy and the handling of personal data by restbet shall be governed by the applicable laws of the jurisdiction in which restbet operates. For players in Bangladesh, all relevant local data protection and privacy regulations will be observed to the fullest extent practicable.