Privacy Policy — exbet

1 Introduction

This Privacy Policy ("Policy") describes how exbet ("we", "us", "our") collects, uses, stores, and protects the personal data of users ("you", "Player", "User") who access or use the exbet platform at exbet.today. This Policy forms part of our Terms and Conditions and should be read together with them. By registering an account or using any exbet service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

exbet is committed to protecting your privacy. We process personal data only where we have a valid legal basis to do so, and we limit data collection to what is genuinely necessary for the purposes described in this Policy. We do not build advertising profiles, do not sell your data, and do not share your data with third parties except in the circumstances expressly described in Section 6.

2 Information We Collect

exbet collects personal data through several channels: directly from you during registration and account use, automatically through platform activity tracking, and from third-party verification services used for KYC compliance. The categories of personal data we collect are described below.

Automatically Collected Data

When you visit or use exbet, our platform automatically collects certain technical and usage data through server logs and cookies. This includes your IP address, device identifiers, and browsing behaviour within the platform. This data is used for security monitoring, fraud detection, and to improve platform performance. It is not used to identify you personally outside of the context of your exbet account.

3 How We Use Your Information

exbet uses the personal data we collect for the following purposes. We process data only for the purposes described here and do not repurpose data for activities not listed below without first notifying you and, where required, obtaining your consent.

• Account creation and management: to set up, administer, and maintain your exbet account throughout its lifecycle.
• Identity verification (KYC): to verify your identity and age in compliance with applicable anti-money laundering and responsible gaming requirements.
• Transaction processing: to handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Customer support: to respond to your support queries, complaints, and account-related requests submitted via email or the platform.
• Platform improvement: to analyse usage patterns, identify performance issues, and develop new features that improve the exbet experience for Bangladesh players.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates by email, where you have consented to receive such communications. You may withdraw consent at any time by contacting [email protected].

4 Legal Basis for Processing

exbet processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations to you under our Terms and Conditions — including account creation, gameplay facilitation, and payment processing.
• Legal obligation: processing required for us to comply with applicable law, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: processing carried out for the purposes of fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: processing of personal data for optional communications (e.g., promotional emails and bonus notifications), where you have provided explicit consent. This processing stops when you withdraw consent.

5 Cookies and Tracking Technologies

exbet uses cookies and similar tracking technologies on its platform to ensure basic functionality, maintain session security, and collect analytics data that helps us understand how players use the platform. We do not use advertising or cross-site tracking cookies.

Types of Cookies We Use

We use two categories of cookies: strictly necessary cookies, which are required for the platform to function and cannot be disabled without breaking core features such as login sessions and payment flows; and analytics cookies, which collect anonymised data about how the platform is used so we can improve performance and content. Analytics cookies are not linked to your personal account data.

Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though blocking strictly necessary cookies will prevent exbet from functioning correctly. The following browser-level controls are available for the most commonly used mobile browsers in Bangladesh:

• Chrome on Android: Settings → Privacy and security → Cookies and other site data.
• Safari on iOS: Settings → Safari → Privacy and Security → Block All Cookies.
• Samsung Internet: Settings (three-line menu) → Privacy and Security → Accept Cookies.

6 Sharing Your Information

exbet does not sell, rent, or trade your personal data with any third party. We share your personal data only in the limited and specific circumstances described in this section. Any third party that receives personal data from exbet for service provision purposes is contractually required to process that data solely for the agreed purpose and in accordance with applicable data protection standards.

Third Parties We Work With

The following categories of service provider may receive limited personal data from exbet in order to deliver their contracted services:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard network operators): receive your payment method identifiers and transaction amounts to process deposits and withdrawals.
• Identity verification providers: receive identity document images and personal details during KYC verification to confirm your identity and age on behalf of exbet.
• Platform analytics providers: receive anonymised, aggregated usage data (not linked to your personal account) for the purpose of platform performance analysis. No personally identifiable information is included.
• Law enforcement and regulatory authorities: may receive your personal data where exbet is legally required to disclose it, including in response to a valid court order, regulatory request, or investigation into financial crime.

No Advertising Networks

exbet does not share your personal data with advertising networks, data brokers, social media platforms, or any other third party for marketing or targeting purposes. We do not participate in any cross-site tracking schemes. Your browsing behaviour on exbet is not shared with any external party for commercial purposes.

7 Payment Data and Financial Security

All financial transactions on exbet are processed using secure, encrypted channels. When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the respective mobile financial service provider's API. exbet does not store your mobile wallet PIN, bKash personal identification number, or any equivalent authentication credential for any payment method.

Where Visa or Mastercard payments are used, card details are captured and tokenised by our PCI-DSS-compliant payment processor. The tokenised reference is stored by exbet for the purpose of processing withdrawals back to the same card; the underlying card number, expiry, and CVV are never stored on exbet's servers or accessible to exbet staff.

8 Data Retention

exbet retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and transaction records: retained for a minimum of 5 years following account closure, in compliance with financial record-keeping requirements applicable to online gaming operators.
• KYC documentation: retained for a minimum of 5 years following account closure, in line with applicable anti-money laundering obligations.
• Support communications: retained for 2 years following resolution of the relevant query or complaint, unless the communication relates to an ongoing dispute or regulatory matter that requires longer retention.

When data is no longer required, exbet deletes or anonymises it in a secure manner. Where anonymisation is not technically feasible, data is archived with restricted access and automatically scheduled for deletion at the end of the applicable retention period.

9 Your Rights Over Your Personal Data

You have the following rights in relation to the personal data exbet holds about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 48 hours to acknowledge receipt and aim to fulfil your request within 30 days.

To exercise any of the rights above, email [email protected] with the subject line "Data Rights Request", your registered email address, and a description of your request. We may need to verify your identity before processing certain requests. exbet will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

10 Security Measures

exbet implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data in transit between your device and our servers, encrypted storage of sensitive data at rest, role-based access controls that limit staff access to personal data to those who have a documented operational need, regular security audits and vulnerability assessments of the platform infrastructure, and automated monitoring systems that detect and alert on suspicious access patterns in real time.

While exbet takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, exbet will notify affected users without undue delay and take all necessary remediation steps. We encourage you to use a strong, unique password for your exbet account and to log out of the platform after each session.

11 Children and Minors

exbet is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. The platform's minimum age requirement is 21 years, in line with our responsible gaming commitment and applicable age-restriction standards for online gambling services in the Bangladesh market.

If exbet becomes aware that personal data has been collected from a person under the age of 21 — whether through registration misrepresentation or any other means — we will immediately suspend the account, delete all associated personal data as permitted by law, and reverse any financial transactions associated with that account. Parents or guardians who believe a minor may have registered with exbet are encouraged to contact [email protected] immediately.

12 Third-Party Websites and Services

The exbet platform may contain references to or integrations with third-party game studio providers (such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe). While games delivered by these providers are accessed through the exbet interface, gameplay sessions may involve data exchange with the provider's own systems. Each game provider maintains its own privacy practices. exbet is not responsible for the privacy practices of third-party game providers, payment processors operating their own customer-facing portals, or any other third-party service. We encourage you to review the privacy policies of any third-party service you interact with independently of the exbet platform.

13 Changes to This Privacy Policy

exbet reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we propose to process your data for a new purpose or share it with a new category of third party — we will notify you by email to your registered address and post a prominent notice on the platform at least 7 days before the change takes effect. For minor or clarificatory changes, we may update the Policy without prior notice, though the "Last updated" date at the top of the page will always reflect the most recent revision.

Your continued use of exbet following any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must cease using the platform and may request account closure by contacting [email protected].

14 Contact Us — Privacy Queries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way exbet handles your personal data, please contact our support team. We aim to acknowledge all privacy-related queries within 48 hours and to resolve them fully within 30 days.

Email: [email protected] — Available 24 hours a day, 7 days a week, including Bangladesh public holidays. Please use the subject line "Privacy Query" or "Data Rights Request" so your message is routed to the correct team member.