webet Privacy Policy — How We Collect, Use, and Protect Your Personal Data

webet collects personal data through several channels: directly from you when you register an account, make a deposit, place a bet, or contact support; automatically when you use the Platform via technical systems and cookies; and in limited cases from third-party identity verification and payment processing partners. The categories of personal data we collect are set out in the table below.

webet does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond photographs submitted for KYC), or health information. If you voluntarily disclose any such information in a support communication, we will treat it with the highest level of confidentiality and will not use it for any purpose other than addressing your specific support request.

We also do not collect personal data from persons under the age of 18. If we become aware that data from a minor has been collected, we will delete it immediately and close the associated account. If you believe a minor has submitted data to webet, please contact us without delay at [email protected].

webet uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we process your personal data are as follows:

• Account Registration and Management: To create your webet account, verify your identity and age, maintain your account profile, and administer your account across its lifetime — including handling password resets, account closures, and self-exclusion requests.
• Transaction Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank channels; to record transaction histories; and to fulfil any applicable tax or financial reporting obligations.
• Service Delivery: To provide you with access to sports betting markets, live casino games, slots, and all other Platform features and to personalise your experience based on your betting history and preferences.
• Fraud Prevention and Security: To monitor account activity for signs of fraudulent or prohibited conduct; to detect duplicate accounts; to prevent money laundering; and to protect the integrity of the Platform and the safety of all players.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling behaviour; to enforce self-exclusion periods, deposit limits, and session time limits that you or our responsible gaming team have applied to your account; and to fulfil our duty of care to players.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain a record of your interactions with the webet support team.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML) requirements, to respond to lawful requests from regulatory or law enforcement authorities, and to defend webet's legal rights in any dispute.
• Marketing and Promotions: With your consent, to send you information about webet promotions, bonuses, and seasonal offers (such as BPL cricket season campaigns or Eid special promotions) via email or WhatsApp. You may opt out of marketing communications at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve product design, and enhance the overall player experience on the Platform.

webet will never sell your personal data to third parties for their own marketing or commercial purposes. Any data sharing with third parties is strictly limited to the categories and purposes described in Section 3 below.

webet does not share your personal data with third parties except in the limited circumstances described below. All third parties with whom we share data are contractually required to handle your information securely and to use it only for the purposes for which it was shared.

• Payment Processors: We share necessary financial and identity data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate deposits and withdrawals. Each of these partners operates under its own privacy framework and is responsible for the data it independently collects through its own systems.
• Identity Verification Providers: We use third-party KYC and identity verification service providers to assist with the age and identity verification process. These providers receive only the minimum data necessary to complete the verification and are prohibited from retaining or using your data beyond that scope.
• Game Studio Providers: When you play games supplied by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — certain session data (such as your player ID, bet amounts, and game outcomes) is transmitted to those studios to enable game functionality. Studio providers are required to handle this data in accordance with applicable data protection standards.
• Analytics and Technology Providers: We use trusted technology partners for platform analytics, infrastructure, and security monitoring. These providers may process technical and usage data on our behalf and are bound by strict data processing agreements.
• Legal and Regulatory Authorities: We may disclose your personal data to competent regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of webet, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of webet's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

webet will not disclose your personal data to any third party for that party's own marketing or advertising purposes, and will not sell, rent, or trade your data under any circumstances.

webet uses cookies — small text files stored on your device by your browser — and similar tracking technologies to operate the Platform effectively and provide you with a consistent, personalised experience. The types of cookies we use are described below.

You can manage, restrict, or delete cookies at any time through your browser settings. Most modern browsers allow you to block specific categories of cookies while permitting others. Please note that disabling essential cookies will affect your ability to log in and use key features of the Platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and the Samsung Internet browser commonly used on Android devices in Bangladesh.

In addition to cookies, we may use web beacons (also known as tracking pixels) in promotional emails to confirm whether a message has been opened and to track clicks on links contained within those emails. If you prefer not to be tracked in this way, you can configure your email client to block images by default.

webet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five years following account closure, to comply with AML and KYC record-keeping requirements.
• Financial and Transaction Data: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping standards applicable to online payment processing.
• Betting and Gaming Records: Retained for the duration of your account and for up to three years following account closure, for dispute resolution, fraud investigation, and responsible gaming monitoring purposes.
• Support Communications: Retained for up to three years from the date of the most recent communication in a thread, to enable resolution of any future dispute referencing the same subject matter.
• Technical and Log Data: Retained for up to 12 months from collection, after which it is either deleted or fully anonymised so that it can no longer be attributed to any individual.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, at which point your details will be removed from active marketing lists within 30 days.

All personal data held by webet is stored on secure servers protected by industry-standard encryption. Data at rest is encrypted using AES-256, and all data in transit between your device and the webet servers is protected by TLS (Transport Layer Security). Access to personal data within the webet organisation is restricted on a strict need-to-know basis, with role-based access controls in place across all internal systems.

Where data is processed or stored by third-party service providers on webet's behalf, those providers are contractually required to maintain equivalent security standards and to store data only within jurisdictions that provide an adequate level of data protection.

As a webet player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your request. We will respond within a reasonable timeframe and in any event within 30 days of receiving a valid request. We may need to verify your identity before processing certain requests.

webet takes the security of your personal data seriously. We maintain a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS Encryption in Transit: All data exchanged between your device and the webet Platform is encrypted using TLS 1.2 or higher. The padlock symbol visible in your browser address bar confirms that your connection to webet.im is secure at all times.
• AES-256 Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial records, and account credentials — is encrypted using AES-256, an industry-standard encryption algorithm used by financial institutions worldwide.
• Two-Factor Authentication (2FA): We strongly encourage all Players to enable 2FA on their webet account for an additional layer of login security. Internal webet staff accessing player data systems are required to use 2FA without exception.
• Access Control: Access to player data within the webet organisation is governed by a strict role-based access control (RBAC) policy. Only personnel who require access to specific data categories to perform their job functions are granted that access, and all access is logged and audited.
• Regular Security Audits: webet's platform and data infrastructure undergo regular internal security reviews and periodic third-party penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected Players, webet will notify affected individuals without undue delay and will take immediate steps to contain, investigate, and remediate the incident.

While webet implements robust security controls, no online platform can guarantee absolute security. You play an important role in protecting your own account by keeping your login credentials confidential, using a strong and unique password, enabling 2FA, and promptly reporting any suspicious activity to [email protected].

webet reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will notify registered Players by email at the address associated with their account at least 14 days before the updated policy takes effect. The effective date at the top of this page will always reflect the most recent version.

Continued use of the webet Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the Platform and request account closure before the effective date of the change.

Minor updates — such as corrections of typographical errors, clarifications that do not change the substance of the policy, or adjustments to contact information — may be made without advance notice. We recommend reviewing this page periodically to stay informed of the current version.

Previous Versions: If you wish to review a previous version of this Privacy Policy, please contact the support team and we will provide the relevant historical version upon request.

Contact the Privacy Team: For any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact the webet privacy and data team directly. Our support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays. Contact details are provided below and in the site footer. All privacy-related requests will be handled with priority and responded to within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000 000 (plain text — not a clickable link)
• Support Hours: 24/7 — All Days (Bangladesh Standard Time, UTC+6)

webet is committed to resolving all privacy-related enquiries fairly and transparently. If you are not satisfied with our response, you may escalate your concern to a competent supervisory authority in your jurisdiction as described in Section 6 above.