26bet Privacy Policy —
How We Handle Your Personal Data

Section 1

Data We Collect

26bet collects personal data from you in two ways: information you provide directly when you register and use the platform, and information we collect automatically as you navigate the site. The following table summarises the categories of data we collect and the primary reason for each.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health information unless it is voluntarily provided by you in the context of a responsible gaming support request. In that case, such information is handled with the highest level of confidentiality and used solely for the purpose of providing appropriate support.

Section 2

How We Use Your Data

26bet uses the personal data we collect for the following specific purposes. We rely on one or more lawful bases for each type of processing activity, including contractual necessity, legal obligation, legitimate interest, and — where required — your explicit consent.

• Account management: To create, maintain, and manage your 26bet player account, including processing your registration details and keeping your profile up to date.
• Identity verification (KYC): To verify your identity and age in compliance with our anti-money laundering and responsible gaming obligations. This process is mandatory for all players seeking to make withdrawals or access higher deposit limits.
• Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, or other supported payment channels, and to detect and prevent payment fraud.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and provide assistance through our live chat and email support channels.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour, and to apply any deposit limits, time-out periods, or self-exclusion measures you have requested.
• Security and fraud prevention: To protect the integrity of the 26bet platform, detect suspicious activity, investigate potential breaches, and prevent unauthorised access to player accounts.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and updates about new games or features at 26bet, where you have provided your explicit consent to receive such communications.
• Platform improvement: To analyse how players use the 26bet platform so that we can improve navigation, game selection, performance, and overall user experience.

We will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your consent or establishing a new lawful basis for that processing activity. If you have questions about why we are processing your data in a specific way, contact our support team.

Section 3

Data Sharing & Third Parties

26bet does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in order to operate the platform and fulfil our legal obligations, we share data with a limited number of trusted third-party service providers and partners under strict contractual conditions. The categories of third parties with whom we may share your data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other payment partners receive the minimum data necessary to process your transactions securely.
• Identity verification providers: We use third-party KYC and AML screening services to verify the identity of players. These providers receive your identity documents and personal details solely for verification purposes.
• Game software providers: Certified studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data (such as bet amounts and game history) to facilitate game delivery and resolve technical disputes.
• IT infrastructure and hosting providers: Our platform is hosted on secure cloud servers. Infrastructure providers have access only to the technical data necessary to maintain server operations and do not use this data for any independent purpose.
• Analytics services: We use privacy-compliant analytics tools to understand aggregate user behaviour on the platform. These services process data in anonymised or pseudonymised form.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory direction, we may disclose your personal data to law enforcement agencies, financial regulators, or other governmental bodies.

All third-party service providers engaged by 26bet are required to process your personal data only in accordance with our instructions and are contractually bound to implement appropriate security measures. We conduct periodic reviews of our third-party partners to ensure ongoing compliance with data protection standards.

Section 4

Cookies & Tracking Technologies

26bet uses cookies and similar tracking technologies — including web beacons and local storage — to provide a functional, personalised, and secure experience on our platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the 26bet platform to remember your preferences, maintain your login session, and gather analytical information about how the site is used.

The following categories of cookies are used on the 26bet platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable you to log in, navigate between pages, and maintain your session. The platform cannot function properly without these cookies and they cannot be disabled.
• Functional cookies: These cookies remember your preferences such as language settings, preferred payment method, and display options. They are not strictly necessary but significantly improve your experience on the platform.
• Analytical cookies: These cookies collect anonymous information about how visitors use the 26bet website — for example, which pages are visited most frequently and whether users encounter error messages. This data helps us improve the platform.
• Security cookies: These cookies support our fraud detection and account security systems. They help us identify suspicious login patterns, detect automated access attempts, and protect player accounts from unauthorised access.

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in or using core features of the 26bet platform. Disabling other cookie categories may affect the quality of your experience but will not prevent basic access to the site.

Section 5

Data Security & Storage

26bet takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes the following:

• All data in transit between your device and our servers is encrypted using TLS 1.3 / 256-bit SSL protocols, ensuring that no data can be intercepted during transmission.
• Sensitive data at rest — including identity documents and financial records — is stored in encrypted form using AES-256 encryption on isolated, access-controlled storage systems.
• Access to personal data within 26bet is restricted on a strict need-to-know basis. Only personnel who require access to perform specific operational duties are granted permission, and all access is logged and audited.
• Our platform infrastructure undergoes regular security assessments including vulnerability scanning and penetration testing to identify and address potential weaknesses before they can be exploited.
• Player accounts are protected by password hashing (bcrypt), optional two-factor authentication, and session timeout controls to prevent unauthorised access.
• Our payment integrations with bKash, Nagad, and other partners use tokenisation — meaning your actual payment credentials are never stored on 26bet servers.

Despite our best efforts, no internet-based system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights or interests, 26bet will notify affected players as promptly as possible and take all reasonable steps to mitigate the impact of the breach. You are also encouraged to keep your login credentials confidential and to contact us immediately if you suspect unauthorised access to your account.

All personal data collected from players in Bangladesh is stored on servers located within secure data centres. We do not transfer your personal data to countries with inadequate data protection standards without first ensuring that appropriate safeguards are in place.

Section 6

Your Privacy Rights

As a player on the 26bet platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our privacy team using the details in Section 8 of this policy. We will respond to all requests within seven business days and will not charge a fee for handling straightforward requests.

• Right of access: You have the right to request a copy of the personal data 26bet holds about you. We will provide this in a clear, readable format within seven business days of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details (such as your contact email or phone number) directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. Note that this right is subject to our legal obligations — for example, we are required to retain certain financial and identity records for a defined period after account closure to comply with anti-money laundering regulations.
• Right to restrict processing: You may ask us to temporarily halt the processing of your personal data while a dispute about its accuracy or our lawful basis for processing is resolved.
• Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format so that you can transfer it to another service provider if you choose.
• Right to withdraw consent: Where we process your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, unless we can demonstrate compelling legitimate grounds that override your interests.

Section 7

Data Retention Policy

26bet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to meet our ongoing legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

At the end of each applicable retention period, personal data is either securely deleted from our systems or anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

If you request deletion of your personal data before the end of an applicable retention period, we will delete what we are legally permitted to delete and clearly explain which data we are obliged to retain and for how long. We will not use retained data for any purpose other than compliance with the legal obligation that requires its retention.

Section 8

Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 26bet is handling your personal information, please contact us using the details below. All privacy-related enquiries are handled by a dedicated member of our support team who is trained in data protection matters.

• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" to ensure your message is directed to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week inside your 26bet account dashboard. For privacy matters, state at the start of the chat that you have a data protection enquiry.
• Response time: We aim to respond to all privacy enquiries within two business days, and to fully resolve all data rights requests within seven business days. Support is available around the clock (Bangladesh Standard Time, UTC+6).

26bet is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with the way we have handled your privacy enquiry, you may escalate the matter by submitting a formal complaint to our senior support management team via the same email address with the subject line "Formal Privacy Complaint". We will acknowledge all formal complaints within 24 hours and provide a full written response within 14 business days.