betsat Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how betsat (hereinafter "betsat", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal information of individuals who visit, register on, or otherwise interact with the betsat platform, including the website at betsat.bio, the betsat sportsbook, the betsat casino, and all associated digital services (collectively, the "Platform").

By accessing the betsat Platform, registering an account, or submitting personal information to betsat in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the betsat Platform.

This Policy should be read in conjunction with betsat's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and together constitute the full agreement governing your use of the betsat Platform.

betsat is committed to handling personal data with care, transparency, and in accordance with applicable data protection standards. This Policy outlines your rights with respect to your personal data and the mechanisms available to you for exercising those rights.

For the purposes of this Policy, betsat acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, betsat determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, access requests, correction requests, deletion requests, and complaints should be directed to betsat via the contact details provided in Section 14 of this Policy. betsat will respond to all data-related enquiries within a reasonable timeframe and in accordance with applicable data protection obligations.

betsat collects the following categories of personal data from players and platform visitors:

3.1 Registration and Identity Data

• Full legal name, date of birth, and gender
• Residential address (including city, district, and postal code)
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (National Identity Card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or equivalent)
• Payment method ownership documentation (e.g., bKash or Nagad account confirmation)
• Selfie or live photo where required for biometric identity confirmation

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers)
• Bank account details where bank transfer is used
• Transaction history and account balance records

3.4 Betting and Gaming Activity Data

• Sports bets placed, including market, odds, stake, and outcome
• Casino game sessions, including game title, wager amounts, and results
• Bonus and promotion participation history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, and clickstream data
• Login timestamps and session identifiers

3.6 Communications Data

• Support chat transcripts and email correspondence with betsat
• Survey responses and feedback submissions
• Promotional communication preference settings

betsat collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact betsat support, or participate in a promotion, you provide data directly to betsat.
• Automated collection: When you visit or interact with the betsat Platform, technical data is collected automatically through cookies, server logs, and similar technologies as described in Section 9 of this Policy.
• Third-party sources: betsat may receive data about you from third-party identity verification providers, payment processors, fraud detection services, and publicly available sources, where this is necessary for KYC compliance or fraud prevention purposes.
• Affiliate referrals: If you arrive at betsat via an affiliate marketing partner, betsat may receive limited referral data (such as a click identifier) to attribute your registration to the referring affiliate. betsat does not receive your personal browsing history from affiliate partners.

betsat processes personal data only for specific, clearly defined purposes. The table below sets out the primary processing purposes and the corresponding legal basis for each:

Where betsat relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for promotional communications does not affect your ability to use the betsat platform.

betsat may share your personal data with the following categories of third parties in the circumstances described:

6.1 Payment Service Providers

To process your deposits and withdrawals, betsat shares relevant financial data with authorised payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and other payment partners. These providers process your data solely to execute the requested transaction and are contractually prohibited from using your data for any other purpose.

6.2 Identity Verification Providers

To fulfil KYC and age verification obligations, betsat shares identity documents and personal details with accredited third-party identity verification services. These providers process data on betsat's behalf and are bound by data processing agreements that restrict secondary use of your data.

6.3 Game Studios and Software Providers

Casino game content on betsat is provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and minimal technical identifiers to initialise game sessions. They do not receive your full personal profile or financial data.

6.4 Fraud Prevention and Security Services

betsat uses third-party fraud detection and cybersecurity services that may process technical and behavioural data (such as IP address, device fingerprint, and transaction patterns) to identify and prevent fraudulent activity on the betsat platform.

6.5 Legal and Regulatory Authorities

betsat will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or regulatory instruction. betsat will endeavour to notify affected players of such disclosures where legally permitted to do so.

6.6 Business Transfers

In the event that betsat undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by betsat may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being assumed by the successor entity.

betsat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting obligations. The following general retention periods apply:

Where betsat is required by law to retain data for a longer period than stated above, the legally mandated period will take precedence. Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

betsat implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the betsat Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at rest: Sensitive data, including passwords and payment details, is stored in encrypted form using strong cryptographic algorithms. Passwords are hashed and salted and are never stored in plain text.
• Access controls: Access to personal data within betsat's systems is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems.
• Penetration testing: betsat conducts regular security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: betsat maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, betsat will notify affected players promptly in accordance with applicable legal requirements.
• Vendor security standards: Third-party service providers who process data on betsat's behalf are required to demonstrate adequate security standards as a condition of their engagement with betsat.

While betsat takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely secure. betsat encourages you to use a strong, unique password for your betsat account and to enable any available two-factor authentication to further protect your account.

betsat uses cookies and similar browser-based technologies to operate the Platform, maintain session state, remember your preferences, and analyse aggregate usage patterns. A cookie is a small text file placed on your device by a web server when you visit a website.

9.1 Types of Cookies Used by betsat

betsat does not use third-party behavioural advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the betsat Platform.

betsat respects your rights in relation to your personal data. You may exercise the following rights by submitting a written request to betsat support using the contact details in Section 14:

• Right of Access: You have the right to request a copy of the personal data betsat holds about you, together with information about how it is being processed.
• Right of Rectification: If the personal data betsat holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right of Erasure: In certain circumstances, you have the right to request that betsat delete your personal data. This right is subject to limitations where betsat is required to retain data for legal, regulatory, or fraud-prevention purposes.
• Right to Restrict Processing: You have the right to request that betsat restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to betsat in a structured, commonly used, machine-readable format, and to request that betsat transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to betsat processing your personal data on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes, where your particular circumstances justify such an objection.
• Right to Withdraw Consent: Where betsat processes your data on the basis of consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

betsat will respond to all data rights requests within 30 days of receipt. Where a request is complex or betsat receives a high volume of requests simultaneously, this period may be extended by a further 60 days, with notification provided to the requester. Exercising your data rights is free of charge in most circumstances.

The betsat Platform is strictly intended for individuals aged 18 years and above. betsat does not knowingly collect personal data from persons under the age of 18. The betsat registration process includes an age declaration step, and betsat enforces age verification through mandatory KYC documentation for all accounts prior to the processing of any withdrawal.

If betsat becomes aware that personal data has been collected from a person under the age of 18, betsat will take immediate steps to close the relevant account, refund any deposited funds via the original payment method, and permanently delete all personal data associated with that account from its systems.

If you have reason to believe that a minor has registered an account on betsat or has otherwise provided personal data to betsat, please contact betsat support immediately using the contact details in Section 14 of this Policy.

betsat operates as an international online gaming platform. Personal data collected from players in Bangladesh and other territories may be transferred to, stored in, and processed in countries outside of the player's country of residence for the purposes described in this Policy.

Where personal data is transferred internationally, betsat takes appropriate steps to ensure that such transfers are subject to adequate safeguards. This may include the use of standard contractual clauses, data processing agreements, or reliance on the adequacy decisions of relevant data protection authorities. betsat will not transfer personal data to a third country without ensuring that appropriate protections are in place.

By registering an account and using the betsat Platform, you acknowledge and consent to the international transfer and processing of your personal data as described in this section.

betsat reserves the right to update or revise this Privacy Policy at any time. When material changes are made, betsat will notify registered players via the email address associated with their account or via a prominent notice on the betsat Platform, with a minimum of seven (7) days' advance notice before the revised Policy takes effect.

The effective date displayed at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how betsat is protecting your personal data. Your continued use of the betsat Platform after the effective date of a revised Policy constitutes your acceptance of the changes.

If you do not agree with the revised Privacy Policy, you must stop using the betsat Platform and may contact betsat support to request account closure and deletion of your personal data in accordance with Section 10 of this Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data betsat holds about you, please contact the betsat data protection team. betsat's support team is available 24 hours a day, seven days a week, including Bangladesh public holidays.

Email: support at betsat dot bio

betsat aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days of receipt. Requests that require additional investigation — such as erasure requests involving legally mandated retention obligations — may take longer, and betsat will communicate the expected timeline in such cases.

For further information on your rights and responsibilities as a betsat player, please review the Terms & Conditions and the Responsible Gaming policy available on the betsat Platform.