bengbat Privacy Policy

For the purposes of this Privacy Policy, bengbat acts as the data controller in respect of all personal information collected from players and visitors who access the bengbat platform at bengbat.net. As data controller, bengbat determines the purposes for which, and the manner in which, your personal data is processed.

bengbat is committed to processing personal data in a lawful, fair, and transparent manner in accordance with applicable data protection legislation. This Privacy Policy sets out the legal basis for each category of processing activity, the purposes pursued, the retention periods applied, and the rights available to data subjects.

If you have any questions about how bengbat handles your personal information, or if you wish to exercise any of your data rights described in this Policy, you may contact bengbat's privacy team directly:

bengbat collects personal information from you through several channels: directly when you register an account or contact our support team, automatically through your use of our platform, and in some cases from third-party verification or payment service providers. The categories of personal data we collect are described in the table below.

bengbat does not knowingly collect personal data from individuals under the age of 18. If we discover that we have inadvertently collected data from a minor, that data will be deleted immediately and the associated account closed without delay.

bengbat processes your personal data for a range of clearly defined purposes. For each purpose, there is a corresponding lawful basis for processing. The principal processing activities and their lawful bases are as follows:

1. Account creation and management: We process your identity and contact data to set up and maintain your bengbat account, authenticate your identity on login, and communicate essential account notifications to you. Lawful basis: performance of a contract.
2. Age and identity verification (KYC): We process identity documents and verification outcomes to confirm that you meet the minimum age requirement of 18 years and to prevent fraudulent account creation. Lawful basis: legal obligation and legitimate interests.
3. Payment processing and fraud prevention: We process financial data to execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to detect and prevent payment fraud or money laundering. Lawful basis: performance of a contract and legal obligation.
4. Platform operation and game delivery: We process usage and technical data to serve the correct games and content to your device, maintain session continuity, and optimise platform performance. Lawful basis: performance of a contract and legitimate interests.
5. Responsible gaming monitoring: We analyse betting patterns, session duration, and deposit frequency to identify players who may be exhibiting signs of problem gambling, in order to offer appropriate support or impose protective limits. Lawful basis: legal obligation and vital interests.
6. Customer support: We process communications data to handle your support queries, resolve disputes, and improve our service quality. Lawful basis: performance of a contract and legitimate interests.
7. Marketing communications: Where you have opted in to receive promotional communications from bengbat, we may use your contact data to send you information about bonuses, promotions, and new game releases. You may withdraw consent at any time by contacting [email protected]. Lawful basis: consent.
8. Legal compliance and regulatory reporting: We process your personal data where required to comply with applicable anti-money laundering regulations, respond to lawful requests from competent authorities, and maintain records required by law. Lawful basis: legal obligation.

bengbat does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: We share necessary financial data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard solely to execute your requested deposit or withdrawal transactions. These providers are bound by their own data protection obligations and by the terms of our data processing agreements with them.
• KYC and identity verification providers: We share identity documents with regulated third-party KYC service providers to perform age verification, document authentication, and AML/PEP screening checks as required by our compliance obligations.
• Game software providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your username and session token are shared with that provider's gaming server to facilitate gameplay. These providers do not receive your full personal profile.
• IT infrastructure and hosting providers: bengbat uses third-party cloud infrastructure providers to host the platform. These providers process data on our behalf and are contractually restricted from using your data for any purpose other than delivering hosting services to bengbat.
• Fraud detection and security services: We may share technical and transactional data with specialist fraud prevention and cybersecurity vendors to identify and mitigate fraudulent activity, bot traffic, and security threats to the platform.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulators, or other competent authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to a third party.
• Business transfers: In the event that bengbat undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players via the email address on file prior to any such transfer taking effect.

bengbat uses cookies and similar tracking technologies on the bengbat.net website to ensure the platform functions correctly, to analyse usage patterns, and to maintain your session state while you are logged in. A cookie is a small text file stored on your device by your browser at the instruction of our server.

The categories of cookies bengbat uses and their respective purposes are described below:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary or fraud-prevention cookies may prevent you from logging in or using certain features of the bengbat platform.

bengbat does not use third-party advertising cookies or behavioural tracking technologies for the purpose of serving targeted advertisements on other websites.

bengbat retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable law. The retention periods applied to different categories of data reflect the legal, operational, and business reasons for which that data is held.

The extended retention periods for KYC documents and transaction records reflect bengbat's obligations under applicable anti-money laundering legislation. These records may be required to be produced in response to a lawful request from a competent regulatory or law enforcement authority.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, bengbat will securely delete or irreversibly anonymise that data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

bengbat respects your rights in relation to your personal data. Regardless of your location within Bangladesh, you are entitled to exercise the following rights in respect of the personal data bengbat holds about you:

1. Right of access: You have the right to request a copy of the personal data bengbat holds about you, together with information about how it is processed. bengbat will provide this in a structured, commonly used, machine-readable format where feasible.
2. Right to rectification: If any personal data bengbat holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
3. Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where the data has been processed unlawfully. This right is subject to bengbat's legal retention obligations — we cannot delete data that we are legally required to retain.
4. Right to restrict processing: You may request that bengbat restricts the processing of your personal data in certain circumstances — for example, while a correction request is being assessed, or where you have objected to processing and bengbat is considering that objection.
5. Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another controller where technically feasible.
6. Right to object: You have the right to object to processing based on legitimate interests, including profiling, where you believe your interests, rights, or freedoms override bengbat's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
7. Right to withdraw consent: Where bengbat processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected]. Please include your full name, the email address registered to your bengbat account, and a clear description of the right you wish to exercise. bengbat will acknowledge your request within 48 hours and respond in full within 30 calendar days. For complex requests, this period may be extended by a further 30 days, in which case bengbat will notify you of the extension and the reason for it.

bengbat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are reviewed and updated regularly to remain aligned with current best practices in information security.

• 256-bit SSL/TLS encryption: All data transmitted between your device and bengbat's servers is encrypted in transit using industry-standard TLS 1.2 or TLS 1.3 protocols.
• Encrypted data at rest: Sensitive stored data — including KYC documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
• Password hashing: bengbat never stores your password in plain text. Passwords are hashed using a modern, computationally intensive hashing algorithm (bcrypt or equivalent) before being stored.
• Two-factor authentication (2FA): bengbat offers optional 2FA for all account holders. Enabling 2FA adds an additional verification step for login from unrecognised devices, significantly reducing the risk of unauthorised account access.
• Access controls: Internal access to player data is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection and monitoring: bengbat operates continuous security monitoring and intrusion detection systems across its infrastructure. Anomalous activity triggers automated alerts and is reviewed by our security team.
• Penetration testing: bengbat engages qualified third-party security professionals to conduct periodic penetration tests of the platform. Identified vulnerabilities are remediated on a risk-prioritised basis.

Despite bengbat's best efforts, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bengbat will notify affected players without undue delay and will take all reasonable steps to contain the breach and prevent further harm.

You also have an important role to play in keeping your account secure. Use a strong and unique password for your bengbat account, enable 2FA, and never share your login credentials with anyone. If you believe your account has been compromised, contact [email protected] or our live chat immediately.