40bet's Privacy Policy

What Information We Collect

We collect the following types of information during registration and use of the 40bet platform. All data collection is based on a lawful basis and is used solely for the effective operation of the service.

1.1 Personal Identification Information

When creating an account, we collect the following information:

• Full name (in Bengali or English)
• Date of birth (for age verification — only those aged 21 and above may register)
• Email address
• Mobile number
• National ID card or passport number (when identity verification is required)

1.2 Financial Information

We collect the following financial information to process transactions:

• bKash, Nagad, Rocket, or Upay account number
• Transaction history and amounts
• Deposit and withdrawal records
• Bank account details (where applicable)

Note: We never store full card numbers or CVV. All financial information is stored in encrypted form.

1.3 User Activity Information

To improve the platform and ensure fair play, we collect:

• Game play history and patterns
• Betting activity and statistics
• Active time on the platform and session information
• Records of bonuses and promotions used

1.4 Technical Information

Information collected automatically to ensure security and optimize the service:

• IP address and geographic location (country/region level)
• Device type, operating system, and browser version
• Cookies and session tokens
• Referral source and navigation patterns
• Login time, logout time, and failed login attempts

Sharing Information with Third Parties

40bet does not sell your personal information. However, information may be shared with trusted third parties in the following limited circumstances.

3.1 Payment Processors

Only the information necessary to complete transactions is shared with bKash, Nagad, Rocket, Upay, and other approved payment providers. These providers follow their own strict privacy policies.

3.2 Game Providers

Minimal technical information may be shared with Pragmatic Play, Spribe, JILI, PG Soft, and other game developers to operate games and ensure fair play. Personal identification information is not shared in this case.

3.3 Law Enforcement Agencies

Providing necessary information on the basis of valid legal directives, court orders, or requests from government authorities is our legal obligation. In such cases we act in accordance with legal counsel.

3.4 Technology Service Providers

Certain information may be shared with trusted technology partners for cloud hosting, cybersecurity, and analytics services. These partners work with us under data protection agreements and may not use the information for their own purposes.

3.5 Business Transfers

In the event of a business merger, acquisition, or asset sale, user information may be transferred. In such cases we will notify you in advance and the new entity will be required to provide the same or higher standard of privacy protection.

Data Security Measures

40bet applies industry-leading security measures to protect your personal information. Our security practices are regularly reviewed and updated.

5.1 Encryption

All data transmissions are secured by SSL/TLS encryption. Stored sensitive information is protected with AES-256 bit encryption.

5.2 Access Controls

Only authorized staff can access your personal information, and they are restricted to the minimum information required for their area of work. All access is logged and regularly audited.

5.3 Security Testing

Our systems undergo regular security testing and risk assessments. Any security vulnerabilities are quickly identified and resolved.

5.4 Data Breach Response

In the event of a data breach, we will immediately notify the affected users and take swift action to resolve the issue. All breach incidents will be reported to the relevant authorities in accordance with legal obligations.

5.5 Third-Party Security

All our partners and service providers are contractually required to comply with the same high security standards. Compliance by partners is ensured through regular security assessments.

Data Retention Period

We retain your data only for as long as necessary. Decisions on storing and deleting data are made in accordance with the following policy.

7.1 Active Accounts

All relevant data will be retained for as long as your account remains active. This is necessary for providing services and keeping your account secure.

7.2 After Account Closure

After an account is closed, we will retain certain data for a specified period as required by legal obligations. Financial records and transaction history are generally kept for a longer period.

7.3 Inactive Accounts

For accounts that have been inactive for an extended period, we automatically delete unnecessary data and retain only what is legally required.

7.4 Backups and Archives

Data may remain in system backups for an additional period. However, backup data is never used for active purposes and is deleted in a secure manner.

Policy Changes and Updates

40bet reserves the right to update this privacy policy from time to time. We will notify you of any significant changes.

• You will be informed by email before any major changes to the policy take effect.
• The date on which the updated policy comes into effect will be clearly stated at the top of the page.
• Continued use of the platform after any changes will be considered acceptance of the new policy.
• Previous versions of the policy will be provided upon request.

The latest version of this policy will always be available on this page. We recommend reviewing this page regularly so you stay informed about our latest data protection policy.