Privacy Policy for godsbet

godsbet collects personal information from players in order to provide, maintain, and improve our Services. The categories of information we collect are set out below. We collect only the data that is necessary and proportionate to the purposes described in this Privacy Policy.

1.1 Information You Provide Directly

When you register an account, verify your identity, make deposits or withdrawals, or contact our support team, you provide us with information that may include:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address and mobile phone number (used for account verification and security alerts).
• Residential data: Postal address and city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Identity verification documents: Bangladesh National ID card (NID), passport, or driving licence submitted as part of our KYC process.
• Payment data: bKash account number, Nagad number, Rocket number, Upay reference, bank account details (Dutch-Bangla Bank, BRAC Bank, Islami Bank, City Bank, Sonali Bank), or masked Visa/Mastercard details. Full card numbers are never stored on godsbet servers.
• Communications data: Records of your correspondence with our support team, including live chat transcripts and email exchanges.

1.2 Information Collected Automatically

When you use the godsbet platform, certain technical data is collected automatically by our systems:

• Device data: Device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, betting history, session duration, click patterns, and navigation paths within the Platform.
• Network data: IP address, internet service provider (ISP), and approximate geolocation (country and city level only — we do not collect precise GPS coordinates).
• Log data: Server logs recording login timestamps, deposit and withdrawal events, game round IDs, and error reports.

1.3 Information from Third Parties

We may receive additional information about you from trusted third-party sources where this is necessary for legal compliance or fraud prevention:

• Identity verification agencies used for KYC cross-checking.
• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status of transactions processed through their networks.
• Anti-fraud and AML screening services that flag high-risk activity patterns.

godsbet does not sell, rent, or trade your personal information to any third party for commercial gain. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers

We engage a small number of carefully vetted third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard network operators — to process your deposits and withdrawals.
• KYC and identity verification providers: To cross-check the identity documents you submit against trusted reference databases.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive anonymised session data necessary to deliver and audit game rounds. These providers do not receive your identity or payment data.
• Cloud infrastructure and security providers: Who host the Platform's servers and provide DDoS protection and intrusion detection services.

All service providers are contractually prohibited from using your data for any purpose other than the specific service they provide to godsbet.

3.2 Legal Disclosure

godsbet may disclose your personal data to government bodies, law enforcement agencies, or financial intelligence units where we are legally compelled to do so — for example, in connection with an AML investigation, a court order, or a formal request from a competent authority. We will notify you of any such disclosure unless doing so would be prohibited by law or would compromise an ongoing investigation.

3.3 Business Transfers

In the event that godsbet undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide you with prior notice of any such transfer and ensure that the receiving entity commits to privacy standards no less protective than those set out in this Policy.

godsbet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:

5.1 Account Closure & Data Deletion

When you request the closure of your godsbet account, we will deactivate your account immediately. However, certain data categories will be retained for the periods specified above in order to comply with our legal and regulatory obligations. Data that is no longer required will be securely deleted or anonymised. You may request confirmation of what data we hold about you at any time by contacting support@godsbet.

5.2 Self-Exclusion Records

Where a player requests self-exclusion under our Responsible Gaming programme, the self-exclusion record itself will be retained for a minimum of 5 years from the date of the request. This is to prevent the same player from re-registering under a different identity during the exclusion period and to demonstrate compliance with responsible gaming commitments.

godsbet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

7.1 Technical Controls

• Transport encryption: All data in transit between your device and godsbet servers is encrypted using TLS 1.2 or higher (256-bit AES encryption).
• Data at rest encryption: Database records — including account data, KYC documents, and transaction logs — are encrypted at rest using AES-256.
• Access controls: godsbet staff access to player data is governed by role-based access control (RBAC). Only personnel with a legitimate operational need can access personal data, and all access events are logged and audited.
• Two-factor authentication (2FA): All internal administrative systems require 2FA. Players are also strongly encouraged to enable 2FA on their player accounts.
• Intrusion detection: Our servers are monitored continuously by automated intrusion detection and prevention systems (IDS/IPS) with 24/7 alert escalation.
• DDoS protection: The Platform is protected against distributed denial-of-service attacks by enterprise-grade network security infrastructure.

7.2 Organisational Controls

• All godsbet staff with access to personal data undergo data protection training prior to being granted access.
• Vendor contracts include data processing agreements with strict security and confidentiality obligations.
• Security incident response procedures are in place, including breach notification protocols.

7.3 Data Breach Notification

In the unlikely event of a data security breach that poses a risk to your rights and freedoms, godsbet will notify affected players without undue delay — and no later than 72 hours after becoming aware of the breach — by email to the address registered on your account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to address it.