Privacy Policy —
elexbet

When you interact with elexbet — whether by browsing, registering an account, making a deposit, placing a bet, or contacting customer support — we collect certain categories of personal data. The data we collect falls into three broad categories: information you provide directly, information we collect automatically, and information we receive from third-party sources such as payment providers and identity verification services.

Information You Provide Directly:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Government Identity Documents: Copies of your National Identity Card (NID), passport, or other government-issued identification submitted for the purpose of age verification and KYC compliance.
• Account Credentials: Your chosen username and a hashed (never plaintext) version of your password.
• Financial Data: Mobile banking account identifiers (e.g., bKash, Nagad, Rocket, Upay numbers), bank account numbers used for deposits or withdrawals, and transaction history associated with your elexbet account.
• Communication Data: The content of any messages you send to our customer support team, whether via live chat, email, or any other support channel.

Information Collected Automatically:

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on each page, games played, bet history, session duration, click patterns, and navigation paths through the elexbet platform.
• Location Data: Approximate geographic location derived from your IP address, used to ensure compliance with applicable jurisdiction requirements.
• Cookie Data: Information stored by cookies and similar tracking technologies on your device — see Section 04 for full details.

Information From Third Parties:

• Transaction confirmation and status data from payment processors including bKash, Nagad, Rocket, Upay, and banking partners.
• Identity verification results from third-party KYC service providers engaged by elexbet.
• Fraud risk and anti-money laundering screening data from compliance and risk management service providers.

elexbet uses the personal data it collects for the following specific purposes. We will not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing another valid legal basis.

Where you have provided consent for marketing communications, you may withdraw that consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at support@elexbet. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

elexbet processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual Necessity: Processing required to perform the contract between you and elexbet — specifically, the Terms & Conditions you accepted at registration. This covers account management, transaction processing, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, Know Your Customer verification obligations, and fraud prevention duties.
• Legitimate Interests: Processing carried out to pursue the legitimate business interests of elexbet, where those interests are not overridden by your fundamental rights and freedoms. This includes platform security monitoring, fraud detection, and general analytics for service improvement.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting prior processing.

elexbet uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain your name, password, or financial information.

The cookies used by elexbet fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as secure login sessions, page navigation, account balance display, and shopping cart functionality (for deposit flows). These cookies cannot be disabled without breaking the platform's basic functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how users interact with elexbet — such as which pages are visited most frequently, how long users spend on each page, and where errors occur. This data helps us continuously improve the platform experience.
• Functional Cookies: These cookies remember your preferences — for example, your preferred language setting, notification preferences, and whether you have previously dismissed certain informational banners. They enable a more personalised experience.
• Marketing & Targeting Cookies: Where you have provided consent, these cookies track your browsing activity to help us (and trusted advertising partners) deliver promotional content that is relevant to your interests. You may opt out at any time.

In addition to cookies, elexbet may use web beacons (also called pixel tags) within marketing emails to determine whether a message has been opened and to track click-through rates. These are used solely for the purpose of improving the relevance of future communications. You may prevent web beacon tracking by disabling image loading in your email client.

elexbet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only where it is necessary to deliver our services, to comply with legal obligations, or where you have given explicit consent. The categories of third parties with whom we may share your data are described below.

• Payment Processors: Your financial transaction data is shared with the payment service providers you use to deposit or withdraw funds — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — solely for the purpose of processing those transactions.
• Identity Verification Providers: Your identity documents and personal details may be shared with third-party KYC and age verification service providers engaged by elexbet to satisfy our legal compliance obligations. These providers process your data only on our instruction and under strict data protection agreements.
• Game Content Providers: Where you play a game supplied by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), limited gameplay data (such as a session token and anonymised player identifier) may be transmitted to that provider's servers to facilitate the game session. These providers do not receive your full name, contact details, or financial information.
• Fraud & AML Screening Services: Transaction and behavioural data may be shared with anti-fraud and anti-money laundering screening services to identify and prevent financial crime on the platform.
• Regulatory and Law Enforcement Authorities: elexbet will disclose personal data to government authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or lawful regulatory request. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisors: Your data may be accessed by our legal, accounting, or auditing advisors where strictly necessary in the course of their professional engagement with elexbet, subject to professional confidentiality obligations.

All third parties with whom elexbet shares personal data are contractually required to process that data only for the specified purpose, to implement appropriate security measures, and to comply with applicable data protection standards. elexbet does not authorise any third party to use your data for their own independent commercial purposes.

elexbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The specific retention periods applied to different categories of data are outlined below.

When the applicable retention period expires, your personal data is either securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

All personal data held by elexbet is stored on servers that implement industry-standard encryption, access control, and intrusion detection systems. Access to personal data is restricted to authorised personnel on a strict need-to-know basis, and all such access is logged and audited.

As a user of elexbet, you hold a number of rights in relation to the personal data we hold about you. elexbet is committed to honouring these rights promptly and without undue difficulty. To exercise any of the rights described below, please contact us at support@elexbet with a clear description of your request and sufficient information to verify your identity.

elexbet will respond to all valid data subject requests within 30 days of receipt. Where a request is complex or where a high volume of requests has been received, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

elexbet takes the security of your personal data seriously and applies a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. The principal security controls implemented across the elexbet platform include the following:

• SSL/TLS Encryption: All data transmitted between your device and elexbet servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection to elexbet is secure.
• Password Hashing: Your account password is never stored in plaintext. Passwords are hashed using a modern cryptographic algorithm before storage, ensuring that even elexbet staff cannot view your password.
• Access Controls: Access to personal data within elexbet's internal systems is restricted to authorised employees and contractors on a strict need-to-know basis. All access is role-based and subject to regular review and audit.
• Two-Factor Authentication (2FA): elexbet offers optional two-factor authentication for registered accounts. We strongly recommend enabling 2FA to add an additional layer of security to your account login process.
• Intrusion Detection & Monitoring: Our platform infrastructure is continuously monitored for signs of unauthorised access, unusual traffic patterns, and potential security threats. Automated alerting systems notify our security team of anomalies in real time.
• Data Minimisation: elexbet follows a data minimisation principle — collecting, storing, and processing only the personal data that is strictly necessary for each identified purpose, and deleting data promptly when retention periods expire.
• Vendor Security Standards: All third-party vendors and data processors engaged by elexbet are required to demonstrate appropriate technical and organisational security measures before engagement and on an ongoing basis.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, elexbet will notify you without undue delay, in accordance with applicable data breach notification obligations, and will take all reasonable steps to mitigate the impact of the breach.

If you discover or suspect any security vulnerability on the elexbet platform, or if you believe your account has been compromised, please contact us immediately at support@elexbet. Our security team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).