Privacy Policy — minibet

minibet collects personal data from players through a number of channels, including the account registration process, ongoing platform use, identity verification procedures, payment transactions, and communications with our support team. The categories of personal data we may collect are described below.

minibet does not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs. If any such data is inadvertently disclosed during a support interaction, it will not be processed for any purpose other than addressing the immediate query and will be deleted promptly thereafter.

minibet processes personal data only for clearly defined, legitimate purposes. We do not use your data in any way that is incompatible with the purposes for which it was originally collected. The primary purposes for which we use personal data are set out below.

• Account Management: To create, maintain, and administer your player account, including verifying your identity, managing your balance, and processing your login credentials securely.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate transaction records.
• Identity Verification (KYC): To confirm your age and identity in compliance with responsible gaming obligations and anti-money laundering best practices.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels.
• Responsible Gaming: To monitor your betting behaviour for signs of problem gambling, enforce self-exclusion requests, and apply deposit or loss limits you have set on your account.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Platform Improvement: To analyse aggregated usage data in order to improve the minibet platform, fix technical issues, and develop new features and game categories.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about cricket, slots, fishing, and arcade events — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms and Conditions.

Where minibet relies on your consent as the legal basis for processing (for example, to send marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawing consent for marketing will not affect your ability to use the platform.

minibet does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited and controlled circumstances.

• Payment Service Providers: We share necessary financial and identity data with payment processors such as bKash, Nagad, Rocket, Upay, and banking partners (Dutch-Bangla Bank, BRAC Bank, and others) solely to facilitate the processing of your deposits and withdrawals. These providers are bound by their own privacy obligations and are not permitted to use your data for any other purpose.
• Identity Verification Partners: We may use third-party KYC service providers to verify the identity documents you submit. These providers process your data under strict contractual data processing agreements and may not retain your documents beyond the verification period.
• Technology and Hosting Partners: minibet uses third-party cloud infrastructure, game platform providers, and analytics tools to operate the platform. These partners access only the minimum data required to perform their contracted services.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data (such as player session tokens) to enable game functionality. They do not receive your full identity or financial profile.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to government agencies, regulatory bodies, or law enforcement authorities where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of minibet's business, player data may be transferred to the acquiring entity. Affected players will be notified via their registered email address in advance of any such transfer.

minibet uses cookies and similar tracking technologies (such as web beacons and local storage objects) to enhance your experience on the platform, maintain your login session, and gather anonymised analytics about how the platform is used. This section explains what cookies we use and how you can manage them.

You can control and disable non-essential cookies at any time through your browser's privacy or settings menu. The method varies by browser — refer to the help documentation for Chrome, Firefox, Safari, or your preferred browser for instructions. Please be aware that disabling strictly necessary cookies may prevent certain parts of the minibet platform from functioning correctly, including the login and deposit flows.

minibet does not use third-party social media tracking pixels (such as Facebook Pixel or Google Tag Manager remarketing tags) without your explicit consent. If you have previously consented to marketing cookies and wish to withdraw that consent, you may do so through your browser settings or by contacting our support team.

minibet retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods we apply to each category of data are described below.

• Account and Identity Data: Retained for the duration of your active account relationship with minibet, and for a minimum of five years following account closure. This retention period supports our anti-money laundering obligations and allows us to respond to regulatory enquiries.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven years following the date of each transaction, in line with standard financial record-keeping practice.
• KYC Verification Documents: Identity documents submitted for KYC purposes are retained for five years following account closure. After this period, documents are securely deleted or anonymised.
• Support Communications: Chat transcripts and email correspondence are retained for two years from the date of the interaction, unless the communication relates to an open complaint or legal matter, in which case it is retained until the matter is fully resolved.
• Behavioural and Analytics Data: Aggregated, anonymised platform usage data may be retained indefinitely for product improvement purposes. Individually identifiable behavioural data is retained for 12 months from collection and then anonymised.
• Marketing Preferences: Records of your marketing consent or opt-out status are retained for the lifetime of your account plus three years, to demonstrate compliance with consent obligations.

When personal data reaches the end of its applicable retention period, minibet will securely delete or irreversibly anonymise it so that it can no longer be linked back to you as an individual. Where technical constraints prevent immediate deletion, data will be isolated and protected from any further processing until deletion is completed.

As a player on minibet, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our support team at support@minibet with the subject line "Privacy Rights Request" and include your registered username or email address for verification purposes.

• Right of Access: You may request a copy of the personal data minibet holds about you. We will respond to access requests within 30 days of receipt. We may ask you to verify your identity before processing the request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates (such as a change of address) can often be made directly through your account settings.
• Right to Erasure: You may request that minibet delete your personal data. We will honour this request where the data is no longer required for the purpose for which it was collected, provided that no overriding legal or regulatory retention obligation applies. Please note that we cannot delete data that is required by law to be retained (for example, transaction records required for anti-money laundering compliance).
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or while an objection to processing is being assessed.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, in which case we will assess whether those interests are overridden by your rights and freedoms.
• Right to Data Portability: Where processing is based on your consent, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

minibet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme includes, but is not limited to, the following measures.

• Encryption in Transit: All data exchanged between your device and the minibet platform is encrypted using TLS 1.2 or higher. This ensures that data cannot be intercepted or read by third parties during transmission.
• Encryption at Rest: Sensitive data fields — including identity document scans, payment method identifiers, and authentication credentials — are encrypted at rest in our secure database infrastructure.
• Access Controls: Access to personal data within minibet's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role, and all access is logged and audited.
• Two-Factor Authentication (2FA): minibet supports two-factor authentication for player accounts. We strongly encourage all players to enable 2FA to protect their accounts from unauthorised access.
• Regular Security Assessments: minibet conducts periodic internal security reviews and works with third-party security specialists to identify and remediate vulnerabilities in the platform.
• Incident Response: minibet maintains a documented incident response plan. In the event of a security breach, our team will act immediately to contain the incident, assess the impact, and notify affected players and relevant authorities as required.

While minibet takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe: use a strong, unique password for your minibet account, enable two-factor authentication, and never share your login credentials with anyone. If you suspect your account has been compromised, contact support@minibet immediately.

minibet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable laws and regulations, or improvements to our platform and services. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — for example, a significant change to the categories of data we collect or the purposes for which it is used — minibet will notify registered players via their registered email address at least 14 days before the changes take effect. For minor or administrative changes, we may update the policy without separate notification, relying instead on the "Last Updated" date as notice of the revision.

Your continued use of the minibet platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting our support team. Any personal data collected prior to your account closure will continue to be handled in accordance with the version of the Privacy Policy that was in effect at the time of collection, subject to applicable legal retention requirements.

Previous versions of this Privacy Policy are available on request. If you have any questions about this Privacy Policy, our data practices, or your rights as a player, please contact our support team at support@minibet. We are committed to responding to all privacy-related enquiries promptly and transparently.