Privacy Policy — enjoybet

Section 1

Data Controller

For the purposes of this Privacy Policy, the data controller is enjoybet — the operator of the online casino and sports betting platform accessible at the enjoybet domain. When this Policy refers to "we", "us", or "our", it refers to enjoybet and its authorised operating personnel.

We are committed to handling your personal data with the highest degree of care, transparency, and respect. This Privacy Policy is intended to inform you — as a registered or prospective player based in Bangladesh — exactly how your data is processed when you interact with the enjoybet Platform.

If you have any questions, concerns, or requests related to your personal data, you may contact our privacy team at any time by writing to support@enjoybet. We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Section 2

Information We Collect

enjoybet collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through the technical systems that deliver our services, and occasionally from trusted third-party verification partners used in our KYC process. The categories of data we collect are described in the table below.

2.1 Data We Do NOT Collect

enjoybet does not collect your full mobile banking PINs, full card numbers, or online banking passwords. We do not collect biometric data, religious affiliation, or political opinions. We do not collect data from children — our Platform is strictly for adults aged 18 and above 18+, and we take all reasonable steps to prevent minors from registering.

Section 3

How We Use Your Data

enjoybet uses the personal data it collects only for the purposes described in this section. We apply the principle of data minimisation — we collect only what we need, and we use it only for the specific purposes for which it was collected.

• Account creation and management: To register your Player Account, authenticate your identity at login, and maintain your account profile, preferences, and balance information.
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, and card payment gateways, and to execute withdrawals back to your verified payment method.
• Age and identity verification (KYC): To confirm that you are at least 18 years of age and that the identity you have provided is genuine, as required by our anti-money laundering and responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, collusion, and other prohibited conduct outlined in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance when you contact our support team at support@enjoybet.
• Responsible gaming monitoring: To identify patterns of behaviour that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to provide timely support tools.
• Platform improvement: To analyse aggregated usage patterns, diagnose technical issues, and improve the features, performance, and user experience of the enjoybet Platform.
• Promotional communications: To send you relevant bonus offers, seasonal promotions (such as BPL cricket bonuses, Eid offers, or Pohela Boishakh promotions), and platform updates — only where you have opted in to receive such communications.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering regulations, to respond to lawful requests from authorities, and to enforce our Terms & Conditions.

Section 4

Legal Basis for Processing

enjoybet processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Player Account agreement — including account creation, payment processing, bet settlement, and customer support.
• Legitimate interests: Processing carried out to operate and improve our Platform, prevent fraud, ensure platform security, and analyse usage patterns — where those interests are not overridden by your fundamental rights.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and responses to lawful government or judicial requests.
• Consent: Processing for optional purposes — primarily marketing communications and non-essential cookies — where we have obtained your explicit, freely given consent. You may withdraw this consent at any time.

Section 5

Data Sharing & Third Parties

enjoybet does not sell your personal data to any third party. We share data only with carefully selected partners where it is strictly necessary to deliver our services or meet our legal obligations. All third parties who process data on our behalf are bound by data processing agreements that require them to handle your information with the same level of protection we apply.

5.1 Categories of Third-Party Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive only the transaction data necessary to process your deposit or withdrawal. They do not receive your betting history or full account profile.
• Identity verification (KYC) providers: Third-party identity and document verification services may process your NID, passport, or utility bill data solely to confirm your age and identity on behalf of enjoybet.
• Game content studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and bet data necessary to run their games within our Platform. They do not receive your full identity or payment details.
• Fraud prevention services: Specialist security providers may receive IP address, device fingerprint, and session data to detect and flag suspicious or fraudulent activity.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, courts, or regulatory bodies when required to do so by a valid legal obligation or lawful request.

5.2 International Data Transfers

Some of our third-party partners operate outside of Bangladesh. Where personal data is transferred internationally, enjoybet takes all reasonable steps to ensure that appropriate safeguards are in place — including standard contractual clauses and data processing agreements — to maintain a level of protection equivalent to that described in this Policy.

Section 6

Cookies & Tracking Technologies

enjoybet uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to enable key Platform functionality and to understand how players interact with our services. The following table describes the types of cookies we use.

6.1 Managing Cookies

Most web browsers allow you to view, manage, and delete cookies through the browser settings menu. You may disable non-essential cookies without affecting your ability to register or log in, though some functional features (such as remembered preferences) may not operate as expected. Disabling essential cookies may prevent you from accessing authenticated areas of the Platform.

To manage cookies in your browser, consult the help documentation for your specific browser (Chrome, Firefox, Samsung Internet, or similar). enjoybet does not respond to "Do Not Track" signals at the browser level, as there is no universally accepted standard for interpreting such signals.

Section 7

Data Retention

enjoybet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account data (identity, contact, financial, and usage data) is retained for the full duration of your active Player Account plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents (NID scans, utility bills, and similar) are retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records (deposit, withdrawal, and bet history) are retained for 7 years from the date of each transaction to satisfy financial record-keeping requirements.
• Support communications (emails, chat transcripts) are retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Self-exclusion records are retained indefinitely to prevent re-registration in violation of a self-exclusion order. Even where an Account is closed, self-exclusion status is preserved.
• Marketing consent records are retained for the duration of your Account plus 2 years, to provide evidence of consent if required.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

Section 8

Security Measures

The security of your personal data is a top priority at enjoybet. We apply a layered security framework that includes both technical and organisational controls designed to protect your data from unauthorised access, disclosure, alteration, or destruction.

8.1 Technical Controls

• 256-bit TLS/SSL encryption on all data in transit between your browser or device and the enjoybet Platform.
• AES-256 encryption at rest for sensitive data fields stored in our databases, including KYC documents and financial records.
• Bcrypt password hashing with per-user salting — your password is never stored in plain text and cannot be retrieved even by our own staff.
• Two-factor authentication (2FA) available on all Player Accounts for an additional layer of login security.
• Automated intrusion detection and rate-limiting systems that flag and block suspicious login attempts, bot traffic, and SQL injection patterns.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists to identify and remediate weaknesses before they can be exploited.

8.2 Organisational Controls

• Access to player personal data is restricted on a strict need-to-know basis. Staff members can access only the data required for their specific role.
• All staff with access to personal data undergo regular training on data protection obligations and security best practices.
• In the event of a confirmed personal data breach that poses a risk to affected players, enjoybet will notify impacted users without undue delay and take immediate steps to contain the breach.

Section 9

Your Privacy Rights

As a player using the enjoybet Platform, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our privacy team at support@enjoybet with a clear description of your request. We will respond within 5 business days (Bangladesh Standard Time, UTC+6).

• Right of Access: You have the right to request a copy of all personal data we hold about you, including your account details, transaction history, and any KYC documents on file.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that data required for regulatory compliance (e.g., AML records) cannot be deleted before the mandatory retention period expires.
• Right to Data Portability: You may request an export of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), covering data you have directly provided to us.
• Right to Restrict Processing: In certain circumstances — such as while a data accuracy dispute is being resolved — you may request that we temporarily restrict our processing of your personal data.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Upon a valid objection to marketing, we will cease sending promotional communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time via your Account settings or by emailing support@enjoybet.

Section 10

Changes to This Policy

enjoybet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services we offer. When we make material changes, we will notify registered players via email notification or a prominent notice on the Platform homepage, and we will update the effective date shown at the top of this page.

Your continued use of the enjoybet Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement that you have reviewed the updated Policy. If you disagree with any changes, you should cease using the Platform and contact support@enjoybet to request Account closure and withdrawal of your Real Money Balance.

Minor changes — such as clarifications, corrections of typographical errors, or updates to contact details — may be made without advance notice and take effect immediately upon publication. We recommend bookmarking this page and checking it periodically, particularly if you are an active player making regular deposits or withdrawals via bKash, Nagad, or Rocket.