Benglawin Privacy Policy — Your Data, Your Rights, Our Responsibility

Benglawin is an online gaming platform operated under the benglawin brand, serving players primarily in Bangladesh. When this privacy policy refers to "benglawin", "we", "us", or "our", it means the benglawin platform and the team responsible for operating it.

Benglawin acts as the data controller for all personal data collected through the platform. This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that your data is handled lawfully, fairly, and transparently in accordance with this policy.

If you have any questions about how benglawin handles your personal data, or if you wish to exercise any of your data rights, you can reach our privacy team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

Benglawin collects personal data in several categories depending on how you interact with the platform. The table below summarises the main types of data we collect and why we need them.

Benglawin does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or for responsible gaming purposes (for example, if you voluntarily disclose a gambling-related health concern when requesting self-exclusion).

Benglawin collects your personal data through the following channels:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotion, you provide data directly to benglawin.
• Automated technologies: When you use the benglawin website or app, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies.
• Payment providers: When you transact via bKash, Nagad, or Rocket, benglawin receives transaction confirmation data from those providers to process your deposit or withdrawal.
• Identity verification services: Benglawin may use third-party identity verification providers to cross-check the documents you submit during KYC. These providers return a verification result to benglawin but do not retain your documents on our behalf.
• Fraud prevention services: Benglawin uses automated fraud detection tools that analyse technical data such as IP addresses and device fingerprints to identify suspicious activity.

Benglawin uses your personal data for the following purposes. We only use your data in ways that are consistent with the reason it was collected.

• Account management: To create, maintain, and secure your benglawin account, including verifying your identity and age.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and securely.
• Customer support: To respond to your queries, resolve disputes, and provide assistance when you need it.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and unauthorised account access.
• Platform improvement: To analyse how players use benglawin and improve the games, features, and overall experience.
• Responsible gaming: To monitor gaming patterns and identify players who may need support, and to enforce any limits or exclusions you have set.
• Marketing communications: To send you promotional offers and updates about benglawin — but only if you have opted in to receive them. You can opt out at any time.

Benglawin processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing that is necessary to provide the benglawin service to you — for example, processing your deposit or verifying your identity before a withdrawal.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML and KYC requirements.
• Legitimate interests: Processing that is necessary for benglawin's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, such as sending marketing communications. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Benglawin does not sell your personal data. We share your data only in the following limited circumstances, and only with parties who are contractually required to protect it:

• Payment providers: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions.
• Identity verification providers: Third-party KYC services receive your identity documents solely for the purpose of verification. They are not permitted to use your data for any other purpose.
• Fraud prevention services: Automated fraud detection tools process technical data to identify suspicious activity. No personally identifiable information is shared beyond what is necessary for this purpose.
• Regulatory authorities: Benglawin may be required to share data with law enforcement or regulatory bodies in response to a lawful request. We will notify you of any such disclosure where permitted by law.
• IT and hosting providers: Benglawin uses secure cloud infrastructure providers to host the platform. These providers process data on our behalf and are bound by strict data processing agreements.

All third parties with whom benglawin shares data are required to implement appropriate technical and organisational security measures and to process your data only for the purposes specified by benglawin.

Benglawin retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, or reporting requirements. The general retention periods we apply are as follows:

• Account data: Retained for the duration of your account and for a minimum of 5 years after account closure, in line with AML regulatory requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for a minimum of 5 years after the end of the business relationship.
• Support communications: Retained for 2 years from the date of the last interaction.
• Technical and usage data: Retained for up to 12 months, after which it is anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus 1 year for compliance purposes.

When data is no longer required, benglawin securely deletes or anonymises it so that it can no longer be linked to you as an individual.

Benglawin uses cookies and similar tracking technologies to make the platform work correctly and to improve your experience. A cookie is a small text file stored on your device when you visit a website. Benglawin uses the following types of cookies:

You can manage your cookie preferences through your browser settings. Please note that disabling essential or security cookies may affect the functionality of the benglawin platform and prevent you from logging in or completing transactions.

Benglawin takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your data from unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and benglawin servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Two-factor authentication options for player accounts.
• Regular security audits and penetration testing of the benglawin platform.
• Strict access controls — only authorised benglawin staff can access personal data, and only to the extent necessary for their role.
• Automated fraud detection and anomaly monitoring running 24/7.

You have the following rights in relation to your personal data held by benglawin. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

The benglawin platform is strictly for adults aged 18 and over. Benglawin does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to benglawin, please contact us immediately at [email protected].

Upon receiving a verified report that a minor has registered an account, benglawin will immediately close the account, delete all associated personal data, and return any deposited funds in accordance with applicable regulations. Benglawin uses age verification checks during registration and KYC to minimise the risk of underage access to the platform.

Benglawin may update this privacy policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes, we will notify registered players via email or an in-platform notification before the changes take effect.

The updated policy will always be available on this page with a revised effective date at the top. We encourage you to review this page periodically so you are always aware of how benglawin handles your personal data. Your continued use of the benglawin platform after any changes constitutes your acknowledgement of the updated policy.

If you have any questions, concerns, or requests relating to this privacy policy or the way benglawin handles your personal data, please get in touch. Our privacy team is available to help and will respond to every message personally.