betum Privacy Policy
— How We Protect Your Data

This Privacy Policy ("Policy") is issued by betum ("betum", "we", "us", "our") and applies to all individuals ("Player", "User", "You") who visit, register on, or otherwise interact with the betum platform at betum.bio. This Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with the betum casino and sports betting services offered to players in Bangladesh and the broader region.

By accessing the betum website or creating a betum account, you acknowledge that you have read this Policy and that you consent to our data processing practices as described herein. If you do not agree to this Policy, you must not use the betum platform.

1. Data We Collect

betum collects personal information through several channels: directly from you during registration and account use, automatically through your device and browser when you visit the platform, and from third-party service providers who assist us in operating the platform.

1.1 Information You Provide Directly

When you register or interact with betum, we collect the following categories of personal information:

• Identity Information: Full legal name, date of birth, gender, and national identity document details (National ID Card number, passport number, or birth certificate number) as part of our KYC verification process.
• Contact Information: Email address, mobile phone number, and residential address including district, division, and Bangladesh postal code.
• Account Credentials: Your betum username and a hashed version of your password. We never store your password in plain text.
• Financial Information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and transaction records including deposit amounts, withdrawal requests, and betting history.
• Verification Documents: Copies of identity documents uploaded for KYC compliance, such as a scanned NID card or passport photo page.
• Support Communications: The content of any messages you send to betum via email at [email protected] or through our live chat system, including any attachments or screenshots you provide.

1.2 Information Collected Automatically

When you visit the betum platform, our systems automatically collect certain technical information about your device and browsing behaviour:

• Device & Technical Data: IP address, device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, bet amounts placed, time spent on each section, click patterns, login timestamps, and session duration data.
• Location Data: Approximate geographic location derived from your IP address. betum does not collect precise GPS-level location data unless you explicitly grant that permission through your device settings.
• Cookie and Tracking Data: Data collected through cookies, session tokens, and similar technologies as described in Section 4 of this Policy.

1.3 Information from Third Parties

betum may receive information about you from the following third-party sources to verify your identity, prevent fraud, and improve service delivery:

• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank) who confirm transaction status and flag potentially fraudulent payment activity.
• Identity verification providers who cross-reference the documents you supply during KYC against government databases.
• Fraud prevention and anti-money laundering screening services that check your details against sanctions lists and politically exposed persons (PEP) databases.
• Game studio providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming) who may return session data, bet records, and game outcome logs as part of their service integration.

2. How We Use Your Data

betum processes your personal information for the following clearly defined purposes, each of which is grounded in a legitimate legal basis:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, credentials	Contractual necessity
Identity verification (KYC)	Identity documents, DOB, address	Legal obligation
Processing deposits and withdrawals	Financial information, transaction data	Contractual necessity
Fraud detection and AML compliance	IP, device, financial, usage data	Legal obligation / legitimate interest
Customer support	Contact info, support communications	Contractual necessity
Promotional communications (opt-in)	Email, name, betting preferences	Consent
Platform analytics and improvement	Usage data, device data (aggregated)	Legitimate interest
Responsible gaming tools	Betting history, session data	Legal obligation / legitimate interest

Where betum relies on your consent to process data — for example, to send you promotional emails about new cricket betting markets, Eid reload bonuses, or BPL season promotions — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing that occurred before the withdrawal.

betum does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where fraud risk scoring is applied in real time to protect the security of your account. In such cases, you have the right to request human review of any automated decision that adversely affects your account.

3. Data Sharing & Third Parties

betum does not sell, rent, or trade your personal information. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle it with appropriate confidentiality and security standards.

3.1 Service Providers

betum engages the following categories of trusted service providers who process your data on our behalf, strictly for the purposes of delivering our platform:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners receive your transaction data to execute deposit and withdrawal instructions. These providers operate under their own privacy frameworks and regulatory obligations within Bangladesh.
• Game Studios: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive session tokens and bet records necessary to run their games within the betum environment. No more data than is technically necessary is shared with game studios.
• Identity Verification Providers: KYC technology partners receive your identity document data to verify your age and identity in compliance with anti-money laundering requirements.
• Platform Infrastructure: Cloud hosting, content delivery, and cybersecurity providers who maintain the technical infrastructure on which betum operates. These providers are bound by strict data processing agreements.
• Customer Support Technology: Live chat and email support platforms that process support ticket content on betum's behalf.

3.2 Legal Disclosures

betum may disclose your personal information to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or valid legal process. In such cases, betum will disclose only the minimum amount of information necessary to comply with the legal requirement and will notify you of the disclosure where permitted by law.

3.3 Business Transfers

In the event that betum undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with reasonable advance notice via your registered email address.

4. Cookies & Tracking Technologies

betum uses cookies and similar technologies to provide, maintain, and improve the platform experience. A cookie is a small text file stored on your device by your browser when you visit a website. betum uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the betum platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your optional preferences — such as your preferred game category, last visited section, or display settings — to provide a more personalised experience on your next visit to betum.
• Analytics Cookies: betum uses privacy-respecting analytics tools to understand aggregate patterns of platform use, such as which game categories are most visited, average session duration, and common navigation paths. Analytics data is processed in aggregated, de-identified form and is never linked back to an individual player's profile.
• Fraud Prevention Cookies: These cookies help betum detect and prevent fraudulent activity, including the identification of bot traffic, multiple-account registrations from the same device, and abnormal betting patterns.

betum does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not be followed around the web by betum advertisements based on your casino activity.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use the betum platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

5. Data Retention

betum retains your personal data for the periods described below, after which data is securely deleted or anonymised so that it can no longer be associated with you:

• Account Data: Retained for the duration of your active account and for a period of five (5) years following account closure to satisfy anti-money laundering record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of five (5) years from the date of each transaction in compliance with financial record-keeping requirements applicable to platforms serving the Bangladesh market.
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Customer support ticket histories are retained for two (2) years from the date of the last message in each ticket thread.
• Analytics Data: Aggregated, de-identified usage data used for platform analytics may be retained indefinitely as it cannot be linked back to any individual player.
• Inactive Accounts: Accounts that have had no login activity for 24 consecutive months are reviewed. Where no outstanding balance, pending dispute, or legal hold exists, betum may anonymise the account data associated with those accounts.

6. Your Privacy Rights

As a betum player, you have the following rights in relation to your personal data. To exercise any of these rights, contact betum's support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right to Access: You have the right to request a copy of all personal data betum holds about you, along with information on how it is used and with whom it has been shared.
• Right to Rectification: You have the right to correct inaccurate or incomplete personal information held by betum. You can update many fields directly in your account settings; for fields locked for security reasons, contact support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interest. This right is subject to legal retention obligations as described in Section 5.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interest, in which case betum will assess whether its interests override your rights in the specific context.
• Right to Restrict Processing: You have the right to request that betum restricts its processing of your data — for example, while a correction or objection request is being assessed — so that your data is stored but not actively used.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Data Security Measures

betum applies a defence-in-depth approach to data security, implementing multiple overlapping layers of technical and organisational controls to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

7.1 Technical Controls

• All data in transit between your browser and betum's servers is encrypted using TLS 1.2 or higher (256-bit AES encryption).
• Passwords are hashed using industry-standard algorithms and are never stored in recoverable plain-text form. betum support staff cannot see your password.
• Payment details are tokenised — betum stores a reference token, not your raw mobile wallet or bank account number.
• Access to betum's production databases is restricted to a minimal set of authorised personnel and requires multi-factor authentication.
• betum's infrastructure is subject to regular third-party penetration testing and vulnerability scanning.
• Automated monitoring systems detect and alert on anomalous access patterns, brute-force login attempts, and data exfiltration indicators in real time.

7.2 Organisational Controls

• All betum personnel with access to personal data are bound by confidentiality obligations and receive regular training on data protection best practices.
• Access to player data is granted on a need-to-know basis and is reviewed periodically to ensure it remains appropriate.
• betum maintains an incident response procedure for data security events. In the event of a data breach that is likely to result in a risk to your rights, betum will notify affected players without undue delay.

While betum takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You also have a role to play: use a strong, unique password for your betum account, enable two-factor authentication where available, and never share your betum login credentials with any other person. If you believe your account has been compromised, contact [email protected] immediately.

8. Changes to This Policy

betum may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify you by sending an email to your registered address at least 14 days before the updated Policy takes effect. The effective date at the top of this Policy will be updated with each revision.

We encourage you to review this Policy periodically. The most current version of betum's Privacy Policy is always available on this page at betum.bio/privacy-policy. If you continue to use the betum platform after a revised Policy takes effect, you are deemed to have accepted the changes.

If you have questions about this Privacy Policy or about how betum handles your personal data, please write to us at [email protected]. Our data queries team monitors this address during Bangladesh Standard Time (UTC+6) business hours and typically responds within 2 to 6 hours.