banlawin Privacy Policy
At banlawin, protecting the personal data of every player in Bangladesh is a core responsibility. This Privacy Policy explains exactly what information we collect when you use our platform, how that information is used, who it may be shared with, and the controls you have over your own data. We are committed to transparency and to handling your data with care and integrity.
SSL-Encrypted Data Transmission
All data exchanged between your device and banlawin is protected by industry-standard SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted in transit.
No Unauthorised Third-Party Sale
banlawin does not sell, rent, or trade your personal data to third-party marketers. Data is shared only with service partners who are contractually bound to protect it and use it solely on our behalf.
Player Data Rights
You have the right to access, correct, and request deletion of your personal data held by banlawin. Submit a data request at any time by contacting our support team at support@banlawin.
Data We Collect
banlawin collects personal data from players in Bangladesh through several channels: directly when you register and use the platform, automatically through technical systems as you interact with our services, and occasionally from third-party payment providers and identity verification partners. We collect only the data that is necessary for the purposes described in this Privacy Policy.
1.1 Registration & Account Data
When you create a banlawin Account, we collect the following information: your full legal name as it appears on your national identity document; your date of birth (for mandatory age verification — you must be 18 or older); your Bangladeshi mobile number, which serves as your primary account identifier; a chosen username; and your account password in encrypted form. We do not store your password in plaintext under any circumstances.
1.2 Identity Verification (KYC) Data
To comply with anti-money-laundering (AML) obligations and to verify that all players meet the 18+ age requirement, banlawin may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect a selfie or live photograph for biometric matching during the KYC process. KYC documents are stored securely and are used exclusively for identity verification and legal compliance purposes.
1.3 Financial Transaction Data
When you make deposits or withdrawals using bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, banlawin records transaction reference numbers, amounts in Bangladeshi Taka (BDT), timestamps, and the type of payment method used. We do not store complete payment card numbers on our servers. Full payment credentials are handled exclusively by the relevant payment service providers in accordance with their own security standards.
1.4 Gameplay & Betting Data
banlawin records a detailed log of your gambling activity on the platform, including game sessions, stake amounts, winnings and losses, bet history, and the timestamps of all gaming activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.
1.5 Technical & Device Data
When you access banlawin, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is collected to maintain platform security, detect fraud, and improve our service quality for players in Bangladesh.
1.6 Communications Data
If you contact banlawin via live chat, email, or any other support channel, we retain a record of those communications, including the content of messages, the date and time, and any attachments provided. This enables us to provide consistent customer service and to refer back to prior interactions in the event of ongoing account queries.
banlawin collects only the personal data that is strictly necessary for account operation, payment processing, legal compliance, and the responsible gaming obligations we owe to players in Bangladesh. We do not collect data speculatively or for purposes beyond those stated in this Policy.
Identity documents submitted during KYC are stored in an encrypted environment with strict access controls. Only authorised compliance staff may access KYC documents, and access is logged for audit purposes. 18+ only — age verification is mandatory.
| Data Category | Examples | Collection Method | Required? |
|---|---|---|---|
| Account & Registration | Full name, date of birth, mobile number, password | Provided by you at registration | Mandatory |
| KYC / Identity | NID scan, passport copy, selfie photo | Uploaded by you on request | Required for withdrawals |
| Financial Transactions | bKash/Nagad reference, BDT amounts, timestamps | Generated automatically on transaction | Mandatory |
| Gameplay & Betting | Game logs, bet history, win/loss records | Automatically recorded during play | Mandatory |
| Technical & Device | IP address, browser, device type, OS | Automatically collected via server logs | Automatic |
| Communications | Support chat transcripts, email content | Provided by you when contacting support | When you contact us |
How We Use Your Data
banlawin processes your personal data only for specific, legitimate, and transparent purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which banlawin uses your personal data are set out below.
2.1 Account Management & Service Delivery
Your registration data and account credentials are used to create and maintain your banlawin Account, authenticate your identity at login, and provide you with access to the platform's casino games, sports betting markets, crash games, and live dealer tables. Without this data, we are unable to provide the service.
2.2 Payment Processing
Transaction data is used to process your BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. We use this data to maintain an accurate record of your Account balance, investigate payment discrepancies, and comply with financial reporting obligations.
2.3 Legal Compliance & Fraud Prevention
banlawin processes identity, device, and transaction data to meet its obligations under applicable anti-money-laundering (AML) and know-your-customer (KYC) requirements; to detect, investigate, and prevent fraudulent account activity, bonus abuse, and multi-accounting; to enforce our Terms and Conditions; and to respond to lawful requests from government or law enforcement bodies where legally required to do so.
2.4 Responsible Gaming
Gameplay and betting data is used by our responsible gaming systems to monitor player behaviour for indicators of problem gambling, to enforce player-set deposit and session limits, and to facilitate self-exclusion requests. banlawin takes its duty of care to players in Bangladesh seriously and uses data proactively to support safer gambling outcomes.
2.5 Customer Support
Communications data and account history are used by our support team to respond to your queries, investigate account disputes, and deliver a consistent level of service across all contact channels. Support records may be retained to improve the quality of our customer service over time.
2.6 Platform Improvement & Analytics
Aggregated and anonymised technical and gameplay data is used to analyse platform performance, understand how players in Bangladesh interact with our services, identify technical issues, and guide product development decisions. This analysis uses data in a form that does not identify individual players.
2.7 Marketing Communications
Where you have opted into marketing communications, banlawin may use your contact details and gameplay preferences to send you relevant promotional offers, bonus notifications, and information about new games or seasonal promotions (such as BPL season offers or Eid bonuses). You may withdraw your marketing consent at any time by contacting support@banlawin or adjusting your Account communication preferences.
banlawin processes your personal data on the following lawful bases: contractual necessity (account and payment services); legal obligation (KYC/AML compliance); legitimate interests (fraud prevention, platform security); and consent (marketing communications, where applicable).
You can withdraw consent for marketing communications at any time. Email support@banlawin with the subject line "Marketing Opt-Out" and your Account username. Opt-outs are processed within five business days and will not affect your access to the platform.
Data Sharing & Disclosure
banlawin does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. Data is shared with third parties only where it is necessary to deliver our services, comply with legal obligations, or protect the integrity of our platform. All third-party recipients of your data are contractually required to protect it and to use it only for the purposes specified by banlawin.
3.1 Payment Service Providers
To process your BDT deposits and withdrawals, banlawin shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank and BRAC Bank. These providers receive only the data required to execute and verify individual payment transactions and are independently regulated financial institutions with their own data protection obligations.
3.2 Identity Verification Partners
banlawin may use trusted third-party identity verification and KYC service providers to assist in verifying the identity and age of players. Where this occurs, your KYC documents may be transmitted to the verification partner over an encrypted connection. These partners are contractually bound to use your identity data exclusively for the verification task and to delete or return it upon completion.
3.3 Game Content Providers
Games available on banlawin are provided by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi. In delivering their game content within our platform, these providers may receive limited technical session data (such as a session token or anonymised player identifier) necessary to run the game correctly. Game providers do not receive your name, NID, mobile number, or financial account details.
3.4 Legal & Regulatory Disclosures
banlawin may disclose your personal data to law enforcement agencies, regulatory bodies, or government authorities in Bangladesh where it is required to do so by applicable law, court order, or other compulsory legal process. In such cases, banlawin will disclose only the data specifically requested and will take reasonable steps to notify you of any such disclosure where legally permitted to do so.
3.5 Business Transfers
In the event that banlawin undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from the transaction, prior to your data being transferred or becoming subject to a different privacy policy.
banlawin does not sell, rent, or broker your personal data to any third-party advertiser, data broker, or marketing company. Your data is used only to run, secure, and improve the banlawin platform for players in Bangladesh.
Data Retention
banlawin retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent our standard practice. In specific circumstances — such as an unresolved legal dispute, an ongoing fraud investigation, or a regulatory hold — data may be retained for longer than the standard periods shown.
5.1 Account Data
Your Account registration data is retained for the full duration of your Account's active life. Following permanent account closure — whether initiated by you or by banlawin — your Account data is retained for a minimum period of five years to comply with AML record-keeping requirements and to facilitate any post-closure dispute resolution or regulatory inquiry.
5.2 Financial Transaction Records
All records of BDT deposits, withdrawals, and in-platform transfers are retained for a minimum of seven years from the date of the transaction. This retention period reflects standard financial record-keeping obligations applicable to online payment businesses operating in the Bangladesh market.
5.3 KYC & Identity Documents
Identity verification documents submitted during the KYC process are retained for a minimum of five years following account closure, consistent with AML best practices. Where a KYC submission was made but an Account was never fully activated, the submitted documents are deleted within ninety days of the failed activation.
5.4 Communications & Support Records
Customer support communications are retained for three years from the date of the interaction. This period allows us to refer back to prior support interactions in the event of related future queries and to use aggregated, anonymised communication data to improve our support quality.
5.5 Technical Logs
Server and access logs containing technical and device data (including IP addresses) are retained for a rolling period of twelve months, after which they are either deleted or anonymised. Anonymised aggregated log data may be retained indefinitely for platform analytics purposes.
Closing your banlawin Account does not result in the immediate deletion of all your personal data. Legal and regulatory obligations require us to retain certain categories of data for defined periods after closure. You may request a summary of what data is held about you at any time by emailing support@banlawin.
Data Security
banlawin implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. No platform can guarantee absolute security against all possible threats, but we take our responsibility to safeguard player data seriously and maintain security standards appropriate to the nature of the data we process.
6.1 Encryption
All data transmitted between your device and the banlawin platform is encrypted using TLS (Transport Layer Security). Sensitive data at rest — including account passwords and KYC document stores — is encrypted using industry-standard encryption algorithms. Account passwords are stored exclusively in hashed form using a strong cryptographic hashing function and are never stored or transmitted in plaintext.
6.2 Access Controls
Access to systems holding personal data is restricted to authorised banlawin personnel on a strict need-to-know basis. All internal access to player account data is logged and subject to regular audit review. Administrative access requires multi-factor authentication. KYC documents are accessible only to the compliance team and only for the duration of the verification process.
6.3 Fraud & Intrusion Detection
banlawin operates automated systems for detecting anomalous login activity, suspicious transaction patterns, and potential intrusion attempts. These systems generate alerts for our security team to investigate. IP-based rate limiting and device fingerprinting are used to identify and block unauthorised access attempts, including credential-stuffing and brute-force attacks.
6.4 Your Responsibilities
Data security is a shared responsibility. You are responsible for maintaining the confidentiality of your Account password and for ensuring that your registered mobile number and email remain current and accessible to you. banlawin will never ask you for your password via email, chat, or any other channel. If you receive any such request purporting to be from banlawin, treat it as fraudulent and notify us immediately at support@banlawin.
6.5 Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, banlawin will take immediate steps to contain the breach, assess its scope, and notify affected players as promptly as practicable. Notification will be sent to the contact details held on account record and will describe the nature of the breach, the categories of data affected, and the remedial steps being taken.
Look for the padlock icon in your browser address bar when using banlawin. This confirms your connection is encrypted via TLS and that data in transit is protected from interception.
banlawin will NEVER ask for your password by email or chat. If you receive a suspicious message claiming to be from banlawin and requesting your login credentials, do not respond and report it immediately to support@banlawin.
TLS Encryption in Transit
All communication between your browser and banlawin servers is protected by TLS encryption, preventing man-in-the-middle interception.
Hashed Password Storage
Your password is stored only as a cryptographic hash. Not even banlawin staff can retrieve your plaintext password.
Role-Based Access Control
Internal access to player data is restricted by role and logged for audit. No single employee has unrestricted access to all player data categories.
Real-Time Anomaly Detection
Automated systems monitor for unusual login patterns and suspicious transactions, triggering security reviews before potential threats escalate.
Your Privacy Rights
As a player using banlawin, you have a number of rights in relation to the personal data we hold about you. banlawin is committed to honouring these rights and to making the process of exercising them straightforward. To exercise any of the rights listed below, contact our support team at support@banlawin with your Account username and a clear description of the right you wish to exercise. We will respond within ten business days of receiving a valid request.
Right of Access
You may request a copy of the personal data banlawin holds about you, including your Account details, transaction history, gameplay logs, and any KYC documents on file. We will provide this in a structured, readable format within ten business days.
Right to Rectification
If any personal data held by banlawin is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the specific correction needed and supporting documentation where applicable.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected or where you withdraw consent. Note that legal retention obligations (AML/KYC) may require us to retain certain data even after an erasure request.
Right to Restrict Processing
In certain circumstances — such as where you contest the accuracy of your data or object to our processing — you may request that we restrict processing of your personal data while the matter is under review.
Right to Data Portability
Where processing is based on your consent or on contract, you may request your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider of your choice.
Right to Object
You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on banlawin's legitimate interests, in which case we will assess whether our legitimate interests override your rights in the specific context.
Policy Updates & Contact
8.1 Updates to This Privacy Policy
banlawin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or new services offered on the platform. When material changes are made, we will notify registered players via the contact details held on Account record and will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how your data is being handled. Your continued use of banlawin following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
8.2 Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data banlawin holds about you, please contact our support and data team. All enquiries are handled confidentially and responded to within ten business days. For data subject rights requests (access, rectification, erasure, portability, restriction, or objection), include your registered Account username in your message to ensure your request is matched to the correct Account record.
Contact: support@banlawin
Response hours: 24/7 — Bangladesh Standard Time (BST, UTC+6) — English language support
8.3 Relationship to Other Policies
This Privacy Policy should be read alongside banlawin's Terms and Conditions and Responsible Gaming Policy, which together govern your use of the platform. In the event of any conflict between this Privacy Policy and any other banlawin policy document regarding the handling of personal data, this Privacy Policy shall prevail for data-related matters.
For all privacy-related questions, data subject rights requests, or concerns about how banlawin handles your personal data, email support@banlawin. Include your Account username and a clear description of your request. We respond within ten business days.
Ready to Play at banlawin?
Now that you know how we protect your data, explore everything banlawin has to offer — from live cricket betting and premium slots to crash games and live dealer tables, all with full BDT support via bKash and Nagad.