98taka Privacy Policy

1.1 Data You Provide Directly

1.2 Data Collected Automatically

1.3 Data From Third Parties

We may receive supplementary data about you from the following third-party sources:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa/Mastercard acquirers): transaction confirmation, wallet ownership status, and fraud signals.
• Identity verification partners: confirmation of NID validity or document authenticity where automated KYC checking is used.
• Fraud and AML screening services: risk scores and watchlist screening results used to comply with anti-money laundering obligations.
• Analytics providers: aggregated, anonymised traffic and engagement data used to understand how the platform is used overall.

2.1 Account Operation & Service Delivery

The primary purpose for which 98taka processes personal data is to operate your account and deliver the services you have requested. This includes creating and maintaining your account, processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported channels, providing access to casino games and sports betting markets, delivering customer support, and managing your responsible gaming preferences including deposit limits and self-exclusion requests.

The legal basis for this processing is contractual necessity — we cannot deliver the service without processing the data listed above.

2.2 Identity Verification & Age Checks

We are obligated to verify that all players are at least 21 years of age and that accounts are operated by the person to whom they are registered. KYC documents are processed for this purpose. This processing is carried out on the basis of legal obligation and legitimate interests (preventing underage gambling and identity fraud).

2.3 Fraud Prevention & Security

Connection data, device identifiers, IP addresses, and betting behaviour patterns are analysed to detect and prevent fraudulent activity, account takeovers, money laundering, and other security threats. This processing is based on our legitimate interests in maintaining platform integrity and protecting the financial security of all players.

2.4 Regulatory Compliance

Certain data retention and transaction reporting obligations require us to retain records of your account activity, payment transactions, and KYC documentation for defined periods even after your account is closed. This processing is carried out to comply with our legal obligations under applicable anti-money laundering, financial record-keeping, and responsible gaming frameworks.

2.5 Platform Improvement & Analytics

Anonymised and aggregated usage data is used to understand how players interact with the platform, identify technical issues, improve game loading performance, and prioritise feature development. This processing is based on our legitimate interests in continuously improving the 98taka experience. Individual player profiles are not sold or shared with third parties for this purpose.

2.6 Marketing Communications

With your explicit consent, 98taka may contact you with information about promotions, new games, seasonal offers (such as Eid or Pohela Boishakh specials), and other platform updates. You may withdraw this consent at any time by updating your communication preferences in the account settings dashboard or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

3.1 Payment Service Providers

Your mobile wallet number (bKash, Nagad, Rocket, Upay) or bank account details are shared with the relevant payment processor solely to execute deposit and withdrawal transactions you initiate. Each payment provider processes data under their own privacy policy and applicable financial regulations. 98taka does not retain full card numbers or MFS PINs.

3.2 Identity & Fraud Screening Partners

KYC document data and identity verification requests may be shared with third-party verification services to authenticate your identity and confirm document validity. These partners are contractually bound to process data only for the stated verification purpose and to apply security standards equivalent to those described in this policy.

3.3 Game Software Providers

When you play a game powered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or another third-party studio, the game engine may receive your player session token and in-game betting data to run the game and calculate results. Game providers do not receive your full name, payment details, or contact information as part of normal game operation.

3.4 Legal & Regulatory Disclosure

98taka may disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required by applicable law, a valid court order, or a regulatory compliance obligation. In such cases, disclosure is limited to the minimum data necessary to satisfy the legal requirement.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving 98taka, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the processing terms that results from it, with sufficient advance notice to exercise your rights under this policy if you wish to do so.

4.1 Active Account Data

Personal data associated with your active account is retained for as long as your account remains open and for a period of 5 years after account closure. This retention period reflects our legal obligations relating to financial record-keeping, anti-money laundering compliance, and the resolution of any potential disputes arising from your account activity.

4.2 KYC Documents

Identity verification documents (NID, passport copies, bank statements) are retained for 5 years from the date of verification or account closure, whichever is later. After this period, documents are securely destroyed or permanently anonymised. Retention beyond this period will only occur where specifically required by a legal hold or active regulatory investigation.

4.3 Marketing Data

If you have opted in to marketing communications, your contact details are retained for marketing purposes until you withdraw your consent. Following opt-out, your contact details are removed from active marketing lists within 30 days. A suppression record (confirming the opt-out) may be retained indefinitely to ensure you are not inadvertently re-added to marketing lists.

4.4 Support Communications

Records of support interactions (live chat transcripts, email threads) are retained for 2 years from the date of the interaction to enable quality assurance, dispute resolution, and continuity of service. After this period, transcripts are deleted or anonymised.

9.1 Contact the 98taka Privacy Team

For all privacy-related enquiries, data rights requests, or concerns about how your personal data is handled, contact us:

• Email: [email protected]
• Subject line: "Privacy Request — [Your Username]"
• Live Chat: Available via your logged-in account dashboard, 24/7
• Response Time: Within 30 calendar days of a verified request
• Hours: Bangladesh Standard Time (BST, UTC+6), around the clock

9.2 Raising a Complaint

If you are unsatisfied with the way 98taka has handled your personal data or a data rights request, you are entitled to escalate the matter. In the first instance, please contact our support team with full details of your concern so we have the opportunity to resolve it directly. We take all privacy complaints seriously and will provide a substantive written response within 30 days. Unresolved complaints may be escalated to the relevant data protection authority in the jurisdiction applicable to your case.