Your Privacy Matters
to crorebet

1 Information We Collect

crorebet collects personal information through several channels: directly from you when you register an account or complete verification; automatically through your use of the platform; and, in limited cases, from trusted third-party sources such as payment processors and identity verification services.

1.1 Information You Provide Directly

When you create an account or interact with our services, you provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and national identification number or passport number (provided during KYC verification)
• Contact data: Email address, phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code
• Account credentials: Username and hashed password. We never store your password in plain text.
• Financial data: Payment method details such as bKash account number, Nagad number, Rocket number, Upay account, bank account reference (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), or masked card numbers (Visa, Mastercard). Full card numbers are never stored on crorebet servers.
• KYC documents: Scanned copies or photographs of government-issued ID, proof of address documents, and source of funds declarations where required
• Communications: Messages, chat transcripts, and support tickets submitted to our customer service team

1.2 Information Collected Automatically

When you access crorebet, our systems automatically record certain technical and behavioural data:

• Device & technical data: IP address, browser type and version, operating system, device type, screen resolution, and language settings
• Usage data: Pages visited, features used, games played, bets placed, session duration, click patterns, and navigation paths through the platform
• Transaction data: Deposit and withdrawal history, bet history, bonus redemptions, and account balance changes
• Location data: Approximate geolocation inferred from your IP address. We do not collect precise GPS location data.
• Cookie data: Information stored via cookies and similar technologies, as described in Section 4 of this Policy

1.3 Information from Third Parties

We may receive supplementary personal information from third-party sources in limited, specific circumstances, including from identity verification providers we use to validate KYC documents, payment processors who confirm the status and ownership of payment methods linked to your account, and fraud prevention services that flag anomalous transaction patterns. In each case, data received from third parties is used solely for the purpose for which it was shared and is subject to the same security standards as data you provide directly.

2 How We Use Your Data

crorebet processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are: performance of a contract (operating your account), legal obligation (KYC/AML compliance), legitimate interests (fraud prevention, platform security), and, where required, your explicit consent.

crorebet does not use your personal data for automated decision-making that produces solely algorithmic outcomes with significant legal or material effects on you, except in the context of anti-fraud screening where human review is always available upon request.

3 Data Sharing & Third Parties

crorebet does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share your information only in the limited, specific circumstances described below, and only to the extent necessary for each purpose.

3.1 Service Providers

We engage carefully vetted third-party companies to help us deliver our services. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes. Categories of service providers include:

• Payment processors and mobile money operators (e.g., the technical infrastructure supporting bKash, Nagad, Rocket, Upay transactions)
• Identity verification and KYC service providers
• Fraud detection and anti-money laundering screening services
• Cloud hosting and data storage infrastructure providers
• Customer support platform operators
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — these providers receive only session tokens necessary to deliver game content; they do not receive your full identity or payment data

3.2 Legal and Regulatory Disclosure

We may be required to disclose your personal data to governmental authorities, law enforcement agencies, or regulatory bodies where we are legally compelled to do so. This may arise in the context of court orders, anti-money laundering investigations, or regulatory compliance reviews. In such cases, we disclose only the minimum information required to satisfy the legal obligation.

3.3 Business Transfers

In the event that crorebet undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that arises from it, prior to your data being subject to a different privacy policy.

4 Cookies & Tracking Technologies

crorebet uses cookies and similar technologies (such as local storage and session storage) to operate the platform effectively and improve your experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.1 Categories of Cookies We Use

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely. Please note that disabling strictly necessary cookies will impair core platform functionality — for example, you will not be able to remain logged into your account across page loads. Instructions for managing cookies in popular browsers are available through each browser's official help documentation.

5 Data Security Measures

crorebet applies a layered approach to information security. We implement both technical and organisational controls to protect your personal data against unauthorised access, accidental loss, alteration, or destruction.

5.1 Technical Safeguards

• TLS/SSL encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed proactively.
• Password hashing: Account passwords are stored exclusively as salted cryptographic hashes using a strong hashing algorithm. Our staff cannot read your password.
• Database encryption: Sensitive data fields — including identity document references and payment method details — are encrypted at rest within our database infrastructure.
• Access controls: Internal access to personal data is granted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security training.
• Firewalls and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and monitored 24/7 by automated intrusion detection systems.

5.2 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, crorebet will notify affected players promptly — and in no case later than 72 hours after we become aware of the breach — providing a description of the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.

6 Data Retention Policy

crorebet retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Once the applicable retention period has elapsed, data is securely deleted or irreversibly anonymised.

Following account closure, crorebet will retain the minimum data required to meet legal obligations. All other personal data will be deleted within 30 days of the closure being confirmed, subject to any ongoing investigation or dispute that may necessitate a longer retention period.

7 Your Privacy Rights

As a player on the crorebet platform, you hold a set of meaningful rights over your personal data. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our privacy team at privacy@crorebet with sufficient information to identify your account.

7.1 Summary of Your Rights

• Right of access: You may request a copy of all personal data we hold about you, along with information about how it is being processed. We will provide this in a structured, commonly used format within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and we have no overriding grounds to continue. This right is subject to exceptions — for example, where we are legally required to retain data for a defined period.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we export your personal data to you in a machine-readable format.
• Right to restrict processing: In certain circumstances — for example, while the accuracy of data is being contested — you may request that we suspend processing of your data.
• Right to object: You may object at any time to processing of your personal data based on our legitimate interests, including profiling for personalisation purposes. You may also withdraw marketing consent at any time.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing where that decision produces significant legal or material effects on you, and to request human review of any such decision.

7.2 Withdrawing Marketing Consent

If you have previously opted in to receive promotional communications from crorebet — including notifications about bonuses, seasonal offers, cricket betting promotions (BPL, IPL, T20 World Cup), or Eid and Pohela Boishakh specials — you may withdraw your consent at any time by updating your account notification preferences or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

8 Contact Our Privacy Team

crorebet takes privacy seriously and has designated a privacy point of contact responsible for overseeing data protection matters on the platform. If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how your personal data has been handled, please get in touch using the details below.

For general customer support enquiries unrelated to privacy, please contact support@crorebet or use the 24/7 live chat feature available on the platform.

8.1 Updates to This Privacy Policy

crorebet reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes, we will notify registered players by email and/or by displaying a prominent notice on the platform for a period of at least 14 days before the changes take effect. The "Last Updated" date at the top of the document will always reflect the most recent revision. Continued use of crorebet after a revised Policy takes effect constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. Your privacy is important to us — and staying informed is the best way to stay in control of your personal data on crorebet.