Privacy Policy — bittaka Data Protection

bittaka collects personal data from you in several ways: directly when you register an account or contact our support team, automatically as you interact with the platform, and from third-party sources such as payment processors and identity verification providers. We collect only the data that is necessary for the specific purposes described in this Privacy Policy.

The categories of personal data we collect include the following:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If you voluntarily disclose such information in a support communication, we will handle it with heightened care and will not process it for any purpose beyond resolving your query.

bittaka processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: performance of a contract (providing the gaming and betting services you have registered for), compliance with a legal obligation (such as anti-money laundering requirements and age verification), and our legitimate interests (such as fraud prevention, platform security, and responsible gaming monitoring).

The specific purposes for which we use your data are as follows:

• Account creation and management: To register your account, verify your identity, and maintain your account throughout its lifecycle on bittaka.
• Service delivery: To process your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment channels; to enable your participation in cricket betting, casino games, slots, Star Fishing, Color Prediction, and all other platform products.
• Customer support: To respond to your queries, investigate complaints, and provide assistance via live chat and other support channels.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and any activity that breaches our Terms & Conditions.
• Responsible gaming compliance: To monitor for indicators of problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits set by the player or required by our policies.
• Legal compliance: To meet our obligations under applicable anti-money laundering regulations, financial reporting requirements, and any lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage patterns in order to improve the quality, stability, and usability of the bittaka platform.
• Marketing communications: Where you have given explicit consent, to send you personalised offers, promotions, and updates about bittaka. You may withdraw this consent at any time via your account settings or by contacting support.

bittaka does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment processors: When you make a deposit or request a withdrawal, relevant financial data is shared with our payment processing partners — including bKash, Nagad, Rocket, Upay, and banking partners such as BRAC Bank, City Bank, and Sonali Bank — solely to complete the transaction. These partners process your data under their own privacy policies and applicable financial regulations.

Identity verification providers: To fulfil our KYC obligations, identity documents and personal details may be shared with our third-party verification partner. This partner is contractually bound to use your data only for the purpose of identity verification and to maintain appropriate security standards.

Game technology providers: Game studios and platform providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session data necessary to deliver their games on the bittaka platform. These providers do not receive your full personal profile.

Legal and regulatory authorities: bittaka may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in response to a lawful request, court order, or legal obligation. In such cases, we will disclose only what is required and will notify you where permitted by law.

Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of bittaka's assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and ensure that your data continues to be protected under terms no less protective than this Privacy Policy.

bittaka uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with our services. A cookie is a small text file placed on your device when you visit a website. It allows the website to remember certain information about your visit.

We use the following categories of cookies on the bittaka platform:

bittaka does not use advertising or tracking cookies that build profiles for third-party ad targeting. We do not integrate third-party social media tracking pixels on our platform.

Most web browsers allow you to control cookie settings through their preferences menu. You can choose to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your bittaka account and using core platform features. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

bittaka retains your personal data for as long as your account remains active, and thereafter for the minimum period required by applicable legal and regulatory obligations. We do not retain personal data beyond the periods described below unless we are required to do so by law or are engaged in a legitimate dispute resolution process in which the data is relevant.

• Account and identity data: Retained for the duration of your account's active period, plus a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven years from the date of the transaction, as required for financial compliance and audit purposes.
• Support and communication records: Retained for three years from the date of the last interaction, unless the communication relates to an ongoing complaint or legal matter.
• Technical and usage data (server logs): Retained for up to 13 months in identifiable form, then either deleted or anonymised for long-term analytics purposes.
• Marketing consent records: Retained for the duration of the consent period plus two years to demonstrate compliance in the event of a regulatory enquiry.

All personal data held by bittaka is stored on encrypted servers. Access to personal data is restricted to authorised personnel on a strict need-to-know basis. Employees with access to personal data are subject to confidentiality obligations and receive regular data protection training.

When personal data reaches the end of its retention period and is no longer required for any legitimate purpose, it is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

bittaka takes the security of your personal data seriously and implements a layered approach to data protection. The following technical and organisational measures are in place to safeguard your information against unauthorised access, accidental loss, alteration, or disclosure.

• Transport Layer Security: All data transmitted between your device and bittaka is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Data-at-rest encryption: Personal data stored in our databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Internal access to personal data is restricted by role-based access control (RBAC). Only personnel who require access to specific data categories in order to perform their job functions are granted that access.
• Two-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication. We also encourage all players to enable 2FA on their own accounts.
• Penetration testing and security audits: bittaka engages independent security professionals to conduct regular penetration tests and vulnerability assessments of our platform and infrastructure.
• Incident response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you without undue delay once the nature and scope of the breach have been assessed.
• Payment data isolation: Payment card and mobile wallet data is processed exclusively by our PCI-compliant payment processors and is never stored on bittaka's own servers.

As a player on bittaka, you have meaningful rights over your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team via live chat or email at support@bittaka. We will respond to all verified requests within five business days.

• Right to access: You have the right to request a copy of the personal data bittaka holds about you, including information on how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details yourself through your account settings.
• Right to erasure: You may request that bittaka delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data required for anti-money laundering compliance cannot be deleted before the statutory retention period has elapsed.
• Right to restrict processing: You may request that bittaka restrict the processing of your personal data in certain circumstances — for example, while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format for transfer to another provider.
• Right to object to marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time, without providing a reason. We will act on your objection immediately.
• Right to withdraw consent: Where bittaka relies on your consent as a legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bittaka reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material — meaning they affect how we collect, use, or share your personal data in a significant way — we will notify you by email to your registered address and by a prominent notice on the bittaka platform at least seven days before the changes take effect.

We recommend that you review this Privacy Policy periodically to stay informed about how bittaka protects your personal data. The date shown in the "Last updated" notice at the top of this page reflects the most recent revision. Your continued use of bittaka after a policy update constitutes your acknowledgement of the revised terms.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bittaka handles your personal data, please contact our support team. We take all privacy enquiries seriously and aim to resolve them promptly and fairly.

• Live chat: Available 24/7 directly on the bittaka website — our fastest response channel, with typical response times of 2–5 minutes.
• Email: support@bittaka — for detailed privacy enquiries, data rights requests, and formal complaints. Please include "Privacy Request" in the subject line.
• Hours: 24/7, Bangladesh Standard Time (UTC+6).

For concerns that cannot be resolved directly with bittaka, you may also seek guidance from a relevant consumer protection or data protection authority in your jurisdiction.