Privacy Policy
of safirbet

When you register an account, verify your identity, make a deposit or withdrawal, contact our support team, or participate in any promotion on safirbet, you provide us with personal information. The categories of personal data we collect directly from you include the following:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification.
• Contact Data: Bangladesh mobile phone number, email address, and residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other).
• Identity Document Data: Bangladesh National Identity Card (NID) number, passport number, or driving licence number and associated document images, submitted during the KYC verification process.
• Financial Data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, bank account or card details (where applicable), and transaction history.
• Account Credentials: Username and encrypted password. safirbet never stores passwords in plain text.
• Communications Data: The content of any messages you send to the safirbet support team via email (support@safirbet) or live chat, including the date, time, and subject of those communications.

In addition to the data you provide directly, safirbet automatically collects certain technical and behavioural data when you access or use the Platform. This data is collected using server logs, cookies, and similar tracking technologies and includes:

• Device and Browser Data: IP address, device type (desktop, mobile, tablet), operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage and Behaviour Data: Pages visited on safirbet, session duration, games played, bet amounts, game outcomes, bonus activity, deposit and withdrawal patterns, and navigation paths through the Platform.
• Geolocation Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location data unless explicitly required by a specific feature you choose to enable.
• Referral Data: If you arrived at safirbet via a referral link, affiliate link, or promotional campaign, we record the source of that referral for marketing attribution and bonus eligibility purposes.

Automatically collected data helps us operate the Platform securely, detect fraud and prohibited conduct, optimise the user experience, and ensure responsible gaming tools function correctly. This data is processed based on our legitimate interests in maintaining a secure and functional platform.

If you have opted in to receive marketing communications at the time of registration or subsequently in your account settings, safirbet may send you emails or platform notifications about new promotions, special offers (such as seasonal events around Eid, Pohela Boishakh, or BPL cricket tournaments), bonus credits, and platform updates. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting us at support@safirbet. Withdrawal of marketing consent does not affect the lawfulness of processing that took place prior to withdrawal.

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to recall certain information about your session and preferences. safirbet uses cookies and similar technologies (including local storage and session storage) to ensure the Platform operates correctly and to deliver a personalised, secure experience for every Bangladesh player.

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. You may disable functional and analytics cookies by adjusting your browser settings at any time. Please note that disabling certain cookies may affect your experience on safirbet — for example, your session may not be maintained between pages, or your responsible gaming settings may not be saved correctly. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, and delete cookies through the browser's Settings or Privacy menu. Instructions for managing cookies vary by browser; please consult your browser's help documentation for specific guidance.

safirbet works with a limited number of trusted third-party service providers who process personal data on our behalf, under contractual data processing agreements that require them to handle your data securely and in accordance with this Policy. These providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard — to facilitate deposit and withdrawal transactions in BDT. These providers receive only the financial data necessary to complete the transaction.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying the authenticity of identity documents (NID, passport, driving licence) submitted by players. These providers are bound by strict data confidentiality agreements.
• Game Software Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to operate and certify their game software. These providers do not receive identifiable personal data beyond what is operationally required.
• Hosting and Infrastructure Providers: Cloud hosting and content delivery providers who maintain the servers on which the safirbet Platform is hosted. These providers operate under strict security and confidentiality obligations.
• Analytics Providers: Anonymised, aggregated usage data may be shared with platform analytics tools to help us understand how safirbet is used and to identify performance improvements. No personally identifiable information is shared in this context.

safirbet may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where such disclosure is required by applicable law, court order, or where safirbet has a good-faith belief that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of safirbet; (c) prevent or investigate possible wrongdoing in connection with the Platform; (d) protect the personal safety of users of the Platform or the public; or (e) assist in the investigation of suspected money laundering, fraud, or match-fixing activity.

In such circumstances, safirbet will disclose only the minimum amount of personal data required to satisfy the legal obligation and will, where permitted by law, notify the affected player of the disclosure.

safirbet retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with safirbet, plus a minimum of 5 years following account closure, to meet anti-money-laundering record-keeping obligations.
• KYC Document Data: Retained for a minimum of 5 years from the date of verification, in accordance with applicable regulatory requirements.
• Transaction and Financial Data: Retained for a minimum of 5 years from the date of the transaction.
• Support Communications: Retained for 2 years from the date of the last communication in each support thread, or longer if the communication relates to an unresolved complaint or legal matter.
• Analytics and Usage Data: Retained in anonymised or aggregated form for up to 24 months. Any personally identifiable data within analytics records is anonymised within 12 months of collection.
• Cookie and Session Data: Retained for the duration stated in the Cookies section of this Policy.

Once personal data is no longer required for any of the above purposes, it is securely deleted or permanently anonymised using industry-standard data destruction methods. safirbet conducts periodic data retention reviews to ensure compliance with this Policy.

As a player on safirbet, you have the following rights in relation to the personal data we hold about you. These rights may be exercised at any time by contacting us at support@safirbet with the subject line "Privacy Rights Request":

• Right of Access: You have the right to request a copy of the personal data safirbet holds about you, together with information about how it is used and stored.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by safirbet be corrected or updated. For straightforward corrections (such as updating your mobile number or email address), you may do this directly in your account settings.
• Right to Erasure: You have the right to request the deletion of personal data that is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where processing has been unlawful. Please note that safirbet may be required to retain certain data for legal or regulatory compliance purposes even following a valid erasure request.
• Right to Restriction of Processing: You have the right to request that safirbet restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. safirbet will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

safirbet will respond to all verified privacy rights requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it. Privacy rights requests are provided free of charge; however, safirbet reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

safirbet implements a range of technical, organisational, and physical security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and safirbet servers is encrypted using SSL/TLS technology.
• Encrypted Data Storage: Sensitive personal data — including identity document data and payment credentials — is stored in encrypted form using industry-standard encryption algorithms.
• Access Controls: Access to personal data within safirbet is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific categories of data are permitted access, and all access is logged and audited.
• Two-Factor Authentication (2FA): safirbet offers 2FA for player accounts, providing an additional layer of security against unauthorised account access. Players are strongly encouraged to enable 2FA in their account security settings.
• Regular Security Assessments: safirbet conducts periodic security reviews, vulnerability assessments, and penetration testing to identify and address potential weaknesses in its systems before they can be exploited.
• Incident Response: safirbet maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain and remediate the breach.

While safirbet employs robust security measures, no online platform can guarantee absolute security against all threats. You are responsible for keeping your safirbet login credentials confidential and for ensuring that any device you use to access the Platform is protected by appropriate security software. If you suspect that your account has been compromised, please contact support@safirbet immediately.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way safirbet handles your personal data, you may contact the safirbet Data Protection Officer (DPO) using the following details:

• Email: support@safirbet (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Response Time: safirbet aims to acknowledge all privacy-related enquiries within 48 hours Bangladesh Standard Time (UTC+6) and to provide a full response within 30 calendar days.
• Language: All privacy-related communications with safirbet must be submitted in English.

safirbet reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered email address and/or via a prominent notice on the Platform. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of safirbet following notification of a material change constitutes your acceptance of the revised Policy.

This Privacy Policy, together with the safirbet Terms & Conditions, constitutes the complete agreement between you and safirbet regarding the collection and use of your personal data. If any provision of this Policy is found to be unenforceable, the remaining provisions shall continue in full force and effect.