colbet Privacy Policy

1. Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for the personal information of colbet Users is the colbet platform itself, operating under the domain colbet.org. All matters relating to data protection, access requests, correction requests, and deletion requests should be directed to the colbet data protection contact listed below.

colbet is committed to processing personal data in accordance with applicable data protection principles, including the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality. The Platform collects only the personal data that is strictly necessary to deliver its services, fulfil its legal obligations, and operate a safe and responsible gambling environment for players based in Bangladesh.

2. Information We Collect

colbet collects personal information from Users through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and from third-party payment providers and identity verification services. The categories of personal data collected by colbet are described below.

colbet does not knowingly collect personal data from individuals under the age of 18. If colbet becomes aware that personal data has been collected from a person under 18, that data will be deleted and the associated account will be closed immediately.

3. How We Use Your Data

colbet processes your personal data only for specific, legitimate purposes. The legal basis for each category of processing is identified below. colbet does not process personal data for purposes incompatible with those stated in this Policy without obtaining your prior consent.

• Account Creation and Management: Identity data, contact data, and financial data are processed to create and maintain your colbet account, verify your identity (KYC), and ensure account security. Legal basis: performance of a contract.
• Payment Processing: Financial data and transaction data are processed to facilitate deposits, withdrawals, and refunds via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer. Legal basis: performance of a contract.
• Regulatory Compliance and Anti-Money Laundering: Identity data, financial data, and transaction data are processed to meet legal obligations including age verification, KYC requirements, and anti-money laundering (AML) monitoring. Legal basis: legal obligation.
• Responsible Gaming: Usage data, transaction data, and responsible gaming data are processed to identify patterns of potentially problematic gambling behaviour and to make available appropriate intervention tools such as deposit limits, session limits, and self-exclusion. Legal basis: legitimate interest in protecting Users' wellbeing; legal obligation where applicable.
• Platform Security and Fraud Prevention: Technical data and usage data are processed to detect and prevent fraud, account takeovers, bot activity, and other security threats. Legal basis: legitimate interest in maintaining platform integrity.
• Customer Support: Communications data, identity data, and transaction data are processed to handle support enquiries, resolve disputes, and improve service quality. Legal basis: performance of a contract; legitimate interest.
• Marketing Communications: Contact data and usage data may be used to send you promotional communications about colbet offers, bonuses, and seasonal promotions (such as Eid promotions or BPL cricket betting specials) where you have provided your consent to receive such communications. You may withdraw this consent at any time by contacting support at [email protected]. Legal basis: consent.
• Platform Analytics and Improvement: Technical data and usage data are processed in aggregated, anonymised form to analyse player behaviour trends, improve platform features, and optimise the user experience. Legal basis: legitimate interest.

colbet will not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects without providing you with the opportunity to request human review of that decision.

4. Data Sharing and Disclosure

colbet does not sell your personal data to third parties under any circumstances. colbet may share your personal data with the following categories of recipients only to the extent strictly necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other payment partners receive limited financial data necessary to process your deposits and withdrawals. Each payment service provider operates under its own privacy policy and data processing terms.
• Identity Verification (KYC) Partners: Where third-party KYC verification services are used to authenticate a User's identity documents, the relevant identity data is shared with those providers solely for the purpose of completing the verification process.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive technical session data (such as a session token and game round ID) necessary to operate the game session. These providers do not receive your full identity or financial data.
• Legal and Regulatory Authorities: colbet may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or a regulatory investigation. colbet will notify affected Users of any such disclosure to the extent permitted by law.
• Professional Advisers: Legal advisers, auditors, and accountants may receive limited personal data as necessary to provide professional services to colbet, subject to appropriate confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of substantially all of colbet's assets, personal data held by colbet may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and any material change to data processing arrangements that results from it.

5. Cookies and Tracking Technologies

colbet uses cookies and similar tracking technologies on the colbet.org website to enable core platform functionality, remember your preferences, analyse site traffic, and support fraud prevention. By continuing to use the colbet platform after being presented with this Policy, you consent to the use of cookies as described below.

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to log into your account, navigate between pages, and use core features such as the cashier and live chat. These cookies cannot be disabled without impairing your ability to use the platform.
• Session Cookies: Temporary cookies that exist only for the duration of your browser session. They are deleted automatically when you close your browser. colbet uses session cookies to maintain your authenticated session and cart state during a visit.
• Persistent Cookies: Cookies that remain on your device for a set period after your session ends. colbet uses persistent cookies to remember your language preference, logged-in state (if you select "remember me"), and certain display preferences.
• Analytics Cookies: colbet uses privacy-respecting analytics tools to collect aggregated, anonymised data about how Users interact with the platform — including which pages are visited most frequently, average session duration, and device type breakdown. This data is used solely to improve the platform. Individual User identities are not linked to analytics data.
• Security Cookies: colbet uses security cookies to support fraud detection mechanisms, including the identification of unusual login patterns, multiple-account detection, and bot traffic filtering.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse some or all cookies, or to alert you when cookies are being set. Please be aware that disabling strictly necessary cookies will impair your ability to use the colbet platform. For further information on managing cookies, consult your browser's help documentation.

6. Data Retention Periods

colbet retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general framework:

After the applicable retention period has elapsed, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an individual. Where data is anonymised rather than deleted, the resulting anonymous data may be retained indefinitely for analytical purposes without restriction.

7. Your Rights Over Your Data

colbet respects your rights over your personal data. The following rights are available to all registered colbet Users in respect of their personal data held by the Platform:

• Right of Access: You have the right to request a copy of the personal data that colbet holds about you, along with information about how that data is being used. colbet will provide this information within 30 calendar days of receiving a valid request.
• Right to Rectification: If any personal data held by colbet is inaccurate or incomplete, you have the right to request that it be corrected. To update basic account information such as your mobile number or email address, you may do so directly within your account settings. For changes to identity documents or date of birth, please contact support.
• Right to Erasure: You may request that colbet delete your personal data in circumstances where the data is no longer necessary for the purpose for which it was collected, you have withdrawn your consent (where consent was the legal basis), or the data has been unlawfully processed. Please note that colbet may be unable to fulfil an erasure request in full where the data is required to meet a legal obligation — for example, transaction records required for AML compliance.
• Right to Restriction of Processing: You have the right to request that colbet restrict the processing of your personal data in certain circumstances, for example while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV) for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on colbet's legitimate interests, in which case colbet will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". colbet may request additional information to verify your identity before processing a data rights request. colbet will not charge a fee for handling data rights requests except in cases of manifestly unfounded or excessive repetition.

8. Data Security Measures

colbet employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your browser and the colbet platform is encrypted using industry-standard SSL/TLS protocols. You will see the padlock symbol in your browser address bar when accessing colbet.org, confirming that the connection is secure.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial account numbers, and password credentials — is stored in encrypted form. Passwords are hashed using a one-way cryptographic algorithm and are never stored or transmitted in plaintext.
• Access Controls: Access to personal data within the colbet organisation is restricted on a need-to-know basis. Only personnel with a legitimate operational need to access specific categories of personal data are granted access. Access privileges are reviewed regularly.
• Session Management: colbet enforces session timeout policies to protect your account from unauthorised access in the event that you leave a device unattended. Suspicious login attempts trigger additional authentication checks.
• Incident Response: colbet maintains an internal data breach response procedure. In the event of a data security incident that poses a risk to your rights and freedoms, colbet will notify affected Users as promptly as practicable and will take all reasonable steps to contain and remediate the incident.

Whilst colbet takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for notifying colbet immediately if you suspect unauthorised access to your account.