bsec Privacy Policy — How We Collect and Protect Your Data

Bsec collects two types of data — what you provide directly, and what is collected automatically as you use the platform.

Information You Provide Directly

• At registration: Full name, date of birth, email address, mobile number, and residential address.
• During KYC Verification: A copy of your National ID, passport, or driving licence, along with proof of address.
• At the Time of Payment: Mobile banking number or bank account details (card numbers are not stored directly by bsec).
• Support Contact Hours: What you write via chat or email.

Automatically Collected Information

• Your device type, operating system, and browser version.
• IP address and approximate location.
• How long you spent on the platform, which pages you visited, and which games you played.
• Transaction history — records of deposits, withdrawals, and bets.
• Cookie and session data (see Section 5 for details).

Bsec uses your information only for specific, defined purposes — all of which are clearly outlined below so you always know exactly where your data goes.

Bsec never sells your data to third parties for advertising. If you no longer wish to receive promotional emails, you can opt out at any time — this will not affect your regular service in any way.

Bsec's servers are hosted in internationally certified data centers. All servers undergo regular security audits and are operated in accordance with international data protection standards.

Data Retention Period

• While Your Account Is Active: All data is securely stored.
• After Account Closure: Financial transaction records are retained for up to 5 years to meet legal obligations.
• KYC Documents: Up to 7 years after account closure — as required under anti-money laundering regulations.
• Support Chat History: Up to 2 years.
• Marketing Information: You will be removed from marketing lists immediately upon opting out.

Once the applicable retention period has passed, bsec routinely purges outdated data in a secure, non-recoverable manner.

Bsec does not sell your data to third parties. However, in certain specific situations, certain data may need to be shared with specific parties. Each of these cases is set out transparently below.

When Information Is Shared

• Payment Processors: When processing transactions via bKash, Nagad, or a bank, relevant information is shared with the respective service provider. This is necessary to complete the transaction.
• Game Providers: When you play a game, the game provider (such as Pragmatic Play or Evolution) receives only the minimum data necessary to run the game.
• Fraud Prevention Services: Relevant information may be shared with specialist cybersecurity firms to investigate suspicious transactions.
• Legal Obligation: bsec may be required to disclose your information under a court order or at the request of a regulatory authority. Where possible, you will be notified in advance.

The bsec website and app use cookies. Cookies are small files stored in your browser that help recognise you on your next visit. We use three types of cookies.

To learn more about our cookies and find out which ones can be disabled, visit the "Cookie Preferences" section in Account Settings. Essential cookies cannot be turned off, as the site cannot function properly without them.

Bsec protects your information with multiple layers of security. Rather than relying on a single method, we have built a comprehensive security framework.

Technical Safeguards

• TLS 1.3 encryption on all connections — every piece of data between your browser and our servers is encrypted.
• Sensitive data stored in the database is encrypted with AES-256.
• Regular penetration testing — external specialists actively probe for vulnerabilities.
• Intrusion Detection System (IDS) active around the clock.
• Server access is restricted to authorized personnel only — two-factor authentication is mandatory.

Procedural Safeguards

• Bsec staff receive regular data protection training.
• Access to user data is restricted on a Need to Know basis.
• In the event of a data breach, affected users will be notified within 72 hours.
• Regular backups — protection against data loss.

You have several rights regarding your personal data at bsec. To exercise these rights, email privacy@bsec.im or reach out via live chat.

• Right to Know: You can request to see what data bsec holds about you.
• Right to Rectification: You have the right to request correction of any inaccurate or outdated information.
• Right to Erasure: Under certain conditions, you may request that your data be deleted (excluding data we are legally required to retain).
• Right to Restrict Processing: You can request that we stop using your data for specific purposes.
• Data Portability: The right to receive a copy of your data in a structured, portable format.
• Right to Object: You have the right to object to your data being used for marketing purposes.

Bsec will respond to requests within 30 days. For complex requests, additional time may be required, but you will be notified in advance.

This Privacy Policy may be updated from time to time. For any significant changes, you will be notified in advance via your registered email or a platform notification. You can always check the "Last Updated" date at the top of the page to confirm you're reading the latest version.

Privacy-Related Contact

• General Questions: support@bsec.im or Live Chat
• Data Requests or Complaints: privacy@bsec.im
• Urgent Security Issues: Contact Us via Live Chat Immediately

Bsec takes privacy complaints seriously. An initial response will be provided within 72 hours of receiving a complaint, and a final resolution will be communicated within 30 days.