Privacy Policy for
extrabet
At extrabet, your privacy matters. This Privacy Policy explains in plain, formal terms exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and protect it, and what rights you hold over your own information. We encourage you to read this document carefully before creating an account or submitting any personal details.
Privacy at a Glance
Six foundational principles that govern every data decision we make at extrabet.
We collect only the minimum personal data required to register your account, process payments, verify your identity, and fulfil our legal obligations. We do not collect data speculatively or without a defined purpose.
All personal data stored by extrabet is protected through AES-256 encryption at rest and TLS 1.3 in transit. Access to player data is restricted to authorised personnel on a strict need-to-know basis.
extrabet does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing networks under any circumstances. Your data is used exclusively to operate your account.
We are transparent about every category of data we collect, the legal basis on which we process it, and how long we retain it. This policy is written in clear English and is updated whenever our practices change.
You have the right to access, correct, port, restrict, or request deletion of your personal data at any time. Submit a request to support@extrabet and we will respond within a reasonable period.
extrabet maintains data handling practices aligned with internationally recognised data protection standards. We conduct periodic internal audits to ensure ongoing compliance and accountability.
1. Data Controller Information
extrabet operates as the data controller for all personal information collected from players who register and use the platform. As data controller, extrabet is responsible for determining the purposes and means by which your personal data is processed, and for ensuring that such processing is carried out lawfully, fairly, and transparently.
If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact the extrabet data protection team directly at:
Data Protection Contact:
Platform: extrabet
Email: support@extrabet
Response Time: Within 10 business days of receiving your request
Language: English (all privacy-related correspondence is handled in English)
This Privacy Policy applies to all personal data collected through the extrabet website, mobile platform, support channels, and any other point of interaction between you and extrabet. It applies to all registered players and visitors, including those accessing the platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and all other regions of Bangladesh.
2. Personal Data We Collect
extrabet collects personal data through several distinct channels: during the account registration process, during the identity verification (KYC) process, during payment transactions, and automatically during your use of the platform. The categories of personal data we collect are described below.
2.1 Registration Data
When you create an account on extrabet, we collect the following information:
- Full legal name
- Date of birth (for age verification purposes — players must be 18 or above)
- Email address
- Mobile phone number (used for account verification and communication)
- Chosen username and password (password is stored in hashed form only; we never store plain-text passwords)
- Country of residence (Bangladesh for players using this platform)
2.2 Identity Verification (KYC) Data
Where identity verification is required — for example, before processing a withdrawal or following a request from our compliance team — we may collect:
- Government-issued photo identification (National Identity Card, passport, or driving licence)
- Proof of address (utility bill, bank statement, or similar document dated within the last 3 months)
- A selfie or live photo for facial verification purposes
- Evidence of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account details)
2.3 Payment Transaction Data
When you make a deposit or request a withdrawal, we record transaction-level data including the payment method used (bKash, Nagad, Rocket, or Upay), the transaction amount in Bangladeshi Taka (BDT), the transaction timestamp, and a reference identifier. extrabet does not store full mobile banking PINs or one-time passwords (OTPs). Payment processing is handled by the respective mobile financial service providers.
2.4 Technical and Usage Data
When you access and use the extrabet platform, we automatically collect certain technical data, including:
| Data Category | Examples | Purpose |
|---|---|---|
| Device information | Device type, operating system, browser version | Platform optimisation and fraud detection |
| IP address | Your internet-facing IP at the time of login | Geolocation verification and security monitoring |
| Session data | Login timestamps, session duration, pages visited | Security auditing and responsible gaming monitoring |
| Betting and gaming activity | Bets placed, games played, wager amounts, outcomes | Account management, bonus eligibility, and RG monitoring |
| Support communications | Live chat transcripts, support emails | Dispute resolution and service improvement |
3. Legal Basis for Processing
extrabet processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including operating your account, processing deposits and withdrawals, and awarding bonuses.
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age verification requirements, and record-keeping duties.
- Legitimate interests: Processing carried out to pursue legitimate business interests, such as fraud prevention, security monitoring, platform analytics, and responsible gaming compliance — provided such interests are not overridden by your rights and interests.
- Consent: Where we rely on your consent (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support@extrabet. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
Note on marketing communications: extrabet may send promotional emails or SMS messages to registered players who have opted in to receive such communications. You can opt out at any time by following the unsubscribe link in any marketing email or by contacting our support team directly.
4. How We Use Your Personal Data
extrabet uses the personal data we collect for the following specific purposes:
4.1 Account Operations
Your registration data is used to create and maintain your player account, authenticate you at login, and personalise your platform experience. We use your date of birth to enforce the 18+ age restriction that applies to all extrabet services.
4.2 Payment Processing
Transaction data is used to credit deposits to your account balance, process withdrawal requests to your registered payment method (bKash, Nagad, Rocket, or Upay), and maintain an accurate financial record of all account activity denominated in Bangladeshi Taka (BDT).
4.3 Identity Verification and Fraud Prevention
KYC documentation is used to verify your identity, confirm your age, and confirm your ownership of the payment method used for transactions. We also analyse account activity and technical data to detect and prevent fraudulent behaviour, bonus abuse, money laundering, and other prohibited activities described in our Terms & Conditions.
4.4 Responsible Gaming
We monitor player activity — including session frequency, deposit patterns, and wagering behaviour — to identify signs of problematic gambling. Where such signs are detected, we may contact you with responsible gaming information or apply account-level safeguards in accordance with our Responsible Gaming Policy.
4.5 Customer Support
Communications sent to our support team — including emails and live chat messages — are retained to enable us to resolve your query, maintain a record of any disputes, and improve the quality of our customer service. All support correspondence is handled in English.
4.6 Platform Improvement
Aggregated, anonymised technical and usage data is used to analyse platform performance, identify areas for improvement, and inform product development decisions. This data cannot be used to identify individual players.
5. Data Sharing and Third Parties
extrabet does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. We may share your data with carefully selected third parties only in the circumstances described below.
5.1 Payment Service Providers
When you make a deposit or withdrawal, your transaction data is shared with the relevant mobile financial service provider (bKash, Nagad, Rocket, or Upay) solely for the purpose of processing the payment. These providers operate under their own privacy policies and are responsible for the security of payment data within their systems.
5.2 Identity Verification Partners
Where automated KYC verification services are used, your identity documents and related data may be shared with a trusted third-party verification provider. All such providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of extrabet.
5.3 Game Content Providers
Certain technical session data (such as a pseudonymous player token and wager amounts) is shared with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — in order to deliver their game content within the extrabet platform. These providers do not receive your full personal profile and are contractually prohibited from using session data for independent marketing purposes.
5.4 Legal and Regulatory Disclosures
extrabet may disclose personal data to law enforcement authorities, regulatory bodies, or other government agencies where required to do so by applicable law, court order, or regulatory requirement. We will notify affected players of such disclosures where we are legally permitted to do so.
⚠️ Important: extrabet will never ask you to share your personal data with any party by calling or messaging you on unofficial channels. If you receive a communication claiming to be from extrabet and requesting sensitive personal information, treat it as fraudulent and report it to support@extrabet immediately.
6. Cookies and Tracking Technologies
extrabet uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to understand how players interact with the platform. This section explains what cookies we use and why.
6.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status and preferences — so that you do not have to re-enter them each time. Most web browsers accept cookies by default, but you can adjust your browser settings to refuse cookies or alert you when cookies are being sent.
6.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, prevent CSRF attacks, enable platform functionality | Session / until logout |
| Functional | Remember your language and display preferences | Up to 12 months |
| Analytical | Understand how players navigate the platform (aggregated, anonymised data) | Up to 24 months |
| Security | Detect suspicious login attempts and enforce rate limiting | Session |
6.3 Managing Cookies
You can manage or disable cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair the functionality of the extrabet platform and may prevent you from logging in or completing transactions. Disabling analytical cookies will not affect your ability to use the platform.
7. Data Retention Periods
extrabet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to meet our ongoing legal and regulatory obligations. The table below outlines the standard retention periods that apply to each category of data.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML compliance and regulatory record-keeping |
| KYC identity documents | Duration of account + 5 years post-closure | Regulatory obligations and fraud prevention |
| Transaction records | Minimum 5 years from transaction date | Financial record-keeping and AML compliance |
| Betting and gaming history | Duration of account + 3 years post-closure | Dispute resolution and responsible gaming audits |
| Support communications | 3 years from the date of the last communication | Dispute resolution and service quality review |
| Technical / session logs | Up to 12 months | Security monitoring and fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of lawful processing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in a manner that prevents reconstruction of the original data. If you request account closure before the end of a retention period, your data will be retained (in a restricted state) for the remainder of the legally required period and then deleted.
8. Your Privacy Rights
As a player on extrabet, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at support@extrabet with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We will respond within 10 business days.
8.1 Right of Access
You have the right to request a copy of all personal data that extrabet holds about you. We will provide this information in a clear, structured format. We may ask you to verify your identity before processing an access request to protect against unauthorised disclosure.
8.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay. You can update certain account details (such as your email address or phone number) directly within the account settings section of the platform.
8.3 Right to Erasure
You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that this right is not absolute — we may be required to retain certain data for regulatory or legal compliance purposes even after a deletion request, as described in Section 7.
8.4 Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of your data or object to our processing on the basis of legitimate interests. During a restriction period, we will continue to store your data but will not actively process it beyond what is required for storage.
8.5 Right to Data Portability
Where processing is based on your consent or on a contract, and where the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV). You may also request that this data be transmitted directly to another data controller where technically feasible.
8.6 Right to Object
You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have the right to object to the use of your data for direct marketing purposes at any time, without providing a reason.
How to submit a privacy rights request: Email support@extrabet with the subject line "Privacy Rights Request". Include your registered email address and a clear description of the right you wish to exercise. We will acknowledge receipt and respond within 10 business days. Identity verification may be required before we process your request.
9. Data Security Measures
extrabet takes the security of your personal data extremely seriously. We implement a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure.
9.1 Technical Safeguards
- Encryption in transit: All data transmitted between your device and the extrabet platform is encrypted using TLS 1.3 (Transport Layer Security). This ensures that data cannot be intercepted or read by unauthorised parties during transmission.
- Encryption at rest: Personal data stored in our databases is encrypted using AES-256 encryption. This means that even in the event of an unauthorised database access, the data cannot be read without the encryption keys.
- Password hashing: User passwords are never stored in plain text. They are processed using a one-way cryptographic hashing algorithm (bcrypt) with a unique salt for each password, making reverse-engineering computationally infeasible.
- Access controls: Access to production systems containing personal data is restricted to a small number of authorised personnel and is governed by role-based access control (RBAC) policies. All access is logged and audited.
- Intrusion detection: Our systems are monitored continuously for suspicious activity, including anomalous login patterns, unusual data access requests, and potential denial-of-service attempts.
9.2 Organisational Safeguards
- Regular staff training on data protection obligations and secure data handling practices.
- Periodic internal security audits and vulnerability assessments.
- A documented data breach response procedure, including a defined process for notifying affected players and relevant authorities in the event of a confirmed breach.
- Data processing agreements in place with all third-party service providers who handle personal data on behalf of extrabet.
⚠️ Your responsibilities: While we take every reasonable measure to protect your data on our end, you also play an important role in keeping your account secure. Use a strong, unique password, never share your login credentials, and contact support@extrabet immediately if you suspect your account has been compromised.
10. Updates to This Privacy Policy
extrabet reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or changes in the services we provide. When material changes are made to this policy, we will notify registered players via email and/or through a prominent notice on the platform prior to the changes taking effect.
The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. We encourage you to review this page periodically to stay informed of how we handle your personal data. The most current version of this policy will always be accessible at /privacy-policy on the extrabet platform.
Your continued use of the extrabet platform following the publication of any updates to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any updates to this policy, you may request account closure in accordance with the Account Closure section of our Terms & Conditions.
Questions about this policy? If you have any questions, concerns, or feedback about this Privacy Policy or about how extrabet handles your personal data, please contact our team at support@extrabet. We are committed to responding to all privacy-related enquiries within 10 business days. 18+ only — play responsibly.
Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how extrabet handles your personal data. You can also explore our FAQ or review our Responsible Gaming commitments. 18+ only.