s20bet Privacy Policy

1 Information We Collect

s20bet collects personal data from users in order to provide, operate, and improve its platform and services. The information we collect falls into three broad categories: information you provide directly to us, information we collect automatically when you use the platform, and information we receive from third-party sources such as payment processors and identity verification providers.

Information You Provide Directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address — collected at the point of account creation.
• Identity verification documents: National Identification Card (NID), passport, driving licence, or other government-issued documents submitted during KYC verification.
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay numbers) and bank account details used for deposit and withdrawal transactions. s20bet does not store full card numbers or mobile banking PINs.
• Communications: Messages sent to s20bet via email, support chat, or feedback forms, including the content of those communications and any attached files.
• Preferences and settings: Responsible gaming limits, notification preferences, and language or display settings saved to your account.

Information Collected Automatically:

• Device and browser data: IP address, device type and model, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, click paths, and feature interactions within the s20bet platform.
• Transaction data: Deposit and withdrawal amounts, timestamps, payment method used, and transaction reference numbers generated by s20bet and third-party payment processors.
• Geolocation data: General location inferred from your IP address, used for fraud prevention and to verify that you are accessing the platform from a permitted jurisdiction.
• Cookies and similar technologies: Session identifiers, preference cookies, and analytics tokens. See the Cookies section below for full details.

Information from Third-Party Sources:

• Identity and age verification results from KYC service providers.
• Fraud risk scores and transaction verification signals from payment processors including bKash, Nagad, and Rocket.
• Publicly available information used to verify the accuracy of data you have provided to us.

2 How We Use Your Data

s20bet processes your personal data only for specific, legitimate purposes directly related to providing and improving our services to Bangladeshi players. We do not sell your personal data to any third party for their own marketing purposes. The table below summarises the primary purposes for which we process your data and the lawful basis for each:

Where s20bet processes your data on the basis of consent (for example, sending you promotional emails about new games or bonus offers), you have the right to withdraw that consent at any time by updating your notification preferences in your account settings or by contacting us at [email protected]. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

s20bet may also use aggregated, anonymised data — from which individual users cannot be identified — for internal research, performance benchmarking, and reporting purposes. This anonymised data is not subject to the same access and deletion rights as personal data, as no individual is identifiable from it.

3 Data Sharing and Disclosure

s20bet does not sell, rent, or trade your personal data with third parties for their own commercial or marketing purposes. We share your data only in the limited circumstances described below, and always under appropriate contractual or legal safeguards.

Service Providers and Sub-processors: We engage trusted third-party service providers to assist us in delivering the s20bet platform. These providers act as data processors on our behalf and are contractually bound to process your data only on s20bet's instructions and in accordance with this Privacy Policy. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners required to facilitate your transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age during the account verification process.
• Game software providers: Licensed studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe, which operate the games available on s20bet. These providers may receive anonymised session data required to deliver the game experience.
• Analytics and performance monitoring tools: Services used to monitor platform uptime, user experience, and performance metrics — all operating on anonymised or pseudonymised data wherever possible.
• Fraud detection and cybersecurity providers: Services that help s20bet identify suspicious activity, prevent unauthorised access, and protect platform integrity.

Legal and Regulatory Disclosures: s20bet may disclose your personal data to competent authorities, law enforcement agencies, regulators, or courts where required to do so by applicable law, legal process, or regulatory obligation. This includes disclosures required under anti-money laundering (AML) regulations, counter-terrorism financing frameworks, or court orders issued in relevant jurisdictions.

Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of s20bet's business, your personal data may be transferred to the acquiring entity as part of that transaction. s20bet will notify affected users of any such transfer via the email address registered to their account, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

4 Cookies and Tracking Technologies

s20bet uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and support our security systems. A cookie is a small text file placed on your device when you visit a website. Cookies allow us to recognise your browser across sessions and provide a consistent, personalised experience.

The cookies used on s20bet fall into the following categories:

You can manage or disable non-essential cookies at any time by adjusting the settings in your browser. Common browser cookie management paths include: Chrome → Settings → Privacy and Security → Cookies; Firefox → Options → Privacy & Security; Safari → Preferences → Privacy. Please note that disabling certain cookies may affect the functionality of the s20bet platform, including your ability to remain logged in or access certain features.

In addition to cookies, s20bet may use web beacons (also known as tracking pixels) in promotional emails and on-platform banners. These are small transparent images that help us understand whether an email was opened or a banner was viewed. You can prevent web beacons in emails from firing by disabling image loading in your email client.

5 Data Retention and Storage

s20bet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The specific retention periods we apply are as follows:

• Account data and KYC documents: Retained for the full lifetime of your account plus a minimum of 5 years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction records (deposits and withdrawals): Retained for a minimum of 5 years from the date of each transaction, as required by financial record-keeping obligations applicable to payment platforms operating in Bangladesh.
• Betting and gaming history: Retained for 3 years from the date of each wagering event, used for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for 3 years from the date of the last communication in a given support thread.
• Marketing preferences and consent records: Retained for the duration of your account plus 2 years, to maintain accurate records of consent and opt-out choices.
• Analytics and usage data (anonymised): May be retained indefinitely in anonymised, aggregated form as it no longer constitutes personal data once individual identifiers are removed.

Once the applicable retention period expires, your personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, s20bet ensures that re-identification is not technically feasible using available methods.

All personal data held by s20bet is stored on servers secured with industry-standard physical and logical access controls. Access to stored personal data is restricted to authorised s20bet personnel and contracted service providers who require it to perform their designated functions.

6 Security Measures

s20bet takes the security of your personal data seriously and maintains a layered security framework designed to protect your information from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL/TLS encryption: All data transmitted between your device and the s20bet platform is encrypted using 128-bit SSL/TLS protocols. This protects your account credentials, payment details, and browsing activity from interception in transit.
• Encrypted data storage: Sensitive data fields — including identity document details and payment identifiers — are stored in encrypted form at rest using AES-256 encryption standards.
• Access controls: Access to personal data within s20bet's internal systems is granted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their s20bet accounts. Internal staff systems require 2FA for all administrative access.
• Intrusion detection and monitoring: s20bet operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Regular security audits: The s20bet platform and its data handling processes are subject to periodic internal and third-party security reviews.

While s20bet implements robust technical and organisational security measures, no online platform can guarantee absolute security. You play an important role in protecting your own account by choosing a strong password, enabling 2FA, and promptly reporting any suspicious activity to [email protected].

7 Your Rights and Choices

As a user of the s20bet platform, you have a number of rights with respect to your personal data. s20bet is committed to honouring these rights promptly and transparently. Your rights include:

• Right of access: You may request a copy of the personal data s20bet holds about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update many of your account details directly via your account settings dashboard.
• Right to erasure ("right to be forgotten"): You may request that s20bet delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis applies. Note that erasure requests may be declined where we are required to retain data to meet legal or regulatory obligations (such as AML record-keeping requirements).
• Right to restriction of processing: You may ask s20bet to restrict how we use your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to s20bet processing your data where that processing is based on legitimate interests. You also have an unconditional right to opt out of direct marketing communications at any time.
• Rights related to automated decision-making: Where s20bet uses automated systems to make decisions that significantly affect you (for example, automated fraud risk assessments), you have the right to request human review of any such decision.

To exercise any of the rights listed above, please contact us at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request that involves access to or modification of personal data. Most requests are processed within 30 calendar days, though complex or high-volume requests may take up to 60 days with prior notice to you.

s20bet does not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case we will notify you in advance before applying any charge.

8 Contact and Data Queries

If you have any questions, concerns, or complaints regarding how s20bet handles your personal data, or if you wish to exercise any of your data rights, please contact the s20bet data team using the details below. All privacy-related communications should be sent to our support address with a clear subject line to ensure prompt routing to the appropriate team member.

s20bet Privacy Team
Email: [email protected]
Subject line for data requests: Data Rights Request
Subject line for privacy concerns: Privacy Concern
Response time: Within 5 business days for general queries; within 30 days for formal data rights requests.

s20bet reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. The date of the most recent update is shown at the top of this page. We recommend that you check this page regularly. Where changes are material, s20bet will notify registered users via email before the updated policy takes effect.

By continuing to use the s20bet platform after an updated Privacy Policy has been published and any required notice period has elapsed, you acknowledge and accept the revised terms. If you do not agree with any material change to this Privacy Policy, you should close your account by contacting us at [email protected] prior to the effective date of the change.

18+ Only. s20bet is an adult entertainment platform. For questions about responsible gaming data tools, please visit our Responsible Gaming page.