25taka Privacy Policy — How We Handle Your Data

1. Data Controller & Contact

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 25taka, operating the online casino and sports betting platform at 25taka.vip. When this document refers to "25taka", "we", "us", or "our", it means the entity operating this platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way your personal data is handled, please contact our support team via:

• Live chat: Available 24/7 directly on the 25taka platform;
• Email: [email protected] (plain text — not a clickable link).

We commit to responding to all privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6). For time-sensitive security concerns — such as suspected unauthorised access to your account — please use the live chat channel for an immediate response.

2. Personal Data We Collect

25taka collects personal data only where it is necessary for the legitimate operation of the platform. The categories of data we collect, and the circumstances in which they are collected, are set out below.

2.1 Data You Provide Directly

When you register an account or interact with the platform, you provide us with:

• Identity data: Full legal name, date of birth, gender, and national identity card or passport number (collected during KYC verification);
• Contact data: Email address, mobile phone number, and residential address including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi);
• Account credentials: Username and encrypted password — we never store passwords in plain text;
• Financial data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, or Visa/Mastercard card details (partial — full card numbers are never stored on our servers);
• Verification documents: Scanned or photographed copies of government-issued photo ID and proof of address, submitted during the KYC process;
• Communications data: The content of any messages you send to our support team via live chat or email.

2.2 Data Collected Automatically

When you access the 25taka platform, we automatically collect certain technical and behavioural data, including:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings;
• Usage data: Pages visited, games played, betting markets accessed, session duration, click paths, and feature interactions;
• Transaction logs: A complete record of all deposits, withdrawals, bets placed, game rounds, and bonus activations associated with your account;
• Geolocation data: Approximate geographic location derived from your IP address, used for regulatory compliance and fraud detection purposes. We do not collect precise GPS location data.

2.3 Data from Third Parties

In certain circumstances, 25taka receives personal data about you from third parties, including:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and card processing networks to verify the successful completion of deposits and withdrawals;
• Identity verification services: Where we use a third-party KYC or identity verification provider, that provider may supply the result of a document or identity check;
• Fraud and risk intelligence providers: Aggregated signals used to detect account takeover attempts, money laundering patterns, and multi-accounting behaviour.

3. How We Use Your Data

Every piece of data collected by 25taka is used for a specific, documented purpose. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary uses of your personal data are:

Purpose	Data Categories Used
Creating and managing your 25taka account	Identity data, contact data, account credentials
Processing deposits and withdrawals	Financial data, identity data, transaction logs
Age and identity verification (KYC)	Identity data, verification documents
Fraud detection and prevention	Device data, IP address, transaction logs, third-party risk signals
Providing customer support	Identity data, contact data, communications data, transaction logs
Responsible gaming monitoring	Usage data, transaction logs, self-exclusion records
Personalising platform experience	Usage data, device data, game history
Regulatory compliance and legal obligations	Identity data, financial data, transaction logs, verification documents
Platform security and technical operations	Device data, IP address, usage data
Sending service-critical communications	Contact data, account credentials

We do not use your personal data for unsolicited third-party marketing. Where 25taka sends promotional communications (such as bonus notifications or tournament alerts), these are sent only to players who have not opted out of marketing communications and relate exclusively to 25taka's own services. You may opt out of marketing communications at any time by updating your account preferences or contacting support.

4. Legal Basis for Processing

25taka processes your personal data on one or more of the following legal bases, depending on the activity:

• Contractual necessity: Processing required to perform the contract between you and 25taka — for example, creating your account, processing transactions, and resolving support requests;
• Legal obligation: Processing required for compliance with applicable laws — including anti-money laundering obligations, age verification requirements, and record-keeping requirements;
• Legitimate interests: Processing carried out for the legitimate operational interests of 25taka, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement;
• Consent: Where you have given specific, informed consent to a particular use of your data — such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Data Sharing & Third Parties

25taka does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your data is shared with third parties only in the following limited and documented circumstances:

5.1 Payment Processing Partners

To process deposits and withdrawals, 25taka shares the minimum necessary financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors. These partners are contractually bound to use your data solely for the purpose of processing your transaction and are not permitted to use it for any other purpose.

5.2 Game Studio Partners

When you play games powered by our studio partners — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — certain pseudonymised session data (a player reference ID, stake amounts, and game result data) is transmitted to those studios to operate the game. Your full identity data and contact details are not shared with game studios.

5.3 Identity Verification Providers

To conduct KYC checks, 25taka may engage a specialist identity verification service provider. Your name, date of birth, and the identification document you submit will be processed by that provider on our behalf, under a data processing agreement that restricts the provider from using your data for any purpose beyond fulfilling the verification request.

5.4 Legal and Regulatory Disclosures

25taka may be required by applicable law, court order, or regulatory directive to disclose your personal data to government bodies, law enforcement agencies, or financial intelligence units. In such cases, 25taka will comply with the legal obligation while endeavouring to limit the scope of disclosure to the minimum required. Where legally permissible, we will notify you of such a disclosure request.

5.5 Business Transfers

In the event that 25taka undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to the data controller's identity before the transfer takes effect.

6. Cookies & Tracking Technologies

The 25taka platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session between pages, to detect fraudulent activity, and to understand how players interact with the platform so that we can improve the user experience.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without disrupting the platform's operation;
• Functional cookies: Remember your preferences, such as your preferred language and display settings, so you do not need to re-enter them each visit;
• Analytical cookies: Collect pseudonymised data about how players use the platform — pages visited, time spent, and navigation paths. This data is used internally to identify areas for improvement;
• Security and fraud-prevention cookies: Store a device fingerprint used to detect suspicious login attempts, account takeovers, and multi-accounting behaviour.

6.2 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict certain categories of cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your 25taka account and using the platform. For all other categories of cookies, disabling them will not prevent you from using the platform but may affect certain functionality, such as saved preferences.

7. Data Retention Periods

25taka retains your personal data for as long as is necessary for the purpose for which it was collected, subject to any longer minimum retention periods required by applicable law. The general retention periods applied by 25taka are as follows:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations;
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction, consistent with financial record-keeping requirements;
• KYC verification documents: Retained for the duration of your account plus 5 years following closure. Original document images are deleted at the end of this period; verification outcome records are retained for a further period as required by applicable law;
• Support communications: Retained for 3 years from the date of the last communication in a support thread, unless the communication relates to a matter that is subject to ongoing legal proceedings;
• Analytical and usage data: Aggregated and anonymised after 24 months from collection. Raw session logs are retained for 12 months;
• Self-exclusion records: Retained indefinitely where a permanent self-exclusion has been applied, to prevent re-registration in breach of the exclusion.

When the applicable retention period expires, personal data is securely and permanently deleted from all 25taka systems and from any third-party processors acting on our behalf, in accordance with documented data destruction procedures.

8. Your Privacy Rights

As a player registered on the 25taka platform, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting the 25taka support team via live chat or by emailing [email protected] (use plain text — this address is not a clickable link).

• Right of access: You may request a copy of the personal data 25taka holds about you. We will provide this in a commonly used, machine-readable format within 30 days of receiving a verified request;
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct it. We will action corrections within 14 days;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing. Note that this right is subject to overriding legal obligations — for example, we are required to retain transaction records for a minimum of 5 years and cannot delete them on request during that period;
• Right to restrict processing: You may request that we limit the processing of your data to storage only — for example, while a dispute about the accuracy of your data is being resolved;
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider;
• Right to object: You may object to processing based on legitimate interests, including profiling carried out for responsible gaming monitoring. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

All rights requests will be acknowledged within 5 business days and fully responded to within 30 calendar days. Where a request is complex or involves a high volume of data, we may extend the response period by a further 30 days, in which case we will notify you of the extension and the reason for it.

9. Data Security Measures

25taka implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 25taka platform is encrypted using industry-standard TLS 1.2 or higher protocols. Sensitive financial data is subject to additional end-to-end encryption;
• Password hashing: Account passwords are stored as salted cryptographic hashes. 25taka staff cannot read your password in plain text and will never ask you for it;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members can only access the data categories required to fulfil their specific job function. All access is logged and audited;
• Intrusion detection: Automated systems monitor platform traffic around the clock for signs of unauthorised access attempts, unusual data queries, and other indicators of a potential security incident;
• Vulnerability management: Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities before they can be exploited;
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 25taka will notify affected players without undue delay and will take all reasonable steps to contain and mitigate the breach.

10. Updates to This Policy

25taka reviews this Privacy Policy periodically to ensure it accurately reflects how we handle personal data and remains consistent with any changes in applicable law or our operational practices. Material changes to this policy — those that meaningfully affect your rights or the way we use your data — will be communicated to you via the email address registered on your account at least 14 days before the change takes effect.

The effective date at the top of this document and the "Last Reviewed" date in the page header indicate when the current version entered into force. Previous versions of this Privacy Policy are available on request from the support team. Your continued use of the 25taka platform following the effective date of any amendment constitutes your acceptance of the updated policy.

If you disagree with any changes to this Privacy Policy, you should stop using the platform and request account closure before the updated policy takes effect. Account closure requests can be made at any time via the 25taka live chat support channel.