Privacy Policy —
leonbet Bangladesh

1. Information We Collect

When you use leonbet — whether to browse the platform, register an account, place bets, or contact support — we collect certain personal data. The categories of information we collect, and the circumstances in which each category arises, are described below.

1.1 Information You Provide Directly

When you create a leonbet account or update your profile, you provide us with information including:

• Identity data: Full legal name, date of birth, gender (optional), and National Identity Card (NID) or passport number where required for KYC verification.
• Contact data: Email address, Bangladesh mobile number, and residential address (city, district, division).
• Account credentials: Username and hashed password. We never store your password in plaintext.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and card information (collected and tokenised directly by our payment processor — leonbet does not store raw card numbers).
• KYC documents: Copies of identity documents and proof-of-payment-method screenshots submitted during the verification process.
• Communications data: The content of messages sent to our support team via live chat, email, or any other contact channel.

1.2 Information Collected Automatically

When you access leonbet through any interface, our systems automatically collect certain technical and behavioural data:

• Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution, and time zone.
• Usage data: Pages visited, games played, bets placed (including stake amounts, selections, and outcomes), session duration, click paths, and feature interactions.
• Location data: Approximate geographic location derived from IP address. We do not use GPS or precise device location data.
• Cookie and tracking data: Session identifiers, preference cookies, and aggregated analytics data. See Section 5 for full details.

1.3 Information From Third Parties

In limited circumstances, we may receive personal data about you from third parties, including:

• Payment processors (such as bKash and Nagad) confirming transaction status and payer identity.
• Identity and age verification service providers used during the KYC process.
• Fraud detection and anti-money laundering screening services.
• Publicly available registers and sanctions lists checked as part of our compliance obligations.

2. How We Use Your Data

leonbet uses the personal data we collect for the following purposes. We process data only where we have a valid legal basis for doing so (see Section 3).

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, credential data	Contract performance
Processing deposits and withdrawals	Financial data, identity data	Contract performance
KYC and age verification	Identity data, KYC documents	Legal obligation
Fraud prevention and AML screening	Identity, financial, usage data	Legal obligation / Legitimate interest
Customer support	Communications, account data	Contract performance
Platform security and abuse prevention	Device, usage, IP data	Legitimate interest
Personalised game and promotion recommendations	Usage, preference data	Consent / Legitimate interest
Responsible gaming monitoring	Usage data, deposit/loss history	Legal obligation / Legitimate interest
Marketing communications (opt-in only)	Contact data, preference data	Consent
Platform analytics and improvement	Aggregated usage data	Legitimate interest

We do not use your personal data for automated decision-making that produces solely automated legal or similarly significant effects without human oversight, except where required for real-time fraud and sanctions screening — in which case a human review process is available upon request.

3. Legal Basis for Processing

leonbet processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing is necessary to fulfil the contract between you and leonbet — primarily the provision of betting and casino services, account management, and payment processing.
• Legal obligation: We are required to process certain data to comply with applicable laws and regulations, including anti-money laundering (AML) rules, know-your-customer (KYC) requirements, and responsible gaming obligations.
• Legitimate interests: We process certain data to pursue our legitimate business interests — such as preventing fraud, maintaining platform security, and improving our services — where those interests are not overridden by your rights and interests.
• Consent: For optional data uses such as marketing communications and personalised recommendations, we rely on your explicit opt-in consent. You may withdraw consent at any time by updating your notification preferences in your account settings or by contacting support@leonbet.

4. Data Sharing & Third Parties

leonbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following carefully controlled circumstances:

4.1 Service Providers

We engage third-party service providers who process personal data on our behalf to deliver operational services. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, fraud detection platforms, cloud hosting providers, and customer support tooling providers. All service providers are bound by data processing agreements that prohibit them from using your data for their own purposes and require them to implement appropriate security measures.

4.2 Game Content Providers

The casino and sportsbook games available on leonbet are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming, among others. When you play a game, limited gameplay data (such as session tokens and game outcomes) may be shared with the relevant game provider for the purpose of rendering the game and resolving disputes. These providers operate under their own privacy frameworks and do not receive your full identity or financial data from leonbet.

4.3 Legal and Regulatory Disclosures

We may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where we are legally required to do so — for example, in response to a court order, a legal process, or as part of our obligations under applicable AML regulations. In such cases, we disclose only the minimum data necessary to satisfy the legal requirement.

4.4 Business Transfers

In the event that leonbet undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide reasonable notice before your data becomes subject to a materially different privacy policy.

5. Cookies & Tracking Technologies

leonbet uses cookies — small text files placed on your device — and similar technologies such as local storage and session tokens to operate and improve the platform. The cookies we use fall into the following categories:

Cookie Category	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, remember your account state across page loads, and protect against cross-site request forgery (CSRF). These are essential for the platform to function.	No — required for operation
Functional / Preference	Remember your language preference, display settings, and responsible gaming tool configurations (e.g., active deposit limits).	Yes — via browser settings
Analytics	Collect aggregated, anonymised data about how users navigate the platform — such as most visited pages, session lengths, and common error paths — to help us identify areas for improvement.	Yes — via browser settings
Security / Fraud Detection	Fingerprint devices and detect unusual or suspicious access patterns to protect your account and the platform from fraudulent activity.	No — required for security

leonbet does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your browser's settings at any time. Note that disabling functional or analytics cookies may affect your experience of certain platform features.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, taking into account our legal obligations. The following retention periods apply as a general guide:

• Account data and KYC records: Retained for the duration of your account's active lifetime, plus a minimum of five years following account closure, in compliance with standard AML and financial record-keeping requirements.
• Transaction records (deposits and withdrawals): Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last communication in a support ticket, or longer where the communication relates to a dispute that has not been formally resolved.
• Usage and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Non-aggregated usage logs are retained for up to 12 months.
• Marketing consent records: Retained for the duration of the consent plus three years following withdrawal, to demonstrate compliance with consent obligations.

When a retention period expires, leonbet securely deletes or anonymises the relevant data using methods appropriate to the data type and storage medium. Where complete deletion is not immediately practicable — for example, in the case of encrypted backup archives — the data is isolated and flagged for deletion at the next scheduled backup rotation cycle.

7. Data Security

leonbet implements a layered approach to data security that encompasses technical, organisational, and procedural controls. Our security measures include, but are not limited to:

• Encryption in transit: All communications between your device and leonbet servers are encrypted using TLS 1.2 or higher, ensuring that data cannot be intercepted in transit.
• Encryption at rest: Sensitive data categories — including KYC documents, financial identifiers, and account credentials — are encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access controls: Access to personal data is restricted on a need-to-know basis. Internal staff members access only the data categories required for their specific role. All access is logged and subject to periodic audit.
• Vulnerability management: leonbet conducts regular penetration testing and security assessments of our platform infrastructure. Identified vulnerabilities are remediated according to their severity rating.
• Incident response: We maintain a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected users within a reasonable timeframe and take all necessary remediation steps.

8. Your Data Rights

As a user of leonbet, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our data team at support@leonbet with the subject line "Data Rights Request". We will respond within 30 days. Note that some rights are subject to legal limitations — for example, we cannot delete financial transaction records during their mandatory retention period.

• Right to access: You may request a copy of all personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct or complete it. You can update most account information directly via your account settings page.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will delete all data not subject to a legal retention obligation within 30 days of your request.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to leonbet directly (such as your account profile, transaction history, and communication preferences).
• Right to object: Where we process your data on the basis of legitimate interests, you may object to that processing. We will review and respond to objections individually. You may also object to direct marketing at any time, with no justification required.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of your data or have objected to processing — you may request that we restrict processing to storage only while the matter is resolved.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9. Children's Privacy

leonbet is strictly an adult platform. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. Our registration process requires users to confirm their date of birth, and all accounts are subject to age verification as part of the KYC process.

If we discover or are notified that personal data belonging to a person under 18 has been collected — through circumvention of our age verification measures — we will close the associated account immediately, delete the personal data in question, and forfeit any balance held in the account. If you are a parent or guardian and believe that your child has registered an account on leonbet, please contact us at support@leonbet immediately so that we can investigate and take appropriate action without delay.

10. Changes to This Policy

leonbet may update this Privacy Policy from time to time to reflect changes in our data practices, our services, or applicable law. When we make material changes — for example, introducing a new category of data collection or a new sharing arrangement — we will notify registered users via the email address associated with their account at least 14 days before the change takes effect.

Minor updates — such as clarifications of existing practices that do not alter the substance of the policy, or corrections to typographical errors — may be published without individual notification. The current version of this policy, including its effective date, is always available at /privacy-policy. We recommend bookmarking this page and reviewing it periodically. Continued use of the leonbet platform following the effective date of any revision constitutes your acknowledgement of the updated policy.

11. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way leonbet handles your personal data, please contact us using the details below. All data-related enquiries are handled by our support and compliance team, who are available 24 hours a day, seven days a week.

• Email: support@leonbet (use subject line "Privacy / Data Enquiry" for fastest routing)
• Live Chat: Available directly on the leonbet platform after login
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 days