Indebet's Privacy Policy — Your data is safe with us

1. Introduction

Indebet is an international-standard online gaming platform serving Bangladesh and users across the globe. We believe your privacy is a fundamental right and protecting it is our responsibility. This Privacy Policy clearly sets out what data Indebet collects, why it is collected, and how it is used.

Indebet's Privacy Policy has been prepared in accordance with international GDPR guidelines and applicable local laws. We will never use your data without your permission and will always treat your privacy with the utmost respect.

This policy may be updated from time to time. For significant changes, Indebet will notify you by email or through an on-site notification.

2. What Information We Collect

Various types of data are collected when you create an account and use Indebet's services. Below is a detailed breakdown of what we collect:

3. How Your Information Is Used

Indebet uses the data it collects solely for specific, legitimate purposes. Our core principles for data use are transparency and minimal use.

• To create, manage, and verify accounts.
• To process deposits, withdrawals, and financial transactions.
• To provide customer support and resolve issues.
• To detect and prevent fraud, money laundering, and illegal activity.
• To improve Indebet's services and platform.
• To send personalized promotions and offers, where you have given consent.
• To meet legal obligations and the requirements of regulatory authorities.
• To conduct behavioral analysis and ensure responsible gaming.

4. Who Your Information Is Shared With

Indebet generally does not share your data with anyone. However, there are limited circumstances in which sharing with specific parties may be required:

• Payment Processor: bKash, Nagad, Rocket, and other payment gateways — solely to process transactions.
• KYC Verification Service: Designated partner for identity and address verification.
• Legal Authorities: Upon a court order or a lawful request from a government authority.
• Regulatory Authority: Information required by the regulatory authority to maintain our license.
• AML/CFT Authority: An agency dedicated to preventing money laundering and terrorist financing.

In all of the above cases, Indebet shares only the minimum data necessary and requires the relevant parties to adhere to the same privacy standards.

5. Data Security Measures

Indebet employs industry-leading technical and organizational measures to protect your data. Our security framework operates across multiple layers, so that if one layer fails, the others continue to keep your information safe.

• AES-256 and TLS 1.3 encryption — for data transfer and storage.
• Multi-Factor Authentication (MFA) — to secure account logins.
• 24/7 security monitoring and intrusion detection system.
• Regular penetration testing and vulnerability scanning.
• Regular data protection training for all staff.
• Least privilege principle applied to data access.

6. Cookie Policy

Cookies are used on the Indebet website to enhance your experience and ensure security. Cookies are small text files stored in your browser.

Types of cookies Indebet uses:

• Essential Cookies: Required for login sessions and site security. Disabling these cookies will prevent the site from functioning properly.
• Performance Cookies: Used to monitor site speed and performance.
• Functional Cookies: To remember your preferences, such as language and theme.
• Analytics Cookies: To analyze user behavior — in a non-personally identifiable manner.

You can control or delete cookies at any time through your browser settings. However, disabling certain cookies may limit some features on Indebet.

7. How Long Your Information Is Retained

Indebet retains your data only for as long as necessary. Retention periods vary depending on the type of data and applicable legal requirements:

After the specified retention period, Indebet will securely delete your data or anonymize it so that you can no longer be identified.

8. Your Rights

Under Indebet's Privacy Policy, you are entitled to the following rights. Indebet is always ready to assist you in exercising them:

• Right of Access: You can find out exactly what data Indebet holds about you.
• Right to Rectification: You can request corrections to any inaccurate or outdated information.
• Right to Erasure: In certain circumstances, you can request the permanent deletion of your data.
• Right to Restrict Processing: You can request that we stop using your data for specific purposes.
• Right to Portability: You can export your data in a machine-readable format.
• Right to Object: You can object to your data being used for marketing or profiling purposes.
• Right to Withdraw Consent: You can withdraw any consent you have previously given at any time.

9. Privacy of Minors

Indebet's services are intended exclusively for users aged 18 and above. We do not knowingly collect data from minors or allow them to create accounts.

Strict age verification is in place at the time of registration. If we become aware that a minor has created an account, it will be immediately closed and all collected data will be deleted.

10. Changes to the Privacy Policy

Indebet reserves the right to update this Privacy Policy as needed. Changes may occur due to legal updates, the addition of new services, or security improvements.

For significant changes, Indebet will:

• Sends a notification to your registered email address.
• Displays notifications on the website homepage.
• Notifies you at least 15 days before changes take effect.

Continued use of Indebet after any changes are made will be considered acceptance of the updated policy. We recommend visiting this page regularly.

11. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please contact Indebet's data protection team. Our Bengali-speaking support team is available 24/7, every day of the week.

• Email: [email protected]
• Live Chat: Get instant help from any page on the website.

Once a data protection complaint is submitted, Indebet will complete its investigation and communicate the outcome within 30 business days. For urgent matters, an initial response is typically provided within 72 hours.