How exbeat collects, uses, safeguards, and respects your personal data. Transparency is a core part of how we operate for every player in Bangladesh.
This Privacy Policy ("Policy") explains how exbeat ("exbeat", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the exbeat platform at exbeat.org (the "Platform"). This Policy forms part of the broader contractual relationship between you and exbeat and should be read alongside the exbeat Terms and Conditions.
exbeat is committed to handling your personal data with transparency, care, and security. We collect only the data we genuinely need to operate the Platform and deliver our Services, and we do not sell your personal information to third parties for commercial marketing purposes. This Policy is written in plain, formal English and is intended to be understood by all players using the exbeat platform from Bangladesh.
By creating an account on exbeat or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact support to close your account.
exbeat operates as an online casino and sports betting platform serving adult players in Bangladesh. In the course of providing our Services — which include live casino games, video slots, crash games, and cricket and sports betting markets — we necessarily collect and process certain personal data about our registered players and platform visitors. This is an inherent requirement of operating a responsible, secure, and compliant gaming platform.
The processing of personal data by exbeat is carried out in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We take our obligations to your privacy seriously and have implemented technical and organisational measures appropriate to the nature and sensitivity of the data we process.
This Policy applies to all personal data collected through the exbeat website, mobile browser interface, customer support channels, and any other touchpoints through which you interact with the exbeat platform. It does not apply to third-party websites or services that may be linked to from the Platform — although please note that exbeat does not include outbound external links in its standard page content.
exbeat collects several categories of personal data depending on how you interact with the Platform. The following table summarises the main data categories and examples of the specific data points within each:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Age verification, account registration, KYC compliance |
| Contact Data | Email address, mobile phone number, residential address | Account communications, support, notifications |
| Financial Data | bKash / Nagad / Rocket / Upay account references, transaction history, balance records | Payment processing, withdrawal verification, AML checks |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Fraud prevention, platform optimisation, security monitoring |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths | Platform improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer service, dispute resolution, quality assurance |
| Verification Documents | Scanned copies of national ID, passport, utility bills, payment method screenshots | Identity verification, age confirmation, fraud prevention |
We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless you voluntarily disclose such information during a responsible gaming self-assessment or a support interaction, in which case it is processed solely for the purpose for which it was shared.
exbeat collects personal data through the following primary channels:
exbeat processes your personal data for the following clearly defined purposes:
exbeat processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
exbeat does not sell, rent, or trade your personal data to unaffiliated third parties. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:
To process your deposits and withdrawals, exbeat shares transaction-level data with our payment processing partners, including bKash, Nagad, Rocket, and Upay. These partners receive only the data required to process the specific transaction and are contractually prohibited from using your data for any other purpose.
Casino game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, and Microgaming may receive a session token and account reference to authenticate you within their game environment. These providers operate under their own data protection frameworks and are independently certified. No personally identifiable financial data is shared with game providers.
When exbeat is required to verify your identity or age, we may engage a third-party KYC verification service to cross-reference the documents you submit. Such services receive only the data necessary to complete the verification check and are bound by confidentiality obligations.
exbeat may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or in connection with the investigation of financial crime. Such disclosures are made only to the extent legally required and, where permitted, you will be notified of such disclosure.
exbeat will never contact you requesting your password, full payment credentials, or one-time PINs. Any communication claiming to be from exbeat and requesting such information should be treated as fraudulent. Report it to [email protected] immediately.
The security of your financial data is a primary concern for exbeat. All payment transactions on the Platform are processed over encrypted connections using 256-bit SSL/TLS technology. exbeat does not store your full mobile banking credentials, one-time passwords, or PINs at any point in the transaction flow. Payment references stored by exbeat are limited to transaction identifiers and confirmation statuses necessary for financial record-keeping and dispute resolution.
exbeat's internal systems that hold financial records are access-controlled, with staff access granted on a strict need-to-know basis. All access events are logged and subject to periodic audit. In the event of a security incident affecting financial data, exbeat will notify affected players and take immediate remediation steps in accordance with our internal incident response procedure.
Players are advised to protect their own payment account credentials independently. exbeat strongly recommends enabling all security features available through your bKash, Nagad, Rocket, or Upay account, including PIN protection and transaction notifications, as an additional layer of security independent of exbeat's own controls.
exbeat uses a limited set of first-party cookies and similar technologies to operate the Platform effectively. We do not use third-party advertising cookies or cross-site tracking technologies. The cookies used by exbeat fall into the following categories:
You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling performance or functional cookies will not prevent you from using the Platform but may reduce the quality of your experience. exbeat does not respond to "Do Not Track" browser signals at this time, as no universally agreed standard for such signals currently exists.
exbeat retains your personal data for as long as your account remains active and for a defined period after account closure, as required by our legal and operational obligations. The following retention principles apply:
When personal data is no longer required for any legitimate purpose and the applicable retention period has expired, exbeat securely deletes or anonymises that data in a manner that prevents reconstruction of the original personal information.
As a data subject, you hold a number of rights in relation to the personal data exbeat holds about you. exbeat is committed to honouring these rights promptly and without undue obstruction:
To exercise any of the above rights, please contact the exbeat support team. We will verify your identity before processing any data subject request to ensure your data is not disclosed to an unauthorised party. We aim to respond to all verified requests within 30 days. Where a request is complex or numerous, this period may be extended by a further 30 days, and you will be informed of any such extension.
To submit a data subject request, email the exbeat support team at [email protected] (plain text — not a clickable link). Please include "Data Privacy Request" in the subject line and a brief description of your request. Our team will acknowledge receipt within 3 business days at Bangladesh Standard Time (BST, UTC+6).
The exbeat Platform is strictly intended for adults aged 18 and above. exbeat does not knowingly collect personal data from any individual under the age of 18. If you are under 18, you must not attempt to register an account or use any part of the exbeat Services.
If exbeat becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any funds held in that account will be handled in accordance with exbeat's underage account procedure. If you are a parent or guardian and believe that a minor in your care has provided personal data to exbeat, please contact the support team immediately so that we can take prompt action.
exbeat reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the scope of our Services. When material changes are made to this Policy, exbeat will notify registered players by email and by displaying a prominent notice on the Platform. The updated Policy will display a revised effective date at the top of the document.
We encourage players to review this Policy periodically to stay informed about how exbeat protects their personal data. Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the changes, you may close your account by contacting the support team, and any withdrawable balance will be returned to your registered payment method after identity verification.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way exbeat processes your personal data, please reach out to the exbeat support team. Our team is available 24 hours a day, 7 days a week, at Bangladesh Standard Time (BST, UTC+6).
Contact email: [email protected] (plain text — not a clickable link). For data subject requests, please include "Data Privacy Request" in the subject line. For general data enquiries, our support agents are available via the live chat function within your account dashboard.
exbeat is committed to resolving all privacy-related queries fairly and transparently. If you are not satisfied with the response you receive, you have the right to escalate your concern through the formal complaints process described in the exbeat FAQ, available at exbeat.org/faq.
Six concrete measures that define how exbeat handles your personal information every day — not just in policy, but in practice.
Every connection between your device and the exbeat platform is protected by industry-standard 256-bit SSL/TLS encryption. Your login credentials, payment references, and personal data are never transmitted in an unprotected state.
exbeat does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your information is used solely to operate and improve the Services you use on this platform.
Identity and age verification are core to exbeat's data collection process. We collect verification documents specifically to ensure that no player under the age of 18 is permitted to access or use any part of the exbeat Platform.
Internal access to personal and financial data is restricted to staff with a genuine operational need. All access events are logged and subject to regular audit to detect and prevent any unauthorised internal access.
This Policy clearly documents every category of data collected, every purpose for which it is used, and every third party with whom it may be shared. There are no hidden data practices at exbeat — what you read here is what we do.
exbeat actively supports your right to access, correct, delete, port, and restrict your personal data. Submit a request to [email protected] at any time and our team will respond within 30 days at Bangladesh Standard Time.
Now that you know how exbeat handles your data, discover the full range of games and betting markets available — cricket, slots, live casino, and more.