novibet Privacy Policy

1. Data Controller Information

novibet operates the online casino and sports betting platform accessible at https://novibet.vu (the "Platform"). For the purposes of this Privacy Policy, novibet acts as the data controller in respect of all personal data collected from players and visitors based in Bangladesh and other permitted jurisdictions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data novibet holds about you, please contact our dedicated data protection team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days.

This Privacy Policy applies to all personal data collected through: (a) the novibet website and any mobile-optimised version thereof; (b) the account registration and verification process; (c) deposits, withdrawals, and all financial transactions on the Platform; (d) customer support interactions via live chat and email; and (e) any marketing communications you have opted in to receive.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create a novibet account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, and phone number. We require this information to establish your identity, verify that you meet the minimum age requirement of 18 years, and maintain the account record that governs your use of the Platform.

2.2 Identity Verification Documents

As part of our mandatory Know Your Customer (KYC) process, we may request copies of government-issued identity documents. These may include your National Identity Card (NID), passport, or driving licence. We may also request proof of address, such as a recent utility bill or bank statement issued within the preceding 90 days. Document images are stored securely and processed solely for verification and regulatory compliance purposes.

2.3 Financial and Transaction Data

We collect details of all financial transactions you conduct on the Platform. This includes deposit amounts, withdrawal requests, payment method identifiers (such as your bKash wallet number, Nagad account reference, or Rocket account reference), transaction timestamps, and currency amounts in Bangladeshi Taka (৳ / BDT). We do not store full payment card numbers or mobile banking PINs.

2.4 Gaming Activity Data

We record your gaming activity on the Platform, including the games you play, bet amounts and outcomes, session duration, bonus utilisation, and responsible gaming interactions (such as deposit limit settings or self-exclusion requests). This data is used to deliver the Platform service, to comply with responsible gaming obligations, and to detect irregular or potentially fraudulent activity.

2.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical data. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used for security monitoring, fraud detection, platform performance optimisation, and aggregate analytics.

2.6 Communications Data

We retain records of communications between you and novibet, including live chat transcripts, email correspondence, and any feedback or complaints you submit. These records are used to resolve disputes, improve our customer service, and maintain an audit trail of account-related interactions.

3. How We Use Your Data

novibet processes personal data only for specific, documented purposes. The table below summarises the primary uses of the data we collect and the legal basis for each processing activity.

novibet does not use automated decision-making or profiling processes that produce legally significant effects for players without human review. Where automated tools are used for fraud detection or responsible gaming monitoring, any decision to restrict or close an account is reviewed by a member of our compliance team before action is taken.

4. Data Sharing & Disclosure

novibet does not sell, rent, or otherwise transfer your personal data to third parties for commercial gain. We share personal data only in the specific, limited circumstances described below.

4.1 Service Providers and Platform Partners

We engage carefully selected third-party service providers who assist in delivering the Platform. These include payment processing partners (bKash, Nagad, Rocket, and Upay), game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), identity verification service providers, cloud hosting and infrastructure providers, and customer support software vendors. All service providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

4.2 Regulatory and Law Enforcement Disclosure

novibet may be required to disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required by applicable law, a valid legal order, or where novibet has a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, terrorist financing, or other criminal activity. Where legally permitted, novibet will notify you of such a request before complying.

4.3 Business Transfers

In the event that novibet undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the privacy practices applicable to your data before the transfer takes effect, and your existing rights under this policy will be preserved.

4.4 Aggregate and Anonymised Data

novibet may share aggregate, anonymised, or statistical data with third parties — for example, with analytics providers or in published industry reports — where that data does not identify or enable the identification of any individual player. Such sharing does not constitute a disclosure of personal data for the purposes of this policy.

5. Cookies & Tracking Technologies

novibet uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. A cookie is a small text file placed on your device by a web server. Cookies cannot run programmes or deliver viruses, and they do not access other files on your device.

5.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They manage your login session, maintain your account authentication state, and protect the Platform against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without breaking core Platform functionality.

5.2 Performance and Analytics Cookies

We use first-party analytics cookies to understand how players interact with the Platform — for example, which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is collected in aggregate and used solely to improve the Platform experience. We do not use Google Analytics or similar third-party analytics services that transmit your data to external servers.

5.3 Preference Cookies

These cookies remember your Platform preferences, such as your language setting, selected currency display, and responsible gaming limit configurations. They improve your experience by ensuring the Platform presents itself consistently according to your saved preferences across sessions.

5.4 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling cookies may impair the functionality of the novibet Platform, including your ability to log in to your account. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and Edge.

6. Data Retention & Storage

novibet retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of your account and for a minimum of five years following permanent account closure.
• Financial transaction records: Retained for a minimum of seven years following the date of the transaction to satisfy anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure, or longer where required by applicable law or ongoing regulatory investigation.
• Customer support communications: Retained for three years from the date of the most recent interaction, unless the communication forms part of an ongoing dispute or legal proceeding.
• Technical log data: Retained for up to 12 months from collection, after which it is aggregated or securely deleted.
• Self-exclusion records: Retained permanently to ensure that a self-excluded player cannot be re-registered inadvertently.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures. Where data cannot be deleted immediately due to backup cycle constraints, it is isolated and protected from further active processing until deletion is completed.

7. Your Privacy Rights

You have a number of rights in relation to the personal data novibet holds about you. novibet is committed to honouring these rights promptly and without unnecessary obstruction. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Privacy Request".

• Right of Access: You have the right to request a copy of the personal data novibet holds about you, along with information about how it is processed. We will provide this information within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account profile page.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to overriding legal obligations, including our anti-money laundering record-keeping duties, which may require us to retain certain data regardless of your erasure request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request that we provide your personal data in a structured, commonly used, and machine-readable format, or that we transmit it directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing that is based on novibet's legitimate interests, including profiling for fraud detection purposes, unless novibet can demonstrate compelling legitimate grounds for the processing that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

novibet will not discriminate against you for exercising any of the rights listed above. We will not deny you access to the Platform, apply different pricing, or provide a lower quality of service as a result of a legitimate privacy rights request. If you are dissatisfied with our response to a privacy request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

8. Data Security Measures

novibet employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. While no system can guarantee absolute security, we continuously review and update our security practices to address evolving threats.

8.1 Technical Safeguards

All data transmitted between your device and the novibet Platform is encrypted in transit using 256-bit SSL/TLS protocols. Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption. Access to personal data within novibet's internal systems is restricted on a strict need-to-know basis and protected by multi-factor authentication for all staff members.

8.2 Organisational Safeguards

All novibet staff who handle personal data receive mandatory data protection training before being granted access to player data systems. We conduct regular internal security audits and penetration testing to identify and remediate vulnerabilities. Our incident response procedures ensure that any suspected data breach is identified, contained, and assessed within 72 hours of detection.

8.3 Reporting a Security Concern

If you believe that your novibet account has been compromised, or if you have identified a potential security vulnerability on the Platform, please contact us immediately at [email protected]. We will treat all security reports as high priority and respond within 24 hours.

8.4 Changes to This Privacy Policy

novibet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players by email to the address on their account at least 14 days before the changes take effect. The current version of this policy, with its effective date, is always available at https://novibet.vu/privacy-policy. Continued use of the Platform after the effective date of any revised policy constitutes your acceptance of the updated terms.