Pulibet Privacy Policy — How We Protect Your Data

Welcome to Pulibet. This Privacy Policy explains what information we collect, why we collect it, how we use it, and how we keep it secure. Pulibet believes your personal data is yours — we only collect what is necessary to provide our services, nothing more.

By using the Pulibet website or app, you agree to this Privacy Policy. We recommend reading it in full before registering — it's written in plain language and easy to follow.

Pulibet collects two types of data — information you provide directly, and data collected automatically as you use our services.

What You Provide Directly:

• At registration: name, date of birth, email address, mobile number, and password.
• For KYC verification: details and images from your national ID or passport.
• At payment: mobile banking number or bank account details.
• When contacting support: your messages and any attachments.
• When participating in promotions: information and preferences you submit.

Automatically Collected Data:

• Device Information: IP address, browser type, operating system.
• Usage data: pages visited, time spent on site, and buttons clicked.
• Transaction history: records of deposits, withdrawals, bets, and outcomes.
• Location: approximate location only (city/district level — not precise GPS).
• Cookies and tracking data (see the Cookies section for details).

Pulibet uses your data only for specific, defined purposes — never for anything beyond that.

Pulibet may send you promotional messages, but you can unsubscribe at any time. Important account notifications — such as transaction confirmations and security alerts — will always be sent regardless.

Pulibet does not sell your data to third parties. However, certain information may be shared in the following circumstances in order to operate our services:

• Payment Providers: Only the information strictly necessary to process transactions with bKash, Nagad, Rocket, and banks.
• Identity Verification Services: Identity document details shared with licensed verification providers for KYC processing.
• Cloud and Technology Services: Trusted cloud providers are used to operate our servers — they store the data but have no access to view it.
• Legal Authorities: Information required in response to a valid court order or lawful request from a regulatory authority.
• Fraud Prevention Agencies: Suspicious financial activity is reported in accordance with AML regulations.

Pulibet follows the highest industry standards to protect your data — security is enforced at both the technical and organizational levels.

Technical Safeguards:

• All communications are protected with 256-bit SSL/TLS encryption — bank-grade security.
• Sensitive data stored in our database is protected with AES-256 encryption.
• Passwords are stored using bcrypt hashing — no one can view them.
• Firewall, intrusion detection, and DDoS protection are all actively in place.
• Real-time threat monitoring is active 24/7.

Organisational Safeguards:

• A minimum necessary access policy is enforced for all staff.
• All staff receive privacy and data protection training.
• Regular third-party security audits (penetration testing) are conducted.
• In the event of a data breach, affected members will be notified within 72 hours.

Cookies are small text files stored in your browser. Pulibet uses different types of cookies — each serving a distinct purpose.

You can disable all non-essential cookies through your browser settings. Please note that doing so may affect certain features, such as saved preferences.

As a Pulibet member, you have the following rights regarding your personal data:

• Right to Access: You can find out what information is held about you.
• Right to Rectification: You may request corrections to any inaccurate information.
• Right to Erasure: You may request deletion of your data under certain circumstances.
• Right to Restrict Processing: You can object to how your data is being used.
• Right to Data Portability: You can export your data in a standard format.
• Right to Object: You can opt out of receiving marketing messages at any time.

To exercise this right, contact Pulibet's support team by email or live chat. Requests are typically responded to within 30 days.

Pulibet does not retain your data for longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Account Information: For as long as your account is active. Typically 5 years after closure (as required by law).
• Transaction Records: 7 Years — required for financial audits and tax-related legal obligations.
• KYC Documents: 5 years after account closure — in accordance with AML regulations.
• Support Messages: 1 year after the issue is resolved.
• Analytics Data: Indefinitely after anonymisation (no individual can be identified).
• Cookie Data: As per the expiry period of each individual cookie.

Pulibet is strictly for users aged 18 and above. We do not knowingly collect any information from individuals under the age of 18.

Age verification is mandatory at registration. If an underage account is identified, it will be suspended immediately and all associated data will be permanently deleted.

If you believe a minor is using Pulibet, please notify our support team immediately. We will treat the matter as a priority and resolve it promptly.

Pulibet may update this Privacy Policy when necessary. For significant changes:

• A notification will be sent to your registered email address.
• A notice will be displayed when you log in to the app.
• The "Last Updated" date at the top of the page will reflect any changes.

Minor updates (such as clarifications or spelling corrections) may not be announced separately. We recommend reviewing this page from time to time to stay informed.

For any questions about our Privacy Policy, to exercise your data rights, or to report a data breach, please contact us:

• Live Chat: 24/7 Bangla support available on the Pulibet website and app.
• Email: support@pulibet-baji.com (please include "Privacy" in the subject line for privacy-related inquiries).