2bet Privacy Policy — Your Data, Your Rights, Our Responsibilities

01Introduction

This Privacy Policy explains how 2bet ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal information of players who register and use the 2bet platform. It applies to all services provided under the 2bet brand including the website at 2bet-bangla.com, the mobile platform, customer support channels, and any associated promotional communications.

By registering an account on 2bet, you confirm that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described here. If you do not agree with any part of this Policy, you should not register or continue to use the 2bet platform.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which contain additional information relevant to how your data may be used in specific contexts such as identity verification and responsible gaming interventions.

02What Personal Data We Collect

2bet collects personal data through several channels: directly from you when you register and use the platform, automatically through your device and browser interactions, and in limited cases from third parties such as payment processors and identity verification services.

Information you provide directly:

• Full legal name as it appears on your Pakistani CNIC or other identity document
• Date of birth (to verify you meet the 18+ age requirement)
• Pakistani mobile number (primary contact and authentication)
• Email address
• Physical address (for KYC verification and where required for PKR payment processing)
• CNIC number and copies of identity documents when KYC verification is requested
• Payment method details — the name associated with your Easypaisa, JazzCash, NayaPay, SadaPay, bank account, or card. 2bet does not store full card numbers; only the last four digits and card type are retained for reference purposes.
• Communications you send to 2bet support via live chat or email

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Betting and gaming activity including bets placed, games played, session duration, and cash-out decisions
• Login timestamps and session activity logs
• Cookies and similar tracking technologies (see Section 6 for full details)

Information from third parties:

• Identity verification results from KYC service providers (pass/fail status and any flagged discrepancies)
• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners
• Fraud and anti-money laundering screening results from compliance partners

03Why We Collect This Information

2bet only collects personal data for specific, legitimate purposes. We do not collect data "just in case" it might be useful later. Each category of data we collect has a defined purpose and a legal basis for processing. The main reasons we collect and process your personal data are:

• To operate your account: Your name, contact details, and payment information are necessary to create and maintain your 2bet account, process your PKR deposits and withdrawals, and communicate important account information to you.
• To verify your identity and age: Pakistani law and responsible gaming best practice require us to confirm that every 2bet player is a real person, is at least 18 years old, and is who they say they are. This is done through our KYC process using your CNIC or other accepted documents.
• To detect and prevent fraud: Your technical data, transaction history, and betting patterns are monitored by 2bet's fraud prevention systems to identify and block fraudulent activity including account takeovers, payment fraud, and multi-accounting.
• To comply with legal obligations: Anti-money laundering regulations require 2bet to maintain records of financial transactions and report suspicious activity to the Financial Monitoring Unit of Pakistan. We retain certain data for specified periods under these obligations regardless of account status.
• To provide customer support: When you contact 2bet support, we need access to your account information and communication history to assist you effectively.
• To improve the platform: Aggregated, anonymised usage data helps us understand how players use the platform and where improvements can be made. This data cannot be traced back to individual players.
• To send you relevant communications: Transactional communications (deposit/withdrawal confirmations, security alerts) are sent on the basis of contractual necessity. Promotional communications are sent only with your explicit consent, which you can withdraw at any time.

04How We Use Your Data in Practice

Understanding the purpose behind data collection is one thing; knowing how it actually gets used day-to-day is another. Here's a practical breakdown of how your data is used across the different parts of the 2bet platform:

When you register: Your name, CNIC, date of birth, mobile number, and email are used to create your account profile and to run a basic age and identity check. If further KYC verification is triggered (for example, when you request a large withdrawal), your submitted documents are sent to 2bet's identity verification partner, who returns a verification result. 2bet does not retain copies of your CNIC beyond the period required by applicable AML regulations.

When you deposit or withdraw PKR: Your payment method details are used to initiate and confirm the transaction with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card issuer). Transaction records are retained as part of your account history and for AML compliance. 2bet does not store full card numbers or full mobile money PINs at any point.

When you place bets or play games: Your gaming activity is logged automatically. This data is used for account history display, dispute resolution (in the rare event a bet settlement needs to be reviewed), responsible gaming monitoring (to identify patterns that may indicate problematic play), and aggregate platform analytics. Your individual gaming records are not shared with any third party except as required by law.

When you contact support: Chat logs and email correspondence are stored for up to 24 months. This is necessary to maintain continuity of support, to resolve any follow-up queries, and to use as reference in the event of formal complaints or disputes.

05Who We Share Your Data With

2bet does not sell, rent, or trade your personal data. We share data with third parties only in the following specific circumstances, and only to the minimum extent necessary:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking/card processing partners receive the transaction data necessary to process your deposits and withdrawals. These partners are bound by their own data protection obligations and by contractual agreements with 2bet.
• Identity verification partners: When KYC verification is required, document images are transmitted to our verification partner via an encrypted connection. The partner returns a verification result and is contractually prohibited from retaining or using your documents for any other purpose.
• Compliance and AML partners: Transaction data is screened against sanctions lists and AML databases by our compliance partner. No personal narrative data is shared — only structured transaction records.
• Game providers: When you play a third-party casino game on 2bet, the game provider receives a pseudonymous player identifier and bet/win data sufficient to run the game and return results. Game providers do not receive your name, CNIC, mobile number, or payment details.
• Regulatory and law enforcement authorities: 2bet will disclose personal data to the Financial Monitoring Unit of Pakistan, the Pakistan Telecommunication Authority, or other relevant authorities when required to do so by law, court order, or regulatory direction. We will not voluntarily disclose data to any authority without a valid legal basis.
• Professional advisors: In limited circumstances, our legal, accounting, or security auditing advisors may access account data under strict confidentiality agreements as part of their professional engagement with 2bet.

06Cookies & Tracking Technologies

2bet uses cookies and similar technologies to make the platform work correctly, to remember your preferences, to keep your session secure, and to understand how players use the site so we can improve it. The cookies we use fall into the following categories:

You can manage your cookie preferences through your browser settings. Disabling optional cookies will not affect your ability to place bets, deposit, or withdraw funds. Disabling essential or security cookies may prevent the 2bet platform from functioning correctly.

We do not use cross-site tracking cookies to follow your activity on websites other than 2bet. Our analytics are first-party only — data stays within the 2bet platform environment.

07How We Keep Your Data Secure

Security is not an afterthought at 2bet — it's a core operational discipline. The following measures are in place to protect your personal data and your PKR funds from unauthorised access, loss, or misuse:

• Encryption: All data transmitted between your device and 2bet servers is encrypted using TLS 1.3. Data stored on 2bet servers is encrypted at rest using AES-256. This means that even in the unlikely event of a server breach, stored data would be unreadable without the decryption keys.
• Access control: Only 2bet employees who need access to your data to perform their job functions can see it. Access is role-based, logged, and subject to multi-factor authentication. Former employees have access revoked immediately on the day their employment ends.
• Segregated funds: Your PKR balance is held in a bank account that is legally and operationally separate from 2bet's own operating funds. In the event of financial difficulties at 2bet, player funds cannot be used to meet operational costs.
• Two-factor authentication: 2bet offers two-factor authentication (2FA) for all player accounts via SMS OTP. We strongly recommend all players enable 2FA. It is mandatory for withdrawal requests above Rs 25,000.
• Penetration testing: 2bet commissions independent penetration testing of the platform's infrastructure and applications at least once per year. Critical findings are remediated within 72 hours; all other findings within 30 days.
• Incident response: In the unlikely event of a data breach that could affect player data, 2bet will notify affected players and relevant authorities within the timeframes required by applicable law and will provide clear guidance on any steps players should take.

08How Long We Keep Your Data

2bet retains personal data only for as long as is necessary for the purposes it was collected and to meet our legal obligations. The following retention periods apply:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised aggregate data (for example, overall platform usage statistics) may be retained indefinitely as it cannot identify any individual player.

09Your Privacy Rights as a 2bet Player

As a player whose personal data is processed by 2bet, you have the following rights. To exercise any of them, contact us via the details in Section 12.

We aim to respond to all data rights requests within 30 days. In complex cases we may extend this to 60 days — if this applies we will notify you within the first 30 days and explain why. All requests are free of charge for the first request per 12-month period; subsequent requests may be subject to a reasonable administrative fee.

10Children's Privacy

2bet operates a strict 18+ policy. The platform is not intended for, and should not be used by, anyone under the age of 18. We do not knowingly collect personal data from minors.

Age verification is a mandatory step in the 2bet registration process. If we become aware that a player account has been registered by or on behalf of a person under 18, we will immediately close the account, void any bets placed, and return any deposited funds to the original payment method — minus the value of any bonuses claimed. We will retain a record of the incident for compliance purposes.

If you are a parent or guardian and have reason to believe that a person under 18 in your care has registered an account on 2bet, please contact our support team immediately. We will investigate and take appropriate action as a priority.

11Changes to This Privacy Policy

2bet may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the 2bet platform for a minimum of 14 days before the changes take effect
• Send an email notification to all registered players with a summary of the key changes

Minor changes — such as clarifications that do not alter the substance of our data practices — may be made without advance notice. The version of the Privacy Policy displayed on this page is always the current, authoritative version.

Your continued use of the 2bet platform after the effective date of a policy update constitutes your acknowledgement of the revised policy. If you do not agree with a material change, you may close your account at any time by contacting our support team.

12Contact Us About Privacy

For any questions, concerns, or requests relating to your personal data and how 2bet handles it, please contact our Privacy team through the following channels:

• Email: support@2bet-bangla.com — mark your email "Privacy Request" in the subject line for fastest routing to the right team member.
• Live Chat: Available 24/7 on the 2bet platform. Our agents can handle most common privacy enquiries directly, or escalate to the Privacy team for complex requests.

We aim to acknowledge all privacy requests within 24 hours and to provide a full response or data access package within 30 days. If your request involves sensitive data categories or requires coordination with third-party partners, we may take up to 60 days — and will keep you updated throughout that process.

If you are unhappy with how 2bet has handled your personal data and our response to your complaint has not resolved the matter to your satisfaction, you have the right to raise the issue with the relevant data protection authority in Pakistan.