Privacy Policy — 786ber

786ber operates the online casino and sports betting platform accessible at https://786ber.app (the "Platform"). For the purposes of this Privacy Policy, 786ber acts as the data controller in respect of all personal data collected from players, prospective players, and visitors to the Platform.

This Privacy Policy applies to all personal data collected through: (a) the registration and account management process; (b) real-money deposits, withdrawals, and payment processing; (c) identity verification and Know Your Customer (KYC) procedures; (d) use of games, sports betting markets, and interactive Platform features; (e) customer support interactions via live chat, email, or other channels; (f) cookies and similar tracking technologies deployed on the Platform; and (g) marketing communications where you have opted in to receive them.

This Policy does not apply to third-party websites or services that may be referenced or linked from the Platform. 786ber is not responsible for the privacy practices of any third-party provider, and players should review the privacy policies of those services independently.

Acceptance: By registering an Account and using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an Account or use the Platform.

Changes to This Policy: 786ber reserves the right to update this Privacy Policy at any time. Material changes will be notified to registered players via the Platform's notification system or by email at least 7 days before the revised Policy takes effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

Registration Data: When you create a 786ber Account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish and manage your Account and to comply with identity verification requirements.

Identity Verification (KYC) Data: To comply with anti-money laundering (AML) obligations and to verify that you meet the minimum age requirement of 18 years, we collect copies of government-issued identity documents (such as your National Identity Card, passport, or driving licence), proof of address (such as utility bills or bank statements no more than three months old), and in some cases proof of payment method ownership (such as a screenshot of your bKash or Nagad account).

Financial Data: We collect records of all deposits, withdrawals, and wagers made through your Account, including the payment method used, transaction amounts, timestamps, and reference numbers. We do not store full card numbers or mobile banking PINs — payment processing is handled by certified payment partners who apply their own security standards.

Technical Data: When you access the Platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, session duration, pages visited, and clickstream data. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

Communications Data: If you contact 786ber's customer support team via live chat, email, or other channels, we retain a record of those communications, including the content of messages and any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

Marketing Preferences: Where you have opted in to marketing communications, we record your consent and your stated preferences regarding the types of promotions and offers you wish to receive. We also record any subsequent withdrawal of consent.

Responsible Gaming Data: We record any deposit limits, session time reminders, loss limits, or self-exclusion orders that you set through the responsible gaming panel. This data is retained for the duration of the limit or exclusion period and for a reasonable period thereafter to prevent circumvention.

The personal data collected by 786ber is used for the following purposes:

Account Management: To create, maintain, and administer your 786ber Account, including processing login authentication, updating account details, and managing account closure or suspension where required.

Identity Verification & Compliance: To verify your identity, confirm you meet the minimum age requirement of 18 years, and fulfil Know Your Customer (KYC) and anti-money laundering (AML) obligations. These processes are a legal requirement for operating a gambling platform and cannot be waived.

Payment Processing: To process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), including communicating transaction details to the relevant payment provider to complete the transaction.

Platform Operation & Improvement: To operate and continuously improve the Platform, diagnose technical issues, optimise game performance, personalise your user experience, and conduct internal analytics to understand how players use the Platform.

Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited practices. Technical data including IP addresses and device fingerprints plays a central role in our security monitoring systems.

Responsible Gaming: To administer deposit limits, session reminders, self-exclusion orders, and other responsible gaming tools that you set through the Platform. We also use aggregated behavioural data to identify patterns consistent with problem gambling and to offer proactive support where appropriate.

Customer Support: To respond to your queries, resolve disputes, and maintain a record of support interactions for quality assurance and regulatory compliance purposes.

Marketing (with consent): To send you promotional offers, bonus notifications, tournament invitations, and seasonal promotions — but only where you have actively opted in to receive such communications. You may withdraw your consent at any time.

Legal Obligations: To comply with applicable laws, respond to requests from regulatory authorities or law enforcement agencies, and enforce these Terms & Conditions and other platform policies.

In the course of operating the Platform, 786ber shares personal data with the following categories of third parties:

Payment Processors: Transaction data (including your account identifier, transaction amount, and payment method reference) is shared with your chosen payment provider — such as bKash, Nagad, Rocket, Upay, or your bank — solely to process deposit and withdrawal instructions. 786ber does not share your full identity documents with payment processors beyond what is required by the processor's own onboarding procedures.

Identity Verification Providers: To conduct KYC and AML screening, 786ber may use third-party identity verification services. These providers process document images and identity data under contractual data processing agreements and are permitted to use that data only for verification purposes on behalf of 786ber.

Game Providers: When you play a game provided by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — your account identifier and session data are shared with that provider to enable game functionality, calculate results using certified RNG technology, and settle winnings. Game providers do not receive your full identity documents or payment details.

Regulatory & Law Enforcement Authorities: 786ber will disclose personal data to regulatory bodies or law enforcement agencies where required to do so by applicable law, a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other serious harm.

Professional Advisers: In the course of managing our business, we may share personal data with legal advisers, auditors, or accountants, strictly on a need-to-know basis and under appropriate confidentiality obligations.

All third-party data processors engaged by 786ber are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond the specific service they provide to 786ber.

When you visit the 786ber Platform, small data files known as cookies are placed on your device. Cookies allow the Platform to recognise your device across pages, maintain your logged-in session, remember your language and display preferences, and collect aggregate analytics data to help us improve the Platform.

In addition to cookies, 786ber may use related technologies such as web beacons (transparent pixel images embedded in web pages), local storage objects, and session storage — all of which serve similar purposes to cookies in enabling Platform functionality and security.

Essential Cookies: These cookies are strictly necessary for the Platform to function. They enable secure login sessions, protect against cross-site request forgery, and preserve your account state as you navigate between pages. You cannot opt out of essential cookies without disabling the Platform entirely, as they are fundamental to its operation.

Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform — for example, which pages are visited most frequently and whether any error messages are encountered. This data is used solely to improve Platform performance and user experience. It is not linked to your identity.

Preference Cookies: These cookies remember your display settings (such as preferred currency display format) and personalisation choices so you do not have to reconfigure them on each visit.

Security Cookies: These cookies support 786ber's fraud detection and account security systems. They assist in identifying unusual login patterns, flagging activity from known high-risk IP ranges, and detecting the use of automated tools or bots.

Managing Cookies: Most web browsers allow you to control cookie settings through the browser's preferences menu. You may block or delete cookies at any time. However, blocking essential cookies will impair the Platform's functionality, and you may be unable to log in or access games. Detailed guidance on managing cookies in major browsers is available from the browser's official support pages.

The retention periods applied by 786ber reflect a balance between operational necessity, legal obligation, and the principle of data minimisation. The table below summarises the primary retention periods applied to each category of personal data:

Active Accounts: Personal data associated with an active Account is retained for the duration of the Account's existence. You may request Account closure at any time in accordance with the Terms & Conditions.

Post-Closure Retention: Following Account closure, 786ber retains certain categories of data for a defined period to comply with legal obligations, resolve disputes, prevent fraud, and respond to regulatory enquiries. Financial transaction records are typically retained for a minimum of 5 years following the last transaction, in line with standard anti-money laundering record-keeping requirements.

KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of 5 years following Account closure, in line with AML regulatory requirements. After this period, documents are securely destroyed.

Marketing Data: Records of marketing consent are retained for the duration of the consent plus a reasonable period thereafter to demonstrate compliance. Where consent is withdrawn, marketing communications cease immediately and the consent record is updated accordingly.

Support Communications: Customer support interaction records are retained for a minimum of 2 years from the date of the interaction, or longer where a dispute or regulatory enquiry is ongoing.

When personal data is no longer required and no legal retention obligation applies, 786ber takes steps to securely delete or anonymise that data in a manner that prevents reconstruction of identifiable records.

To exercise any of the above rights, please contact 786ber's support team via live chat or by emailing [email protected]. State clearly which right you wish to exercise and provide sufficient information to allow us to identify your Account. We will acknowledge your request promptly and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

Where a request is refused — for example, because complying would conflict with a legal obligation to retain the data — we will explain the reason for refusal and inform you of any available redress options.

The security of player personal data is a top operational priority at 786ber. We implement a combination of technical controls, organisational policies, and continuous monitoring to maintain a robust security posture.

Encryption: All personal data stored on 786ber's servers is encrypted at rest using AES-256 encryption. All data transmitted between your device and the Platform is encrypted in transit using TLS 1.3. Communications containing sensitive personal data (such as KYC documents shared with verification providers) are transmitted over encrypted channels only.

Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access control (RBAC) policies. Access to KYC documents and financial records is limited to personnel with a specific operational need, and all access events are logged for audit purposes.

Incident Response: 786ber maintains a documented data breach response procedure. In the event of a security incident involving personal data, our security team initiates a structured response to contain, investigate, and remediate the breach. Affected players will be notified without undue delay where the incident poses a high risk to their rights and freedoms, and the notification will include the nature of the incident, the categories of data affected, and the steps being taken to address it.

Penetration Testing & Audits: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited. Our payment integration points are tested against OWASP Top 10 vulnerability categories as a minimum standard.

Staff Training: All 786ber personnel who handle personal data receive mandatory data protection and security awareness training as part of their onboarding and on an ongoing annual basis. Phishing simulation exercises and security briefings are conducted regularly to maintain a security-conscious internal culture.

Your Role in Security: While 786ber implements strong technical and organisational safeguards, the security of your Account also depends on the strength and confidentiality of your login credentials. You are responsible for keeping your password secure, not sharing your Account credentials with any third party, and logging out of the Platform when using a shared device. If you believe your Account has been compromised, contact 786ber support immediately via live chat or at [email protected].