Privacy Policy — roylebd

roylebd collects personal data from you in a number of ways depending on how you interact with the platform. We are committed to collecting only the minimum information required to fulfil the purposes described in this Privacy Policy. The categories of data we collect are set out below.

1.1 Registration & Account Data

When you create a roylebd account, we collect the following information:

• Full legal name as it appears on your national identity document
• Date of birth (to verify you are 18 years of age or older)
• Residential address in Bangladesh (city, district, postal code)
• Email address (used for account communications and verification)
• Mobile number registered to your bKash, Nagad, or other preferred payment method
• Username and hashed password (your password is never stored in plain text)

1.2 Identity Verification (KY C) Data

As part of our mandatory Know Your Customer (KYC) process, we may collect and store copies of the following documents:

• National ID Card (NID) or valid Bangladesh passport — front and back scans or photographs
• Proof of residential address (utility bill, bank statement, or official government correspondence dated within 90 days)
• Selfie photograph taken at the time of verification, which may be compared against your identity document photograph
• Payment method verification screenshot (e.g., bKash or Nagad account details confirming the mobile number matches your registered account)

KYC documents are processed by our internal compliance team and, where applicable, by our third-party identity verification partner. These documents are stored securely for the duration required by applicable anti-money-laundering regulations.

1.3 Transaction & Financial Data

Each time you make a deposit or request a withdrawal, we record the following:

• Transaction amount in Bangladeshi Taka (BDT)
• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, etc.)
• Transaction reference number and timestamp (Bangladesh Standard Time, UTC+6)
• Account balance before and after the transaction
• Any bonus or promotional credit applied to the transaction

1.4 Gameplay & Betting Data

roylebd maintains detailed records of all gaming and betting activity on the platform, including:

• Game sessions — title, provider, start time, end time, stake per round
• Sports betting markets — event name, selection, odds, stake, settlement outcome
• Win/loss records per session and cumulative account history
• Bonus wagering progress and completion records

This data is retained for audit purposes, dispute resolution, responsible gaming monitoring, and to comply with our obligations as a gaming operator.

1.5 Technical & Device Data

When you access the roylebd platform via any device (mobile, desktop, tablet), we automatically collect certain technical information:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, navigation flow, time on page, and feature interactions
• Session duration and login/logout timestamps
• Error logs and crash reports (used to improve platform stability)

1.6 Communications Data

If you contact our support team via live chat or email, we retain a record of that correspondence. This includes your enquiry, the support agent's responses, any attachments shared, and the date and time of the exchange. This data is used to resolve disputes, improve service quality, and for staff training purposes.

roylebd processes your personal data only where we have a lawful basis to do so. The primary lawful bases we rely on are: (a) performance of the contract between you and roylebd (i.e., operating your account and delivering gaming services); (b) compliance with legal obligations (KYC, anti-money-laundering, age verification); (c) our legitimate interests as a platform operator (fraud prevention, security, platform improvement); and (d) your consent, where explicitly given (e.g., marketing communications).

roylebd does not use automated decision-making or profiling processes that produce legal or similarly significant effects on individual players, except where strictly required by anti-fraud or responsible gaming obligations. Where such automated processes are used, you have the right to request human review of the decision.

We will never use your personal data to serve you third-party advertising for products or services unrelated to roylebd. Any marketing communications you receive from us will be directly related to roylebd promotions, bonuses, game releases, or seasonal events relevant to the Bangladesh market (such as Eid offers, BPL season promotions, or Victory Day specials).

roylebd does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each stated purpose.

3.1 Payment Processors

To process your deposits and withdrawals, we share transaction-relevant data (your registered mobile number, transaction amount, and reference number) with the payment providers you choose to use — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers operates under their own privacy policy and data security standards. roylebd is not responsible for the data practices of these third-party payment processors once data has been transmitted to them for transaction processing purposes.

3.2 Identity Verification Partners

For KYC compliance, we may transmit copies of your identity documents and verification photographs to a contracted third-party identity verification service. These partners are bound by strict data processing agreements that prohibit them from using your data for any purpose other than identity verification on behalf of roylebd.

3.3 Game Providers

When you play a game powered by a third-party provider (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, or others), a session token and anonymised player identifier are transmitted to that provider's servers to facilitate gameplay. No directly identifiable personal data (such as your full name or NID number) is shared with game providers in the ordinary course of gameplay.

3.4 Legal & Regulatory Authorities

roylebd may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent regulatory authorities where we are legally required to do so — for example, in connection with anti-money-laundering investigations, court orders, or other lawful demands. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that roylebd undergoes a merger, acquisition, reorganisation, or sale of substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you by email and/or by posting a prominent notice on the platform prior to your data being transferred and becoming subject to a different privacy policy.

roylebd uses cookies and similar technologies (including local storage, session storage, and pixel tags) to deliver and improve the platform experience. This section explains what cookies we use, why we use them, and how you can manage them.

Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. All major browsers (Chrome, Firefox, Edge, Safari, Opera, Samsung Internet) allow you to view, delete, and block cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to roylebd or accessing real-money games.

If you access roylebd on a mobile device using a browser (rather than a native app), the same browser-level cookie controls apply. We do not currently use app-level cookies on any native mobile application.

Third-party game providers may set their own session-specific cookies within the game frame. These cookies are governed by the respective provider's cookie policies and are outside roylebd's direct control. They are typically strictly necessary for game functionality and expire at the end of your session.

roylebd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.

When your data reaches the end of its applicable retention period, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised or aggregated data (which cannot identify you) may be retained indefinitely for statistical and platform improvement purposes.

Please note that data retention periods may be extended beyond the standard periods stated above if the data is subject to a legal hold, active investigation, regulatory inquiry, or ongoing dispute at the time the standard retention period expires. In such cases, the data will be retained until the relevant proceedings are concluded.

roylebd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security practices include the following.

• SSL/TLS Encryption in Transit: All data transmitted between your device and our platform servers is encrypted using TLS 1.2 or higher. This prevents interception of your credentials, financial details, or personal information during transmission.
• Encryption at Rest: Sensitive personal data and KYC documents stored on roylebd servers are encrypted at rest using AES-256 encryption.
• Password Hashing: Your account password is never stored in plain text. We use a salted cryptographic hashing algorithm so that even in the unlikely event of a database breach, your password cannot be recovered directly.
• Access Controls: Access to personal data on our internal systems is granted only on a strict need-to-know basis. Staff members with access to player data are bound by confidentiality obligations and undergo regular data-security training.
• Two-Factor Authentication (2FA): roylebd supports two-factor authentication on player accounts. We strongly encourage all players to enable 2FA to add an additional layer of protection against unauthorised login attempts.
• Penetration Testing & Vulnerability Scanning: Our platform undergoes regular security assessments including penetration testing and automated vulnerability scanning. Identified vulnerabilities are prioritised and remediated promptly.
• Fraud Monitoring: Our security systems monitor login activity, transaction patterns, and session behaviour in real time to detect and respond to suspicious activity. Accounts flagged as potentially compromised are suspended pending verification.

Reporting a Security Incident

If you believe your roylebd account has been accessed without your authorisation, or if you discover a security vulnerability on our platform, please contact our support team immediately via live chat. You should also change your password immediately and review your recent account activity for any unauthorised transactions. roylebd will investigate all reported security incidents promptly and will take appropriate action to mitigate any harm.

In the event of a personal data breach that poses a risk to your rights and freedoms, roylebd will notify affected players without undue delay, as required by applicable data protection obligations. The notification will include a description of the breach, the categories of data affected, and the steps taken or planned to address the breach.

roylebd reserves the right to update or amend this Privacy Policy at any time. We will notify registered players of material changes to this policy by sending a notification to your registered email address and/or by displaying a prominent notice on the platform for a period of at least 14 days prior to the changes taking effect.

Minor updates — such as corrections to wording, clarifications that do not change the substance of how your data is processed, or updates to reflect changes in applicable law — may be made without prior notice, but the "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We recommend reviewing this Privacy Policy periodically to stay informed of how roylebd protects your information.

Your continued use of the roylebd platform after the effective date of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact our support team to request account closure.

Contact Our Data Protection Team

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by roylebd, please contact us using the following details:

• Support Channel: 24/7 live chat on the roylebd platform
• Email (plain text — not a link): support@roylebd
• Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.