becric Privacy Policy
Your Data. Your Rights. Our Obligations.

1 Introduction

This Privacy Policy ("Policy") describes how becric ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal information of registered players and visitors to becric.bid ("the Website") and any associated mobile applications or services. This Policy applies to all users based in Bangladesh and to any individual whose personal data is processed by becric in connection with the provision of its services.

By registering an account on the Platform, completing identity verification, making a deposit, or continuing to use the Website after this Policy has been updated, you acknowledge that you have read and understood its contents and that you consent to the processing of your personal data as described herein.

This Policy should be read together with the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the binding agreement between you and becric. Where any inconsistency exists between this Policy and any other document, this Policy shall prevail on all matters relating to the collection and processing of personal data.

2 Data Controller

For the purposes of this Policy, becric acts as the data controller in respect of all personal data submitted by users of the Platform. As data controller, becric determines the purposes for which and the means by which personal data is processed.

All enquiries, access requests, correction requests, deletion requests, and data-processing complaints should be directed to the becric data protection team at [email protected]. Contact details for data-related matters are also provided in Section 13 of this Policy.

3 Data We Collect

becric collects personal data through several channels: information you provide directly during registration and account management, information generated automatically through your use of the Platform, and information obtained from third-party service providers where necessary for verification or payment processing purposes.

3.1 Information You Provide Directly

• Registration data: Full name, date of birth, email address, mobile telephone number, and chosen username and password when you create a becric account.
• Identity verification documents: National identity card (NID), passport, driving licence, or other government-issued photographic identification submitted for Know Your Customer (KYC) purposes.
• Proof of address: Utility bills, bank statements, or other documents confirming your residential address in Bangladesh, submitted where required for enhanced verification.
• Financial information: Mobile financial service account details (bKash, Nagad, Rocket, Upay) or payment card details (Visa, Mastercard) submitted when making deposits or requesting withdrawals. Full card numbers are not stored by becric — payment card data is processed exclusively by our certified payment partners.
• Communications data: The content of any emails, live chat transcripts, or support tickets you submit to the becric customer support team.
• Responsible gaming data: Deposit limits, session limits, loss limits, and self-exclusion requests you submit through account settings or the support team.

3.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected when you access the Website.
• Usage data: Pages visited, games played, bet amounts and outcomes, session duration, navigation paths, and clickstream data collected through server logs and analytics tools.
• Cookies and similar technologies: Data stored in browser cookies, local storage, and session storage as described in Section 8 of this Policy.
• Location data: Approximate geographic location derived from your IP address, used to verify that you are accessing the Platform from an eligible location and to comply with geo-restriction obligations.

3.3 Information from Third Parties

• Identity verification partners: Results of automated identity and age verification checks conducted by third-party KYC service providers.
• Payment providers: Transaction status confirmations and fraud risk signals received from bKash, Nagad, Rocket, Upay, and card payment processors.
• Anti-fraud and AML services: Risk indicators and watchlist screening results provided by anti-money laundering and fraud detection service providers.

4 How We Use Your Data

becric processes personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which each category of data is used:

• Account creation and authentication: Identity and contact data are used to create your account, verify your identity, and allow secure access through login procedures.
• Age and eligibility verification: Identity and document data are used to confirm that you are aged 18 or above and that you meet the Platform's eligibility requirements.
• Payment processing: Financial data is used to process deposits and withdrawals via supported payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
• Anti-money laundering (AML) compliance: Financial and identity data are used to detect, investigate, and report suspicious transactions in accordance with applicable AML obligations.
• Fraud prevention and platform security: Technical and usage data are used to detect fraudulent activity, bot usage, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Customer support: Communications data is used to respond to enquiries, resolve disputes, and provide account assistance.
• Responsible gaming monitoring: Usage and responsible gaming data are used to monitor for signs of potentially harmful gambling behaviour and to apply limits or restrictions where appropriate.
• Platform improvement and analytics: Aggregated and anonymised usage data is used to understand how players use the Platform and to improve the quality and functionality of the services offered.
• Marketing communications: Contact data is used to send promotional emails, SMS messages, and push notifications to players who have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: All categories of data may be retained and disclosed as required to comply with applicable legal obligations, respond to lawful regulatory enquiries, or enforce the Terms & Conditions.

5 Legal Basis for Processing

becric processes your personal data on the following legal grounds depending on the purpose of processing:

• Contractual necessity: Processing required to create and manage your account, process financial transactions, and provide the services you have requested under the Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, responsible gaming monitoring, and the improvement of Platform services, where such interests are not overridden by your rights and interests.
• Consent: Processing of data for marketing communications, and the placement of non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

becric does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared with the following categories of recipients only where necessary and only to the extent required for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card payment processors receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity and KYC verification partners: Third-party identity verification providers receive the personal and document data necessary to conduct age and identity checks on behalf of becric.
• Fraud prevention and AML service providers: Anti-fraud and anti-money laundering service providers receive transactional and identity data required to screen for suspicious activity and sanctions watchlist matches.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymous player identifiers (not your full name or contact details) necessary to deliver and personalise game content within the Platform.
• Analytics and technology providers: Platform analytics and infrastructure providers may receive aggregated and/or anonymised technical and usage data for the purpose of monitoring Platform performance and improving the user experience.
• Regulatory and law enforcement authorities: becric may be required by law to disclose personal data to government bodies, regulators, or law enforcement agencies. Such disclosures will be made only to the extent required by applicable law and, where possible, after notifying you, unless notification is prohibited by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of becric's business, personal data held by the Platform may be transferred to the acquiring entity. You will be notified of any such transfer via the registered email address on your account before your data is subject to a different privacy policy.

7 Data Retention

becric retains personal data for no longer than is necessary for the purposes for which it was originally collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8 Cookies and Tracking Technologies

becric uses cookies, web beacons, pixel tags, local storage, and similar tracking technologies on the Website. These technologies help us deliver a functional and personalised experience, measure Platform performance, and maintain security. The categories of cookies used by becric are as follows:

• Strictly necessary cookies: These cookies are essential for the Website to function. They enable core features such as secure login sessions, navigation between pages, and shopping cart functionality. These cookies cannot be disabled without impairing your use of the Platform.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the Website — for example, which pages are visited most frequently and whether users encounter error messages. This data is used to improve the Platform's performance and usability. Your consent is obtained before these cookies are placed.
• Functional cookies: These cookies allow the Website to remember choices you make (such as your preferred language or display settings) and provide enhanced, personalised features. Disabling these cookies may affect the quality of your experience.
• Marketing and targeting cookies: These cookies are used to deliver promotional content that is relevant to your interests, to limit the frequency with which you see a particular advertisement, and to measure the effectiveness of marketing campaigns. These cookies are placed only where you have provided prior consent.

You can manage cookie preferences through your browser's settings menu. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of certain Website features. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

9 Data Security

becric implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the becric servers is encrypted using Transport Layer Security (TLS) protocols. The padlock icon displayed in your browser address bar confirms that your connection is encrypted.
• Access controls: Access to personal data held on becric systems is strictly limited to authorised personnel whose role requires access for legitimate operational purposes. All internal access is subject to role-based access controls and is logged for audit purposes.
• Password security: User account passwords are stored in a hashed and salted form. becric does not store passwords in plain text, and support staff cannot retrieve your password — they can only reset it through a verified identity process.
• Regular security assessments: becric conducts periodic security reviews, vulnerability assessments, and penetration testing to identify and remediate security weaknesses in its systems.
• Incident response procedures: becric maintains documented procedures for responding to personal data breaches. In the event of a security incident that materially affects your personal data, becric will notify affected users via their registered email address within a reasonable timeframe of becoming aware of the incident.

While becric takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. Players are encouraged to use strong, unique passwords for their becric account and to notify [email protected] immediately if they suspect any unauthorised access to their account.

10 Your Rights

As a player whose personal data is processed by becric, you hold the following rights in relation to your personal information. To exercise any of the rights listed below, please contact the becric data protection team at [email protected] with a clear description of your request and sufficient information to allow becric to verify your identity.

• Right of access: You have the right to request a copy of the personal data becric holds about you, together with information about how it is being processed. becric will respond to access requests within a reasonable period.
• Right to rectification: If any personal data held by becric is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where you object to processing and becric has no overriding legitimate grounds. Erasure requests will be fulfilled subject to becric's legal retention obligations — data required to be retained under AML or financial regulations cannot be deleted until the applicable retention period has expired.
• Right to restrict processing: You may request that becric restrict the processing of your data in certain circumstances, for example while a correction request is being investigated, or pending the outcome of an objection.
• Right to object: Where becric processes your data on the basis of legitimate interests, you have the right to object to that processing. becric will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: Where technically feasible and where processing is based on consent or contract, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.

11 Minors and Age Restriction

The becric Platform is strictly intended for adults aged 18 years and above. becric does not knowingly collect, process, or retain personal data relating to individuals under the age of 18. The registration process includes an age declaration and is supported by automated and manual age verification procedures.

If becric becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any funds deposited will be returned through the original payment method following appropriate verification. Any winnings accrued by a player subsequently found to be under 18 will be forfeited in full.

Parents and guardians who believe that a minor in their care has registered an account on becric are urged to contact the support team at [email protected] immediately so that the matter can be investigated and resolved without delay.

12 Changes to This Policy

becric reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing, a new category of data sharing, or a significant change to your rights — we will notify you via the email address registered to your account and will display a prominent notice on the Website prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent amendments came into effect. We encourage you to review this Policy periodically to remain informed about how becric is protecting your personal information. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of those changes.

13 Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to becric's processing of your personal data, please contact the data protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request" or "Data Protection" in your subject line to ensure your message is directed to the appropriate team member.
• Live Chat: Available inside your becric account dashboard after login — for general support queries
• Support Hours: 8:00 AM – 11:00 PM Bangladesh Standard Time (BST, UTC+6), every day

When submitting a data-related request, please include your registered username, a description of your request, and a copy of a valid identity document so that becric can verify your identity before processing the request. Do not include your account password in any communication.