bencal Privacy Policy

1. Introduction

bencal ("we", "us", "the Platform") is an online casino and sports betting platform serving registered players in Bangladesh. We are committed to protecting the privacy and personal data of every individual who registers, visits, or interacts with bencal at bencal.vip. This Privacy Policy ("Policy") describes what personal data bencal collects, the purposes for which it is used, how it is stored and protected, who it may be shared with, and the rights you hold in relation to your own data.

This Policy applies to all personal data collected through bencal.vip, including data collected during account registration, identity verification, deposits and withdrawals, game play, customer support interactions, and general browsing of the platform. It applies to all registered players and visitors regardless of their location within Bangladesh, including those accessing bencal from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Policy should be read alongside the bencal Terms & Conditions and Responsible Gaming policy. By creating a bencal account or by continuing to use the platform, you confirm that you have read and accepted this Privacy Policy in full.

2. Data Controller

For the purposes of this Policy, bencal is the data controller responsible for the personal data collected through bencal.vip. As data controller, bencal determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and complaints may be directed to the bencal data team at [email protected]. We aim to acknowledge all privacy-related correspondence within 48 hours and to resolve substantive requests within 10 business days.

3. Data We Collect

bencal collects personal data across several categories. The table below summarises the types of data collected and the context in which they are gathered:

bencal does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming or self-exclusion request, in which case it is treated with the highest level of confidentiality.

4. How We Collect Data

bencal collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or using responsible gaming tools.
• Automated technologies: Technical and usage data collected automatically as you navigate and interact with the platform, including via cookies, server logs, and session-tracking technologies. See Section 10 for full details of our cookie practices.
• Third-party sources: Identity and fraud-screening data may be received from third-party KYC and anti-money-laundering service providers where bencal engages them to assist with the verification of player identities. Payment processors may share transaction confirmation data with bencal to reconcile account activity.

5. How We Use Your Data

bencal uses personal data for the following purposes:

• Account management: Creating, maintaining, and closing player accounts; authenticating player identity at login; processing account settings and preferences.
• Identity verification and KYC compliance: Verifying that players are who they claim to be and that they meet the minimum age requirement of 18 years.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; reconciling transaction records; investigating disputed transactions.
• Platform delivery and improvement: Operating the casino and sports betting platform; optimising performance; identifying and resolving technical issues.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, collusion, unauthorised account access, and other prohibited conduct as defined in the bencal Terms & Conditions.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling; administering deposit limits, loss caps, cooling-off periods, and self-exclusion requests.
• Customer support: Responding to queries, resolving complaints, and communicating account-related information.
• Marketing communications: Sending promotional offers and platform updates to players who have opted in. Players may withdraw marketing consent at any time by contacting [email protected].
• Legal and regulatory compliance: Meeting applicable legal obligations including record-keeping requirements and responding to lawful requests from authorities.

6. Legal Basis for Processing

bencal processes personal data only where a valid legal basis exists. The primary legal bases applicable to bencal's processing activities are:

• Contractual necessity: Processing that is required to perform the contract between bencal and the player — including account registration, identity verification, and payment processing — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing carried out to comply with applicable legal requirements, including anti-money-laundering obligations and age verification requirements, is conducted on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is conducted on the basis of bencal's legitimate interests in operating a safe and compliant platform, where those interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out on the basis of the player's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Third Parties

bencal does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to process deposits and withdrawals on your behalf. These providers are bound by their own data protection obligations.
• KYC and identity verification providers: Third-party verification services may receive identity documents and personal details solely for the purpose of confirming player identity and age.
• Game technology providers: Casino game providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming may receive session data necessary to deliver their games on the bencal platform. No additional personal data beyond what is technically required is shared with these providers.
• Fraud and security services: Anti-fraud and cybersecurity partners may receive technical and usage data to assist in identifying and preventing fraudulent activity on the platform.
• Legal and regulatory authorities: bencal will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or valid legal process.

All third-party processors engaged by bencal are required to process personal data only on bencal's documented instructions and to maintain appropriate technical and organisational security measures.

8. Data Retention Periods

bencal retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of the account and for a period of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Identity verification documents: Retained for five (5) years following the date of verification or account closure, whichever is later.
• Transaction records: Retained for five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the support interaction.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent history.
• Technical and usage logs: Retained for up to twelve (12) months for platform security and fraud prevention purposes, then anonymised or deleted.

Where personal data is no longer required and no legal retention obligation applies, bencal will securely delete or anonymise that data so that it can no longer be attributed to an identified individual.

9. Security Measures

bencal implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and the bencal platform.
• Encrypted storage of sensitive account data including passwords (stored as salted hashes — never in plain text) and verification documents.
• Role-based access controls that restrict access to personal data to authorised personnel who have a legitimate need to access it for operational purposes.
• Regular security assessments and penetration testing of the bencal platform infrastructure.
• Secure payment tokenisation — bencal does not store full card numbers; card data is handled exclusively by PCI-DSS-compliant payment processors.
• Automated monitoring for suspicious login activity, including alerts for login from new devices or unusual locations.

No security system is entirely impenetrable. In the event of a data security incident that poses a risk to your personal data, bencal will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

10. Cookies & Tracking Technologies

bencal uses cookies and similar session-tracking technologies to operate the platform and improve the player experience. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in securely during your visit. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players use the platform — for example, which games are most popular and where technical errors occur. This data is used solely to improve platform performance and is not linked to individual identities.
• Fraud prevention cookies: Used to identify and block suspicious activity, including automated bots and account takeover attempts.

bencal does not use third-party advertising or behavioural tracking cookies. Most web browsers allow you to control cookie settings via the browser's privacy settings. Please note that disabling cookies may affect your ability to use certain features of the bencal platform, including maintaining a logged-in session.

11. Your Rights

As a bencal player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact bencal at [email protected]. Requests will be acknowledged within 48 hours and fulfilled within 10 business days where technically and legally feasible:

• Right of access: You may request a copy of the personal data bencal holds about you.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data held in your account.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, and where no legal retention obligation applies.
• Right to restriction: You may request that bencal restrict processing of your data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests. bencal will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.

12. Minors

bencal is strictly an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step in the bencal KYC process, and accounts found to be held by persons under 18 will be closed immediately and all associated personal data deleted, except where retention is required to document and report the underage access incident.

If you believe that a minor has registered on bencal, please contact us immediately at [email protected] so that we can take prompt action.

13. Changes to This Policy

bencal may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, bencal will notify registered players via a platform notification or by email to the address registered on your account, at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy and in the table of contents will be revised accordingly. Your continued use of bencal following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the platform and contact support to close your account.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bencal handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the bencal platform. Average response time under 5 minutes.
• Email: [email protected] (plain text — not a clickable link). Responses within 2–5 business hours for privacy-related enquiries.

We take all privacy enquiries seriously and are committed to resolving any concerns you may have regarding your personal data promptly and transparently.