Privacy Policy — yesb

2.1 Data You Provide Directly

When you register a yesb account, interact with our support team, or use any feature of the platform, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and national identity (NID) number or passport number (collected during account verification).
• Contact Data: Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh), mobile phone number, and email address.
• Financial Data: Registered mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, and transaction history on the yesb platform. Card numbers for Visa and Mastercard are processed exclusively through the card provider's encrypted gateway and are not stored by yesb.
• Account Credentials: Username and encrypted password hash. yesb never stores your password in plain text.
• Support Correspondence: Any messages, complaints, or documents you submit to yesb's support team via email or live chat.

2.2 Data Collected Automatically

When you access the yesb platform, our systems automatically collect certain technical and behavioural data, including:

• Device and Access Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage Data: Pages visited, games played, bets placed, session duration, click-path data, deposit and withdrawal activity, and bonus redemption history.
• Cookie Data: Identifiers stored in cookies or similar technologies on your device. See Section 5 for full details on our cookie practices.
• Geolocation Data: Approximate location derived from your IP address, used to confirm that you are accessing the platform from Bangladesh and to comply with applicable access restrictions.

2.3 Data From Third Parties

In certain circumstances, yesb may receive personal data about you from third-party sources, including: identity and address verification service providers used during the KYC (Know Your Customer) process; payment processing partners such as bKash, Nagad, and Rocket, who may confirm transaction status and account ownership; and fraud detection and anti-money-laundering screening services. Data received from third parties is handled with the same level of care as data collected directly.

yesb uses the personal data we collect for the following purposes:

3.1 Account Management and Platform Access

We use your identity and contact data to create and maintain your yesb account, authenticate your identity when you log in, and enable you to access all features of the platform including deposits, gameplay, withdrawals, and promotional offers.

3.2 Identity Verification (KYC)

yesb is required to verify the identity of all players before processing withdrawals and for players who reach certain deposit thresholds. We use the identity and financial data you provide — together with outputs from our third-party KYC service providers — to confirm that you are who you say you are, that you are aged 18 or above, and that the payment methods you use belong to you.

3.3 Processing Transactions

Your financial data, including your registered bKash, Nagad, Rocket, and Upay account details, is used solely to process deposits and withdrawals on your behalf. yesb does not store card credentials; those are processed exclusively within the relevant card network's PCI-DSS compliant gateway.

3.4 Responsible Gaming Compliance

yesb uses your behavioural and usage data — including deposit patterns, session frequency, and loss history — to identify players who may be exhibiting signs of problem gambling. Where such indicators are detected, yesb may take proactive steps including applying protective limits, reaching out via support, or triggering the self-exclusion review process, in accordance with our Responsible Gaming Policy.

3.5 Fraud Prevention and Security

Technical and behavioural data — including IP addresses, device fingerprints, and transaction patterns — is analysed to detect and prevent fraud, money laundering, bonus abuse, multiple-account creation, and other prohibited conduct as defined in the yesb Terms & Conditions.

3.6 Customer Support

When you contact yesb support, we use your account data and correspondence history to understand the context of your query, resolve your issue efficiently, and maintain a record of communications for quality assurance and dispute resolution purposes.

3.7 Marketing Communications

With your consent, yesb may send you promotional communications by email or SMS about new games, bonuses, seasonal offers (such as Eid promotions or Pohela Boishakh specials), and platform updates. You may withdraw your marketing consent at any time by contacting support at [email protected] or by updating your communication preferences within the account settings panel. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before that withdrawal.

3.8 Legal and Regulatory Obligations

yesb retains certain transaction and identity records to comply with applicable anti-money-laundering (AML) obligations, financial record-keeping requirements, and to respond to lawful requests from regulatory and law enforcement authorities.

yesb processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between yesb and the player — including account creation, gameplay, deposits, and withdrawals.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML record-keeping, identity verification requirements, and responses to lawful regulatory requests.
• Legitimate Interests: Processing carried out in the legitimate interests of yesb or third parties, including fraud detection, platform security, responsible gaming monitoring, and the improvement of platform features — provided those interests are not overridden by your data-protection rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — in particular, the sending of marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

yesb uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, and analyse how players interact with the site. The categories of cookies used on the yesb platform are as follows:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage or delete functional and analytics cookies through your browser settings; however, doing so may affect your experience on the yesb platform. Please refer to your browser's help documentation for instructions on managing cookie preferences.

yesb does not use cookies to deliver third-party advertising or to track your activity on websites other than yesb.win.

yesb does not sell your personal data to any third party. We may share your data only in the following limited circumstances:

6.1 Payment Processing Partners

To process deposits and withdrawals, yesb shares the minimum necessary financial data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or SureCash). Each payment partner operates under its own privacy policy and data protection obligations. yesb is not responsible for the data practices of payment partners once data has been transmitted to their systems.

6.2 Identity Verification and KYC Providers

yesb works with accredited third-party identity verification providers to carry out KYC checks. These providers receive the identity documents and personal data you submit during the verification process solely for the purpose of confirming your identity and age. They are contractually prohibited from using your data for any other purpose.

6.3 Fraud Prevention and Security Services

Technical identifiers — such as anonymised device fingerprints and IP-based risk scores — may be shared with specialist fraud-detection services to protect the integrity of the yesb platform and its player community.

6.4 Game Software Providers

When you play a game powered by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session data (such as a pseudonymous player token and stake amounts) is transmitted to the game server operated by that provider. No directly identifying personal data (such as your name, phone number, or bKash account) is shared with game providers.

6.5 Legal and Regulatory Disclosure

yesb may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, court order, or lawful regulatory request. yesb will only disclose the minimum data necessary to satisfy such requirements and will, where legally permissible, notify the affected player of any such disclosure.

yesb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide:

When data is no longer required, yesb will delete or anonymise it in a secure manner. Anonymised, aggregated data that can no longer be linked to any individual may be retained indefinitely for statistical and platform improvement purposes.

yesb takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• 256-bit TLS Encryption in Transit: All data transmitted between your device and yesb's servers is encrypted using TLS 1.2 or higher. This protects your login credentials, personal details, and financial data from interception during transmission.
• Encrypted Storage at Rest: Sensitive data stored in yesb's databases — including account credentials and identity documents — is encrypted at rest using industry-standard encryption protocols.
• Password Hashing: Account passwords are never stored in plain text. yesb uses a cryptographic hashing algorithm with per-user salting so that even in the unlikely event of a data breach, passwords cannot be directly recovered.
• Access Controls: Access to personal data within yesb's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data-protection training.
• Fraud and Intrusion Monitoring: yesb's security systems operate continuous monitoring for suspicious activity, unauthorised access attempts, and anomalous transaction patterns. Security incidents are subject to a formal response procedure.
• Payment Credential Isolation: bKash PINs, Nagad PINs, and Visa/Mastercard card numbers are processed exclusively within the respective payment provider's PCI-DSS compliant gateway. These credentials do not pass through yesb's servers and are not stored by yesb at any point.

Despite these safeguards, no online platform can guarantee absolute security. If you suspect that your yesb account has been compromised, you must contact support at [email protected] immediately so that protective action can be taken without delay.

As a yesb player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact yesb support at [email protected], clearly stating the right you wish to exercise and providing sufficient information to identify your account.

9.1 Right of Access

You have the right to request a copy of the personal data yesb holds about you. Upon receiving a valid access request, yesb will provide a structured summary of your data within a reasonable timeframe.

9.2 Right to Rectification

If any personal data yesb holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through the account settings panel; for data that requires manual correction (such as KYC-verified identity fields), please contact support.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests and yesb has no overriding grounds to continue processing. This right is subject to yesb's legal obligations to retain certain records — for example, AML-required transaction and identity records cannot be deleted before the end of their mandatory retention period.

9.4 Right to Restriction

In certain circumstances — for example, while yesb investigates the accuracy of disputed data — you may request that the processing of your data be restricted. During restriction, yesb will continue to store your data but will not actively process it beyond what is legally required.

9.5 Right to Object

Where yesb processes your data on the basis of legitimate interests, you have the right to object to that processing. yesb will assess your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests. You may also object to the processing of your data for direct marketing purposes at any time, with immediate effect.

9.6 Right to Data Portability

Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.

9.7 Right to Withdraw Consent

Where yesb processes your data on the basis of consent — primarily for marketing communications — you may withdraw that consent at any time by contacting [email protected] or updating your preferences in the account settings. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The yesb platform is strictly intended for adults aged 18 and above. yesb does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Registration on the yesb platform requires a declaration of age, and accounts are subject to documentary age verification at any time.

If yesb becomes aware that personal data has been collected from a person under the age of 18, the affected account will be closed immediately, all balances will be forfeited, and the associated personal data will be deleted as soon as reasonably practicable, subject to any overriding legal retention obligations.

The yesb platform may contain links to third-party websites or services — for example, the websites of payment partners such as bKash, Nagad, and Rocket. These third-party sites operate independently of yesb and are governed by their own privacy policies. yesb has no control over, and accepts no responsibility for, the data practices of any third-party website you visit via a link from the yesb platform.

We encourage you to review the privacy policy of any third-party website before providing your personal data to that site. The inclusion of a link on the yesb platform does not constitute yesb's endorsement of the linked site's privacy practices.

yesb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When changes are material, yesb will provide notice to registered players via the email address associated with their account and/or through a prominent notice on the platform, at least 14 days before the revised policy takes effect.

The effective date at the top of this document will be updated whenever the policy is revised. Continued use of the yesb platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your account and withdraw any remaining balance before the revised policy takes effect.

For questions about any aspect of this Privacy Policy — including the data we hold about you, how it is used, or how to exercise your rights — please contact yesb support at [email protected]. Our team operates 24/7 in Bangladesh Standard Time (BST, UTC+6) and will endeavour to respond to all privacy-related queries within 5 business days.