Privacy Policy — playstar

1 Information We Collect

When you register for and use a playstar account, we collect a range of personal and technical information necessary to provide the service, verify your identity, process financial transactions, and meet our legal obligations. The categories of data we collect are described below.

1.1 Registration & Identity Data

When you create an account on playstar, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the 18+ minimum age requirement.
• Email address, used for account communications, security alerts, and promotional messaging (where you have opted in).
• Mobile phone number, used for two-factor authentication, account recovery, and support communications.
• Residential address, including street, city or district, and postal code, used for identity verification and regulatory compliance.
• Bangladeshi National Identity Card (NID) number or passport/driving licence details, collected during the KYC verification process.
• Username and encrypted password. Passwords are stored using one-way cryptographic hashing; playstar staff cannot view your plaintext password.

1.2 Financial & Payment Data

To process deposits and withdrawals, we collect payment-related information. The scope of this data depends on the payment method used:

Full card numbers and CVV codes are never stored on playstar servers. Card transactions are processed via PCI-DSS compliant payment gateways.

1.3 Usage & Technical Data

When you access playstar, our systems automatically record certain technical information:

• IP address — used for geolocation, fraud detection, and regulatory access controls.
• Device type, operating system, and browser version — used to optimise platform performance on your device.
• Session logs — including pages visited, games played, bets placed, and time spent on the platform. Used for responsible gaming monitoring and product improvement.
• Cookies and similar tracking technologies — see Section 4 for full details.
• Referral source — the URL or campaign code from which you arrived at playstar, used for internal marketing analysis only.

1.4 Communications Data

If you contact playstar via live chat, email, or WhatsApp support, we retain records of those communications — including the content of messages and any attachments — for a period of 3 years. This data is used to resolve disputes, train support staff, and improve service quality. Support transcripts are stored on encrypted servers accessible only to authorised personnel.

2 How We Use Your Data

playstar processes your personal data on one or more of the following legal bases: (a) performance of a contract — processing necessary to provide the gaming service you have requested; (b) legal obligation — processing required to comply with applicable laws and regulations; (c) legitimate interests — processing that serves our reasonable business interests and does not override your rights; and (d) consent — where you have explicitly opted in to a specific type of processing such as marketing communications.

2.1 Service Delivery

The primary purpose for which we collect and process your data is to operate the playstar platform and deliver the services you have signed up for. This includes:

• Creating and maintaining your player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Calculating, recording, and paying out winnings from casino games and sports bets.
• Applying bonuses, free spins, and promotional credits to your account in accordance with the applicable promotion terms.
• Providing customer support via live chat, email, and WhatsApp.
• Sending transactional notifications such as deposit confirmations, withdrawal updates, and security alerts.

2.2 Identity Verification & Fraud Prevention

We are legally and operationally required to verify the identity of all players prior to processing withdrawals. Your identity and payment data is used to conduct Know Your Customer (KYC) checks, screen against sanctions lists, and detect patterns of fraudulent behaviour such as multi-accounting, bonus abuse, or money laundering. Where suspicious activity is identified, we may suspend your account pending investigation and may report the matter to relevant authorities.

2.3 Responsible Gaming Monitoring

playstar uses session and betting data to monitor for signs of problem gambling behaviour — including unusually long sessions, escalating bet sizes, and frequent deposit attempts. Where such patterns are identified, our responsible gaming team may proactively reach out to the player to offer support tools including deposit limits, cooling-off periods, and self-exclusion. This processing is based on our legitimate interest in promoting player welfare.

2.4 Marketing Communications

If you have opted in to marketing communications during registration or at any point in your account settings, we may send you promotional emails, SMS messages, or in-app notifications about new games, bonus offers, tournaments, and seasonal promotions. You can withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

3 Data Sharing & Disclosure

playstar does not sell your personal data to third parties. We may share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant payment and identity data with our authorised payment service providers including bKash, Nagad, Rocket, Upay, and international card processors. These providers are contractually required to handle your data securely and solely for the purpose of processing the relevant transaction. They are not permitted to use your data for their own marketing purposes.

3.2 Identity Verification Partners

We work with third-party KYC and AML service providers to assist with identity verification and sanctions screening. These partners receive only the minimum data necessary to perform the verification and are bound by strict data processing agreements. Verification results are shared back with playstar and retained as part of your compliance record.

3.3 Legal & Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by law, court order, or regulatory direction. We may also disclose data where we believe in good faith that disclosure is necessary to prevent fraud, protect the safety of a person, or defend our legal rights. Where permitted by law, we will notify you of any such disclosure request prior to complying.

3.4 Business Transfers

In the event that playstar or any part of its business is acquired by, merged with, or transferred to another entity, your personal data may form part of the transferred assets. In such circumstances, we will notify you via email and on-site notice before your data is transferred and becomes subject to a different privacy policy. You will have the opportunity to close your account and request data deletion prior to any such transfer if you do not wish to continue under the new entity.

4 Cookies & Tracking Technologies

playstar uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, and understand how the platform is used. Below is a plain-language summary of the cookies we use.

playstar does not use advertising cookies, retargeting pixels, or social media tracking cookies. We do not allow third-party ad networks to place cookies on our platform.

4.1 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled — they are essential for the platform to function. Functional and analytics cookies can be managed through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, delete, and block cookies on a per-site basis. Please be aware that disabling functional cookies may affect your user experience on playstar, for example by resetting your game preferences each session.

If you are accessing playstar from an Android or iOS mobile device, you can manage cookies through your mobile browser settings or by clearing app data through your device's application manager.

5 Data Security & Retention

5.1 Security Measures

playstar implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and payment records.
• Role-based access controls (RBAC) ensuring that only personnel with a verified business need can access specific categories of personal data.
• Multi-factor authentication (MFA) required for all internal staff accounts with access to player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems (IDS) monitoring our infrastructure 24/7 for anomalous activity.
• Secure data centres with physical access controls, CCTV monitoring, and redundant power and connectivity.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, playstar will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

5.2 Data Retention Periods

We retain your personal data for as long as your account remains active and for additional periods as required by law or legitimate operational necessity. The following retention schedule applies:

• Account and identity data: Retained for the duration of your account and for 5 years following account closure, in accordance with standard anti-money laundering record-keeping obligations.
• Transaction records: Retained for 7 years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC documents: Retained for 5 years following account closure or the completion of the business relationship.
• Support communications: Retained for 3 years from the date of each interaction.
• Marketing preferences and opt-in records: Retained for the duration of the marketing relationship plus 2 years following opt-out, to evidence consent history.
• Session and gameplay logs: Retained for 2 years for responsible gaming monitoring and dispute resolution purposes.

Once the applicable retention period has expired and there is no outstanding legal basis for continued retention, your data is securely deleted or anonymised in accordance with our data disposal procedures.

6 Your Rights Over Your Data

As a player on playstar, you have a number of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at support at playstar with the subject line "Data Rights Request" and a description of your request. We aim to respond within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data that playstar holds about you. We will provide this in a structured, commonly used, machine-readable format (such as CSV or PDF) within 30 days of receiving a valid request. The first copy is provided free of charge; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

6.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor updates such as email address or phone number changes can be made directly through your account settings. For changes to core identity data (legal name, date of birth), you will need to provide supporting documentation and the change will be processed by our compliance team.

6.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. Please note that certain data — particularly KYC records and transaction histories — must be retained for legally mandated periods regardless of an erasure request. In such cases, we will inform you of the specific retention obligation and delete the data as soon as that obligation is satisfied.

6.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in circumstances such as: while the accuracy of the data is being contested; where processing is unlawful but you prefer restriction to deletion; or where we no longer need the data but you require it for the establishment, exercise, or defence of legal claims.

6.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to have it transmitted directly to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time, with no need to provide justification. To opt out of marketing communications, update your preferences in your account settings or contact support directly.

7 Third-Party Services & Links

The playstar platform integrates with a number of third-party service providers to deliver certain features. These include game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), payment processors, KYC verification providers, and analytics platforms. When you interact with games or features delivered by these third parties, those providers may process technical data in accordance with their own privacy policies.

playstar selects third-party service providers carefully and requires all data processors to enter into data processing agreements that impose obligations consistent with this Privacy Policy. We conduct periodic due diligence reviews of our key service providers to ensure ongoing compliance.

The playstar platform does not contain links to external third-party websites. However, in the event that any reference to an external resource is present, please be aware that playstar has no control over the privacy practices of external websites and is not responsible for their content or data handling. Visiting any external site is at your own discretion and risk.

7.1 Live Game Studio Data

Certain live casino games on playstar are powered by third-party studios including Evolution Gaming and Ezugi. When you participate in a live dealer session, the studio provider processes your in-game activity (such as bet amounts and game choices) on their own infrastructure. This processing is governed by the studio's own data processing terms, which playstar has reviewed and deemed acceptable. Personal identity data is not shared with live game studios — they receive only a pseudonymous player identifier.

7.2 Payment Provider Privacy

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, you are also subject to those providers' own privacy policies and terms of service. playstar has no control over how those providers handle data within their own systems beyond the transaction reference data they share back with us for reconciliation purposes. We recommend reviewing the privacy policies of your chosen payment provider independently.

8 Policy Updates & Contact

playstar reviews this Privacy Policy at least annually and whenever there is a significant change in our data processing activities, applicable law, or platform features. The "Last Reviewed" date at the top of this page reflects the most recent review. Where a material change is made — meaning a change that affects your rights or the fundamental way we use your data — we will notify you by email to your registered address and by a prominent notice on the platform at least 7 days before the change takes effect.

Minor and non-material updates (such as clarifications of existing practices, corrections of typographical errors, or formatting changes) may be made without advance notice. In all cases, the current version of this Privacy Policy governs your use of the platform, and continued use after the effective date of any update constitutes acceptance of the revised policy.

8.1 Children's Privacy

playstar is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data without parental consent, we will immediately suspend the account, delete all associated personal data, and return any deposited funds to the originating payment method. If you believe a minor may have accessed this platform, please contact us immediately at support at playstar.

8.2 How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the way playstar handles your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly, professionally, and in full.

• Email: support at playstar (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response Time: Acknowledgement within 5 business days; full response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).
• Languages: English and Bengali.

This Privacy Policy is governed by applicable international data protection principles and best practices. playstar is committed to fair play, player protection, and responsible data stewardship as core values of the platform.