play25 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how play25, the operator of the online gaming platform accessible at play25.bid ("play25", "we", "us", "our"), collects, uses, stores, shares, and protects personal data relating to players, prospective players, and visitors to the play25 website ("you", "your").

play25 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account on play25 or by continuing to use our Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the play25 Terms and Conditions, which are available at /terms-conditions, and our Responsible Gaming Policy at /responsible-gaming. In the event of any conflict between this Policy and the Terms and Conditions on matters relating to data privacy, this Policy shall prevail.

2. Data Controller

For the purposes of this Policy, play25 acts as the data controller in respect of all personal data collected through the play25 platform. As data controller, play25 determines the purposes for which and the means by which personal data is processed. All data-related queries, access requests, and complaints should be directed to our support team using the contact details set out in Section 14 of this Policy.

play25 operates its platform for and directs its Services primarily at players based in Bangladesh. The platform is intended for adults aged 18 years and above. If you are accessing play25 from outside Bangladesh, you do so at your own risk and remain subject to this Policy in its entirety.

3. Data We Collect

play25 collects the following categories of personal data:

3.1 Identity and Contact Data

• Full legal name as provided at registration;
• Date of birth (used to verify the 18+ age requirement);
• Mobile phone number (used for account authentication and transaction notifications);
• Email address (where provided, used for account communications);
• Residential city or district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).

3.2 Account and Transaction Data

• play25 username and encrypted password;
• Account balance history, deposit records, and withdrawal records;
• Payment method identifiers (e.g., bKash mobile number, Nagad mobile number, Rocket account reference, Upay reference) — play25 does not store full mobile wallet PINs;
• Bonus and promotion history;
• Betting history, game session logs, and wagering records.

3.3 Identity Verification (KYC) Data

• National identification (NID) card number or passport number, where requested as part of the Know Your Customer (KYC) process;
• Copies of identity documents submitted for KYC verification;
• Selfie or facial image where required for liveness verification.

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser type;
• Session timestamps and duration;
• Pages visited and features used within the play25 platform;
• Error logs and crash reports generated during platform use.

3.5 Communications Data

• Content of messages sent to the play25 support team via email or live chat;
• Records of complaints, disputes, and their resolution;
• Survey responses and feedback submitted voluntarily.

4. How We Collect Your Data

play25 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a survey;
• Automated collection: Technical and usage data collected automatically as you browse and interact with the play25 platform via cookies, server logs, and similar technologies (see Section 10);
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay upon processing of deposits and withdrawals;
• Fraud and security systems: Data generated by automated fraud detection tools that monitor account activity for suspicious patterns;
• Third-party identity verification: Where play25 uses a third-party KYC provider to verify the authenticity of identity documents, that provider may supply verification results and risk scores to play25.

5. How We Use Your Data

play25 uses your personal data for the following purposes:

play25 does not use your personal data to send unsolicited promotional communications to third parties, and does not profile you for advertising purposes outside the play25 platform.

6. Lawful Basis for Processing

play25 processes your personal data on the following lawful bases:

• Contract performance: Processing your registration data, account data, and payment data is necessary to fulfil the contractual relationship between you and play25 as set out in the Terms and Conditions;
• Legal obligation: Processing KYC data, transaction records, and fraud detection data is necessary to comply with applicable anti-money laundering, counter-terrorism financing, and data protection obligations;
• Legitimate interests: Processing technical and usage data for fraud prevention, platform security, and service improvement is necessary for the legitimate interests of play25 and its players, provided those interests are not overridden by your data protection rights;
• Consent: Where play25 sends you optional promotional communications or uses non-essential cookies, we rely on your prior consent, which you may withdraw at any time.

7. Sharing Your Data

play25 does not sell your personal data. We may share your data with the following categories of third parties strictly on a need-to-know basis:

7.1 Payment Processors

play25 shares transaction data with bKash, Nagad, Rocket, and Upay as required to process deposits and withdrawals. These providers act as independent data controllers in respect of their own payment processing operations and are subject to their own privacy policies.

7.2 Game Software Providers

play25 operates games supplied by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session identifiers and game result data necessary to operate the games. They do not receive your full identity or payment data.

7.3 Identity Verification Providers

Where play25 uses a third-party KYC or identity verification service, your identity documents and verification results are shared with that provider solely for the purpose of verifying your identity. play25 selects KYC providers that maintain appropriate data security standards.

7.4 Fraud Prevention and Security Services

play25 may share technical data and account activity indicators with fraud prevention services to protect the platform and its players from fraudulent activity. Such sharing is limited to the minimum data necessary for fraud detection purposes.

7.5 Legal and Regulatory Authorities

play25 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where play25 reasonably believes disclosure is necessary to prevent harm or to protect the rights, property, or safety of play25, its players, or third parties.

7.6 Business Transfers

In the event of a merger, acquisition, or sale of all or a material part of play25's business assets, personal data held by play25 may be transferred to the acquiring entity as part of that transaction. play25 will provide notice of any such transfer and of any material changes to data processing that result from it.

8. Data Retention

play25 retains your personal data for the following periods:

• Active account data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later;
• Support communications: Retained for three (3) years from the date of the final communication in each support thread;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are aggregated and anonymised;
• Deleted account data: Following the expiry of the mandatory retention period, personal data is securely deleted or irreversibly anonymised.

Where play25 is under a legal obligation to retain data for a longer period — for example, in connection with an ongoing fraud investigation or legal proceeding — the data will be retained for the duration of that obligation.

9. Data Security

play25 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and play25 servers;
• Bcrypt hashing of passwords — your password is never stored in plain text;
• Access controls restricting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the play25 platform;
• Automated monitoring for unusual login patterns, suspicious transactions, and potential data breaches;
• Secure data centre facilities with physical access controls.

Despite these measures, no online platform can guarantee absolute security. play25 will notify affected players and take appropriate remedial action in the event of a data breach that is likely to result in a risk to the rights and freedoms of those players.

You are responsible for maintaining the security of your own play25 account credentials. play25 staff will never ask you to disclose your password. If you suspect your account has been compromised, contact our support team immediately at [email protected].

10. Cookies and Tracking Technologies

play25 uses cookies — small text files placed on your device — and similar tracking technologies to operate the platform effectively. The following types of cookies are used:

Essential cookies are placed automatically as they are strictly necessary to operate the platform. Non-essential cookies (preference and analytics) are only placed with your consent. You may withdraw consent for non-essential cookies at any time by adjusting your browser settings or contacting our support team. Disabling essential cookies may prevent certain features of the play25 platform from functioning correctly.

play25 does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies.

11. Your Rights

As a data subject, you have the following rights in respect of your personal data held by play25:

• Right of access: You may request a copy of the personal data play25 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal obligations that require play25 to retain the data;
• Right to restriction of processing: You may request that play25 restrict processing of your data in certain circumstances, for example while the accuracy of the data is being contested;
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you may request that play25 provide your data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing based on play25's legitimate interests at any time, including objections to processing for fraud prevention purposes where you have grounds relating to your particular situation;
• Right to withdraw consent: Where processing is based on your consent (e.g., non-essential cookies, optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact play25 at [email protected]. play25 will respond to all verified data rights requests within a reasonable period. play25 may ask you to verify your identity before processing a request in order to protect the security of your account data.

12. Minors

play25 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. Registration on play25 requires confirmation that the registrant is aged 18 or above, and play25 operates an active KYC process to verify age where required.

If play25 becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended and the data will be deleted, subject only to any legal obligation to retain evidence of the breach. Any winnings accrued by an underage player will be voided. If you believe a minor has registered on play25, please notify us immediately at [email protected].

13. Changes to This Policy

play25 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where play25 introduces a new category of data processing or a new category of third-party recipient — play25 will provide advance notice to registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the play25 website, no less than seven (7) days before the revised Policy takes effect.

The date of the most recent revision is indicated at the top of this Policy. Your continued use of the play25 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. The current version of this Policy is always available at /privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by play25, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to respond to all data-related enquiries within 48 hours.

This Privacy Policy was last reviewed and updated in January 2026. play25 recommends that all players review this Policy periodically to remain informed of how their data is being used and protected.