Privacy Policy — yesplay

yesplay collects personal data from you at various points during your use of the platform. The categories of data we collect, and the circumstances in which we collect them, are described below.

1.1 Registration Data

When you create a yesplay account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (used to verify that you meet the 18+ age requirement)
• Mobile phone number registered in Bangladesh
• Email address
• Username and password (password is stored in hashed, non-reversible form)
• Preferred language

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to protect the integrity of the platform, we may request the following documents before processing withdrawals or where unusual account activity is detected:

• Copy of a valid government-issued photo identification document (National Identity Card, passport, or driver's licence issued by the Government of Bangladesh)
• Proof of current residential address (a utility bill, bank statement, or equivalent document issued within the preceding three months)
• Proof of ownership of the payment method used to deposit funds (e.g., a screenshot of your bKash or Nagad account registered in your name)
• Source of funds documentation where required by our compliance team

1.3 Financial Transaction Data

When you make deposits or withdrawal requests on yesplay, we collect transaction data including the payment method used, the transaction amount in BDT, the date and time of the transaction, and relevant reference identifiers provided by your payment provider. yesplay does not store full card numbers or mobile banking PINs — these are handled directly by the respective payment processor.

1.4 Usage and Behavioural Data

We automatically collect certain technical and behavioural data when you access and use the yesplay platform, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on each section of the platform
• Betting and gaming history (sports markets wagered on, game titles played, stakes, and outcomes)
• Session duration and login timestamps

1.5 Communications Data

If you contact yesplay's support team via live chat, email, or any other channel, we retain a record of that correspondence, including the content of messages and the date and time they were sent. This data is used to resolve your queries, train our support team, and detect any patterns of abusive communication.

yesplay uses the personal data it collects for the following specific purposes. We process your data only where we have a lawful basis for doing so.

2.1 Promotional Communications

yesplay may send you promotional communications about bonuses, special offers, cricket betting promotions (such as BPL or IPL season offers), and platform updates. We will only do this where you have expressly opted in to receive such communications. You may withdraw your consent and unsubscribe from promotional messages at any time by updating your account notification preferences or by contacting support.

2.2 Responsible Gaming Monitoring

yesplay uses your betting history, deposit patterns, and session duration data to identify signs of problem gambling. Where our responsible gaming algorithms flag a concern, our team may proactively reach out to you to offer support resources or temporary account restrictions. This processing is carried out in your best interests and in compliance with our responsible gaming obligations. For more details, please see our Responsible Gaming page.

yesplay does not sell your personal data to third parties under any circumstances. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Payment Processors

To process your deposits and withdrawal requests, yesplay shares relevant transaction data with your chosen payment provider — which may include bKash, Nagad, Rocket, Upay, and card network processors for Visa and Mastercard transactions. These providers receive only the data required to execute and verify the transaction. Each payment processor operates under its own privacy policy and security standards.

3.2 Game Providers

Some games available on the yesplay platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games, certain session identifiers and account-level data may be shared with the relevant provider. Game providers do not receive your full name, financial details, or KYC documents.

3.3 Legal and Regulatory Disclosure

yesplay may disclose your personal data to law enforcement agencies, courts, government bodies, or regulatory authorities where we are required to do so by applicable law, court order, or where disclosure is necessary to prevent, detect, or prosecute criminal activity, including fraud and money laundering.

3.4 Business Transfers

In the event that yesplay undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, yesplay will notify affected players and ensure that the recipient entity commits to protecting personal data in a manner consistent with this Privacy Policy.

3.5 No Third-Party Advertising

yesplay does not share your personal data with advertising networks, data brokers, social media platforms, or any other third party for the purpose of serving targeted advertisements to you on external websites or applications.

yesplay uses cookies and similar technologies (collectively, "cookies") to ensure the platform functions correctly, to remember your preferences, and to understand how players use the platform in aggregate. Below is a description of the types of cookies we use.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to operate. They enable core functions such as maintaining your logged-in session, remembering items in your bet slip, and ensuring the security of your account. These cookies cannot be disabled without impairing your ability to use yesplay.

4.2 Functional Cookies

Functional cookies allow yesplay to remember your preferences such as preferred language, default sport or game category, and display settings. These cookies make your experience more personalised and reduce the need to re-enter preferences on each visit.

4.3 Analytics Cookies

yesplay uses analytics cookies to collect aggregated, anonymised data about how players navigate and interact with the platform. This information helps us identify pages or features that may need improvement and to prioritise development efforts. Analytics data is not linked back to individual player identities.

4.4 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's settings menu. You can choose to block or delete cookies at any time. Please note that disabling strictly necessary cookies will affect the functionality of the yesplay platform and may prevent you from logging in or completing transactions. Blocking analytics or functional cookies will not prevent you from using the platform but may reduce the personalisation of your experience.

yesplay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon the expiry of the applicable retention period, yesplay will securely delete or irreversibly anonymise the relevant personal data. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory investigations, it will be placed in restricted storage and deleted as soon as the relevant obligation is resolved.

yesplay implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your browser or device and yesplay's servers is encrypted using industry-standard TLS 1.2 or higher.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. yesplay staff cannot view your password in plaintext at any time.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. All access is logged, and access privileges are reviewed regularly.
• Two-factor authentication: yesplay supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access.
• Regular security assessments: The yesplay platform undergoes periodic security reviews and vulnerability assessments to identify and remediate potential risks.
• Staff training: All yesplay personnel who handle personal data receive regular training on data protection obligations and security best practices.

6.1 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, yesplay will notify the affected individuals as promptly as practicable, providing details of the nature of the breach, the categories of data involved, the likely consequences, and the steps being taken to mitigate the impact. yesplay maintains an internal data breach response procedure to ensure breaches are identified, contained, and reported without undue delay.

As a player on yesplay, you hold a number of rights in relation to your personal data. yesplay is committed to honouring these rights promptly and without unnecessary obstruction. Your rights include the following:

7.1 Right of Access

You have the right to request a copy of the personal data that yesplay holds about you. Upon receipt of a verified access request, we will provide you with a summary of your data within a reasonable timeframe. This includes your registration details, transaction history, and KYC records held on file.

7.2 Right to Rectification

If any personal data that yesplay holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details such as your email address and phone number directly through your account settings. For changes to identity-related data such as your legal name, please contact support with supporting documentation.

7.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. Please note that yesplay is subject to mandatory data retention obligations (see Section 5) that may require us to retain certain data for a defined period even following an erasure request. In such cases, we will restrict the use of your data to the minimum necessary and delete it at the earliest opportunity permitted by law.

7.4 Right to Restrict Processing

You have the right to request that yesplay restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests pending verification of whether yesplay's grounds override your interests.

7.5 Right to Object

Where yesplay processes your data on the basis of legitimate interest — such as for analytics or responsible gaming monitoring — you have the right to object to that processing. yesplay will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Withdraw Consent

Where yesplay processes your data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw consent for marketing communications through your account notification settings or by contacting support.

7.7 Exercising Your Rights

To exercise any of the rights described in this section, please contact yesplay's support team via 24/7 live chat or email your request to support@yesplay. We may require you to verify your identity before processing a rights request in order to protect against unauthorised requests. We aim to respond to all valid requests within 30 days of receipt.

yesplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we make material changes to this policy, we will notify registered players via email or via a prominent notice on the platform prior to the changes taking effect.

8.1 Notification of Changes

The effective date shown at the top of this page will be updated each time this Privacy Policy is revised. We encourage you to review this page periodically so that you remain informed about how yesplay protects your data. Continued use of the platform following the posting of any updated policy constitutes your acceptance of the revised terms.

8.2 Contacting Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which yesplay processes your personal data, please contact us using the following details:

• Email: support@yesplay (plain text — not a clickable link)
• Live Chat: Available 24/7 in English and Bengali via the support widget on the yesplay platform
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days and provide a substantive response within 30 days

8.3 Relationship to Other Policies

This Privacy Policy should be read in conjunction with the yesplay Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and yesplay. In the event of any conflict between this Privacy Policy and those documents on a data-related matter, this Privacy Policy shall prevail.