wicket1 Privacy Policy —
Your Data, Our Responsibility

1. Information We Collect

wicket1 collects personal information from players through several channels: directly from you when you register an account, make a deposit, contact support, or use platform features; automatically through your use of the wicket1 website; and from third-party service providers where necessary to verify your identity and process your payments.

1.1 Registration Data

When you create a wicket1 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification to confirm you are 18 or older).
• Residential address in Bangladesh (including division, district, and postal code).
• Active email address for account communications and identity recovery.
• Mobile phone number registered in Bangladesh, used for account verification and payment processing via bKash, Nagad, or Rocket.
• Username and hashed, salted password (we never store plaintext passwords).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, wicket1 collects and securely stores:

• A photograph or scan of a valid government-issued photo ID (National Identity Card or valid passport).
• A selfie photograph showing the player's face alongside the ID document.
• Proof of payment method ownership, such as a screenshot of the registered bKash or Nagad account linked to the player's mobile number.

1.3 Financial Transaction Data

For all deposit and withdrawal transactions, wicket1 records:

• Transaction amounts in Bangladeshi Taka (৳ BDT).
• Payment method type and masked account identifiers (e.g., the last four digits of a bKash number or Nagad account reference).
• Transaction timestamps (Bangladesh Standard Time, UTC+6).
• Transaction status, reference numbers, and any associated notes from the payment provider.

1.4 Technical & Usage Data

When you browse or play on wicket1, we automatically collect:

• IP address and approximate geographic location (city and division level within Bangladesh).
• Device type, operating system, and browser version.
• Session timestamps, pages visited, games played, bet amounts, and gameplay duration.
• Device fingerprint data used to enforce our one-account-per-player policy and detect duplicate accounts.
• Referral source (how you arrived at the wicket1 website).

1.5 Communications Data

When you contact the wicket1 support team — via live chat, email, or any other support channel — we retain records of those communications, including the content of messages, attachments, dates, and the resolution outcome. This data is used to improve service quality and to maintain an accurate history of your account interactions.

2. How We Use Your Data

wicket1 uses the personal data it collects exclusively for legitimate purposes directly related to operating a safe, fair, and legally compliant online gambling platform for players in Bangladesh. We do not use player data for purposes unrelated to the services described in this policy.

wicket1 will never sell, rent, or lease your personal data to third-party marketing companies, data brokers, or advertising networks. Your personal information is not a commercial product on the wicket1 platform.

3. Legal Basis for Processing

wicket1 processes your personal data under one or more of the following legal grounds, depending on the nature of the processing activity:

1. Contractual Necessity: Processing that is required to fulfil the obligations of the agreement between wicket1 and you as a registered player — including account creation, payment processing, bonus crediting, and withdrawal handling.
2. Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) rules, age verification requirements, and fraud prevention obligations.
3. Legitimate Interests: Processing carried out in wicket1's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and aggregate analytics for service improvement, where those interests are not overridden by your fundamental data rights.
4. Consent: Where wicket1 relies on your freely given, specific, and informed consent — for example, when sending you promotional communications about new games, seasonal offers, or bonus promotions. You may withdraw your consent to marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

4. Cookies & Tracking Technologies

wicket1 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players use the site so we can continue improving the experience.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the wicket1 platform to function. They maintain your login session, remember your language preference, and enable secure payment flows. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These remember your preferences and settings — such as your preferred game category, display preferences, and notification settings — so you do not need to re-configure them on every visit.
• Analytics Cookies: wicket1 uses anonymised analytics data to understand traffic patterns, popular game categories, and session behaviour. This data is aggregated and does not identify you personally. It helps us prioritise product improvements that benefit all players.
• Security Cookies: Used as part of our fraud detection and device fingerprinting processes, including enforcing our one-account-per-player policy and detecting suspicious login attempts.

4.2 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use core platform features. For guidance on managing cookies in common browsers (Chrome, Firefox, Samsung Internet), refer to your browser's help documentation. wicket1 does not use third-party advertising cookies or retargeting pixels.

5. Data Sharing & Disclosure

wicket1 does not sell, trade, or rent your personal data. We share personal information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

5.1 Payment Processing Partners

To process deposits and withdrawals in Bangladeshi Taka, wicket1 shares the minimum required transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and where applicable, Visa and Mastercard gateway providers. These partners receive only the data they require to verify and complete the transaction and are contractually bound to process that data solely for payment purposes.

5.2 Game Technology Providers

wicket1's casino and sports betting games are powered by licensed third-party studios and technology providers, including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe. These providers may receive a pseudonymous player identifier and session data necessary to operate the game and calculate outcomes. They do not receive your full name, government ID, or payment details.

5.3 Identity Verification Services

To complete KYC verification, wicket1 may use authorised third-party identity verification technology providers. These providers process your submitted ID documents and selfie photographs in accordance with their own privacy policies and applicable data protection law. All KYC technology partners used by wicket1 are contractually bound to strict data processing standards.

5.4 Legal & Regulatory Disclosure

wicket1 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are required to do so by a valid legal order, court instruction, or applicable law. In such cases, we will disclose only the minimum data required by the order and will notify the affected player where we are legally permitted to do so.

5.5 Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring involving wicket1, player data may be transferred as part of that transaction. Where this occurs, we will notify affected players via their registered email address and ensure that the receiving entity commits to data protection standards no less protective than those described in this Privacy Policy.

6. Data Retention

wicket1 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

When data has reached the end of its required retention period, it is securely deleted or irreversibly anonymised. Players who close their accounts may request confirmation that their personal data has been scheduled for deletion, subject to any overriding legal retention obligations.

7. Your Rights

As a registered wicket1 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the wicket1 data team at [email protected] with the subject line "Data Rights Request" and include your registered account email address for verification purposes.

1. Right of Access: You have the right to request a copy of the personal data wicket1 holds about you. We will respond to verified access requests within 30 days and provide the data in a clear, readable format.
2. Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update basic account details (email address, phone number, residential address) directly in your account settings. For changes to identity-verified data (name, date of birth), contact support with documentary evidence.
3. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you believe the processing was unlawful. Please note that erasure requests may be partially declined where retention is required by legal or regulatory obligation (for example, financial transaction records must be retained for 7 years under applicable law).
4. Right to Restriction: You have the right to request that wicket1 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed or while a complaint is being investigated.
5. Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider. This right applies to data you have actively provided to us and that we process on the basis of your consent or a contract.
6. Right to Object: You have the right to object to processing carried out on the basis of wicket1's legitimate interests, including certain security monitoring and analytics activities. wicket1 will assess each objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
7. Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of prior processing.

All data rights requests will be acknowledged within 48 hours of receipt and resolved within 30 calendar days. If a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 30 days and will notify you accordingly.

8. Data Security

wicket1 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the wicket1 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser's address bar confirms this encryption is active during every session.
• Encrypted Data Storage: Sensitive data fields — including password hashes, identity document images, and payment credentials — are stored using strong encryption algorithms at rest. Plaintext passwords are never stored.
• Access Controls: Access to personal data within the wicket1 organisation is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job function. All access events to sensitive data records are logged.
• Two-Factor Authentication: Internal systems holding player data require multi-factor authentication for staff access. Players are strongly encouraged to enable two-factor authentication on their own wicket1 accounts for additional security.
• Regular Security Audits: wicket1's platform and data infrastructure are subject to regular internal security reviews and periodic third-party penetration testing to identify and address potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, wicket1 will notify affected players via their registered email address promptly and take all necessary steps to contain, investigate, and remediate the incident.

While wicket1 applies robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying wicket1 immediately at [email protected] if you suspect any unauthorised access to your account.

9. Third-Party Links & Services

The wicket1 platform may contain references to the services of third-party payment providers (bKash, Nagad, Rocket, Upay) and game technology providers (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe). When you interact with these third-party services — for example, by initiating a bKash deposit via the bKash app or web interface — you are subject to that provider's own privacy policy and data practices.

wicket1 has no control over and accepts no responsibility for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your wicket1 account. Links to third-party services on the wicket1 platform do not constitute an endorsement of those services' privacy or data handling practices.

All game studios whose products appear on wicket1 operate under their own data processing agreements. Game outcome data is processed by the respective studio's certified RNG systems. wicket1 receives aggregated outcome data from these studios but does not share individually identified player data with game studios beyond the pseudonymous session identifiers required to run each game.

10. Policy Updates

wicket1 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Privacy Policy, we will notify registered players by sending a notification to the email address associated with their account, at least 14 days before the updated policy takes effect.

The "Last Revised" date at the top of this document is updated every time changes are published. The current version of this Privacy Policy is always accessible at wicket1.org/privacy-policy. We encourage you to review this page periodically to stay informed of how wicket1 is protecting your data.

If you have any questions about this Privacy Policy, about how your personal data is handled, or if you wish to exercise any of your data rights, please contact the wicket1 data protection team. Our support team is available 24 hours a day, 7 days a week — including Bangladesh national holidays (Eid, Pohela Boishakh, Independence Day March 26, Victory Day December 16). Contact us at [email protected] (plain text — copy manually to your email client). Average first-response time on live chat is under 10 minutes.