newpak Privacy Policy

1. Information We Collect

When you register for an account, use the newpak platform, or interact with our customer support team, we collect a range of personal information. This data falls into the following categories:

Identity & Contact Information

• Full legal name, date of birth, and gender.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna), district, and postal code.
• Email address and mobile phone number.
• Government-issued identification documents submitted during KYC verification, such as National Identity Card (NID) or passport number.

Financial & Transaction Information

• Payment method identifiers, including bKash mobile account numbers, Nagad account numbers, Rocket wallet IDs, Upay account references, and Visa/Mastercard last-four digits.
• Deposit history, withdrawal history, and current account balance.
• Bank account details (account holder name, bank name such as Dutch-Bangla Bank, BRAC Bank, or City Bank, and account number) where direct bank transfer is used.
• Records of any chargebacks, payment disputes, or refund requests.

Gameplay & Betting Activity

• Records of all bets placed, games played, amounts wagered, and outcomes.
• Session duration, login timestamps (Bangladesh Standard Time, UTC+6), and in-session activity logs.
• Bonus claims, wagering progress, and promotional participation history.
• Sports betting selections, including cricket markets (BPL, T20 World Cup, IPL, Bangladesh Tigers) and any other markets available on the platform.

Technical & Device Information

• IP address and approximate geolocation at the time of login.
• Device type, operating system, browser type and version.
• Cookie identifiers and session tokens (see Section 5 — Cookies).
• Referring URL and pages visited within the newpak platform.

Communications Data

• Contents of live chat transcripts, email correspondence, and support ticket submissions.
• Feedback, complaints, dispute records, and any documents submitted in relation to a formal inquiry.

2. How We Use Your Data

newpak uses the personal information we collect for specific, clearly defined purposes. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which your data is used are set out below:

3. Legal Basis for Processing

newpak processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is required to perform the contract between you and newpak — specifically, the Terms & Conditions you accepted at registration. This includes account creation, payment processing, and game result recording.
• Legal Obligation: Processing that is required by applicable law, including age verification, anti-money laundering (AML) checks, fraud reporting, and record-keeping obligations.
• Legitimate Interests: Processing that is necessary for newpak's legitimate business interests, provided those interests are not overridden by your own rights and interests. This includes fraud prevention, platform security, and analytics that improve our services.
• Consent: Processing that is based on your freely given, specific, and informed consent. This primarily covers the sending of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where we rely on legitimate interests as the basis for processing, we carry out a balancing test to confirm that your fundamental rights and freedoms are not disproportionately affected. The results of these assessments are available upon request by contacting our support team.

4. Data Sharing & Third Parties

newpak does not sell your personal data to third parties. We share personal information only in the limited circumstances described below, and only to the minimum extent necessary:

Payment Service Providers

To process your deposits and withdrawals, we share relevant financial information with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — strictly to the extent required to complete the transaction. These partners operate under their own privacy policies and are bound by applicable financial regulations.

Game Content Providers

Games on the newpak platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised gameplay data (such as session identifiers and bet amounts) for the purpose of game operation, result verification, and RTP audit. They do not receive your full identity data.

Identity Verification & Fraud Prevention Services

We use third-party KYC and fraud screening services to verify player identities and screen against sanctions lists. These services process identity documents and biometric data under strict data processing agreements with newpak and are not permitted to use your data for any other purpose.

Legal & Regulatory Disclosure

newpak may disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where required by applicable law, a valid court order, or a lawful regulatory request. In such cases, newpak will notify you of the disclosure unless legally prohibited from doing so.

Business Transfers

In the event of a merger, acquisition, or sale of assets involving newpak, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before your data is transferred.

5. Cookies & Tracking Technologies

The newpak platform uses cookies and similar tracking technologies to ensure proper platform functionality, maintain your login session, and gather anonymised analytics data to improve our services. The following categories of cookies are used:

newpak does not use advertising or tracking cookies that build profiles for ad targeting purposes. Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage functional and analytics cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality, including the ability to maintain a login session.

6. Data Retention & Storage

newpak retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with newpak, plus a minimum of 5 years following account closure, to comply with financial record-keeping and AML obligations.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years from the date of submission, in line with applicable anti-money laundering regulations.
• Transaction Records: All deposit, withdrawal, and bet records are retained for a minimum of 5 years from the date of the transaction.
• Customer Support Records: Live chat transcripts and email correspondence are retained for 3 years from the date of the interaction, unless the interaction relates to a formal dispute, in which case records are retained until the dispute is fully resolved plus 2 years.
• Marketing Preferences: Records of your consent or opt-out for marketing communications are retained for 3 years from the date of the relevant preference change, to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: Aggregated, anonymised usage data that cannot be linked to an individual player may be retained indefinitely for platform improvement purposes.

All personal data is stored on servers located within secure, access-controlled data centres. Data transfers between newpak's internal systems are encrypted using industry-standard protocols. Upon expiry of the applicable retention period, data is securely and irreversibly deleted or anonymised using recognised data sanitisation methods.

7. Your Data Rights

As a player on the newpak platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to respond fully within 30 calendar days.

Right of Access

You have the right to request a copy of all personal data that newpak holds about you. We will provide this information in a structured, commonly used, machine-readable format (e.g., CSV or JSON) where technically feasible.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update basic account information (such as your email address or phone number) directly through your account settings. For identity document corrections, please contact our support team.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the basis for processing), or where processing was unlawful. Please note that this right is not absolute — we may be required to retain certain data by law (e.g., transaction records for AML purposes) even following a valid erasure request.

Right to Restriction of Processing

You may request that we temporarily restrict the processing of your personal data while a rectification or erasure request is being assessed, or where you contest the legal basis for processing. During a restriction period, we will store your data but not actively process it beyond what is strictly necessary.

Right to Data Portability

Where processing is based on your consent or a contractual obligation and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transferred to another service provider where technically feasible.

Right to Object

You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to the use of your data for direct marketing purposes. Upon receipt of a valid objection to marketing, we will cease all marketing communications immediately.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team or updating your preferences in account settings. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

8. Data Security Measures

newpak takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser or app and the newpak platform is encrypted using industry-standard TLS 1.2 or higher. This prevents interception of your personal and financial data during transmission.
• Encrypted Data Storage: Sensitive data fields — including identity document images, payment account identifiers, and authentication credentials — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to production databases and systems containing personal data is restricted to a limited number of authorised personnel on a strict need-to-know basis. All access events are logged and subject to regular audit review.
• Two-Factor Authentication (2FA): newpak offers 2FA for all player accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access in the event that your password is compromised.
• Penetration Testing: newpak conducts regular security assessments, including vulnerability scanning and penetration testing by independent security professionals, to identify and remediate weaknesses in our platform before they can be exploited.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, newpak will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection obligations.

While newpak implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. Do not share your password with anyone, and contact our support team immediately if you suspect your account has been compromised.

9. Children's Privacy

The newpak platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or store personal data relating to individuals under the age of 18. All players are required to verify their age as part of the registration and KYC process.

If newpak discovers that an account has been registered by or on behalf of a person under the age of 18, the account will be immediately suspended. Any deposits made will be returned to the original payment method after deducting any bonuses or promotional credits that were claimed. All personal data associated with the underage account will be deleted from our systems as soon as it is safe to do so, subject to any overriding legal retention obligations.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account on the newpak platform without your knowledge, please contact our support team at [email protected] immediately. We will investigate and take prompt action.

10. Policy Updates & Contact

Updates to This Policy

newpak reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this page. For material changes — those that meaningfully affect your rights or how your data is used — we will notify you via the email address registered on your account at least 14 days before the change takes effect.

Your continued use of the newpak platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with any changes, you may close your account in accordance with the account closure process described in our Terms & Conditions.

Contact Our Data Team

For any privacy-related inquiries, data rights requests, or concerns about how newpak handles your personal information, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Inquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24/7 within your newpak account after login
• Response Time: Email responses within 2–5 hours; live chat within 5 minutes; formal data rights requests within 30 calendar days