Privacy Policy of newpick

1. Information We Collect

newpick collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and in limited circumstances from trusted third-party sources such as payment processors and identity verification providers.

1.1 Information You Provide Directly

When you register an account or interact with our support team, we collect the following categories of personal information:

• Identity data: Full legal name, date of birth, gender (where provided), and a copy of your government-issued National Identity Card (NID) or passport submitted during KYC verification.
• Contact data: Email address, Bangladeshi mobile phone number (including the number registered to your bKash, Nagad, or Rocket account), and residential address.
• Financial data: Payment method details including mobile financial service (MFS) account references, card type (Visa or Mastercard), and transaction records. We do not store full card numbers or mobile banking PINs on our servers.
• Account credentials: Your chosen username and a securely hashed version of your password. Your password is never stored in plain text.
• Support correspondence: The content of any messages, emails, or live chat conversations you initiate with our support team.

1.2 Information Collected Automatically

When you visit or use newpick, certain technical data is collected automatically by our servers and analytics systems:

• Device and browser data: IP address, device type (mobile or desktop), operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, games launched, bet history, session start and end times, and navigation paths through the Platform.
• Geolocation data: Approximate geographic location derived from your IP address. We use this data solely for fraud prevention and to ensure that access restrictions are appropriately applied.
• Cookie and tracking data: Data stored in cookies, local storage, and similar technologies as described in Section 4 of this Policy.

1.3 Information from Third Parties

In specific circumstances we may receive information about you from third-party sources, including:

• Identity verification and anti-fraud providers who supplement your submitted KYC documents with data from official registries.
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm the status and ownership of transactions.
• Our game providers (Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe) who report session outcomes and detect unusual betting patterns on our behalf.

2. How We Use Your Data

newpick processes your personal data only where we have a lawful basis to do so. The table below summarises the primary purposes for which your data is used and the corresponding legal basis for each activity.

Where we rely on your consent as the legal basis for processing (for example, to send you promotional emails about new games, seasonal offers such as Eid bonuses, or BPL cricket betting promotions), you may withdraw that consent at any time by updating your communication preferences within your account dashboard or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

3. Data Sharing & Third Parties

newpick does not sell, rent, or lease your personal data to any third party. We share your information only in the limited circumstances described below, and only with parties who are bound by appropriate data protection obligations.

3.1 Essential Service Providers

To deliver our services, we engage the following categories of third-party service providers who may process your data on our behalf:

• Payment processors: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) receive the transaction and identity data necessary to execute your deposit and withdrawal instructions.
• Game providers: Certified studios including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive your session and account reference data to deliver game content and settle outcomes.
• Identity verification providers: Third-party KYC and AML screening services receive your submitted identity documents to verify authenticity and cross-reference watchlists.
• Cloud infrastructure providers: Our hosting and database infrastructure partners store your account data on servers protected by enterprise-grade physical and logical security controls.
• Customer support platforms: Our live chat and ticketing system provider processes the content of support interactions to enable our team to assist you effectively.

All third-party processors engaged by newpick are contractually required to process your data solely on our documented instructions, to implement appropriate technical and organisational security measures, and to delete or return data upon termination of their engagement.

3.2 Legal Disclosures

newpick may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or when we reasonably believe disclosure is necessary to prevent fraud, protect the rights or safety of our users, or defend against legal claims. In such cases we will disclose only the minimum information required to satisfy the legal obligation.

4. Cookies & Tracking Technologies

newpick uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform, remember your preferences, maintain session security, and analyse how players interact with our services. Cookies are small text files placed on your device by your web browser when you visit our site.

4.1 Categories of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account security state, and prevent cross-site request forgery. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and last-visited game category — so that you do not need to reconfigure them on each visit.
• Analytics cookies: We use anonymised analytics cookies to understand how players navigate the Platform, which pages attract the most engagement, and where technical errors may be occurring. This data is used exclusively to improve the Platform experience and is never shared for advertising purposes.
• Fraud-prevention cookies: These cookies assign a unique identifier to your browser session to help detect and block suspicious activity, including multiple account creation attempts and automated bot access.

4.2 Managing Your Cookie Preferences

You can control non-essential cookies through your browser's privacy settings. Most modern browsers allow you to block or delete cookies, though doing so may affect certain features of newpick. Strictly necessary cookies cannot be disabled via browser settings as they are integral to secure session management. For detailed instructions on managing cookies in your specific browser, please consult your browser's official help documentation.

5. Data Security Measures

newpick implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• Transport Layer Security (TLS): All data in transit between your device and our servers is encrypted using current-generation TLS protocols. Our SSL certificate is maintained and renewed on schedule to prevent lapses in encryption coverage.
• Password hashing: Account passwords are never stored in plain text. We apply a strong cryptographic hashing algorithm with per-account salting so that even in the event of a data breach, raw passwords cannot be recovered.
• Access controls: Access to production systems and customer data is restricted on a strict need-to-know basis. All internal access events are logged and reviewed as part of our ongoing security monitoring programme.
• Regular security assessments: Our infrastructure and application code undergo periodic security reviews to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach affecting your personal information, newpick will notify affected players without undue delay and provide clear guidance on the steps we are taking to contain and remediate the incident.

While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials and for ensuring that your device is adequately protected against malware and unauthorised access.

6. Data Retention Periods

newpick retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with our legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open with newpick.
• Transaction records and bet history: Retained for a minimum of 5 years following the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years following account closure to comply with anti-money laundering obligations.
• Support correspondence: Retained for 2 years from the date of the most recent interaction, unless the correspondence relates to an ongoing dispute or legal claim.
• Analytics and usage data: Retained in anonymised or aggregated form for up to 3 years for the purpose of Platform improvement.
• Marketing consent records: Retained for the duration of consent plus 1 year to demonstrate compliance in the event of a regulatory inquiry.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identified individual. If you request early deletion of your data under your rights described in Section 7, we will process that request subject to any overriding legal retention obligations.

7. Your Rights Over Your Data

As a player registered with newpick, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at support@newpick with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete our response within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of all personal data that newpick holds about you, along with information about how that data is being processed, where it originated, and with whom it has been shared. We will provide this information free of charge in a structured, commonly used format.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as contact information), you may be able to update your details directly within your account dashboard without contacting support.

7.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where you believe it has been processed unlawfully. Please note that this right is subject to overriding legal obligations — for example, we are required to retain transaction records for a minimum period regardless of a deletion request.

7.4 Right to Restriction of Processing

In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that we temporarily restrict the processing of your personal data. During a restriction period, we will continue to store your data but will not actively process it except to defend against legal claims.

7.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted directly to another service provider where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interest as our legal basis, including for direct marketing purposes. If you object to marketing communications, we will stop sending them within 5 business days of receiving your objection.

8. Changes to This Policy

newpick may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will provide notice to registered players via the email address associated with their account and will display a prominent notice on the Platform for a period of at least 7 days before the revised Policy takes effect.

The effective date at the top of this page will always reflect when the current version was last updated. We encourage all players to review this Policy periodically. Your continued use of newpick following the publication of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Policy, how we handle your data, or wish to exercise any of your rights, please do not hesitate to reach out to us at support@newpick. We are committed to addressing your concerns promptly and transparently.