Privacy Policy
spboss — Your Data, Protected
At spboss, your privacy is not an afterthought — it is built into every layer of how we operate. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and the rights you hold as a player on the spboss platform.
Our Core Privacy Principles
Six principles that define how spboss approaches personal data — from the moment you visit our site to the day you close your account.
1. Information We Collect
When you interact with spboss — whether by visiting our website, registering a player account, making a deposit, or contacting our support team — we collect certain categories of personal information. The specific data collected depends on the nature of your interaction with the platform.
Account Registration Data: When you open a spboss account, we ask you to provide your full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number. This information is required to create and administer your account and to verify your identity in line with our KYC obligations.
Identity Verification (KYC) Documents: To comply with anti-money laundering requirements and to confirm that players are aged 18 and above, spboss collects copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, along with proof-of-address documents such as recent utility bills or bank statements issued in Bangladesh.
Financial & Transaction Data: We record details of all deposits and withdrawals processed through your spboss account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard), transaction amounts in BDT, transaction timestamps, and reference numbers. We do not store full card numbers or mobile banking PINs.
Gaming Activity Data: spboss logs your gameplay history, including games played (slots, live casino, cricket betting, Deuces Wild, Bingo Adventure), bet amounts, game outcomes, session start and end times, and any bonuses claimed or wagering requirements completed.
Technical & Device Data: When you access spboss.app, our servers automatically collect your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, and pages visited during your session. This data is used for security monitoring, fraud prevention, and platform optimisation.
Communications Data: If you contact our support team via live chat, WhatsApp, or email, we retain a record of that correspondence, including the content of messages and any attachments, for quality assurance and dispute resolution purposes.
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, NID number | Registration & KYC |
| Contact Data | Email address, mobile number, residential address | Registration |
| Financial Data | Transaction amounts, payment method references, BDT balances | Deposits & Withdrawals |
| Gaming Data | Bet history, game sessions, bonus usage | Platform activity |
| Technical Data | IP address, device type, browser, session logs | Automatic on site visit |
| Communications Data | Support chat logs, email correspondence | Support interactions |
2. How We Use Your Data
spboss processes your personal data only for the specific, legitimate purposes listed below. We do not use your data for any purpose incompatible with those stated at the time of collection.
- Account Management: To create, maintain, and administer your spboss player account, authenticate your identity at login, and enable you to access all platform features.
- Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records of all transactions.
- KYC & Age Verification: To verify that you are aged 18 or above, confirm the legitimacy of your identity documents, and comply with anti-money laundering obligations — a legal requirement for operating a responsible gaming platform.
- Fraud Prevention & Security: To monitor account activity for signs of fraud, unauthorised access, bonus abuse, match-fixing, or other prohibited conduct, and to protect both players and the platform from financial and reputational harm.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, WhatsApp, and email in connection with your spboss account.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the design, functionality, and performance of spboss.app, including game loading times, navigation flow, and mobile responsiveness.
- Responsible Gaming: To identify patterns of play that may indicate problem gambling behaviour, enforce self-exclusion requests, apply deposit limits, and proactively reach out to players who may need support.
- Legal Compliance: To retain records as required by applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.
- Promotional Communications: Where you have given explicit consent, to send you information about bonuses, seasonal promotions (such as Eid or Pohela Boishakh offers), new game launches, and BPL cricket betting opportunities. You may withdraw this consent at any time by contacting support or adjusting your account notification preferences.
3. Data Sharing & Third Parties
spboss does not sell your personal data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Game Technology Providers: To deliver casino and sports betting services, spboss integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your account identifier and session data to facilitate game play and verify fair outcomes. They are bound by contractual data protection obligations consistent with this policy.
Payment Processors: When you make a deposit or request a withdrawal, relevant transaction data is shared with the payment provider you select (bKash, Nagad, Rocket, Upay, or your chosen bank). This sharing is strictly limited to the information required to execute the transaction securely.
Identity Verification Services: spboss may engage third-party KYC and document verification services to authenticate identity documents and screen against sanctions lists. These services process your identity data solely for verification purposes and are prohibited from retaining or using it for any other purpose.
Fraud Prevention & Security Partners: We may share technical data (IP addresses, device fingerprints, session anomalies) with fraud detection and cybersecurity service providers to protect the integrity of the platform and the security of player accounts.
Legal & Regulatory Authorities: spboss will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, court order, or in connection with the investigation of suspected criminal activity involving our platform.
Business Transfers: In the event of a merger, acquisition, or transfer of substantially all assets of spboss, player data may be transferred to the successor entity. Affected players will be notified in advance and given the opportunity to close their accounts if they do not wish their data to be transferred.
5. Data Security & Storage
spboss takes the security of your personal data seriously and has implemented a layered set of technical and organisational safeguards designed to protect your information against unauthorised access, disclosure, alteration, or destruction.
Encryption: All data transmitted between your device and spboss.app is protected by 256-bit TLS/SSL encryption. This ensures that your login credentials, financial transactions, and personal information cannot be intercepted by third parties during transmission.
Access Controls: Access to personal data within the spboss organisation is granted on a strict need-to-know basis. Staff members can access only the data categories required to perform their specific role. All internal access is logged and subject to periodic audit review.
Server Security: Player data is stored on servers hosted in secure, access-controlled data centre facilities. Physical access to these facilities is restricted and monitored. Regular penetration testing and vulnerability assessments are conducted to identify and remediate potential weaknesses.
Password Security: spboss stores account passwords in a hashed and salted format using industry-standard cryptographic algorithms. This means that even in the unlikely event of a data breach, plaintext passwords cannot be recovered from stored hash values.
Security Incident Response: spboss maintains a documented incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and take all necessary steps to contain and remediate the incident.
Your Responsibility: While spboss takes extensive measures to secure its systems, you also have a role to play in protecting your account. You should use a strong, unique password for your spboss Login, never share your credentials with anyone, and contact our support team immediately if you suspect your account has been compromised.
6. Data Retention Policy
spboss retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal & AML compliance |
| KYC Documents | Duration of account + 5 years after closure | Regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| Gaming Activity Logs | 3 years from session date | Dispute resolution & responsible gaming |
| Support Communications | 2 years from last interaction | Quality assurance & dispute resolution |
| Technical & Security Logs | 12 months from log date | Security monitoring & fraud investigation |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent management compliance |
Once the applicable retention period has expired, spboss will either securely delete the data or, where deletion is not technically feasible in the immediate term, anonymise the data so that it can no longer be attributed to any identifiable individual.
Players who close their spboss account may request early deletion of personal data categories not subject to mandatory legal retention obligations by contacting our support team at . We will process such requests within 30 days of receipt, subject to verification of identity.
7. Your Privacy Rights
As a player on the spboss platform, you hold the following rights in relation to the personal data we hold about you. These rights apply regardless of whether your account is currently active, suspended, or closed.
- Right of Access: You may request a copy of the personal data that spboss holds about you at any time. We will provide this in a clear, structured format within 30 days of a verified request.
- Right to Rectification: If any personal data we hold is inaccurate or out of date, you have the right to request that it be corrected. You may update basic contact information directly through your account settings; for changes to identity documents or date of birth, please contact support.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. This right is subject to overriding legal retention requirements — for example, transaction records required for anti-money laundering compliance cannot be deleted on request alone.
- Right to Restrict Processing: You may ask spboss to suspend the processing of your personal data in certain circumstances, such as where you contest the accuracy of data we hold, while we investigate the matter.
- Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a machine-readable format so that it can be transferred to another service provider.
- Right to Object: You have the right to object to processing carried out on the basis of spboss's legitimate interests, including profiling for fraud prevention purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
To exercise any of the above rights, please contact our support team at with the subject line "Privacy Rights Request". We will ask you to verify your identity before processing the request. We aim to respond to all privacy rights requests within 30 days. Where a request is complex or we receive a high volume, we may extend this period by a further 30 days, in which case we will notify you of the extension.
8. Policy Updates & Contact
spboss reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will post the updated policy on this page with a revised effective date and notify registered players by email to the address associated with their account.
We encourage all players to review this Privacy Policy periodically. The most current version will always be accessible at spboss.app/privacy-policy. Your continued use of the platform after the effective date of a revised policy constitutes your acceptance of the updated terms.
Contact Us: If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which spboss processes your personal data, please reach out to our Data Protection team:
- Email: (subject: "Privacy Enquiry")
- Live Chat: Available 24/7 on spboss.app — response within 5 minutes on average
- WhatsApp Support: Available during Bangladesh Standard Time (BST, UTC+6) business hours
We take all privacy complaints seriously and commit to responding to every substantiated concern within 10 business days of receipt. Where a complaint cannot be resolved to your satisfaction, you may escalate the matter to the relevant data protection authority in your jurisdiction.
Your Privacy Is Safe at spboss
Now that you understand how we protect your data, explore everything spboss has to offer — from BPL cricket betting to premium slot games and live casino action, all in BDT.