Privacy Policy — yflex

1. Information We Collect

When you use the yflex platform — whether browsing the website, creating an account, making a deposit, or placing a bet — we may collect a range of personal information about you. This section describes the categories of data we gather and the circumstances in which each type is collected.

1.1 Registration and Identity Information

When you open an account with yflex, we ask you to provide the following details:

• Full legal name
• Date of birth (to verify you are 18 or older)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address
• Mobile phone number
• Preferred currency (Bangladeshi Taka, BDT)
• Username and password (passwords are stored in hashed form — never in plain text)

1.2 Identity Verification (KYC) Documents

To comply with our anti-money-laundering obligations and to confirm that you meet the 18+ age requirement, we may request copies of government-issued identity documents such as your national identity card (NID), passport, or driving licence. These documents are processed securely and stored only for as long as legally required.

1.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect transaction-related information including:

• Payment method details (e.g., bKash account number, Nagad wallet reference, Rocket number, Upay ID, Visa or Mastercard partial card number)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history
• Account balance information

Full payment card numbers are never stored on yflex servers. Card processing is handled by certified payment gateway partners.

1.4 Gaming and Betting Activity

We maintain records of your activity on the platform, including games played, bets placed, wager amounts, outcomes, bonus usage, session start and end times, and any self-imposed limits you have set. This data is used to provide you with a personalised experience, to detect problem gambling indicators, and to operate fair-play monitoring systems.

1.5 Technical and Device Data

When you access yflex, our systems automatically record certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser
• Pages visited, links clicked, and time spent on each page
• Referring website or traffic source
• Session duration and interaction events

This data is used for fraud prevention, security monitoring, platform performance optimisation, and aggregate analytics.

1.6 Communications Data

If you contact our support team via email or live chat, we retain records of those communications, including the content of messages, timestamps, and any documents you share. This helps us resolve disputes, improve customer service quality, and maintain an audit trail.

2. How We Use Your Data

yflex uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with those purposes. The table below summarises the primary uses of the data we collect:

Marketing Communications

If you have opted in to receive promotional communications from yflex, we may use your email address and gaming preferences to send you information about bonuses, seasonal promotions (such as those around the BPL, IPL, Eid, or Pohela Boishakh), and new games. You can withdraw your consent and unsubscribe from marketing emails at any time by contacting [email protected] or using the unsubscribe mechanism included in each promotional email.

yflex will never send marketing communications to players who have activated a self-exclusion arrangement.

3. Legal Basis for Processing

yflex processes your personal data only where a valid legal basis exists. The grounds on which we rely are as follows:

• Contractual necessity: Processing is necessary to provide you with the services you have requested — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Certain processing activities are required by applicable law, including identity verification (KYC), anti-money-laundering record-keeping, and responding to lawful requests from regulatory or law-enforcement authorities.
• Legitimate interests: We process certain data (such as technical and device data) on the basis of our legitimate interests in operating a secure, fair, and well-functioning platform — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, to send marketing communications or to place non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Cookies and Tracking Technologies

yflex uses cookies and similar tracking technologies to improve your experience on the platform, to keep you logged in, to remember your preferences, and to understand how visitors interact with our website. This section explains the types of cookies we use and the purposes they serve.

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to recall information about your session. Cookies cannot execute code or deliver viruses, and they cannot read files stored on your device beyond what was placed by the site that set them.

Types of Cookies We Use

Managing Cookies

Strictly necessary cookies cannot be disabled as they are required for the platform to operate. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to refuse, delete, or receive notifications about cookies. Please note that disabling certain cookies may affect the functionality of the yflex platform.

yflex does not use third-party advertising cookies or behavioural targeting cookies that track you across unrelated websites.

5. Data Sharing and Disclosure

yflex does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Service Providers and Data Processors

We engage carefully selected third-party service providers to help us operate the yflex platform. These providers act as data processors on our behalf and are contractually required to handle your data in accordance with our instructions and applicable data protection standards. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways — to process deposits and withdrawals securely.
• Identity verification providers: Third-party KYC services used to verify age and identity documents.
• Game providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who receive gameplay data necessary to deliver their games.
• Fraud detection and cybersecurity vendors: Specialists who help us identify and prevent fraudulent activity and account compromise.
• Analytics providers: Platform performance analytics tools that process anonymised, aggregated usage data.

Legal Authorities

yflex may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, pursuant to a court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of some or all of yflex's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and of any material change to the way your data is handled as a result.

6. Data Retention

yflex retains your personal data for as long as your account is active and for a defined period thereafter, in accordance with our legal obligations and legitimate operational needs. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of the account plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC / identity verification documents: Retained for a minimum of 5 years following the conclusion of the business relationship.
• Gaming activity logs: Retained for 3 years following account closure, unless a longer period is required for dispute resolution or regulatory compliance.
• Support communications: Retained for 2 years from the date of the last communication, unless the content relates to an unresolved dispute.
• Technical and device logs: Retained for up to 12 months for security monitoring and fraud detection purposes.
• Marketing preferences and consent records: Retained for the duration of the consent, plus 3 years after consent is withdrawn.

When personal data is no longer required for any legitimate purpose, yflex will securely delete or anonymise it in a manner that prevents reconstruction of the original data. Anonymised aggregate data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a user of the yflex platform, you hold a number of rights in relation to the personal data we hold about you. We take these rights seriously and will respond to any request within a reasonable timeframe — typically within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data yflex holds about you. We will provide this in a structured, commonly used format. We may ask you to verify your identity before fulfilling an access request to protect against unauthorised disclosure.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update many details (such as your contact information) directly from within your yflex account settings.

Right to Erasure ("Right to be Forgotten")

You may request that yflex delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Please note that we may be unable to erase certain data where retention is required by law (for example, transaction records required for anti-money-laundering compliance).

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing pending verification of legitimate grounds.

Right to Data Portability

Where processing is based on your consent or a contract and carried out by automated means, you have the right to receive your personal data in a machine-readable format and to have it transmitted to another controller where technically feasible.

Right to Object

You have the right to object to processing based on legitimate interests, and you have an absolute right to object to processing for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.

How to Exercise Your Rights

To exercise any of the above rights, please contact our support team in writing at:

8. Data Security

yflex implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online service can guarantee absolute security, we invest significantly in maintaining a safe and secure environment for our players.

Technical Measures

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Passwords stored exclusively in hashed, salted form — never in readable plain text.
• Intrusion detection systems (IDS) and firewall protection on all production servers.
• Automated monitoring for suspicious login attempts, unusual transaction patterns, and potential data breaches.
• Regular security audits and vulnerability assessments conducted by independent third parties.

Organisational Measures

• Access to personal data is strictly limited to yflex staff and service providers who need it to perform their designated functions.
• All staff with access to personal data are subject to confidentiality obligations.
• Staff receive regular training on data protection responsibilities and security awareness.

What You Can Do

You play an important role in keeping your account secure. yflex recommends that you use a strong, unique password for your account, enable two-factor authentication where available, and log out of your account when using shared or public devices. If you believe your account has been compromised, contact us immediately at [email protected].

9. Third-Party Services

The yflex platform integrates with a number of third-party services in order to deliver its full range of features. Each of these third parties operates under its own privacy policy and data processing terms, which are separate from this Privacy Policy.

Game Providers

Games on yflex are supplied by certified international game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch and play a game, certain technical data (such as session identifiers, wager amounts, and game outcomes) is transmitted to the relevant game provider's systems to deliver the game and determine results. Game providers are contractually required to protect this data and are not permitted to use it for independent marketing purposes.

Payment Providers

Deposits and withdrawals are processed via payment partners including bKash, Nagad, Rocket, Upay, and card payment networks (Visa, Mastercard). Each payment partner handles the transaction data necessary to execute the transfer within its own secure infrastructure . yflex does not store full card numbers or mobile banking PINs. Payment partners are independently certified and operate under their own data protection frameworks.

Analytics Services

yflex uses aggregated, anonymised analytics tools to understand how players navigate the platform, which features are most used, and where technical issues arise. These tools process data in a form that does not identify individual users, and the results are used solely to improve the platform experience for all players.

10. Policy Updates

yflex may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or best-practice data protection standards. When we make a material change to this policy, we will notify you by displaying a prominent notice on the yflex platform and, where appropriate, by sending a notification to the email address registered to your account.

The date at the top of this page ("Effective Date") reflects when the current version of the policy came into force. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Continued use of the yflex platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

If you have questions or concerns about any aspect of this Privacy Policy — or about the way yflex handles your personal data — please do not hesitate to contact us. Our support team is available seven days a week during Bangladesh Standard Time (BST, UTC+6) business hours and will be happy to assist.