Privacy Policy — newpuck

This Privacy Policy applies to all users of the newpuck platform, including visitors who browse without registering and registered players who hold an active account. By using newpuck, you acknowledge that you have read this Privacy Policy and that you consent to the data practices described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to request account closure and data deletion.

This policy is written in English and constitutes the authoritative version. References to "newpuck", "we", "us", and "the Operator" refer to the operator of the newpuck platform. References to "you", "Player", and "User" refer to any individual who accesses or uses the newpuck platform.

1. Data We Collect

1.1 Registration Data

When you create a newpuck account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, email address, and mobile phone number registered in Bangladesh. This data is required to open and maintain your account, verify your identity under our Know Your Customer (KYC) obligations, and communicate with you about your account activity.

1.2 Identity Verification Data

To comply with responsible gaming and anti-money laundering best practices, newpuck may request identity verification documents from players at any stage of the account lifecycle. Documents we may request include:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (biographical data page)
• Driver's licence issued by a recognised Bangladeshi authority
• Proof of address — utility bill, bank statement, or official correspondence dated within the last three months showing your name and Bangladeshi address

These documents are stored securely in encrypted form. They are used solely for identity verification and are not shared with third parties other than our regulated KYC verification service providers where applicable.

1.3 Financial & Transaction Data

When you make deposits or withdrawal requests on newpuck, we collect transaction data necessary to process those payments. This includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), the transaction amount in Bangladeshi Taka (৳ BDT), the date and time of the transaction, and transaction reference numbers. We do not store full card numbers on our servers. Card payment data is handled by our PCI-DSS compliant payment processing partners.

1.4 Account Activity Data

We automatically record data about how you use the newpuck platform. This includes games played, bet amounts and outcomes, session duration, login times, deposit and withdrawal history, bonus claims, and interactions with responsible gaming tools such as deposit limits and self-exclusion requests. This data is used to operate and personalise your account, detect suspicious activity, and fulfil our responsible gaming obligations.

1.5 Technical & Device Data

When you access newpuck, our servers automatically collect certain technical data including your IP address, browser type and version, device type and operating system, referring URL, and pages visited within our platform. This data is used for security monitoring, fraud prevention, platform optimisation, and aggregate analytics. It is not linked to your personal identity for advertising purposes.

2. How We Use Your Data

newpuck processes your personal data for the following purposes. For each purpose, we rely on one of the following lawful bases: performance of a contract with you, compliance with a legal obligation, our legitimate business interests, or your explicit consent where required.

We do not use automated decision-making (including profiling) in ways that produce legal effects or similarly significant impacts on players, except where required by law or where you have given explicit consent. Where automated tools are used to flag potentially harmful gambling patterns, a human member of our responsible gaming team reviews each flagged case before any action is taken on your account.

3. Data Sharing & Third Parties

newpuck does not sell your personal data. We may share your data with carefully selected third parties only where necessary to deliver our services or meet our legal obligations. The categories of third parties with whom we may share data, and the reasons for sharing, are set out below.

3.1 Payment Processors

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, we share the minimum necessary transaction data with the relevant payment service providers. These providers operate under their own privacy policies and are contractually required to handle your data securely and only for the purpose of processing your transaction.

3.2 KYC & Identity Verification Providers

Where we use a third-party identity verification service to assist with our KYC process, we share the identity documents and personal details you submit with that provider solely for verification purposes. These providers are bound by strict contractual data processing agreements and are prohibited from using your data for any other purpose.

3.3 Game Software Providers

The casino games available on newpuck are supplied by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical session data (such as a pseudonymous session token and bet amount) to facilitate real-time game play. They do not receive your full name, NID, payment details, or contact information.

3.4 Legal & Regulatory Authorities

newpuck may be required to disclose your personal data to law enforcement agencies, regulatory authorities, or courts in response to a lawful request, court order, or legal process. We will notify you of any such disclosure where we are legally permitted to do so.

4. Cookies & Tracking

newpuck uses cookies and similar technologies to operate the platform, remember your session, and analyse how players use our services. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot be used to access other files on your device.

4.1 Types of Cookies We Use

newpuck does not deploy third-party advertising or retargeting cookies. We do not use cross-site tracking technologies to serve you targeted advertisements on other websites or platforms after you leave newpuck.

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your newpuck account and using core platform features. Detailed guidance on managing cookies is available in the help section of your specific browser.

5. Data Retention

newpuck retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account registration data: Retained for the lifetime of your account and for a period of at least five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Account activity logs (bets, game sessions): Retained for a minimum of three (3) years from the date of each activity record.
• Customer support correspondence: Retained for three (3) years from the date of the interaction, or longer if the interaction relates to a dispute or investigation that remains open.
• Technical & device data logs: Retained for up to twelve (12) months, after which they are deleted or anonymised.
• Marketing preferences & consent records: Retained for the lifetime of your account and for two (2) years following account closure or withdrawal of consent, whichever is earlier.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to your identity. Where deletion is not immediately possible due to technical constraints (for example, data held in encrypted backup archives), we ensure the data is isolated and protected from further active processing until deletion can be completed.

6. Your Privacy Rights

As a player on newpuck, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at support@newpuck. We will respond to your request within 30 calendar days.

• Right to access: You may request a copy of the personal data newpuck holds about you, together with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: In certain circumstances you may request the deletion of your personal data. Please note that we may not be able to fulfil erasure requests where retention is required by law (for example, AML record-keeping obligations).
• Right to restrict processing: You may request that we restrict the processing of your data in specific circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where technically feasible and legally applicable, you may request a structured, machine-readable copy of the personal data you have provided to us.
• Right to withdraw consent: Where we process your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to the processing of your personal data where we rely on our legitimate interests as the lawful basis, unless we can demonstrate compelling legitimate grounds that override your interests.

7. Data Security

newpuck implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including identity documents and financial records
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific role
• Regular internal security reviews and vulnerability assessments of our platform infrastructure
• Secure, access-controlled data centres with physical security measures
• Pseudonymisation of data used for analytics and platform improvement purposes
• Staff training on data protection responsibilities and security best practices

While we apply robust security measures, no data transmission over the internet and no data storage system can be guaranteed to be 100% secure. In the event of a data breach that poses a significant risk to your rights and freedoms, newpuck will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

You also play an important role in keeping your account secure. You are responsible for maintaining the confidentiality of your newpuck login credentials and for notifying us immediately at support@newpuck if you suspect any unauthorised access to your account.

8. Contact & Data Queries

If you have any questions, concerns, or complaints about this Privacy Policy or about the way newpuck handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, seven days a week, in Bangladesh Standard Time (BST, UTC+6).

• Email: support@newpuck
• WhatsApp: +880 1700 000 000
• Live Chat: available from within your newpuck account dashboard after login
• Support hours: 00:00 – 24:00 BST (UTC+6), every day

---

9. Changes to This Privacy Policy

newpuck reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players by email or via an in-platform notification at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the newpuck platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

10. Links to Third-Party Sites

The newpuck platform may contain references to third-party services such as payment providers. This Privacy Policy applies only to newpuck and does not extend to the websites, apps, or services of third parties. We encourage you to read the privacy policies of any third-party services you interact with in connection with your use of newpuck.