SM40 Privacy Policy — Your Data, Our Responsibility

1 Scope & Applicability

SM40 (sm40.win) is an international online gaming and Sports Betting platform serving users in Bangladesh and across the world. SM40's Privacy Policy ("Policy") explains in detail how your personal information is collected, stored, used, and protected.

By using the SM40 website or mobile platform, you are considered to have agreed to this Privacy Policy. SM40 respects the privacy of its users at the highest level and will never misuse your information.

• This Policy applies to all SM40 services and platforms.
• This Policy applies to the SM40 website, mobile app, and all digital services.
• SM40 does not collect or process data from users under the age of 18.
• SM40 complies with international data protection laws, including GDPR.

2 What Information Is Collected

SM40 collects only the information strictly necessary to provide you with our services. No unnecessary data is collected.

3 Purpose of Data Use

SM40 uses collected information only for specific purposes. Every use of your data is clearly defined and aimed at improving your experience.

• For account creation and management — your mobile number and name are used to complete the registration process.
• For payment processing — financial information is used to securely complete deposits and withdrawals.
• For security and fraud prevention — device information is used to detect multiple accounts or suspicious activity.
• For service improvement — SM40 analyzes your gaming preferences to deliver a better experience.
• To support responsible gaming — gaming patterns are analyzed and alerts are sent if signs of addictive behavior are detected.
• To fulfill legal obligations — to meet the requirements of applicable laws and regulatory authorities.
• For promotional communications — offers and bonuses are shared only with your consent.

4 Data Sharing Policy

SM40 never shares your personal information with unauthorized parties. However, limited data may be shared with trusted partners where necessary to deliver our services.

When Your Information May Be Shared

• Payment Providers: Payment gateways such as bKash, Nagad, and Rocket will receive the information necessary to process payments.
• Law enforcement agencies: Information may be disclosed to authorities when required by a court order or legal obligation.
• Security Partners: We work with trusted security firms to detect cyberattacks and fraudulent activity.
• Business Transfers: If SM40 is ever acquired or merged, your data may transfer to the new ownership, and you will be notified in advance.

5 Cookies & Tracking Technologies

SM40 uses cookies and similar technologies on its website to enhance your browsing experience. Cookies are small text files stored in your browser.

Cookie Types

• Essential Cookies: Login sessions and security tokens — the site cannot function properly without these.
• Performance Cookies: Used to measure page load times and overall site performance.
• Preference Cookies: Used to remember your language, theme, and other preferences.
• Analytics Cookies: Used to generate site usage statistics — fully anonymized.

You can manage or delete cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality of some SM40 site features.

6 Data Retention Period

SM40 does not retain your information longer than necessary. Each type of data has a defined retention period based on the nature of the service and applicable legal requirements.

• Active account data: retained until the account is closed.
• Financial transaction records: generally retained for up to 5 years as required by law.
• Gaming logs: retained for up to 2 years for responsible gaming and dispute resolution purposes.
• Personal data after account closure: deleted within 30 days of receiving your request.
• Cookie data: session cookies are deleted when the browser is closed; others are retained for up to 1 year.

7 Your Privacy Rights

As an SM40 platform user, you have certain fundamental privacy rights. SM40 respects these rights and is committed to assisting you with any related request.

• Right to Know: You can submit a request to find out what personal information SM40 holds about you.
• Right to Rectification: If any of your information is inaccurate, you can request a correction.
• Right to Erasure: In certain circumstances, you may request that your data be deleted.
• Right to Restrict Processing: In certain circumstances, you can request that the processing of your information be temporarily restricted.
• Right to Object: You may object to marketing communications or certain types of data processing at any time.
• Right to Portability: You can request a copy of your information in a machine-readable format.
• Right to Withdraw Consent: You may withdraw your consent at any time.

8 Security Measures

SM40 uses industry-leading security technology to keep your data safe. Our security team monitors systems around the clock, 24 hours a day.

• TLS 1.3 / 256-bit SSL encryption is used for all data transfers.
• Stored data is protected with AES-256 encryption.
• Two-factor authentication (2FA) is available for all accounts.
• Regular cybersecurity audits and penetration testing are conducted.
• Automated alerts are sent when unusual login activity or transactions are detected.
• Data backups are performed regularly and stored on separate, secure servers.

9 Third-Party Links & Services

The SM40 platform may integrate certain third-party services, such as payment gateways or game providers. Each of these services has its own privacy policy.

• When you access a third-party service, that service's own privacy policy will apply.
• SM40 is not responsible for how third parties manage their data.
• For information related to payment gateways, please refer to the respective service's policy.
• SM40 works only with trusted and verified partners.

10 Children's Privacy

SM40 strictly prohibits providing services to or collecting information from anyone under the age of 18. The SM40 platform is intended exclusively for adults.

• Age is verified at registration, and any account belonging to a minor is closed immediately.
• Any data found to have been collected from a minor will be deleted immediately.
• Parents can use parental control software to prevent children from accessing the SM40 platform.
• If a child has accidentally created an account, please notify us at [email protected].

11 Privacy Policy Changes

SM40 may update this Privacy Policy from time to time. Changes may occur due to legal updates, the addition of new services, or security improvements.

• For significant changes, SM40 will post a notice on the website and notify users via their registered email.
• The latest version of this policy is always available on this page.
• Continued use of SM40 after any changes will be considered acceptance of the updated policy.
• You can check the "Last Updated" date at the top of the page to stay informed of any changes.

12 Contact & Complaints

If you have any questions, concerns, or complaints regarding SM40's Privacy Policy, please contact our dedicated privacy team.

• Email: [email protected] — replies are typically sent within 24 hours.
• Live Chat: 24/7 support is available in Bengali on the SM40 website.
• For data protection complaints, an initial response will be provided within 72 hours.
• Any request related to exercising your rights will be processed within a maximum of 30 business days.