🔒 Data security

Scratch Privacy Policy — Your data, your rights

How Scratch collects your personal data, where it's stored, and how it's kept secure — all clearly explained right here.

Last updated: January 2026
SSL Encrypted
In Bangla Written
Third parties Not sold
What information is collected

Name, mobile number, device details, and transaction history — only the information needed to deliver our services.

Sections 1–2
How it is kept secure

Every piece of your data is protected with 256-bit SSL, server-side encryption, and regular audits.

Section 5
Sharing with Third Parties

When and under what circumstances your data may be shared is clearly stated — including the limitations.

Section 4
Cookie usage

Scratch uses cookies to keep the platform running and to enhance your experience. Learn more.

Section 6
Your Rights

The right to view, correct, or request deletion of your data — it's all in your hands.

Section 7
Contact & Complaints

For any data privacy questions or complaints, contact Scratch Support in Bangla.

Section 9

Your Data Journey at a Glance

👤
You
You Provide
→
🔒
SSL encryption
Secure Transfer
→
🗄️
Scratch Servers
Encrypted storage
→
✅
For service use only
Used for
→
🛡️
Your control
View / Delete
Your data is never sold to third parties — not ever

⚠️Important: By using the Scratch platform or creating an account, you agree to this Privacy Policy. Please read it in full.

1

What types of information we collect

Scratch collects two types of information about you — what you provide directly, and what is generated automatically as you use the platform.

Information you provide directly:

  • Full name, date of birth, and gender.
  • Mobile number and email address.
  • ID document details (national ID or passport number) — collected during KYC verification.
  • Payment method details (bKash/Nagad number — full card numbers are never stored).
  • What you write or say when contacting support.

Automatically collected data:

  • Device type, operating system, and browser version.
  • IP address and approximate location (district level only — not precise GPS).
  • A log of where you spent time on the platform and for how long.
  • Betting history, game activity, and transaction records.
  • Cookies and session tokens — see Section 6 for details.

2

How and When Data Is Collected

Scratch collects your information in the situations outlined below. Each case has a clearly defined purpose.

  • At registration: Basic information required to create an account.
  • During KYC Verification: Identity documents for verification purposes.
  • On every login: Device and IP information for security purposes.
  • On every transaction: Deposit and withdrawal records kept for your financial security.
  • While playing games: Betting and results history — used for dispute resolution.
  • When contacting support: Chat or email logs for issue resolution.
  • When participating in promotions: For distributing bonuses and rewards.

Scratch will never call you directly or send messages asking for sensitive information such as passwords, OTPs, or card numbers. If you ever receive such a request, report it to support immediately.


3

Why and how your data is used

Scratch uses your information only for the specific purposes listed below. No data is stored without a clear purpose.

  • Account management: Creating, verifying, and maintaining your account.
  • Payment Processing: Processing deposits and withdrawals securely.
  • Security & fraud prevention: Detecting unusual activity and preventing fraud.
  • KYC & Compliance: Meeting the requirements of international licensing terms and AML regulations.
  • Support Services: Providing accurate solutions to your issues.
  • Promotions & bonuses: Sending you relevant offers based on your preferences — with the option to opt out at any time.
  • Platform Improvement: Analysing which features are used most to improve our service.
  • Responsible gaming: Identifying unusual playing patterns and offering assistance where needed.

ℹ️Marketing Emails or SMS: You can opt out of marketing communications at any time — during registration or afterwards — via your account settings or by contacting support. Opting out of marketing will not affect essential transaction-related messages, which will continue to be sent.


4

Sharing Data with Third Parties

Scratch never sells your personal data. However, in certain specific situations, limited information may be shared with specific third parties. The reason for each case is set out below.

  • Payment processors (bKash, Nagad, Rocket, bank): Only the information needed to process a transaction is shared with the relevant service provider. They handle that data in accordance with their own privacy policy.
  • Game Software Providers: Only the session data needed to run the game is shared. Providers cannot identify you personally.
  • KYC Verification Services: A licensed third party is used for document verification. This information is used solely for that purpose.
  • Regulatory Authority: Data may be shared with authorities to meet the conditions of international gaming licences or other legal obligations.
  • Legal requirements: Information may be disclosed in response to a court order or a lawful request from a law enforcement authority.

📌 Your data is not shared with advertising networks or data brokers. Scratch does not monetize your data through advertising.


5

Technical Data Security Measures

Scratch uses industry-leading security measures to keep your data safe — not just on paper, but at every technical layer of the platform.

  • 256-Bit SSL/TLS Encryption: All data travelling from your browser to Scratch servers is encrypted — the same standard of protection used in banking.
  • Server-side encryption: Sensitive data (password hashes, identity document information) is stored on servers in encrypted form.
  • Two-Factor Authentication (2FA): OTP verification at login can be enabled for an extra layer of security.
  • Automatic session expiry: Your login session will automatically end after a period of inactivity.
  • Regular Security Audits: Third-party security experts conduct routine checks of the entire system.
  • Firewall and DDoS protection: Multiple layers of protection against external attacks.
  • Access Controls: Scratch employees can only access the information required for their specific role.

⚠️Your Responsibilities: Use a strong password and never share it with anyone. Be cautious when using Scratch on public Wi-Fi. If anything seems suspicious, contact support immediately.


6

Cookies & Tracking Technologies

Scratch uses cookies (small text files) to keep the platform running smoothly and to improve your experience. Cookies are stored on your device and can be cleared at any time through your browser settings.

Disabling "Essential" cookies may prevent the platform from functioning correctly. All other cookies can be turned off through your browser settings.


7

Your data rights

Scratch believes you should have control over your own data. That is why the following rights are available to you.

Right to Access Your Data

You can request a copy of the data Scratch holds about you. It is typically provided within 7 working days.

Right to rectification

You can correct any inaccurate or outdated information — either directly through Profile Settings or by contacting support.

Right to Deletion

If you close your account, you can request that your data be deleted — however, certain information may need to be retained for a specified period due to legal obligations.

Right to restrict processing

You can opt out of your data being used for specific purposes (such as marketing) without closing your account.

Right to data portability

If you would like to receive the data we hold about you in a structured format (JSON/CSV), simply submit a request to support.

Right to Lodge a Complaint

If you're not satisfied with how your data is being handled, you can raise a complaint with Scratch support first, and then escalate to the relevant licensing authority.


8

Data Retention Period

Scratch retains your data only for as long as necessary — never longer than needed. The retention period depends on the type of information involved.

  • Account Information: For as long as your account remains active.
  • Transaction Records: A minimum of 5 years, in accordance with international financial regulations.
  • KYC Documents: Retained for up to 5 years after account closure — required under AML obligations.
  • Chat & support logs: 2 years — useful for resolving disputes.
  • Betting History: 3 years.
  • Marketing Preferences: Deleted immediately upon withdrawal of consent.

Once the retention period ends, your data is securely deleted or fully anonymized.


9

Privacy Policy updates & contact

Scratch may update this Privacy Policy when necessary. You will be notified of any significant changes by email or via a notice on the platform before they take effect. Continued use of the platform after any changes constitutes acceptance of the updated policy.

For any questions, requests, or complaints regarding data privacy:

  • Email: support@scratch.express (use subject line "Privacy")
  • Live Chat: 24/7 support available in Bangla
  • Response time: Typically within 2 business days

Why Scratch Takes Your Data Privacy Seriously

Sharing personal information online has become a part of everyday life for almost everyone. From banking apps to social media, you're asked for your details at every turn. But where that information goes, who can see it, and how secure it really is — these are questions many people carry. Scratch believes those concerns are completely valid.

The information you provide when registering with Scratch is collected for three reasons — to verify your identity, to keep payments running smoothly, and to meet legal obligations. Nothing beyond that is requested. For example, Scratch never stores your full bank account number or card number.

Many users in Bangladesh ask: "Does Scratch share my bKash number with anyone?" The answer is no. Your bKash number is used solely to process payments, and only the information required for that specific transaction is shared with bKash. No other third party receives this number.

KYC identity verification can feel uncomfortable for many people. Is it safe to submit a copy of your national ID? At Scratch, these documents are stored with bank-grade encryption and can only be accessed by licensed KYC verification partners and regulatory authorities when required. Your KYC documents are never used for advertising purposes or shared with third parties.

A quick note on cookies. Scratch uses cookies for two main reasons — to keep the platform running smoothly (remembering your login session) and to personalise your experience (remembering your language preference). Scratch does not use advertising tracking cookies — using Scratch will not cause targeted ads to follow you around other websites.

Many users ask about the right to data deletion — does closing your account mean all your data is erased? The honest answer is: mostly yes, but not entirely. Under international financial regulations, there is a legal obligation to retain transaction records and KYC documents for a number of years. However, this information is only used in response to requests from regulatory authorities — never for any other purpose.

Scratch's responsible gaming tools use your information to support you. If unusual or potentially harmful playing patterns are detected, Scratch identifies them and offers assistance. This information is used solely for your protection — never against you.

If you have any questions or concerns about your data at any time, email us directly at support@scratch.express or send a message in Bengali via live chat. The Scratch team typically responds within 2 business days. Protecting your data is our priority — not just as a policy, but as part of our everyday practice.

FAQ

Scratch's Live Casino lets you play in real time with a dealer streaming live from a real studio. Getting started is straightforward — go to the Live Casino section and pick a table you like (Baccarat, Roulette, Teen Patti, Dragon Tiger, and more). Once you join a table, you'll see the dealer live on screen. To place a bet, use the chip buttons at the bottom of the screen — select your amount and tap on the table. Each round has a betting window (usually 15–30 seconds). When time is up, the dealer deals the cards or spins the wheel, and results are calculated automatically. Any winnings go straight to your wallet. It runs smoothly on mobile even on a 3G connection.

There are a few possible reasons why you might not be able to access your account. First, check that you're entering your password correctly — Caps Lock is sometimes on without notice on Bangladeshi keyboards. If you've forgotten your password, click "Forgot Password" on the login page and have an OTP sent to your registered mobile number. If Scratch has temporarily locked your account (due to suspicious activity or multiple incorrect password attempts), it will unlock automatically after 30 minutes. If you're still having trouble, reach out via live chat in Bangla — the support team will verify your identity and sort out your account within minutes. Your balance is always safe — even if your account is locked, all your information and funds remain fully secure.

Your data is safe — join Scratch today

Free registration. Secure data. Bangla support. 100% bonus on your first deposit.

বাংলা