Data Protection

SM40's Privacy Policy
Your Data, Our Responsibility

SM40 believes the protection of your personal data is a fundamental right. This Privacy Policy clearly explains what data we collect, why we collect it, and how we keep it secure.

Last Updated: January 2026
SSL
256-bit encryption
0%
Sale of Data to Third Parties
24/7
Security Monitoring
GDPR
Compliance with Standards

01 Introduction

SM40 (https://sm40.xyz) is a trusted online gaming and Sports Betting platform. We provide our users with Privacy Protection is our top priority. This Privacy Policy explains what personal data SM40 collects, how that data is used, and the measures we take to keep your information safe.

By registering on or using SM40, you agree to this Privacy Policy fully acknowledge. If you do not agree with any part of this policy, you are requested to refrain from using the sm40 platform.

This policy has been drafted in compliance with applicable data protection laws in Bangladesh and international GDPR standards.

02 What Data Is Collected

SM40 only collects data that is necessary to provide you with the best possible service. We never collect unnecessary or excessive information.

Type of Data Example Reason for Collection
Identity Information Full name, date of birth, national ID number KYC Verification & Age Confirmation
Contact Information Mobile number, email address Account communications and security notifications
Financial information Mobile Banking/Nagad/Rocket number, transaction history Payment Processing & Fraud Prevention
Technical Information IP address, device information, browser type Security Monitoring & Experience Improvement
Usage Data Betting history, preferred games, session duration Service Improvement & Responsible Gaming Support
SM40 never directly stores your bank card number or PIN. All financial transactions are processed through secure third-party payment gateways.

03 How Your Data Is Used

SM40 uses collected data solely for the purposes listed below. We never use your data for unauthorized purposes or sell it to third parties.

  • Account management: For registration, login, and account verification.
  • Payment Processing: To process deposits and withdrawals securely.
  • Customer Support: To resolve your complaints or queries.
  • Security: To prevent fraud, money laundering, and unauthorized access.
  • Legal obligations: To meet the requirements of government or regulatory authorities.
  • Service Improvement: To further improve the user experience on the SM40 platform.
  • Promotional Communications: To send special offers only with your consent.
You can opt out of promotional messages at any time by contacting our support team.

04 Cookie Policy

SM40 uses cookies to enhance your browsing experience on the website Cookies Uses cookies — small text files stored in your browser that help enhance site functionality.

  • Essential Cookies: Essential for core site functionality. These cannot be disabled.
  • Performance Cookies: Used for site traffic and error analysis.
  • Functional Cookies: Helps remember your preferences such as language and theme.
  • Targeting Cookies: To show relevant content only with your consent.

You can manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of certain site features.

05 Data Sharing & Disclosure

SM40 never sells or rents your personal data to third parties for commercial purposes. However, data may be shared in the following limited circumstances:

  • Payment Providers: Solely to process transactions with payment partners such as Mobile Banking, Nagad, and Rocket.
  • Law enforcement agencies: Upon receipt of a valid legal order from Bangladeshi authorities.
  • Security Partner: To ensure fraud detection and cybersecurity.
  • Technology Partners: Only the minimum data necessary to operate the service.
sm40 has strict data privacy agreements in place with all third parties. They may only use your information for specified purposes.

06 Data Security Measures

SM40 uses your Privacy Protection, SM40 has implemented industry-leading technical and organizational security measures. Our security infrastructure is continuously reviewed and updated.

  • SSL/TLS 256-bit encryption: All data transmissions are fully encrypted.
  • Two-Factor Authentication (2FA): An extra layer of security for your account.
  • Firewall & DDoS Protection: To protect the platform from cyberattacks.
  • Regular Security Audits: Periodic audits conducted by third-party security experts.
  • Data Backup: Regular backups stored on secure, encrypted servers.
  • Access control: Only authorized personnel may access specific data.

Please note that no data transmission over the internet is entirely risk-free. While SM40 applies the highest level of protection, we cannot guarantee absolute security against unauthorized access. Always keep your password and login credentials confidential.

07 Data Retention Period

SM40 does not retain your data longer than necessary. Retention periods depend on the type of data and applicable legal requirements.

  • Account information: For the duration the account is active, and for 5 years after closure.
  • Transaction Records: A minimum of 7 years as required by legal obligations.
  • KYC documents: Retained in accordance with regulatory authority guidelines.
  • Log Files: Up to 12 months for security analysis purposes.
  • Marketing Information: Until you withdraw your consent.

Once the retention period expires, SM40 will securely delete or anonymize your data.

08 Your Rights

As an SM40 user, you have several important rights regarding your personal data. We fully respect and uphold these rights.

Right to Access Your Data

You may request to know what data SM40 holds about you and obtain a copy of it.

Right to Rectification

To correct inaccurate or incomplete information, please contact our support team.

Right to Erasure

Where no legal obligation applies, you may request that your data be deleted.

Right to Restrict Processing

You may request that the processing of your data be restricted under certain circumstances.

Right to Data Portability

You may receive your data in a structured, machine-readable format.

Right to object

You may object to the processing of your data for specific purposes.

To exercise any of these rights, please contact our support team. We will respond within 30 business days.

09 Protection of Minors

SM40 is strictly prohibited for anyone under the age of 18. We never knowingly collect personal data from minors.

  • Age verification is carried out at the point of registration.
  • Age is verified through identity documents as part of the KYC process.
  • Accounts suspected of belonging to a minor are suspended immediately.
If we become aware that any minor's data has been collected inadvertently, we will delete it immediately.

10 Privacy Policy Updates

SM40 reserves the right to update this Privacy Policy update or amend this policy. For any significant changes, we will:

  • We will display the date of the latest update on this page.
  • Users will be notified via their registered email or app notification.
  • Your renewed consent will be requested for any significant changes.

Continued use of the SM40 platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

11 Get in Touch

If you have any questions, concerns, or requests regarding this Privacy Policy, please get in touch with us.

Response Time: Within 30 business days
Live Chat: 24/7 Support Available

Why SM40's Privacy Trusted

Explore the key features of our data protection that keep your information safe at all times.

End-to-end encryption

Every data transmission is fully secured with 256-bit SSL/TLS encryption. No third party can access or read this information.

Strict KYC verification

Every account on SM40 goes through the KYC process to ensure that only verified adults are using the platform.

Your Data Is Never Sold

SM40 never sells, rents, or trades your personal data. Your privacy is not a product to us — it is a responsibility.

24/7 Security Monitoring

Our security team monitors the platform around the clock. Any unusual activity is detected and addressed immediately.

GDPR compliant

SM40's Privacy Policy is built in accordance with international GDPR standards. You are entitled to the highest level of data protection.

Regular Security Audits

Regular penetration testing and audits are carried out by third-party specialists, keeping our security infrastructure consistently up to date.

Secure Platform

Play Safe on SM40, Win with Peace of Mind

Your data is fully protected. Join SM40 today and experience Bangladesh's most trusted gaming platform.

বাংলা