Icefish Privacy Policy — How Your Information Is Protected

1. Introduction

Icefish (icefish.onl) takes the privacy of its members very seriously. This Privacy Policy explains what information Icefish collects, how it is used, how long it is kept, and what rights you have over that information.

This document is written in plain, straightforward English by design. Lengthy legal documents can be hard to read — so every point here is stated directly and clearly. Icefish's policy is built in line with international data protection standards (aligned with GDPR principles).

This policy may be updated at any time. For significant changes, you will be notified via SMS or in-app notification. The date of the most recent update is always displayed at the top of the page.

2. What information Icefish collects

Icefish collects only the information that is necessary — nothing beyond that. Data is collected in three situations: when you create an account, when you use the platform, and when you make a payment.

Icefish never collects your password, payment PIN, or card number. All payment transactions are processed directly through bKash, Nagad, or Rocket's own secure systems.

3. Why Information Is Collected

Here is a straightforward breakdown of how Icefish uses your information. There are no hidden purposes.

• For account creation and management — mobile number OTP verification and login management.
• For KYC identity verification — your National ID number is used to confirm your age and identity.
• For payment processing — to complete deposits and withdrawals accurately.
• For fraud prevention — to detect unusual transactions or multiple accounts.
• To promote responsible gambling — by analysing play patterns to identify potentially risky behaviour.
• To provide customer support — understanding your issue history so it can be resolved quickly.
• To send you relevant offers — promotions tailored to your play style (can be turned off).

4. When Information Is Shared

Icefish does not share your information with third parties — with a few limited, specific exceptions. Those exceptions are clearly outlined below.

• Payment providers: Only the minimum information necessary for transaction verification is shared with Bkash, Nagad, and Rocket.
• Legal Obligation: If a court or government authority requests information through a legal process, Icefish is required by law to comply.
• Technology service providers: Those involved in server hosting or security services are granted limited access under strict confidentiality agreements.
• Emergency Security: In cases of cyberattacks or serious fraud, limited data may be shared for investigation purposes.

Outside of these four exceptions, Icefish will not share your information under any circumstances. Sharing data with advertising companies, data brokers, or for any other commercial purpose would constitute a violation of this policy — and Icefish does not do it.

5. Security Measures

Icefish uses multiple layers of technical security working together. The architecture is built on the principle that if one layer fails, the others continue to provide protection.

• Transmission encryption: All data traveling between your browser or app and Icefish servers is encrypted with 256-bit SSL/TLS.
• Storage encryption: Sensitive data stored on our servers (such as NID numbers) is kept in an encrypted state.
• Two-factor authentication (2FA): SMS OTP is required when logging in from a new device.
• Automated Fraud Detection: If unusual login activity or transactions are detected, the account is temporarily placed in a protection mode.
• Access control: Icefish staff are only granted access to the information necessary for their specific role — not to all user data.
• Regular security audits: Our systems are routinely audited by independent external experts.

Keep in mind, though — no one can guarantee 100% security on the internet. Icefish takes every possible measure, but keeping your password strong and confidential is your responsibility.

6. Cookie Policy

The Icefish website and app use cookies — this is standard practice. Cookies are small text files stored on your device. Icefish uses three types of cookies.

Disabling analytics and functional cookies may affect some features, but your core betting and payment experience will not be impacted.

7. Your Rights

You have a number of rights over your data at Icefish — to exercise any of them, simply contact Support.

8. How Long Your Data Is Retained

Icefish does not retain data indefinitely. Each type of data has its own defined retention period.

• While your account is active: All information necessary for account management is retained.
• After account closure: The deletion process for personal data begins within 30 days.
• Transaction records: For financial fraud prevention and legal compliance, data may be retained for up to 5 years.
• KYC Documents: Up to a maximum of 6 months after account closure — after which it is permanently deleted.
• Support chat records: Deleted 2 years after last contact.

If any data needs to be kept beyond the periods listed above due to legal obligations, Icefish will inform you directly.

9. Privacy Contact

For any questions, concerns, or requests regarding our Privacy Policy, contact Icefish directly. You're welcome to reach out in Bengali — and you'll receive a reply in Bengali.

Icefish typically responds to privacy-related requests within 24–72 hours. More complex requests — such as data deletion or exporting a copy of your data — may take a little longer.