Everything you need to know about how Scratch collects, uses, and protects your personal information — explained clearly in Bengali.
Our Six Core Commitments to Data Protection
Your name, mobile number, and payment details on Scratch are all stored with AES-256 encryption — the same standard used by banks and government agencies.
Scratch does not sell your personal data to advertisers, third-party companies, or marketing agencies. That is a firm commitment.
With 2FA enabled on Scratch, no one can access your account even if they know your password. Every login is verified via a mobile OTP.
Scratch only collects the information genuinely needed to provide its services. No unnecessary data is ever requested.
You have the right to view, correct, or request deletion of your data at any time. Scratch responds within 72 hours.
Scratch does not send marketing emails or SMS without your consent. You can update your notification preferences at any time.
This Privacy Policy applies to everyone who uses the Scratch website or app. Continuing to use the platform means you accept this policy. If anything is unclear, feel free to ask our Bengali-language support team.
Scratch collects two types of information from you — what you provide directly, and what is generated automatically through your use of the platform.
Full name, date of birth, and National ID number (for KYC verification) — required for age verification and security purposes.
Mobile number and email address — used for account communication and sending security OTPs.
BKash, Nagad, or bank account details — used for processing transactions and preventing fraud. Full payment information is never stored on Scratch's servers.
A photo of your NID or passport — only requested for large withdrawals or when required for security purposes.
Certain technical data is collected automatically while you use Scratch. This is necessary to maintain platform security and improve service quality:
Scratch only collects and uses your data for specific, legitimate purposes. No information is stored unnecessarily.
Scratch never uses your data for ad targeting or sells it to third parties.
Scratch uses industry-leading technology to keep your data secure. See the details below:
All data exchanged between your browser and Scratch servers is encrypted via HTTPS. No third party can intercept or read it.
Your personal and financial data stored on our servers is secured with AES-256-bit encryption — the same standard used by banking systems.
With 2FA enabled, an OTP is sent to your mobile on every login. Even if your password is compromised, your account stays secure.
Scratch's servers and software are regularly audited by independent third-party security experts. Any vulnerabilities identified are resolved immediately.
Your full bKash or bank account details are never stored on Scratch's servers. All transactions are processed securely through payment gateway tokenization.
No Scratch employee will ever ask for your password, OTP, or payment PIN by phone or message. If anyone does, it is fraudulent – contact support immediately.
Scratch does not sell your data to third parties and does not generally share it. However, in limited circumstances, certain information may be shared with specific parties:
In all of the above cases, data is shared under strict confidentiality agreements. scratch ensures that third parties maintain the same standard of data protection.
Scratch's website and app use cookies – small data files stored on your device that help improve the quality of our services.
You can turn off all cookies except the essential ones. Cookies can be managed through your browser settings, though some features may not work properly if you do.
Scratch does not store your data indefinitely. Each category of information has a defined retention period:
Once the retention period ends, data is deleted securely and permanently. Users may also request deletion earlier, provided there are no legal obligations that prevent it.
You have specific rights over your personal data on Scratch. Knowing these rights means you stay in control of your own information.
You can request to see what information Scratch holds about you. It will be sent to you within 72 hours.
You can request corrections if any of your information is inaccurate. Personal details can also be updated directly from your account settings.
You can request deletion of your data when closing your account. However, certain information may need to be retained for a specified period due to legal obligations.
In certain circumstances, you can request that processing of your data be restricted. This is particularly useful during an ongoing investigation.
You can request a copy of your data in a readable format (JSON or CSV).
You can object to your data being used for specific purposes, particularly for marketing communications.
Contact support for any data-related requests: support@scratch.wine – Write "Privacy Request" in the subject line.
Scratch strictly does not serve anyone under the age of 18 and does not collect their data. Age is verified at the time of registration.
If a minor's information is ever collected by mistake, it is deleted immediately upon discovery and the associated account is closed. If you become aware that your child is using scratch, please contact support right away.
Scratch may update this Privacy Policy as needed. For significant changes, registered users will be notified by email and in-app notification at least 30 days in advance.
Continued use of scratch after any changes are made will be taken as acceptance of the updated policy. The date of each update is shown at the top of the page.
If you have any questions or concerns about our Privacy Policy or how your data is used, contact us directly:
Scratch takes your concerns seriously and aims to respond within 72 hours. If your issue remains unresolved, you also have the right to escalate it to an international data protection authority.
Many people hesitate to share personal information on online platforms — and that's a perfectly reasonable concern. scratch understands this, and works to demonstrate its commitment to data protection through real action, not just policy language.
Scratch's server infrastructure operates in world-class data centers equipped with physical security, uninterrupted power supply, and comprehensive cyber threat protection. Access logs are maintained for every server, and any unusual access attempt triggers an immediate alert.
Under scratch's internal policy, staff can only access data that is necessary for their specific role. Support agents cannot view your payment PIN, and the technical team cannot view your gaming history. This "least privilege" principle is an important layer of data protection.
Security incidents are rare, but when they occur, Scratch's incident response team acts within 4 hours. For serious incidents, affected users are notified directly within 72 hours.
Alongside scratch's own protections, there are steps you can take too: use a strong password, enable 2FA, avoid logging in on public WiFi, and never click links in suspicious messages.
Frequently Asked Questions about Odds & Referrals
Your personal data is fully protected on Scratch. Deposits via bKash, Bangla-language support, and a transparent privacy policy – that is what sets Scratch apart.