This is not a ranking. It is a practical way to separate law, domain identity, operator claims, payment records and complaint routes before treating a logo or advertisement as proof.
CIRT's exact-domain AsyncRAT and fraudulent-gambling-infrastructure finding; the verdict does not extend to other JILI wording or domains.
Four official ledger sources, two captures from two hosts, two evidence tables and dated limitations.
Read the full domain investigationJaya9: Search visibility is not identity evidence; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the Jaya9 investigationMCW Casino: Testing a licence category against an exact identity chain; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the MCW Casino investigationBABU88: Separating account identity from recipient identity; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the BABU88 investigationBodu88 Casino: Publishing unknowns in a sparse, recently created record; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the Bodu88 Casino investigationCrickex Casino: The limits of a licence badge in withdrawal evidence; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the Crickex Casino investigationA familiar brand name, colour scheme, app icon or Bangladesh-facing advertisement can appear on unrelated web addresses. Copy the full URL from the browser, record both addresses when a redirect occurs, and add the Bangladesh time at which you observed it. Being reachable from Bangladesh, displaying a local phone number, or naming bKash or Nagad does not establish authorisation to offer online casino play in Bangladesh.
A domain check goes beyond spelling. Identify the operating entity, test whether the claimed company and licence number refer to the same legal person, determine whether a regulator register names the exact web address, and record the date on which the authorisation was valid. If one link in that chain is missing, label it unknown. A confident guess is not a substitute for the missing record.
The 13 August 2026 review reconciled the Legislative Division's current index, Government Gazette records and the state news agency's implementation summary. The Gambling Prevention Act 2026 is Act No. 98 of 2026 and took effect on 1 July 2026, repealing the Public Gambling Act 1867 and creating a current framework covering online and remote gambling, casino betting, digital platforms, promotion and gambling-linked payment conduct. Act No. 99 of the same date removed section 20 from the Cyber Security Act 2026, so the former cyber-law summary is not presented as the current basis.
A foreign licence may authorise a specified activity in the regulator's own territory. It does not create Bangladesh approval. A genuine licence also does not by itself prove that withdrawal handling is fair, payment instructions are safe, or a lookalike domain belongs to the licensee. Keep four findings separate: Bangladesh legal status, licence authenticity, service conduct and cyber safety.
Preserve evidence that can still be checked later.
| Observation | Supportable statement | Unsupported leap |
|---|---|---|
| Bangla advertisement or Bangladesh number | The promotion targeted Bangladesh | The service has government approval |
| Foreign licence badge | A licence claim was displayed | The claim is authentic or valid in Bangladesh |
| MFS receipt and transaction reference | A particular transfer record exists | The casino is legal or the recipient owns it |
| Pending withdrawal | Funds had not arrived at a recorded time | Fraud has been finally established |
| Blocked domain or access error | Access failed in that test | A regulator or court issued a fraud finding |
A bank or MFS service dispute should begin with the provider's own complaint channel; the payment-entity pages explain the narrow eligibility for regulator escalation. Suspected crime may call for Online GD or attendance at a police station. Malware, phishing, credential theft or malicious infrastructure may fit the CIRT incident route. Do not infer consumer-authority jurisdiction over an offshore or prohibited service merely because an online form exists.
Do not send the same attachment pack everywhere. A payment provider may need account and transaction details that should never be posted publicly. CIRT may need the affected domain, logs, discovery method and impact. Police may need a chronology, location and identifying information. Maintain a compact incident log with each submission date, authority, reference number and response.
Even when recovery is uncertain, you can stop another deposit, reduce access to borrowed funds, block marketing, remove saved cards and tell a trusted person. Chasing a loss with a larger wager or one final transfer weakens both financial control and evidence preservation. If account compromise is possible, change credentials from a clean device and review active sessions before collecting more screenshots on the affected device.
We found no official source confirming a Bangladesh-wide, casino-specific self-exclusion register, so this site does not claim that one exists. For serious distress, loss of sleep or thoughts of self-harm, consult the government's National Institute of Mental Health. Use National Emergency Service 999 when there is immediate danger.
For every check, separate the question, observed fact, source date, uncertainty and next action. A later advertisement or support message can then be compared without rewriting the earlier record. When a familiar brand appears on a new domain, restart identity checks rather than copying an old verdict.
Refresh law, authority remit, payment-provider listings and live-domain evidence before updating a page. An older screenshot is historical evidence, not current approval.
BD-S01Legislative and Parliamentary Affairs Division
Identifies the Cyber Security Act 81/2026, Gambling Prevention Act 98/2026 and Cyber Security (Amendment) Act 99/2026.
Open official sourceBD-S17Bangladesh Government Press
Identifies Act No. 98 of 2026, dated 1 July 2026, in Gazette pages 20497–20511.
Open official sourceBD-S18Bangladesh Government Press
Identifies Act No. 99 of 2026, dated 1 July 2026, which removes section 20 from the Cyber Security Act 2026.
Open official sourceBD-S19Bangladesh Sangbad Sangstha
A dated state-news summary of commencement and provisions concerning online and remote gambling, promotion, payments and enforcement.
Open official sourceBD-S03Bangladesh Police
Explains the online complaint flow and says a complainant may need to attend a police station when the matter is suitable for a criminal case.
Open official sourceBD-S07BGD e-GOV CIRT
Shows fields for affected domains, logs, timing, impact and technical evidence in a cyber-incident report.
Open official sourceBD-S09BGD e-GOV CIRT
Records a dated campaign involving fake software, malware and local-payment lures; it does not justify claims about unrelated domains.
Open official sourceBD-S16National Institute of Mental Health
Identifies a government mental-health service and emergency contacts; it does not advertise a gambling-specific self-exclusion programme.
Open official sourceOfficial register captured 13 August 2026; it is not case-specific legal advice about a person or domain. Each source supports only the narrow proposition stated beside it. Recheck the live authority page before acting. Search snippets, advertising, forums and operator statements are not proof by themselves.
No. Availability, Bangla advertising, a local payment logo or a foreign licence does not prove Bangladesh authorisation. The current law and exact entity must be checked separately.
No. It proves a delay at a recorded time. A fraud conclusion needs more evidence about identity, terms, KYC, communications and any competent authority finding. Stopping new fees is still sensible.
Keep the original receipt, transaction reference, recipient, amount, time and provider complaint number. Redact phone numbers, balances, QR codes, PINs, OTPs and identity data from public copies.
No. We are not a recovery service, do not file complaints for users and cannot promise an outcome. We explain evidence preparation and official routes.