This directory does not promote brands. It shows which investigation workflows are complete, which brand findings remain blocked by evidence gaps, and which task page fits the reader's problem.
CIRT's 17 May 2026 advisory associates the exact domain with an AsyncRAT C2 node and fraudulent gambling infrastructure.
CIRT advisory, incident route and Bangladesh Police complaint boundary.
Read the ck44jili.com investigationBangladesh Bank lists bKash Ltd.; no casino-merchant relationship is verified.
Provider list, CIPC's narrow MFS remit and CIRT payment-lure context.
Read the bKash payment investigationThe Bangladesh Bank row says Bangladesh Post Office ‘with interim approval of BB’; no stronger status is inferred.
Exact regulator wording, recipient evidence and provider-only complaint boundary.
Read the Nagad payment investigationBangladesh Bank lists Dutch Bangla Bank PLC.; no casino recipient is verified.
Provider list, transaction reconciliation and complaint-scope limits.
Read the Rocket payment investigationJaya9: Search visibility is not identity evidence; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the Jaya9 investigationMCW Casino: Testing a licence category against an exact identity chain; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the MCW Casino investigationBABU88: Separating account identity from recipient identity; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the BABU88 investigationBodu88 Casino: Publishing unknowns in a sparse, recently created record; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the Bodu88 Casino investigationCrickex Casino: The limits of a licence badge in withdrawal evidence; no exact domain is verified.
Affgate discovery, 2026 law, CIRT and police sources.
Read the Crickex Casino investigationBefore a brand can enter this directory, the evidence record must identify the exact domain, operating company, licence claim, regulator-register match, Bangladesh relevance, capture date, complaint material and response opportunity in separate fields. Search demand, an affiliate list, a social post, a logo or a search snippet cannot support a profile. An incomplete chain remains in research backlog instead of becoming a public verdict.
A green status supports only a narrow proposition backed by current primary evidence. Red requires an official adverse finding or strong corroboration. The exact ck44jili.com domain is published because CIRT made an adverse finding. Jaya9, MCW Casino, BABU88, Bodu88 Casino and Crickex Casino are separate amber investigations because dated discovery exists while exact domain, controller and authorisation remain unresolved. bKash, Nagad and Rocket appear only as payment entities with carefully bounded status.
| Topic | Current state | Reader task |
|---|---|---|
| Casino legal, legit or scam | Six investigations; five identities unresolved | Separate exact identity from Bangladesh law |
| Withdrawal complaint | Evidence workflow ready | Record balance, request, timeline and new fees |
| KYC and account blocking | Evidence workflow ready | Record request timing, policy capture and submitted data |
| bKash, Nagad and bank payment | Authority-backed payment route ready | Separate transaction reference, recipient and provider complaint |
| Fake or clone domain | CIRT-backed cyber workflow ready | Capture URL, redirect, file hash and device impact |
| Complaint routes | Payment-provider, police, CIRT and consumer remits separated | Send only the evidence each route needs |
| Stopping play and getting help | Bangladesh safety plan ready | Close new payment access and marketing routes |
Start with the exact URL and capture time rather than a marketing name. Extract the operating company, address, registration number and licence claim from the legal notice. In the regulator's official register, match company, licence number, approved trading name and authorised domains. When a register is dynamic, preserve the retrieval date and search method so another reviewer can reproduce the result.
Bangladesh relevance is a separate layer. Bangla promotion, a local-payment lure or Bangladesh traffic targeting may establish targeting, but not authorisation. A warning from a foreign regulator does not decide Bangladesh law either. The draft must label verified fact, regulator finding, operator statement and user allegation separately and use dates that show what was known when.
A user's report can be an investigation lead without being a fraud finding. Review the date, amount, payment rail, withdrawal request, KYC sequence, support response, domain and redacted account identifiers. Detect duplicate submissions, missing chronology and screenshots cropped so tightly that the relevant domain or app cannot be identified. Evidence quality can be assessed without publishing the complainant's identity.
Before offering a subject a fair opportunity to respond, verify that the contact address belongs to the relevant entity. No reply is not an admission; it can only be described as a dated non-response. No directory status may promise fund recovery, police action or a particular complaint outcome.
Start with the practical question rather than the label attached to the incident.
There are no clickable outbound links to an operator, affiliate, casino help centre, terms page or casino domain. Any future commercial CTA must pass only through the internal /go/play route, and that route cannot expose an operator destination without approved evidence. An amber investigation remains non-commercial and cannot turn a discovery record into a recommendation.
This boundary also protects the integrity of the review. Combining an investigative warning with a direct operator click can blur evidence and commercial purpose. Clickable source citations are therefore limited to government, regulator and public-authority pages. Any other relevant address belongs in the non-clickable evidence ledger with capture date and context.
Every future brand row must record the latest entity check, licence check, domain capture, Bangladesh legal review and next review date. If one field becomes stale, the entire green label cannot remain untouched; the affected proposition returns to yellow or blocked. A changed redirect requires a new evidence packet.
A removed or renamed entity is not silently erased. The old finding receives dated archive context so a reader cannot confuse historical and current status.
BD-S01Legislative and Parliamentary Affairs Division
Identifies the Cyber Security Act 81/2026, Gambling Prevention Act 98/2026 and Cyber Security (Amendment) Act 99/2026.
Open official sourceBD-S09BGD e-GOV CIRT
Records a dated campaign involving fake software, malware and local-payment lures; it does not justify claims about unrelated domains.
Open official sourceBD-S15Bangladesh Bank
Lists MFS services including bKash, Nagad and Rocket and identifies their business entities.
Open official sourceCapture of CIRT's 17 May 2026 advisory; it applies only to the infrastructure identified by that authority. Each source supports only the narrow proposition stated beside it. Recheck the live authority page before acting. Search snippets, advertising, forums and operator statements are not proof by themselves.
Affgate prioritises discovery; it is not verdict evidence. A lead stays unpublished until exact domain, operator, licence, jurisdiction and dates match.
No. Absence is not a verdict. It means only that this publication has no profile meeting its evidence threshold.
No. It would support only the narrow proposition written beside it. Bangladesh legality, gambling harm and personal affordability remain separate questions.
Use the contact form with the full URL, observation time, advertisement source and the question you want checked. Never send a PIN, OTP, password, full identity document or unredacted receipt.