Privacy, evidence redaction and corrections policy
Useful evidence must not create a second risk for a complainant, account holder or third party. Keep originals yourself and send only the minimum redacted copy.
Published and written by Casino Check BD Evidence Desk · editorial review: 13 August 2026
Redaction
What to cover in editorial or public copies
Data
Action
Reason
OTP, PIN or password
Never send
Account takeover
Identity document
Cover number, photo and address
Identity misuse
Receipt
Cover phone, account, balance and QR
Financial privacy
Statement
Cover unrelated rows and identifiers
Data minimisation
Screenshot
Check notifications, tabs and contacts
Collateral exposure
Collection
The form asks only for necessary fields
The contact form collects name, email, subject, message and locale. It has no sensitive-evidence upload field. Do not put secrets or complete identity records in the message. A defanged URL, time, impact and authority reference may be enough for a security lead.
Production transport must verify server logs, anti-abuse metadata, delivery records and retention. This page makes no fixed retention promise before those controls are confirmed.
Correction record
A material change is not silently overwritten
A wrong entity, status, date, authority route or evidence interpretation should receive a correction date and description. A typographical change that does not alter meaning may not need a full note. Subject responses remain attributed and evidence-tested.
A deletion request can conflict with legal preservation, security-abuse investigation or a public-interest correction record; the outcome depends on the facts.
The advisory provides privacy-risk context, not a finding that any individual suffered a breach.
Source register · accessed · 2026-08-13
Government and public-authority sources used on this page
BD-S07
Report Incident form
BGD e-GOV CIRT
Shows fields for affected domains, logs, timing, impact and technical evidence in a cyber-incident report.
The advisory provides privacy-risk context, not a finding that any individual suffered a breach. Each source supports only the narrow proposition stated beside it. Recheck the live authority page before acting. Search snippets, advertising, forums and operator statements are not proof by themselves.
Questions and concise answers
Common questions from Bangladesh users
Should I send my full identity document?
No. An editorial review rarely needs a complete identity document.
How long is data retained?
No fixed period is claimed before production transport and retention controls are verified.
Will an error be deleted?
A material correction may retain a transparent record, and legal or security preservation can limit deletion.
Is blur enough for a screenshot?
Opaque coverage is safer. Zoom the exported file and confirm the data cannot be read.
